Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 11:58:59.814 00:00:10.358 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-07-20 11:59:23.227 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6438 1 2025-07-20 12:00:00.215 00:00:10.320 TCP 23.104.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:00:23.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6438 1 2025-07-20 12:00:56.043 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:00:56.213 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 11:55:58.475 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:01:00.579 00:00:10.380 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:01:23.648 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6438 1 2025-07-20 12:02:00.999 00:00:10.368 TCP 23.104.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:02:23.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6438 1 2025-07-20 11:57:58.473 00:06:00.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:03:01.418 00:00:10.366 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:03:24.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6438 1 2025-07-20 12:04:01.827 00:00:10.382 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:04:24.303 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6438 1 2025-07-20 12:05:02.247 00:00:10.364 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:05:24.473 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6438 1 2025-07-20 12:05:56.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:05:56.378 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:06:02.646 00:00:10.341 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:06:24.694 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 10 6438 1 2025-07-20 12:07:03.024 00:00:10.368 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:07:24.905 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6438 1 2025-07-20 12:02:58.478 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:08:03.432 00:00:10.365 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:08:25.121 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45636 10 6438 1 2025-07-20 12:09:03.834 00:00:10.351 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:09:25.292 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6438 1 2025-07-20 12:04:58.475 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:10:04.219 00:00:10.323 TCP 23.104.0.1:44844 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:10:25.497 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34580 10 6438 1 2025-07-20 12:10:56.326 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:10:56.362 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:11:04.585 00:00:10.325 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:11:25.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6438 1 2025-07-20 12:12:04.943 00:00:10.381 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:12:25.933 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6438 1 2025-07-20 12:13:05.361 00:00:10.363 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:13:26.161 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48534 10 6438 1 2025-07-20 12:14:05.760 00:00:10.378 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:14:26.386 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6438 1 2025-07-20 12:09:58.480 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:15:06.173 00:00:10.370 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:15:26.607 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6438 1 2025-07-20 12:15:56.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:15:56.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:16:06.580 00:00:10.362 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:16:26.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 11 6478 1 2025-07-20 12:11:58.476 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:17:06.977 00:00:10.368 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:17:27.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58040 10 6438 1 2025-07-20 12:18:07.384 00:00:10.362 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:18:27.257 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6438 1 2025-07-20 12:19:07.789 00:00:10.324 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:19:27.466 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6438 1 2025-07-20 12:20:08.150 00:00:10.325 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:20:27.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48320 10 6438 1 2025-07-20 12:20:56.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:20:56.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:21:08.509 00:00:10.364 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:21:27.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6438 1 2025-07-20 12:16:58.481 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:22:08.913 00:00:10.320 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:22:28.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6438 1 2025-07-20 12:23:09.272 00:00:10.367 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:23:28.324 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6438 1 2025-07-20 12:18:58.479 00:06:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:24:09.683 00:00:10.366 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:24:28.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6438 1 2025-07-20 12:25:10.110 00:00:10.324 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:25:28.731 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6438 1 2025-07-20 12:25:56.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:25:56.853 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:26:10.474 00:00:10.372 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:26:28.905 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48204 10 6438 1 2025-07-20 12:27:10.876 00:00:10.330 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:27:29.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6438 1 2025-07-20 12:28:11.246 00:00:10.372 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:28:29.338 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6438 1 2025-07-20 12:23:58.482 00:06:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:29:11.663 00:00:10.361 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:29:29.552 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6438 1 2025-07-20 12:30:12.088 00:00:10.367 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:30:29.727 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 10 6438 1 2025-07-20 12:30:56.919 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:30:56.828 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:25:58.479 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:31:12.491 00:00:10.371 TCP 23.104.0.1:53856 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:31:29.952 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38440 10 6438 1 2025-07-20 12:32:12.894 00:00:10.330 TCP 23.104.0.1:38804 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:32:30.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6438 1 2025-07-20 12:33:13.264 00:00:10.363 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:33:30.383 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6438 1 2025-07-20 12:34:13.665 00:00:10.367 TCP 23.104.0.1:50832 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:34:30.592 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6438 1 2025-07-20 12:35:14.098 00:00:10.365 TCP 23.104.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:35:30.804 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6438 1 2025-07-20 12:35:56.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:35:56.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:30:58.483 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:36:14.503 00:00:10.378 TCP 23.104.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:36:31.027 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6438 1 2025-07-20 12:37:14.924 00:00:10.353 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:37:31.236 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41264 10 6438 1 2025-07-20 12:32:58.481 00:06:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:38:15.315 00:00:10.366 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:38:31.450 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6438 1 2025-07-20 12:39:15.718 00:00:10.373 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:39:31.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6438 1 2025-07-20 12:40:16.138 00:00:10.371 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:40:31.885 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 11 6490 1 2025-07-20 12:40:56.952 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:40:57.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:41:16.543 00:00:10.365 TCP 23.104.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:41:32.170 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49416 10 6438 1 2025-07-20 12:42:16.948 00:00:10.325 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:42:32.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6438 1 2025-07-20 12:37:58.485 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:43:17.313 00:00:10.364 TCP 23.104.0.1:47510 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:43:32.558 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48518 10 6438 1 2025-07-20 12:44:17.720 00:00:10.373 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:44:32.790 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53554 10 6438 1 2025-07-20 12:39:58.482 00:06:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:45:18.130 00:00:10.365 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:45:33.010 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6438 1 2025-07-20 12:45:57.181 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:45:56.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:46:18.539 00:00:10.367 TCP 23.104.0.1:46510 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:46:33.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6438 1 2025-07-20 12:47:18.946 00:00:10.366 TCP 23.104.0.1:58338 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:47:33.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6438 1 2025-07-20 12:48:19.367 00:00:10.318 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:48:33.653 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6438 1 2025-07-20 12:49:19.729 00:00:10.378 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:49:33.873 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6438 1 2025-07-20 12:44:58.485 00:06:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:50:20.145 00:00:10.364 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:50:34.119 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6438 1 2025-07-20 12:50:57.097 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:50:57.280 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:51:20.551 00:00:10.366 TCP 23.104.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:51:34.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6438 1 2025-07-20 12:46:58.484 00:06:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 12:52:20.957 00:00:10.318 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:52:34.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6438 1 2025-07-20 12:53:21.313 00:00:10.331 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:53:34.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6438 1 2025-07-20 12:54:21.682 00:00:10.364 TCP 23.104.0.1:43426 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:54:34.977 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6438 1 2025-07-20 12:55:22.101 00:00:10.367 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:55:35.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6438 1 2025-07-20 12:55:56.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 12:55:57.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 12:56:22.505 00:00:10.373 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:56:35.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6438 1 2025-07-20 12:51:58.493 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 12:57:22.915 00:00:10.368 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:57:35.594 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 10 6438 1 2025-07-20 12:58:23.319 00:00:10.365 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-07-20 12:58:35.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48860 10 6438 1 Summary: total flows: 161, total bytes: 497477, total packets: 1572, avg bps: 1056, avg pps: 0, avg bpp: 316 Time window: 2025-07-20 11:55:58 - 2025-07-20 12:58:45 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0041s User: 0.0000s Wall: 0.0027s flows/second: 60094.6 Runtime: 0.0027s