Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 02:59:22.564 00:00:10.331 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:59:29.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6438 1 2025-07-20 03:00:22.934 00:00:10.382 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:00:29.522 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6438 1 2025-07-20 03:00:45.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:00:45.529 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:01:23.358 00:00:10.364 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:01:29.746 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38348 10 6438 1 2025-07-20 02:56:58.291 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:02:23.765 00:00:10.373 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:02:29.912 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6438 1 2025-07-20 03:03:24.177 00:00:10.373 TCP 23.104.0.1:46914 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:03:30.138 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56604 12 6542 1 2025-07-20 02:58:58.290 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:04:24.585 00:00:10.365 TCP 23.104.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:04:30.360 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6438 1 2025-07-20 03:05:25.004 00:00:10.370 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:05:30.576 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37346 10 6438 1 2025-07-20 03:05:45.605 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:05:45.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:06:25.403 00:00:10.365 TCP 23.104.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:06:30.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6438 1 2025-07-20 03:07:25.810 00:00:10.365 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:07:30.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49476 10 6438 1 2025-07-20 03:08:26.214 00:00:10.322 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:08:31.210 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6438 1 2025-07-20 03:03:58.292 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:09:26.572 00:00:10.866 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 13 1611 1 2025-07-20 03:09:31.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60406 10 6438 1 2025-07-20 03:10:31.640 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6438 1 2025-07-20 03:10:27.481 00:00:10.368 TCP 23.104.0.1:38138 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:10:45.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:10:45.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:05:58.290 00:06:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:11:27.885 00:00:10.374 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:11:31.863 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6438 1 2025-07-20 03:12:28.303 00:00:10.326 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:12:32.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6438 1 2025-07-20 03:13:28.668 00:00:10.385 TCP 23.104.0.1:48540 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:13:32.310 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6438 1 2025-07-20 03:14:29.098 00:00:10.369 TCP 23.104.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:14:32.486 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6438 1 2025-07-20 03:15:29.514 00:00:10.372 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:15:45.758 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:15:32.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37366 10 6438 1 2025-07-20 03:15:45.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:10:58.300 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:16:29.928 00:00:10.385 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:16:32.930 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6438 1 2025-07-20 03:17:30.353 00:00:10.366 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:17:33.136 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42296 10 6438 1 2025-07-20 03:12:58.295 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:18:30.764 00:00:10.331 TCP 23.104.0.1:56014 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:18:33.350 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47666 10 6438 1 2025-07-20 03:19:31.136 00:00:10.368 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:19:33.561 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6438 1 2025-07-20 03:20:31.540 00:00:10.371 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:20:33.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41478 10 6438 1 2025-07-20 03:20:45.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:20:45.501 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:21:31.954 00:00:10.365 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:21:33.952 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 12 6542 1 2025-07-20 03:22:32.354 00:00:10.360 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:22:34.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6438 1 2025-07-20 03:17:58.303 00:06:00.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:23:34.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51296 10 6438 1 2025-07-20 03:23:32.755 00:00:10.369 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:24:34.617 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6438 1 2025-07-20 03:24:33.165 00:00:10.371 TCP 23.104.0.1:33214 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:19:58.302 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:25:33.567 00:00:10.364 TCP 23.104.0.1:47092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:25:45.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:25:45.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:25:34.792 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6438 1 2025-07-20 03:26:34.961 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6438 1 2025-07-20 03:26:33.967 00:00:10.369 TCP 23.104.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:27:35.141 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6438 1 2025-07-20 03:27:34.377 00:00:10.378 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:28:35.353 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6438 1 2025-07-20 03:28:34.795 00:00:10.367 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:29:35.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6438 1 2025-07-20 03:29:35.216 00:00:10.363 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:24:58.305 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:30:45.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:30:35.784 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6438 1 2025-07-20 03:30:35.616 00:00:10.320 TCP 23.104.0.1:37232 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:30:45.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:31:35.959 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6438 1 2025-07-20 03:31:35.976 00:00:10.322 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:26:58.302 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:32:36.334 00:00:10.328 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:32:36.193 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6438 1 2025-07-20 03:33:36.364 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6438 1 2025-07-20 03:33:36.699 00:00:10.368 TCP 23.104.0.1:37048 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:34:36.573 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6438 1 2025-07-20 03:34:37.105 00:00:10.374 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:35:36.742 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6438 1 2025-07-20 03:35:46.049 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:35:46.014 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:35:37.518 00:00:10.364 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:36:37.920 00:00:10.365 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:36:36.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6438 1 2025-07-20 03:31:58.306 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:37:37.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6438 1 2025-07-20 03:37:38.318 00:00:10.362 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:38:37.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6438 1 2025-07-20 03:38:38.719 00:00:10.376 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:33:58.304 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:39:39.134 00:00:10.366 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:39:37.549 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6438 1 2025-07-20 03:40:46.111 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:40:46.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:40:39.539 00:00:10.377 TCP 23.104.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:40:37.778 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6438 1 2025-07-20 03:41:38.010 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6438 1 2025-07-20 03:41:39.954 00:00:10.333 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:42:40.329 00:00:10.373 TCP 23.104.0.1:57460 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:42:38.185 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6438 1 2025-07-20 03:43:40.746 00:00:10.386 TCP 23.104.0.1:35368 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:43:38.355 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6438 1 2025-07-20 03:38:58.308 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:44:41.173 00:00:10.360 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:44:38.568 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6438 1 2025-07-20 03:45:46.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:45:46.379 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:45:41.575 00:00:10.324 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:45:38.776 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6438 1 2025-07-20 03:40:58.306 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:46:38.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6438 1 2025-07-20 03:46:41.942 00:00:10.367 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:47:39.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55410 10 6438 1 2025-07-20 03:47:42.345 00:00:10.327 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:48:39.428 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6438 1 2025-07-20 03:48:42.713 00:00:10.362 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:49:39.599 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6438 1 2025-07-20 03:49:43.119 00:00:10.367 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:50:46.063 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:50:46.469 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:50:39.772 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50176 10 6438 1 2025-07-20 03:50:43.525 00:00:10.364 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:45:58.309 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:51:39.994 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35682 10 6438 1 2025-07-20 03:51:43.933 00:00:10.376 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:52:40.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6438 1 2025-07-20 03:52:44.360 00:00:10.325 TCP 23.104.0.1:41420 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:47:58.306 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 03:53:40.424 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6438 1 2025-07-20 03:53:44.725 00:00:10.375 TCP 23.104.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:54:40.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38992 10 6438 1 2025-07-20 03:54:45.133 00:00:10.372 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:55:46.232 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 03:55:46.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 03:55:40.856 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 10 6438 1 2025-07-20 03:55:45.537 00:00:10.322 TCP 23.104.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:56:41.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6438 1 2025-07-20 03:56:45.901 00:00:10.370 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:57:41.300 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6438 1 2025-07-20 03:57:46.303 00:00:10.369 TCP 23.104.0.1:33780 -> 1.101.0.1:3000 11 1507 1 2025-07-20 03:52:58.317 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 03:58:41.509 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59068 12 10352 1 Summary: total flows: 160, total bytes: 500104, total packets: 1567, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-07-20 02:56:58 - 2025-07-20 03:58:58 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0037s User: 0.0007s Wall: 0.0023s flows/second: 70640.9 Runtime: 0.0023s