Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 02:58:58.921 00:00:10.353 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-07-18 02:59:10.746 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6438 1 2025-07-18 02:59:47.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 02:59:47.657 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 02:54:57.266 00:06:00.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 02:59:59.309 00:00:10.367 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:00:10.924 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6438 1 2025-07-18 03:00:59.711 00:00:10.336 TCP 23.104.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:01:11.145 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6438 1 2025-07-18 03:02:00.107 00:00:10.363 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:02:11.358 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6438 1 2025-07-18 03:03:00.505 00:00:10.329 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:03:11.578 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37848 10 6438 1 2025-07-18 02:58:57.266 00:06:00.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:04:00.872 00:00:10.367 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:04:11.789 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6438 1 2025-07-18 03:04:47.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:04:47.551 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:05:01.274 00:00:10.370 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:05:12.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6438 1 2025-07-18 03:06:01.685 00:00:10.369 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:06:12.218 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6438 1 2025-07-18 03:01:57.269 00:06:00.048 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:07:02.105 00:00:10.321 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:07:12.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35874 10 6438 1 2025-07-18 03:08:02.463 00:00:10.321 TCP 23.104.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:08:12.640 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 10 6438 1 2025-07-18 03:09:02.825 00:00:10.381 TCP 23.104.0.1:41848 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:09:12.814 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6438 1 2025-07-18 03:09:47.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:09:47.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:10:03.247 00:00:10.361 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:10:13.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6438 1 2025-07-18 03:05:57.267 00:06:00.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:11:03.648 00:00:10.360 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:11:13.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6438 1 2025-07-18 03:12:04.049 00:00:10.369 TCP 23.104.0.1:52628 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:12:13.457 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6438 1 2025-07-18 03:13:04.461 00:00:10.395 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 15 1925 1 2025-07-18 03:13:13.670 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57074 12 10350 1 2025-07-18 03:08:57.270 00:06:00.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:14:04.895 00:00:10.325 TCP 23.104.0.1:36104 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:14:13.913 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6438 1 2025-07-18 03:14:47.830 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:14:47.660 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:15:05.262 00:00:10.362 TCP 23.104.0.1:49810 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:15:14.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55702 10 6438 1 2025-07-18 03:16:05.663 00:00:10.365 TCP 23.104.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:16:14.351 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6438 1 2025-07-18 03:17:06.089 00:00:10.373 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:17:14.581 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60636 10 6438 1 2025-07-18 03:12:57.268 00:06:00.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:18:06.525 00:00:10.336 TCP 23.104.0.1:33908 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:18:14.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6438 1 2025-07-18 03:19:06.897 00:00:10.322 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:19:15.000 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6438 1 2025-07-18 03:19:47.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:19:47.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:20:07.255 00:00:10.363 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:20:15.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34452 10 6438 1 2025-07-18 03:15:57.270 00:06:00.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:21:07.660 00:00:10.390 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:21:15.388 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6438 1 2025-07-18 03:22:08.089 00:00:10.365 TCP 23.104.0.1:39626 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:22:15.572 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6438 1 2025-07-18 03:23:08.496 00:00:10.398 TCP 23.104.0.1:52184 -> 1.101.0.1:3000 15 1925 1 2025-07-18 03:23:15.783 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38496 12 10350 1 2025-07-18 03:24:08.929 00:00:10.344 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:24:16.034 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53820 10 6438 1 2025-07-18 03:24:48.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:24:47.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:19:57.276 00:06:00.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:25:09.307 00:00:10.367 TCP 23.104.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:25:16.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6438 1 2025-07-18 03:26:09.710 00:00:10.367 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:26:16.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6438 1 2025-07-18 03:27:10.117 00:00:10.369 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:27:16.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6438 1 2025-07-18 03:22:57.279 00:06:00.043 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:28:10.523 00:00:10.363 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:28:16.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6438 1 2025-07-18 03:29:10.929 00:00:10.384 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:29:17.082 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6438 1 2025-07-18 03:29:48.126 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:29:47.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:30:11.350 00:00:10.363 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:30:17.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55272 10 6438 1 2025-07-18 03:31:11.755 00:00:10.335 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:31:17.473 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36616 10 6438 1 2025-07-18 03:26:57.276 00:06:00.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:32:12.129 00:00:10.364 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:32:17.690 00:00:10.122 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6438 1 2025-07-18 03:33:12.532 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:33:17.850 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6438 1 2025-07-18 03:34:12.931 00:00:10.357 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:34:18.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6438 1 2025-07-18 03:34:48.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:34:48.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:29:57.279 00:06:00.048 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:35:13.326 00:00:10.323 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:35:18.259 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47504 10 6438 1 2025-07-18 03:36:13.689 00:00:10.369 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:36:18.473 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43550 10 6438 1 2025-07-18 03:37:14.106 00:00:10.335 TCP 23.104.0.1:43220 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:37:18.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39556 10 6438 1 2025-07-18 03:38:14.469 00:00:10.372 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:38:18.857 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6438 1 2025-07-18 03:33:57.276 00:06:00.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:39:14.886 00:00:10.378 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:39:19.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56420 10 6438 1 2025-07-18 03:39:48.361 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:39:48.214 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:40:15.304 00:00:10.363 TCP 23.104.0.1:33324 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:40:19.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6438 1 2025-07-18 03:41:15.715 00:00:10.330 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:41:19.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6438 1 2025-07-18 03:36:57.280 00:06:00.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:42:16.099 00:00:10.368 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:42:19.711 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6438 1 2025-07-18 03:43:16.509 00:00:10.366 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:43:19.877 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38560 10 6438 1 2025-07-18 03:44:16.920 00:00:10.381 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:44:20.092 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6438 1 2025-07-18 03:44:48.406 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:44:48.432 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:45:20.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36794 10 6438 1 2025-07-18 03:45:17.342 00:00:10.368 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:40:57.280 00:06:00.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:46:20.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6438 1 2025-07-18 03:46:17.750 00:00:10.362 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:47:20.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60886 10 6438 1 2025-07-18 03:47:18.147 00:00:10.359 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:48:18.547 00:00:10.369 TCP 23.104.0.1:53782 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:48:20.949 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55676 10 6438 1 2025-07-18 03:43:57.285 00:06:00.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:49:21.170 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6438 1 2025-07-18 03:49:18.955 00:00:10.365 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:49:48.547 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:49:48.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:50:21.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52370 10 6438 1 2025-07-18 03:50:19.370 00:00:10.369 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:51:19.773 00:00:10.333 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:51:21.611 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6438 1 2025-07-18 03:52:21.817 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6438 1 2025-07-18 03:52:20.139 00:00:10.364 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:47:57.283 00:06:00.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 03:53:20.542 00:00:10.370 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:53:22.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58772 10 6438 1 2025-07-18 03:54:20.971 00:00:10.370 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:54:22.249 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6438 1 2025-07-18 03:54:48.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 03:54:48.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 03:55:21.373 00:00:10.366 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:55:22.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53106 10 6438 1 2025-07-18 03:50:57.287 00:06:00.043 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 03:56:21.781 00:00:10.378 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:56:22.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42534 10 6438 1 2025-07-18 03:57:22.192 00:00:10.362 TCP 23.104.0.1:40628 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:57:22.894 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6438 1 2025-07-18 03:58:22.594 00:00:10.368 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-07-18 03:58:23.085 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 10 6438 1 Summary: total flows: 161, total bytes: 506045, total packets: 1582, avg bps: 1060, avg pps: 0, avg bpp: 319 Time window: 2025-07-18 02:54:57 - 2025-07-18 03:58:33 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0025s User: 0.0012s Wall: 0.0017s flows/second: 94471.6 Runtime: 0.0017s