Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-18 13:59:24.378 00:00:10.372 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-07-18 13:59:30.323 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36470 10 6438 1 2025-07-18 14:00:00.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:00:00.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:00:24.792 00:00:10.365 TCP 23.104.0.1:41070 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:00:30.535 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6438 1 2025-07-18 14:01:25.195 00:00:10.361 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:01:30.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60172 10 6438 1 2025-07-18 13:56:57.497 00:06:00.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:02:25.593 00:00:10.372 TCP 23.104.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:02:30.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6438 1 2025-07-18 14:03:26.006 00:00:10.364 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:03:31.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6438 1 2025-07-18 14:04:26.411 00:00:10.380 TCP 23.104.0.1:35912 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:04:31.418 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6438 1 2025-07-18 14:05:00.902 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 13:59:57.503 00:06:00.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:05:01.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:05:26.838 00:00:10.388 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:05:31.645 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49252 10 6438 1 2025-07-18 14:06:31.859 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6438 1 2025-07-18 14:06:27.269 00:00:10.365 TCP 23.104.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:07:27.674 00:00:10.322 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:07:32.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40698 10 6438 1 2025-07-18 14:08:28.033 00:00:10.364 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:08:32.253 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6438 1 2025-07-18 14:03:57.503 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:09:28.441 00:00:10.373 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:09:32.479 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6438 1 2025-07-18 14:10:01.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:10:00.897 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:10:28.853 00:00:10.376 TCP 23.104.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:10:32.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6438 1 2025-07-18 14:11:29.262 00:00:10.363 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:11:32.898 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 12 6542 1 2025-07-18 14:06:57.505 00:06:00.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:12:29.660 00:00:10.372 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:12:33.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32946 10 6438 1 2025-07-18 14:13:30.099 00:00:10.325 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:13:33.329 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38264 10 6438 1 2025-07-18 14:14:30.467 00:00:10.365 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:14:33.498 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6438 1 2025-07-18 14:15:00.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:15:00.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:15:30.870 00:00:10.370 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:15:33.715 00:00:10.122 TCP 1.101.0.1:3000 -> 22.102.0.1:59588 10 6438 1 2025-07-18 14:10:57.503 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:16:31.275 00:00:10.365 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:16:33.881 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56636 10 6438 1 2025-07-18 14:17:34.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6438 1 2025-07-18 14:17:31.676 00:00:10.367 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:18:34.288 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59544 10 6438 1 2025-07-18 14:18:32.112 00:00:10.362 TCP 23.104.0.1:58638 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:13:57.506 00:06:00.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:19:32.514 00:00:10.329 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:19:34.458 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6438 1 2025-07-18 14:20:01.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:20:01.221 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:20:34.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33886 10 6438 1 2025-07-18 14:20:32.889 00:00:10.368 TCP 23.104.0.1:58378 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:21:34.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40248 10 6438 1 2025-07-18 14:21:33.297 00:00:10.368 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:22:35.110 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47286 10 6438 1 2025-07-18 14:22:33.703 00:00:10.364 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:17:57.505 00:06:00.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:23:35.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6438 1 2025-07-18 14:23:34.106 00:00:10.363 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:24:35.537 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6438 1 2025-07-18 14:24:34.508 00:00:10.366 TCP 23.104.0.1:51668 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:25:01.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:25:01.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:25:34.915 00:00:10.374 TCP 23.104.0.1:47624 -> 1.101.0.1:3000 12 1559 1 2025-07-18 14:25:35.757 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6438 1 2025-07-18 14:20:57.507 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:26:35.944 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6438 1 2025-07-18 14:26:35.329 00:00:10.365 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:27:36.170 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6438 1 2025-07-18 14:27:35.731 00:00:10.369 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:28:36.381 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6438 1 2025-07-18 14:28:36.142 00:00:10.366 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:29:36.598 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6438 1 2025-07-18 14:29:36.553 00:00:10.365 TCP 23.104.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:30:01.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:30:01.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:24:57.506 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:30:36.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6438 1 2025-07-18 14:30:36.958 00:00:10.365 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:31:36.987 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6438 1 2025-07-18 14:31:37.364 00:00:10.366 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:32:37.200 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54654 10 6438 1 2025-07-18 14:32:37.773 00:00:10.385 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:27:57.509 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:33:38.192 00:00:10.367 TCP 23.104.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:33:37.413 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6438 1 2025-07-18 14:34:38.597 00:00:10.371 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:34:37.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60934 10 6438 1 2025-07-18 14:35:01.483 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:35:01.353 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:35:37.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52794 10 6438 1 2025-07-18 14:35:39.003 00:00:10.362 TCP 23.104.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:36:38.076 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60230 10 6438 1 2025-07-18 14:36:39.407 00:00:10.322 TCP 23.104.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:31:57.507 00:06:00.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:37:38.246 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55844 10 6438 1 2025-07-18 14:37:39.771 00:00:10.325 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:38:40.138 00:00:10.441 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 15 1925 1 2025-07-18 14:38:38.416 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 12 10352 1 2025-07-18 14:39:40.624 00:00:10.362 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:39:38.657 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47478 10 6438 1 2025-07-18 14:40:01.799 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:34:57.510 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:40:01.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:40:41.026 00:00:10.364 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:40:38.872 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6438 1 2025-07-18 14:41:41.432 00:00:10.374 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:41:39.092 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6438 1 2025-07-18 14:42:39.304 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33784 10 6438 1 2025-07-18 14:42:41.834 00:00:10.391 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:43:39.477 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6438 1 2025-07-18 14:43:42.263 00:00:10.361 TCP 23.104.0.1:38806 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:38:57.509 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:44:39.684 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6438 1 2025-07-18 14:44:42.667 00:00:10.364 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:45:01.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:45:01.736 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:45:39.893 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6438 1 2025-07-18 14:45:43.102 00:00:10.368 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:46:40.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56424 10 6438 1 2025-07-18 14:46:43.516 00:00:10.367 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:41:57.513 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:47:40.329 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36134 10 6438 1 2025-07-18 14:47:43.921 00:00:10.348 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:48:40.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6438 1 2025-07-18 14:48:44.303 00:00:10.359 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:49:40.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6438 1 2025-07-18 14:49:44.702 00:00:10.364 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:50:01.724 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:50:01.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:50:40.969 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6438 1 2025-07-18 14:50:45.109 00:00:10.367 TCP 23.104.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:45:57.510 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:51:41.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6438 1 2025-07-18 14:51:45.516 00:00:10.364 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:52:41.416 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6438 1 2025-07-18 14:52:45.923 00:00:10.376 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:53:41.626 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6438 1 2025-07-18 14:53:46.338 00:00:10.364 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:48:57.514 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-18 14:54:41.836 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6438 1 2025-07-18 14:54:46.742 00:00:10.324 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:55:02.150 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-18 14:55:02.152 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-18 14:55:42.012 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55664 10 6438 1 2025-07-18 14:55:47.111 00:00:10.325 TCP 23.104.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:56:42.225 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6438 1 2025-07-18 14:56:47.472 00:00:10.373 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-07-18 14:57:42.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6438 1 2025-07-18 14:52:57.511 00:06:00.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-18 14:57:47.882 00:00:10.381 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 493928, total packets: 1558, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-07-18 13:56:57 - 2025-07-18 14:58:57 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0030s User: 0.0015s Wall: 0.0022s flows/second: 71616.7 Runtime: 0.0022s