Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 07:59:23.871 00:00:10.363 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-07-20 07:59:32.447 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6438 1 2025-07-20 08:00:24.276 00:00:10.323 TCP 23.104.0.1:46206 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:00:32.622 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6438 1 2025-07-20 08:00:51.016 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:00:51.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:01:24.641 00:00:10.366 TCP 23.104.0.1:46296 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:01:32.834 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6438 1 2025-07-20 08:02:25.062 00:00:10.369 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:02:33.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6438 1 2025-07-20 07:57:58.395 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:03:25.472 00:00:10.326 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:03:33.290 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37086 10 6438 1 2025-07-20 08:04:25.847 00:00:10.383 TCP 23.104.0.1:59546 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:04:33.497 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6438 1 2025-07-20 07:59:58.393 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:05:26.267 00:00:10.361 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:05:33.674 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6438 1 2025-07-20 08:05:51.263 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:05:51.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:06:26.667 00:00:10.377 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:06:33.887 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6438 1 2025-07-20 08:07:27.097 00:00:10.363 TCP 23.104.0.1:59672 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:07:34.101 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6438 1 2025-07-20 08:08:27.495 00:00:10.321 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:08:34.319 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6438 1 2025-07-20 08:09:27.855 00:00:10.336 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:09:34.498 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6438 1 2025-07-20 08:04:58.399 00:06:00.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:10:28.231 00:00:10.362 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:10:34.726 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6438 1 2025-07-20 08:10:51.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:10:51.479 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:11:28.631 00:00:10.359 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:11:34.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6438 1 2025-07-20 08:06:58.396 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:12:29.034 00:00:10.365 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:12:35.121 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6438 1 2025-07-20 08:13:29.437 00:00:10.322 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:13:35.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6438 1 2025-07-20 08:14:29.796 00:00:10.370 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:14:35.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39902 10 6438 1 2025-07-20 08:15:30.200 00:00:10.366 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:15:35.765 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45814 10 6438 1 2025-07-20 08:15:51.617 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:15:51.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:16:30.603 00:00:10.361 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:16:35.974 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6438 1 2025-07-20 08:11:58.400 00:06:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:17:30.998 00:00:10.366 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:17:36.193 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44366 10 6438 1 2025-07-20 08:18:31.404 00:00:10.363 TCP 23.104.0.1:60704 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:18:36.418 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6438 1 2025-07-20 08:13:58.400 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:19:36.664 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39576 10 6438 1 2025-07-20 08:19:31.805 00:00:10.383 TCP 23.104.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:20:32.211 00:00:10.370 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:20:51.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:20:36.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6438 1 2025-07-20 08:20:51.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:21:32.615 00:00:10.363 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:21:37.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6438 1 2025-07-20 08:22:33.020 00:00:10.327 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:22:37.285 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42458 10 6438 1 2025-07-20 08:23:33.388 00:00:10.370 TCP 23.104.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:23:37.491 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6438 1 2025-07-20 08:18:58.403 00:06:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:24:33.793 00:00:10.364 TCP 23.104.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:24:37.716 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45952 10 6438 1 2025-07-20 08:25:34.195 00:00:10.330 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:25:51.768 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:25:51.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:25:37.887 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6438 1 2025-07-20 08:20:58.401 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:26:34.582 00:00:10.367 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:26:38.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6438 1 2025-07-20 08:27:34.985 00:00:10.367 TCP 23.104.0.1:38892 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:27:38.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6438 1 2025-07-20 08:28:35.390 00:00:10.365 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:28:38.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6438 1 2025-07-20 08:29:35.794 00:00:10.366 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:29:38.757 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46364 10 6438 1 2025-07-20 08:30:36.200 00:00:10.375 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:30:38.919 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:41736 10 6438 1 2025-07-20 08:30:51.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:30:51.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:25:58.405 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:31:36.601 00:00:10.330 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:31:39.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6438 1 2025-07-20 08:32:39.275 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6438 1 2025-07-20 08:32:36.973 00:00:10.367 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:27:58.402 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:33:39.490 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6438 1 2025-07-20 08:33:37.383 00:00:10.324 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:34:39.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6438 1 2025-07-20 08:34:37.748 00:00:10.376 TCP 23.104.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:35:39.888 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6438 1 2025-07-20 08:35:38.163 00:00:10.337 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:35:51.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:35:52.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:36:38.542 00:00:10.364 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:36:40.112 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6438 1 2025-07-20 08:37:38.945 00:00:10.370 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:37:40.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48766 10 6438 1 2025-07-20 08:32:58.405 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:38:39.354 00:00:10.436 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 15 1925 1 2025-07-20 08:38:40.554 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 13 13922 1 2025-07-20 08:39:39.841 00:00:10.391 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:39:40.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 10 6438 1 2025-07-20 08:34:58.405 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:40:51.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:40:41.011 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6438 1 2025-07-20 08:40:51.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:40:40.272 00:00:10.366 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:41:40.681 00:00:10.382 TCP 23.104.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:41:41.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6438 1 2025-07-20 08:42:41.102 00:00:10.321 TCP 23.104.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:42:41.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6438 1 2025-07-20 08:43:41.460 00:00:10.366 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:43:41.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6438 1 2025-07-20 08:44:41.866 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44516 10 6438 1 2025-07-20 08:44:41.857 00:00:10.374 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:39:58.408 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:45:52.424 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:45:42.274 00:00:10.364 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:45:51.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:45:42.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6438 1 2025-07-20 08:46:42.680 00:00:10.363 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:46:42.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6438 1 2025-07-20 08:41:58.406 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:47:42.518 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6438 1 2025-07-20 08:47:43.107 00:00:10.367 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:48:43.518 00:00:10.363 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:48:42.728 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6438 1 2025-07-20 08:49:42.894 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6438 1 2025-07-20 08:49:43.921 00:00:10.372 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:50:52.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:50:44.328 00:00:10.362 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:50:43.114 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6438 1 2025-07-20 08:50:52.338 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:51:43.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6438 1 2025-07-20 08:51:44.737 00:00:10.364 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:46:58.412 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 08:52:45.142 00:00:10.373 TCP 23.104.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:52:43.542 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46950 10 6438 1 2025-07-20 08:53:45.549 00:00:10.366 TCP 23.104.0.1:46578 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:53:43.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6438 1 2025-07-20 08:48:58.413 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 08:54:43.969 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6438 1 2025-07-20 08:54:45.952 00:00:10.328 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:55:52.373 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 08:55:46.323 00:00:10.368 TCP 23.104.0.1:45680 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:55:52.398 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 08:55:44.193 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34146 10 6438 1 2025-07-20 08:56:44.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6438 1 2025-07-20 08:56:46.729 00:00:10.369 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-07-20 08:57:44.593 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 10 6438 1 2025-07-20 08:57:47.139 00:00:10.364 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 158, total bytes: 496481, total packets: 1542, avg bps: 1103, avg pps: 0, avg bpp: 321 Time window: 2025-07-20 07:57:58 - 2025-07-20 08:57:57 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0033s User: 0.0011s Wall: 0.0034s flows/second: 45998.5 Runtime: 0.0035s