Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 17:59:23.931 00:00:10.388 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-07-20 17:59:39.197 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6438 1 2025-07-20 17:54:58.621 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:00:24.353 00:00:10.373 TCP 23.104.0.1:47102 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:00:39.365 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44410 10 6438 1 2025-07-20 18:01:03.248 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:01:03.525 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:01:24.770 00:00:10.369 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:01:39.576 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54250 10 6438 1 2025-07-20 18:02:25.180 00:00:10.368 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:02:39.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51874 10 6438 1 2025-07-20 18:03:25.583 00:00:10.368 TCP 23.104.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:03:40.005 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6438 1 2025-07-20 18:04:25.991 00:00:10.365 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:04:40.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6438 1 2025-07-20 17:59:58.624 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:05:26.394 00:00:10.362 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:05:40.447 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6438 1 2025-07-20 18:06:03.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:06:03.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:06:26.793 00:00:10.362 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:06:40.642 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33860 10 6438 1 2025-07-20 18:01:58.623 00:06:00.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:07:27.192 00:00:10.328 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:07:40.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56512 10 6438 1 2025-07-20 18:08:27.554 00:00:10.362 TCP 23.104.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:08:41.039 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6438 1 2025-07-20 18:09:27.956 00:00:10.326 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:09:41.282 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6438 1 2025-07-20 18:10:28.324 00:00:10.373 TCP 23.104.0.1:46628 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:10:41.534 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6438 1 2025-07-20 18:11:03.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:11:03.498 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:11:28.733 00:00:10.373 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:11:41.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6438 1 2025-07-20 18:06:58.627 00:06:00.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:12:29.144 00:00:10.321 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:12:41.956 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38804 10 6438 1 2025-07-20 18:13:29.509 00:00:10.437 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 15 1925 1 2025-07-20 18:13:42.192 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 12 10352 1 2025-07-20 18:08:58.625 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:14:29.982 00:00:10.368 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:14:42.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6438 1 2025-07-20 18:15:30.391 00:00:10.323 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:15:42.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46444 10 6438 1 2025-07-20 18:16:03.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:16:03.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:16:30.756 00:00:10.330 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:16:42.824 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45172 10 6438 1 2025-07-20 18:17:31.128 00:00:10.326 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:17:42.998 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58372 10 6438 1 2025-07-20 18:18:31.505 00:00:10.363 TCP 23.104.0.1:36636 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:18:43.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53118 10 6438 1 2025-07-20 18:13:58.629 00:06:00.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:19:31.908 00:00:10.369 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:19:43.437 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44936 10 6438 1 2025-07-20 18:20:32.307 00:00:10.365 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:20:43.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6438 1 2025-07-20 18:15:58.627 00:06:00.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:21:03.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:21:03.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:21:32.708 00:00:10.326 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 12 1559 1 2025-07-20 18:21:43.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6438 1 2025-07-20 18:22:33.096 00:00:10.372 TCP 23.104.0.1:37382 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:22:44.063 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 12 6542 1 2025-07-20 18:23:33.513 00:00:10.369 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:23:44.282 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6438 1 2025-07-20 18:24:33.918 00:00:10.384 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:24:44.472 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6438 1 2025-07-20 18:25:34.345 00:00:10.329 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:25:44.684 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6438 1 2025-07-20 18:20:58.632 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:26:03.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:26:04.260 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:26:34.711 00:00:10.378 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:26:44.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6438 1 2025-07-20 18:27:35.143 00:00:10.374 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:27:45.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6438 1 2025-07-20 18:22:58.628 00:06:00.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:28:35.564 00:00:10.358 TCP 23.104.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:28:45.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6438 1 2025-07-20 18:29:35.964 00:00:10.369 TCP 23.104.0.1:57140 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:29:45.546 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36674 10 6438 1 2025-07-20 18:30:36.376 00:00:10.322 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:30:45.759 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6438 1 2025-07-20 18:31:04.006 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:31:03.996 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:31:36.739 00:00:10.447 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:31:45.974 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6438 1 2025-07-20 18:32:37.230 00:00:10.362 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:32:46.160 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57056 10 6438 1 2025-07-20 18:27:58.632 00:06:00.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:33:37.634 00:00:10.391 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:33:46.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40580 10 6438 1 2025-07-20 18:34:38.077 00:00:10.373 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:34:46.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6438 1 2025-07-20 18:29:58.630 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:35:38.490 00:00:10.362 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:35:46.776 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6438 1 2025-07-20 18:36:03.876 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:36:04.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:36:38.893 00:00:10.377 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:36:46.973 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6438 1 2025-07-20 18:37:39.301 00:00:10.323 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:37:47.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6438 1 2025-07-20 18:38:39.667 00:00:10.441 TCP 23.104.0.1:54520 -> 1.101.0.1:3000 15 1925 1 2025-07-20 18:38:47.423 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52492 12 10352 1 2025-07-20 18:39:40.150 00:00:10.368 TCP 23.104.0.1:34966 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:39:47.664 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6438 1 2025-07-20 18:34:58.632 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:40:40.557 00:00:10.362 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:40:47.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6438 1 2025-07-20 18:41:04.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:41:04.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:41:40.964 00:00:10.372 TCP 23.104.0.1:53624 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:41:48.104 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6438 1 2025-07-20 18:36:58.630 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:42:41.377 00:00:10.330 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:42:48.329 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6438 1 2025-07-20 18:43:41.751 00:00:10.322 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:43:48.539 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 10 6438 1 2025-07-20 18:44:42.116 00:00:10.367 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:44:48.751 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6438 1 2025-07-20 18:45:42.524 00:00:10.365 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:45:48.963 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6438 1 2025-07-20 18:46:04.202 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:46:03.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:46:42.929 00:00:10.386 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:46:49.152 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6438 1 2025-07-20 18:41:58.634 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:47:43.352 00:00:10.322 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:47:49.362 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6438 1 2025-07-20 18:48:43.710 00:00:10.326 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:43:58.631 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:48:49.532 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47666 10 6438 1 2025-07-20 18:49:44.101 00:00:10.364 TCP 23.104.0.1:57970 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:49:49.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6438 1 2025-07-20 18:50:44.502 00:00:10.365 TCP 23.104.0.1:43244 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:50:49.953 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6438 1 2025-07-20 18:51:04.546 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:51:04.465 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:51:44.907 00:00:10.370 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:51:50.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56970 10 6438 1 2025-07-20 18:52:45.308 00:00:10.363 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:52:50.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6438 1 2025-07-20 18:53:45.713 00:00:10.372 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:53:50.606 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42136 10 6438 1 2025-07-20 18:48:58.637 00:06:00.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 18:54:46.123 00:00:10.371 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:54:50.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6438 1 2025-07-20 18:55:46.531 00:00:10.368 TCP 23.104.0.1:34872 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:50:58.634 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 18:55:51.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44294 10 6438 1 2025-07-20 18:56:04.423 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 18:56:04.515 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 18:56:51.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6438 1 2025-07-20 18:56:46.939 00:00:10.334 TCP 23.104.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-07-20 18:57:51.463 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 12 10352 1 2025-07-20 18:57:47.312 00:00:10.364 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 502174, total packets: 1566, avg bps: 1061, avg pps: 0, avg bpp: 320 Time window: 2025-07-20 17:54:58 - 2025-07-20 18:58:01 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0024s User: 0.0016s Wall: 0.0018s flows/second: 89468.0 Runtime: 0.0018s