Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 08:59:23.817 00:00:10.327 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-07-18 08:59:26.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6438 1 2025-07-18 08:59:54.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 08:59:54.577 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:00:24.179 00:00:10.365 TCP 23.104.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:00:27.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 10 6438 1 2025-07-18 08:55:57.396 00:06:00.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:01:24.577 00:00:10.363 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:01:27.315 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6438 1 2025-07-18 09:02:24.983 00:00:10.363 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:02:27.488 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6438 1 2025-07-18 09:03:25.385 00:00:10.363 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:03:27.695 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55946 10 6438 1 2025-07-18 08:58:57.403 00:06:00.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:04:25.792 00:00:10.344 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:04:27.916 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6438 1 2025-07-18 09:04:54.965 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:04:55.144 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:05:26.173 00:00:10.322 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:05:28.125 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36586 10 6438 1 2025-07-18 09:06:26.537 00:00:10.360 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:06:28.301 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6438 1 2025-07-18 09:07:28.517 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6438 1 2025-07-18 09:07:26.944 00:00:10.368 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:02:57.403 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:08:28.697 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6438 1 2025-07-18 09:08:27.351 00:00:10.358 TCP 23.104.0.1:36100 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:09:27.760 00:00:10.387 TCP 23.104.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:09:28.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6438 1 2025-07-18 09:09:55.018 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:09:55.001 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:10:28.185 00:00:10.322 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:10:29.122 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36760 10 6438 1 2025-07-18 09:05:57.406 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:11:29.334 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48292 10 6438 1 2025-07-18 09:11:28.550 00:00:10.362 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:12:29.540 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6438 1 2025-07-18 09:12:28.952 00:00:10.368 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:13:29.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6438 1 2025-07-18 09:13:29.356 00:00:10.365 TCP 23.104.0.1:45154 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:14:29.971 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6438 1 2025-07-18 09:14:29.761 00:00:10.383 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:14:55.080 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:14:55.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:09:57.403 00:06:00.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:15:30.167 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6438 1 2025-07-18 09:15:30.185 00:00:10.365 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:16:30.592 00:00:10.362 TCP 23.104.0.1:42890 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:16:30.374 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 10 6438 1 2025-07-18 09:17:30.588 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6438 1 2025-07-18 09:17:30.989 00:00:10.367 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:12:57.407 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:18:31.396 00:00:10.372 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:18:30.805 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37510 10 6438 1 2025-07-18 09:19:31.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6438 1 2025-07-18 09:19:31.807 00:00:10.365 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:19:55.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:19:55.055 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:20:31.255 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6438 1 2025-07-18 09:20:32.211 00:00:10.367 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:21:31.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6438 1 2025-07-18 09:21:32.613 00:00:10.365 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:16:57.405 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:22:31.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6438 1 2025-07-18 09:22:33.029 00:00:10.362 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:23:33.425 00:00:10.370 TCP 23.104.0.1:56070 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:23:31.898 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54124 10 6438 1 2025-07-18 09:24:32.108 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6438 1 2025-07-18 09:24:33.839 00:00:10.398 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:24:55.134 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:24:55.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:19:57.409 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:25:32.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6438 1 2025-07-18 09:25:34.280 00:00:10.363 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:26:32.538 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6438 1 2025-07-18 09:26:34.680 00:00:10.374 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:27:32.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38304 10 6438 1 2025-07-18 09:27:35.105 00:00:10.366 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:28:32.980 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 12 10352 1 2025-07-18 09:28:35.511 00:00:10.400 TCP 23.104.0.1:43824 -> 1.101.0.1:3000 15 1925 1 2025-07-18 09:23:57.406 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:29:35.947 00:00:10.382 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:29:33.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6438 1 2025-07-18 09:29:55.279 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:29:55.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:30:33.458 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43990 10 6438 1 2025-07-18 09:30:36.379 00:00:10.363 TCP 23.104.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:31:33.681 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6438 1 2025-07-18 09:31:36.782 00:00:10.369 TCP 23.104.0.1:33598 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:26:57.410 00:06:00.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:32:33.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6438 1 2025-07-18 09:32:37.187 00:00:10.363 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:33:34.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6438 1 2025-07-18 09:33:37.587 00:00:10.377 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:34:34.322 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6438 1 2025-07-18 09:34:38.006 00:00:10.328 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:34:55.325 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:34:55.484 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:35:34.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56298 10 6438 1 2025-07-18 09:35:38.382 00:00:10.364 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:30:57.407 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:36:34.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6438 1 2025-07-18 09:36:38.782 00:00:10.361 TCP 23.104.0.1:37920 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:37:34.968 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 12 6542 1 2025-07-18 09:37:39.182 00:00:10.371 TCP 23.104.0.1:58404 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:38:35.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56422 10 6438 1 2025-07-18 09:38:39.590 00:00:10.368 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:33:57.410 00:06:00.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:39:35.396 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6438 1 2025-07-18 09:39:39.990 00:00:10.366 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:39:55.410 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:39:55.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:40:35.563 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6438 1 2025-07-18 09:40:40.390 00:00:10.361 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:41:35.779 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6438 1 2025-07-18 09:41:40.784 00:00:10.327 TCP 23.104.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:42:35.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6438 1 2025-07-18 09:42:41.147 00:00:10.364 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:37:57.410 00:06:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:43:36.229 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6438 1 2025-07-18 09:43:41.547 00:00:10.359 TCP 23.104.0.1:43194 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:44:36.440 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6438 1 2025-07-18 09:44:55.734 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:44:41.947 00:00:10.385 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:44:55.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:45:36.648 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6438 1 2025-07-18 09:45:42.367 00:00:10.372 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:40:57.415 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:46:36.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6438 1 2025-07-18 09:46:42.781 00:00:10.364 TCP 23.104.0.1:56336 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:47:37.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39958 10 6438 1 2025-07-18 09:47:43.184 00:00:10.375 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:48:37.255 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6438 1 2025-07-18 09:48:43.585 00:00:10.366 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:49:37.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6438 1 2025-07-18 09:49:55.681 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:49:55.869 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:49:43.987 00:00:10.365 TCP 23.104.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:44:57.412 00:06:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:50:37.685 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6438 1 2025-07-18 09:50:44.391 00:00:10.369 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:51:37.905 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6438 1 2025-07-18 09:51:44.808 00:00:10.364 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:52:38.085 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6438 1 2025-07-18 09:52:45.214 00:00:10.376 TCP 23.104.0.1:56598 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:47:57.415 00:06:00.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 09:53:38.275 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 12 10352 1 2025-07-18 09:53:45.626 00:00:10.443 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 15 1925 1 2025-07-18 09:54:38.518 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43780 10 6438 1 2025-07-18 09:54:55.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 09:54:46.115 00:00:10.382 TCP 23.104.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:54:55.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 09:55:38.689 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6438 1 2025-07-18 09:55:46.534 00:00:10.362 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:56:38.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44692 10 6438 1 2025-07-18 09:56:46.938 00:00:10.368 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:51:57.413 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 09:57:39.117 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 10 6438 1 2025-07-18 09:57:47.346 00:00:10.337 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-07-18 09:58:39.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6438 1 Summary: total flows: 160, total bytes: 504646, total packets: 1573, avg bps: 1070, avg pps: 0, avg bpp: 320 Time window: 2025-07-18 08:55:57 - 2025-07-18 09:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0010s Wall: 0.0023s flows/second: 68667.6 Runtime: 0.0024s