Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 12:59:30.309 00:00:10.324 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-08-03 12:59:39.406 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38888 10 6452 1 2025-08-03 13:00:30.675 00:00:10.377 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:00:39.576 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-08-03 12:56:05.742 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 12:56:05.739 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:01:31.101 00:00:10.325 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:01:39.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-08-03 13:02:41.813 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:02:41.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:02:31.465 00:00:10.358 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:02:40.005 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-08-03 13:03:31.863 00:00:10.335 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:03:40.234 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55552 10 6452 1 2025-08-03 13:04:32.235 00:00:10.367 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:04:40.443 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-08-03 13:05:32.642 00:00:10.364 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:05:40.654 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-08-03 13:06:33.071 00:00:10.364 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:06:40.867 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-08-03 13:07:41.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:07:41.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:07:33.476 00:00:10.369 TCP 23.104.0.1:42800 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:07:41.089 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-08-03 13:03:05.743 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:03:05.745 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:08:33.882 00:00:10.367 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:08:41.265 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-08-03 13:09:34.284 00:00:10.370 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:09:41.439 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-08-03 13:10:34.686 00:00:10.369 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:10:41.612 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:58256 10 6452 1 2025-08-03 13:11:35.108 00:00:10.325 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:11:41.919 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53794 10 6452 1 2025-08-03 13:12:41.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:12:41.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:12:35.474 00:00:10.359 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:12:42.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-08-03 13:13:35.869 00:00:10.443 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 15 1926 1 2025-08-03 13:13:42.314 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 12 10365 1 2025-08-03 13:14:36.349 00:00:10.365 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:14:42.552 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-08-03 13:10:05.746 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:10:05.743 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:15:36.753 00:00:10.380 TCP 23.104.0.1:40628 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:15:42.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48172 10 6452 1 2025-08-03 13:16:37.171 00:00:10.365 TCP 23.104.0.1:40972 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:16:42.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56172 10 6452 1 2025-08-03 13:17:41.899 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:17:42.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:17:37.574 00:00:10.327 TCP 23.104.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:17:43.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-08-03 13:18:37.947 00:00:10.462 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 15 1926 1 2025-08-03 13:18:43.438 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40726 12 10367 1 2025-08-03 13:19:38.450 00:00:10.408 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:19:43.685 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39958 10 6452 1 2025-08-03 13:20:38.902 00:00:10.368 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:20:43.863 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-08-03 13:21:39.311 00:00:10.368 TCP 23.104.0.1:34762 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:21:44.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50502 10 6452 1 2025-08-03 13:17:05.751 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:17:05.748 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:22:42.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:22:42.274 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:22:39.719 00:00:10.371 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:22:44.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35434 10 6452 1 2025-08-03 13:23:40.125 00:00:10.364 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:23:44.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46428 10 6452 1 2025-08-03 13:24:40.525 00:00:10.364 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:24:44.735 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-08-03 13:25:40.932 00:00:10.386 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:25:44.944 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-08-03 13:26:41.360 00:00:10.548 TCP 23.104.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:26:45.185 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-08-03 13:27:42.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:27:42.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:27:45.410 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 10 6452 1 2025-08-03 13:27:41.945 00:00:10.374 TCP 23.104.0.1:47410 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:28:45.622 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46052 10 6452 1 2025-08-03 13:28:42.355 00:00:10.366 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:24:05.750 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:24:05.754 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:29:42.766 00:00:10.378 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:29:45.799 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-08-03 13:30:43.179 00:00:10.323 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:30:45.980 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-08-03 13:31:46.213 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-08-03 13:31:43.539 00:00:10.321 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:32:42.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:32:42.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:32:43.896 00:00:10.365 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:32:46.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-08-03 13:33:46.641 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34362 10 6452 1 2025-08-03 13:33:44.298 00:00:10.367 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:34:44.703 00:00:10.322 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:34:46.857 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-08-03 13:35:45.092 00:00:10.366 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:35:47.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6452 1 2025-08-03 13:31:05.755 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:31:05.754 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:36:45.497 00:00:10.321 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:36:47.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-08-03 13:37:42.483 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:37:42.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:37:45.858 00:00:10.372 TCP 23.104.0.1:55930 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:37:47.509 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-08-03 13:38:46.269 00:00:10.423 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:38:47.679 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-08-03 13:39:47.889 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38294 10 6452 1 2025-08-03 13:39:46.731 00:00:10.369 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:40:47.134 00:00:10.321 TCP 23.104.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:40:48.075 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-08-03 13:41:48.248 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-08-03 13:41:47.495 00:00:10.368 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:42:43.507 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:42:43.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:42:48.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-08-03 13:42:47.901 00:00:10.368 TCP 23.104.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:38:05.754 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:38:05.757 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:43:48.317 00:00:10.326 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:43:48.817 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55684 10 6452 1 2025-08-03 13:44:48.992 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-08-03 13:44:48.684 00:00:10.366 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:45:49.106 00:00:10.362 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:45:49.174 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-08-03 13:46:49.514 00:00:10.364 TCP 23.104.0.1:40020 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:46:49.393 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-08-03 13:47:42.587 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:47:42.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:47:49.913 00:00:10.361 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:47:49.609 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-08-03 13:48:49.834 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-08-03 13:48:50.316 00:00:10.336 TCP 23.104.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:49:50.035 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52610 10 6452 1 2025-08-03 13:45:05.759 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:49:50.697 00:00:10.385 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:45:05.763 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:50:50.257 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-08-03 13:50:51.121 00:00:10.365 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:51:51.529 00:00:10.322 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:51:50.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-08-03 13:52:42.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:52:42.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:52:50.681 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2025-08-03 13:52:51.896 00:00:10.358 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:53:50.890 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-08-03 13:53:52.293 00:00:10.362 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:54:51.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57624 10 6452 1 2025-08-03 13:54:52.696 00:00:10.369 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:55:51.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-08-03 13:55:53.109 00:00:10.330 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:56:51.572 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-08-03 13:52:05.764 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 13:56:53.481 00:00:10.369 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-08-03 13:52:05.760 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 13:57:43.015 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 13:57:43.042 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 13:57:51.783 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39220 10 6452 1 2025-08-03 13:57:53.887 00:00:10.364 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 499793, total packets: 1575, avg bps: 1074, avg pps: 0, avg bpp: 317 Time window: 2025-08-03 12:56:05 - 2025-08-03 13:58:05 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0020s User: 0.0027s Wall: 0.0033s flows/second: 48721.4 Runtime: 0.0033s