Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 16:58:59.767 00:00:10.372 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-07-20 16:59:26.520 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6438 1 2025-07-20 17:00:00.174 00:00:10.329 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:00:26.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40486 10 6438 1 2025-07-20 17:01:02.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:01:02.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:01:00.545 00:00:10.364 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:01:26.961 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33548 12 6542 1 2025-07-20 16:56:58.603 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:02:00.953 00:00:10.364 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:02:27.195 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6438 1 2025-07-20 17:03:01.357 00:00:10.367 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:03:27.425 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48738 10 6438 1 2025-07-20 16:58:58.605 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:04:01.759 00:00:10.380 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:04:27.669 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:51014 11 6490 1 2025-07-20 17:05:02.177 00:00:10.364 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:05:27.935 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6438 1 2025-07-20 17:06:02.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:06:02.260 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:06:02.576 00:00:10.364 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:06:28.168 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6438 1 2025-07-20 17:07:02.978 00:00:10.367 TCP 23.104.0.1:39626 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:07:28.339 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6438 1 2025-07-20 17:08:03.383 00:00:10.365 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:08:28.552 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6438 1 2025-07-20 17:03:58.609 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:09:03.781 00:00:10.365 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:09:28.771 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35720 10 6438 1 2025-07-20 17:10:04.184 00:00:10.364 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:10:28.987 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58452 10 6438 1 2025-07-20 17:05:58.607 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:11:02.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:11:02.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:11:04.584 00:00:10.382 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:11:29.169 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6438 1 2025-07-20 17:12:05.003 00:00:10.370 TCP 23.104.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:12:29.342 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40232 10 6438 1 2025-07-20 17:13:05.410 00:00:10.317 TCP 23.104.0.1:60078 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:13:29.553 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6438 1 2025-07-20 17:14:05.774 00:00:10.328 TCP 23.104.0.1:33794 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:14:29.759 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6438 1 2025-07-20 17:15:06.137 00:00:10.361 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:15:29.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42566 10 6438 1 2025-07-20 17:10:58.611 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:16:02.736 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:16:02.531 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:16:06.533 00:00:10.361 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:16:30.222 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36566 10 6438 1 2025-07-20 17:17:06.929 00:00:10.382 TCP 23.104.0.1:51388 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:17:30.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6438 1 2025-07-20 17:12:58.608 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:18:07.345 00:00:10.368 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:18:30.643 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6438 1 2025-07-20 17:19:07.759 00:00:10.377 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:19:30.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6438 1 2025-07-20 17:20:08.176 00:00:10.361 TCP 23.104.0.1:33856 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:20:31.046 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6438 1 2025-07-20 17:21:02.392 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:21:02.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:21:08.576 00:00:10.373 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:21:31.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39582 10 6438 1 2025-07-20 17:22:08.987 00:00:10.363 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:22:31.474 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6438 1 2025-07-20 17:17:58.613 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:23:09.388 00:00:10.368 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:23:31.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6438 1 2025-07-20 17:24:09.804 00:00:10.363 TCP 23.104.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:24:31.891 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6438 1 2025-07-20 17:19:58.611 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:25:10.206 00:00:10.367 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:25:32.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33846 10 6438 1 2025-07-20 17:26:02.813 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:26:02.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:26:10.612 00:00:10.338 TCP 23.104.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:26:32.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6438 1 2025-07-20 17:27:10.994 00:00:10.362 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:27:32.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6438 1 2025-07-20 17:28:11.395 00:00:10.363 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:28:32.724 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6438 1 2025-07-20 17:29:11.796 00:00:10.372 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:29:32.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37710 10 6438 1 2025-07-20 17:24:58.616 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:30:12.206 00:00:10.368 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:30:33.114 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36694 10 6438 1 2025-07-20 17:31:02.671 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:31:02.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:31:12.611 00:00:10.363 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:31:33.291 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6438 1 2025-07-20 17:26:58.615 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:32:13.013 00:00:10.321 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:32:33.500 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6438 1 2025-07-20 17:33:13.376 00:00:10.375 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:33:33.707 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6438 1 2025-07-20 17:34:13.795 00:00:10.344 TCP 23.104.0.1:45718 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:34:33.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59262 10 6438 1 2025-07-20 17:35:14.173 00:00:10.366 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:35:34.136 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6438 1 2025-07-20 17:36:02.876 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:36:02.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:36:14.576 00:00:10.368 TCP 23.104.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:36:34.348 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6438 1 2025-07-20 17:31:58.617 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:37:14.979 00:00:10.368 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:37:34.523 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6438 1 2025-07-20 17:38:15.385 00:00:10.324 TCP 23.104.0.1:46430 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:38:34.701 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6438 1 2025-07-20 17:33:58.617 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:39:15.748 00:00:10.365 TCP 23.104.0.1:54132 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:39:34.915 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6438 1 2025-07-20 17:40:16.149 00:00:10.360 TCP 23.104.0.1:51512 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:40:35.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58272 10 6438 1 2025-07-20 17:41:03.003 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:41:02.944 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:41:16.546 00:00:10.367 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:41:35.346 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6438 1 2025-07-20 17:42:16.947 00:00:10.367 TCP 23.104.0.1:41798 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:42:35.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6438 1 2025-07-20 17:43:17.349 00:00:10.440 TCP 23.104.0.1:59120 -> 1.101.0.1:3000 15 1925 1 2025-07-20 17:43:35.774 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 12 10352 1 2025-07-20 17:38:58.619 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:44:17.828 00:00:10.387 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:44:36.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34408 10 6438 1 2025-07-20 17:45:18.251 00:00:10.375 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:45:36.227 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6438 1 2025-07-20 17:46:03.270 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:40:58.617 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:46:03.192 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:46:18.664 00:00:10.363 TCP 23.104.0.1:38122 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:46:36.454 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6438 1 2025-07-20 17:47:19.091 00:00:10.367 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:47:36.669 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6438 1 2025-07-20 17:48:19.498 00:00:10.365 TCP 23.104.0.1:43548 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:48:36.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6438 1 2025-07-20 17:49:19.902 00:00:10.369 TCP 23.104.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:49:37.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6438 1 2025-07-20 17:50:20.311 00:00:10.361 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:50:37.327 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38016 10 6438 1 2025-07-20 17:45:58.621 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:51:03.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:51:03.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:51:20.712 00:00:10.376 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:51:37.552 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42878 10 6438 1 2025-07-20 17:52:21.124 00:00:10.333 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:52:37.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38400 10 6438 1 2025-07-20 17:47:58.619 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 17:53:21.500 00:00:10.364 TCP 23.104.0.1:39410 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:53:37.995 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6438 1 2025-07-20 17:54:21.905 00:00:10.363 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:54:38.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48852 10 6438 1 2025-07-20 17:55:22.304 00:00:10.366 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:55:38.430 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6438 1 2025-07-20 17:56:03.371 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 17:56:03.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 17:56:22.704 00:00:10.368 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:56:38.642 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6438 1 2025-07-20 17:57:23.114 00:00:10.376 TCP 23.104.0.1:38034 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:57:38.854 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6438 1 2025-07-20 17:52:58.623 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 17:58:23.530 00:00:10.362 TCP 23.104.0.1:37172 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:58:39.028 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6438 1 Summary: total flows: 161, total bytes: 501873, total packets: 1579, avg bps: 1079, avg pps: 0, avg bpp: 317 Time window: 2025-07-20 16:56:58 - 2025-07-20 17:58:58 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0023s User: 0.0012s Wall: 0.0017s flows/second: 95608.5 Runtime: 0.0017s