Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 11:59:05.745 00:00:10.324 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-08-03 11:59:26.418 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-08-03 12:00:06.114 00:00:10.364 TCP 23.104.0.1:48790 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:00:26.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54342 10 6452 1 2025-08-03 12:01:06.511 00:00:10.364 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:01:26.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35792 10 6452 1 2025-08-03 12:02:06.916 00:00:10.340 TCP 23.104.0.1:37362 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:02:40.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:02:40.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:02:27.081 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-08-03 12:03:07.304 00:00:10.366 TCP 23.104.0.1:39824 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:03:27.260 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40796 10 6452 1 2025-08-03 12:04:07.705 00:00:10.362 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:04:27.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-08-03 12:00:05.713 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:00:05.711 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:05:08.108 00:00:10.362 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:05:27.682 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-08-03 12:06:08.510 00:00:10.324 TCP 23.104.0.1:51670 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:06:27.890 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-08-03 12:07:08.874 00:00:10.366 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:07:28.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6452 1 2025-08-03 12:07:40.664 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:07:40.563 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:08:09.276 00:00:10.571 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:08:28.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-08-03 12:09:09.882 00:00:10.375 TCP 23.104.0.1:39606 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:09:28.533 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49004 10 6452 1 2025-08-03 12:10:10.292 00:00:10.374 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:10:28.723 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-08-03 12:11:10.703 00:00:10.363 TCP 23.104.0.1:33542 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:11:28.903 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-08-03 12:07:05.715 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:07:05.712 00:06:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:12:11.106 00:00:10.369 TCP 23.104.0.1:43592 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:12:40.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:12:29.083 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-08-03 12:12:40.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:13:11.511 00:00:10.365 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:13:29.301 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-08-03 12:14:11.913 00:00:10.364 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:14:29.527 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-08-03 12:15:12.318 00:00:10.327 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:15:29.746 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54914 10 6452 1 2025-08-03 12:16:12.680 00:00:10.376 TCP 23.104.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:16:29.965 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44362 10 6452 1 2025-08-03 12:17:13.103 00:00:10.322 TCP 23.104.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:17:41.381 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:17:30.197 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-08-03 12:17:41.326 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:18:13.468 00:00:10.425 TCP 23.104.0.1:56014 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:18:30.424 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47886 10 6452 1 2025-08-03 12:14:05.721 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:14:05.718 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:19:13.933 00:00:10.344 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:19:30.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-08-03 12:20:14.318 00:00:10.369 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:20:30.866 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-08-03 12:21:14.725 00:00:10.374 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:21:31.099 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-08-03 12:22:15.139 00:00:10.367 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:22:40.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:22:31.273 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-08-03 12:22:40.946 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:23:15.543 00:00:10.363 TCP 23.104.0.1:58366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:23:31.496 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-08-03 12:24:15.949 00:00:10.323 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:24:31.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-08-03 12:25:16.309 00:00:10.360 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:25:31.938 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6452 1 2025-08-03 12:21:05.722 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:21:05.726 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:26:16.712 00:00:10.375 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:26:32.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57092 10 6452 1 2025-08-03 12:27:17.124 00:00:10.367 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:27:40.953 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:27:41.089 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:27:32.389 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-08-03 12:28:17.526 00:00:10.359 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:28:32.592 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 10 6452 1 2025-08-03 12:29:17.924 00:00:10.381 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:29:32.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-08-03 12:30:18.342 00:00:10.365 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:30:33.037 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-08-03 12:31:18.744 00:00:10.367 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:31:33.259 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-08-03 12:32:19.146 00:00:10.336 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:32:41.561 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:32:41.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:32:33.471 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-08-03 12:28:05.727 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:28:05.725 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:33:19.514 00:00:10.367 TCP 23.104.0.1:41824 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:33:33.684 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 12 10367 1 2025-08-03 12:34:19.926 00:00:10.460 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 15 1926 1 2025-08-03 12:34:33.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50018 10 6452 1 2025-08-03 12:35:20.421 00:00:10.366 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:35:34.132 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 11 6504 1 2025-08-03 12:36:20.826 00:00:10.362 TCP 23.104.0.1:59120 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:36:34.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 10 6452 1 2025-08-03 12:37:21.237 00:00:10.362 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:37:41.398 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:37:40.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:37:34.604 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-08-03 12:38:21.640 00:00:10.455 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 15 1926 1 2025-08-03 12:38:34.825 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 12 10367 1 2025-08-03 12:39:22.132 00:00:10.366 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:39:35.098 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-08-03 12:35:05.732 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:35:05.735 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:40:22.537 00:00:10.320 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:40:35.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-08-03 12:41:22.891 00:00:10.377 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:41:35.477 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 10 6452 1 2025-08-03 12:42:23.310 00:00:10.371 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:42:41.231 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:42:41.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:42:35.685 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-08-03 12:43:23.729 00:00:10.448 TCP 23.104.0.1:41326 -> 1.101.0.1:3000 15 1926 1 2025-08-03 12:43:35.902 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 12 10365 1 2025-08-03 12:44:24.215 00:00:10.380 TCP 23.104.0.1:53106 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:44:36.148 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-08-03 12:45:24.641 00:00:10.374 TCP 23.104.0.1:33324 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:45:36.367 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-08-03 12:46:25.069 00:00:10.364 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:46:36.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59656 10 6452 1 2025-08-03 12:42:05.733 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:42:05.735 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:47:41.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:47:25.471 00:00:10.376 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:47:41.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:47:36.786 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-08-03 12:48:25.899 00:00:10.362 TCP 23.104.0.1:58542 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:48:37.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-08-03 12:49:26.307 00:00:10.361 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:49:37.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6452 1 2025-08-03 12:50:26.708 00:00:10.365 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:50:37.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46178 10 6452 1 2025-08-03 12:51:27.109 00:00:10.363 TCP 23.104.0.1:56460 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:51:37.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6452 1 2025-08-03 12:52:41.472 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:52:41.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:52:27.513 00:00:10.359 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:52:37.867 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-08-03 12:53:27.916 00:00:10.373 TCP 23.104.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:53:38.058 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 2025-08-03 12:49:05.736 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 12:49:05.738 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:54:28.328 00:00:10.363 TCP 23.104.0.1:43818 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:54:38.271 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-08-03 12:55:28.731 00:00:10.369 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:55:38.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51204 10 6452 1 2025-08-03 12:56:29.140 00:00:10.368 TCP 23.104.0.1:52660 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:56:38.716 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58994 10 6452 1 2025-08-03 12:57:41.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 12:57:29.543 00:00:10.326 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:57:42.093 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 12:57:38.938 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-08-03 12:58:29.908 00:00:10.362 TCP 23.104.0.1:44550 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:58:39.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 Summary: total flows: 160, total bytes: 510416, total packets: 1575, avg bps: 1139, avg pps: 0, avg bpp: 324 Time window: 2025-08-03 11:59:05 - 2025-08-03 12:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0009s Wall: 0.0023s flows/second: 70087.6 Runtime: 0.0023s