Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 15:58:42.537 00:00:10.366 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-08-03 15:59:18.590 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-08-03 15:59:42.944 00:00:10.379 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:00:18.764 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44794 10 6452 1 2025-08-03 16:00:43.366 00:00:10.394 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:01:18.940 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6452 1 2025-08-03 16:01:43.796 00:00:10.337 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:02:19.181 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-08-03 16:02:45.481 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:02:45.459 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:02:44.176 00:00:10.361 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-08-03 15:58:05.797 00:06:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 15:58:05.796 00:06:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:03:19.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 10 6452 1 2025-08-03 16:03:44.579 00:00:10.363 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:04:19.619 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-08-03 16:04:44.981 00:00:10.365 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:05:19.834 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6452 1 2025-08-03 16:05:45.387 00:00:10.367 TCP 23.104.0.1:37070 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:06:20.072 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58214 10 6452 1 2025-08-03 16:06:45.793 00:00:10.350 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:07:20.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6452 1 2025-08-03 16:07:45.189 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:07:45.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:07:46.182 00:00:10.367 TCP 23.104.0.1:40748 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:08:20.501 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49252 10 6452 1 2025-08-03 16:08:46.582 00:00:10.369 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:09:20.714 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-08-03 16:09:46.988 00:00:10.328 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:05:05.798 00:06:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:05:05.796 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:10:20.883 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50126 10 6452 1 2025-08-03 16:10:47.348 00:00:10.370 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:11:21.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-08-03 16:11:47.762 00:00:10.378 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:12:21.285 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-08-03 16:12:45.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:12:45.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:12:48.176 00:00:10.361 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:13:21.453 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41416 12 10367 1 2025-08-03 16:13:48.578 00:00:10.439 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 15 1926 1 2025-08-03 16:14:21.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-08-03 16:14:49.063 00:00:10.324 TCP 23.104.0.1:50014 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:15:21.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-08-03 16:15:49.428 00:00:10.372 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:16:22.127 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49640 10 6452 1 2025-08-03 16:16:49.833 00:00:10.384 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:12:05.798 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:12:05.801 00:06:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:17:22.341 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52494 10 6452 1 2025-08-03 16:17:45.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:17:45.667 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:17:50.256 00:00:10.329 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:18:22.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57968 10 6452 1 2025-08-03 16:18:50.625 00:00:10.366 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:19:22.764 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-08-03 16:19:51.035 00:00:10.371 TCP 23.104.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:20:22.933 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-08-03 16:20:51.441 00:00:10.364 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:21:23.191 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-08-03 16:21:51.843 00:00:10.394 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:22:23.416 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-08-03 16:22:45.463 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:22:45.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:22:52.276 00:00:10.326 TCP 23.104.0.1:39610 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:23:23.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-08-03 16:19:05.800 00:06:00.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:23:52.640 00:00:10.367 TCP 23.104.0.1:54896 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:19:05.804 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:24:23.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58262 10 6452 1 2025-08-03 16:24:53.053 00:00:10.387 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:25:24.016 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-08-03 16:25:53.483 00:00:10.321 TCP 23.104.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:26:24.201 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-08-03 16:26:53.864 00:00:10.358 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:27:24.420 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2025-08-03 16:27:45.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:27:45.865 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:27:54.333 00:00:10.364 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:28:24.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-08-03 16:28:54.739 00:00:10.320 TCP 23.104.0.1:46664 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:29:24.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41520 10 6452 1 2025-08-03 16:29:55.104 00:00:10.327 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:30:25.037 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-08-03 16:26:05.802 00:06:00.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:26:05.804 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:30:55.467 00:00:10.360 TCP 23.104.0.1:50502 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:31:25.252 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-08-03 16:31:55.867 00:00:10.363 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:32:25.469 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-08-03 16:32:46.013 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:32:46.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:32:56.272 00:00:10.364 TCP 23.104.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:33:25.688 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51550 10 6452 1 2025-08-03 16:33:56.678 00:00:10.383 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:34:25.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-08-03 16:34:57.102 00:00:10.366 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:35:26.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55792 10 6452 1 2025-08-03 16:35:57.504 00:00:10.325 TCP 23.104.0.1:55730 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:36:26.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43080 10 6452 1 2025-08-03 16:36:57.866 00:00:10.327 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:37:26.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55794 10 6452 1 2025-08-03 16:37:46.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:37:46.006 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:33:05.807 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:33:05.805 00:06:00.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:37:58.232 00:00:10.366 TCP 23.104.0.1:59706 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:38:26.760 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-08-03 16:38:58.636 00:00:10.364 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:39:26.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-08-03 16:39:59.047 00:00:10.330 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:40:27.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-08-03 16:40:59.425 00:00:10.363 TCP 23.104.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:41:27.379 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-08-03 16:41:59.831 00:00:10.369 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:42:27.567 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33770 10 6452 1 2025-08-03 16:42:46.161 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:42:46.371 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:43:00.238 00:00:10.368 TCP 23.104.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:43:27.781 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-08-03 16:44:00.644 00:00:10.372 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:44:27.991 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-08-03 16:40:05.811 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:40:05.815 00:06:00.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:45:01.103 00:00:10.369 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:45:28.210 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50130 10 6452 1 2025-08-03 16:46:01.512 00:00:10.364 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:46:28.416 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38478 10 6452 1 2025-08-03 16:47:01.913 00:00:10.323 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:47:28.625 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-08-03 16:47:46.108 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:47:46.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:48:02.275 00:00:10.365 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:48:28.833 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:55538 12 10367 1 2025-08-03 16:49:02.680 00:00:10.461 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 15 1926 1 2025-08-03 16:49:29.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50520 10 6452 1 2025-08-03 16:50:03.179 00:00:10.367 TCP 23.104.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:50:29.299 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53396 10 6452 1 2025-08-03 16:51:03.581 00:00:10.367 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:51:29.473 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6452 1 2025-08-03 16:47:05.815 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 16:47:05.818 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 16:52:03.986 00:00:10.375 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:52:29.697 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-08-03 16:52:46.444 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:52:46.486 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:53:04.393 00:00:10.378 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:53:29.923 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-08-03 16:54:04.801 00:00:10.429 TCP 23.104.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:54:30.132 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-08-03 16:55:05.255 00:00:10.366 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:55:30.334 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-08-03 16:56:05.664 00:00:10.364 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:56:30.504 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-08-03 16:57:06.117 00:00:10.332 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:57:30.727 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46868 10 6452 1 2025-08-03 16:57:46.529 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 16:57:46.553 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 16:58:06.490 00:00:10.334 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-08-03 16:58:30.899 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 Summary: total flows: 160, total bytes: 506032, total packets: 1568, avg bps: 1113, avg pps: 0, avg bpp: 322 Time window: 2025-08-03 15:58:05 - 2025-08-03 16:58:41 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0010s User: 0.0020s Wall: 0.0014s flows/second: 117138.9 Runtime: 0.0014s