Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 13:58:45.180 00:00:10.325 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:59:31.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:59:31.951 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:59:26.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51242 10 6438 1 2025-07-17 13:59:45.543 00:00:10.361 TCP 23.104.0.1:39706 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:54:57.052 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:00:26.814 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6438 1 2025-07-17 14:00:45.945 00:00:10.377 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:01:27.037 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6438 1 2025-07-17 14:01:46.357 00:00:10.377 TCP 23.104.0.1:59040 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:02:27.265 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6438 1 2025-07-17 13:57:57.058 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:02:46.775 00:00:10.367 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:03:27.482 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6438 1 2025-07-17 14:03:47.180 00:00:10.370 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:04:32.086 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:04:32.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:04:27.697 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6438 1 2025-07-17 14:04:47.586 00:00:10.330 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:05:27.909 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6438 1 2025-07-17 14:05:47.954 00:00:10.330 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:06:28.121 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45346 10 6438 1 2025-07-17 14:06:48.317 00:00:10.365 TCP 23.104.0.1:56622 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:01:57.051 00:06:00.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:07:28.332 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 10 6438 1 2025-07-17 14:07:48.720 00:00:10.444 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 15 1925 1 2025-07-17 14:08:28.500 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 12 10350 1 2025-07-17 14:08:49.203 00:00:10.361 TCP 23.104.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:09:31.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:09:32.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:09:28.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 10 6438 1 2025-07-17 14:09:49.611 00:00:10.363 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:04:57.060 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:10:28.912 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57076 10 6438 1 2025-07-17 14:10:50.014 00:00:10.365 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:11:29.094 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56854 10 6438 1 2025-07-17 14:11:50.421 00:00:10.361 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:12:29.300 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53690 10 6438 1 2025-07-17 14:12:50.820 00:00:10.361 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:13:29.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6438 1 2025-07-17 14:13:51.224 00:00:10.364 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:08:57.053 00:06:00.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:14:32.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:14:32.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:14:29.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33134 10 6438 1 2025-07-17 14:14:51.627 00:00:10.365 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:15:29.955 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 12 6542 1 2025-07-17 14:15:52.028 00:00:10.328 TCP 23.104.0.1:43532 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:16:30.192 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6438 1 2025-07-17 14:11:57.061 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:16:52.393 00:00:10.367 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:17:30.365 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6438 1 2025-07-17 14:17:52.801 00:00:10.411 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 15 1925 1 2025-07-17 14:18:30.545 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 12 10352 1 2025-07-17 14:18:53.258 00:00:10.362 TCP 23.104.0.1:55756 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:19:32.219 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:19:32.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:19:30.780 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6438 1 2025-07-17 14:19:53.657 00:00:10.323 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:20:30.989 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58280 10 6438 1 2025-07-17 14:15:57.054 00:06:00.014 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:20:54.019 00:00:10.359 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:21:31.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58838 10 6438 1 2025-07-17 14:21:54.421 00:00:10.388 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:22:31.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6438 1 2025-07-17 14:22:54.849 00:00:10.376 TCP 23.104.0.1:34314 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:23:31.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6438 1 2025-07-17 14:18:57.064 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:23:55.269 00:00:10.367 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:24:32.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:24:32.306 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:24:31.852 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6438 1 2025-07-17 14:24:55.678 00:00:10.367 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:25:32.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6438 1 2025-07-17 14:25:56.097 00:00:10.318 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:26:32.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42040 10 6438 1 2025-07-17 14:26:56.454 00:00:10.365 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:27:32.504 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6438 1 2025-07-17 14:22:57.057 00:06:00.019 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:27:56.858 00:00:10.384 TCP 23.104.0.1:43944 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:28:32.680 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6438 1 2025-07-17 14:28:57.267 00:00:10.362 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:29:32.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:29:32.575 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:29:32.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6438 1 2025-07-17 14:29:57.671 00:00:10.378 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:30:33.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49470 10 6438 1 2025-07-17 14:25:57.072 00:06:00.013 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:30:58.105 00:00:10.321 TCP 23.104.0.1:46016 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:31:33.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36414 10 6438 1 2025-07-17 14:31:58.465 00:00:10.361 TCP 23.104.0.1:39948 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:32:33.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38882 10 6438 1 2025-07-17 14:32:58.864 00:00:10.323 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:33:33.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57112 10 6438 1 2025-07-17 14:33:59.232 00:00:10.365 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:34:32.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:34:32.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:34:33.961 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6438 1 2025-07-17 14:29:57.058 00:06:00.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:34:59.635 00:00:10.328 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:35:34.146 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6438 1 2025-07-17 14:36:00.001 00:00:10.362 TCP 23.104.0.1:38308 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:36:34.365 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48460 10 6438 1 2025-07-17 14:37:00.403 00:00:10.322 TCP 23.104.0.1:36982 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:37:34.535 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6438 1 2025-07-17 14:32:57.085 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:38:00.771 00:00:10.446 TCP 23.104.0.1:43764 -> 1.101.0.1:3000 15 1925 1 2025-07-17 14:38:34.747 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 12 10352 1 2025-07-17 14:39:01.256 00:00:10.367 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:39:32.578 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:39:32.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:39:34.993 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6438 1 2025-07-17 14:40:01.660 00:00:10.365 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:40:35.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6438 1 2025-07-17 14:41:02.090 00:00:10.367 TCP 23.104.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:41:35.437 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60560 10 6438 1 2025-07-17 14:36:57.060 00:06:00.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:42:02.500 00:00:10.364 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:42:35.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36940 10 6438 1 2025-07-17 14:43:02.914 00:00:10.442 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 15 1925 1 2025-07-17 14:43:35.826 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52918 12 10352 1 2025-07-17 14:44:03.400 00:00:10.361 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:44:32.899 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:44:32.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:44:36.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6438 1 2025-07-17 14:39:57.086 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:45:03.808 00:00:10.365 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:45:36.257 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6438 1 2025-07-17 14:46:04.213 00:00:10.364 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:46:36.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6438 1 2025-07-17 14:47:04.621 00:00:10.369 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:47:36.695 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6438 1 2025-07-17 14:48:05.027 00:00:10.367 TCP 23.104.0.1:46434 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:48:36.873 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6438 1 2025-07-17 14:43:57.060 00:06:00.032 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:49:05.426 00:00:10.368 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:49:33.056 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:49:32.663 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:49:37.111 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46328 10 6438 1 2025-07-17 14:50:05.831 00:00:10.340 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:50:37.323 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6438 1 2025-07-17 14:51:06.208 00:00:10.364 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:51:37.542 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6438 1 2025-07-17 14:46:57.090 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 14:52:06.610 00:00:10.373 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:52:37.761 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6438 1 2025-07-17 14:53:07.024 00:00:10.368 TCP 23.104.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:53:37.972 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45340 10 6438 1 2025-07-17 14:54:07.422 00:00:10.364 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:54:32.712 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 14:54:32.847 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 14:54:38.218 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6438 1 2025-07-17 14:55:07.824 00:00:10.368 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:55:38.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6438 1 2025-07-17 14:50:57.062 00:06:00.032 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 14:56:08.228 00:00:10.360 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:56:38.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54518 10 6438 1 2025-07-17 14:57:08.628 00:00:10.363 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:57:38.852 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6438 1 2025-07-17 14:58:09.031 00:00:10.364 TCP 23.104.0.1:40682 -> 1.101.0.1:3000 11 1507 1 2025-07-17 14:58:39.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6438 1 Summary: total flows: 161, total bytes: 511903, total packets: 1540, avg bps: 1068, avg pps: 0, avg bpp: 332 Time window: 2025-07-17 13:54:57 - 2025-07-17 14:58:49 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0033s User: 0.0011s Wall: 0.0031s flows/second: 52563.5 Runtime: 0.0031s