Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 01:58:51.106 00:00:10.367 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:59:31.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6438 1 2025-07-23 01:59:51.511 00:00:10.365 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:00:31.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6438 1 2025-07-23 02:00:51.916 00:00:10.330 TCP 23.104.0.1:43052 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:01:32.173 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36164 10 6438 1 2025-07-23 02:01:52.289 00:00:10.364 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:02:10.664 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:02:10.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:02:32.340 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6438 1 2025-07-23 02:02:52.689 00:00:10.442 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 15 1925 1 2025-07-23 02:03:32.559 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 12 10352 1 2025-07-23 02:03:53.170 00:00:10.374 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:04:32.794 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6438 1 2025-07-23 01:59:59.665 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:59:59.667 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:04:53.583 00:00:10.360 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:05:32.968 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 10 6438 1 2025-07-23 02:05:53.985 00:00:10.370 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:06:33.159 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 10 6438 1 2025-07-23 02:06:54.398 00:00:10.378 TCP 23.104.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:07:11.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:07:11.016 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:07:33.329 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6438 1 2025-07-23 02:07:54.828 00:00:10.437 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 15 1925 1 2025-07-23 02:08:33.553 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:42040 12 10352 1 2025-07-23 02:08:55.309 00:00:10.341 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:09:33.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6438 1 2025-07-23 02:09:55.689 00:00:10.360 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:10:33.968 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58046 10 6438 1 2025-07-23 02:10:56.103 00:00:10.371 TCP 23.104.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:11:34.152 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6438 1 2025-07-23 02:06:59.669 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:06:59.671 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:12:11.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:11:56.574 00:00:10.363 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:12:11.149 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:12:34.363 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6438 1 2025-07-23 02:12:56.975 00:00:10.365 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:13:34.540 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6438 1 2025-07-23 02:13:57.378 00:00:10.369 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:14:34.709 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44062 11 6490 1 2025-07-23 02:14:57.780 00:00:10.364 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:15:34.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42510 10 6438 1 2025-07-23 02:15:58.184 00:00:10.365 TCP 23.104.0.1:60812 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:16:35.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6438 1 2025-07-23 02:17:10.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:16:58.587 00:00:10.363 TCP 23.104.0.1:58144 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:17:11.064 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:17:35.411 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6438 1 2025-07-23 02:17:58.992 00:00:10.379 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:18:35.587 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6438 1 2025-07-23 02:13:59.673 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:13:59.676 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:18:59.408 00:00:10.365 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:19:36.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57904 10 6438 1 2025-07-23 02:19:59.810 00:00:10.364 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:20:36.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6438 1 2025-07-23 02:21:00.213 00:00:10.372 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:21:36.463 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57166 10 6438 1 2025-07-23 02:22:11.188 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:22:00.620 00:00:10.366 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:22:11.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:22:36.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49242 10 6438 1 2025-07-23 02:23:01.028 00:00:10.437 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 15 1925 1 2025-07-23 02:23:36.895 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34746 12 10352 1 2025-07-23 02:24:01.504 00:00:10.320 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:24:37.139 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6438 1 2025-07-23 02:25:01.863 00:00:10.374 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:25:37.363 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6438 1 2025-07-23 02:20:59.679 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:20:59.675 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:26:02.277 00:00:10.379 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:26:37.570 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6438 1 2025-07-23 02:27:11.447 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:27:11.266 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:27:02.692 00:00:10.366 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:27:37.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6438 1 2025-07-23 02:28:03.103 00:00:10.366 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:28:37.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6438 1 2025-07-23 02:29:03.506 00:00:10.365 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:29:38.178 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6438 1 2025-07-23 02:30:03.908 00:00:10.378 TCP 23.104.0.1:54516 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:30:38.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6438 1 2025-07-23 02:31:04.322 00:00:10.371 TCP 23.104.0.1:43628 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:31:38.620 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6438 1 2025-07-23 02:32:11.139 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:32:11.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:32:04.731 00:00:10.324 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:32:38.843 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6438 1 2025-07-23 02:27:59.683 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:27:59.681 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:33:05.105 00:00:10.358 TCP 23.104.0.1:58110 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:33:39.027 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6438 1 2025-07-23 02:34:05.502 00:00:10.365 TCP 23.104.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:34:39.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6438 1 2025-07-23 02:35:05.903 00:00:10.324 TCP 23.104.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:35:39.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6438 1 2025-07-23 02:36:06.269 00:00:10.366 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:36:39.620 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6438 1 2025-07-23 02:37:11.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:37:11.522 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:37:06.671 00:00:10.365 TCP 23.104.0.1:58742 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:37:39.838 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55552 10 6438 1 2025-07-23 02:38:07.101 00:00:10.324 TCP 23.104.0.1:37664 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:38:40.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6438 1 2025-07-23 02:39:07.462 00:00:10.362 TCP 23.104.0.1:41136 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:39:40.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6438 1 2025-07-23 02:34:59.683 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:34:59.687 00:06:00.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:40:07.867 00:00:10.372 TCP 23.104.0.1:48488 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:40:40.504 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34614 10 6438 1 2025-07-23 02:41:08.275 00:00:10.331 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:41:40.676 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36470 10 6438 1 2025-07-23 02:42:11.750 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:42:11.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:42:08.641 00:00:10.368 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:42:40.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6438 1 2025-07-23 02:43:09.050 00:00:10.369 TCP 23.104.0.1:53704 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:43:41.119 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6438 1 2025-07-23 02:44:09.463 00:00:10.368 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:44:41.305 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6438 1 2025-07-23 02:45:09.868 00:00:10.372 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:45:41.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60952 10 6438 1 2025-07-23 02:46:10.276 00:00:10.366 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:46:41.745 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45782 10 6438 1 2025-07-23 02:41:59.687 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:41:59.684 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:47:12.269 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:47:12.352 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:47:10.679 00:00:10.372 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:47:41.956 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46656 10 6438 1 2025-07-23 02:48:11.107 00:00:10.440 TCP 23.104.0.1:51254 -> 1.101.0.1:3000 15 1925 1 2025-07-23 02:48:42.192 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 12 10350 1 2025-07-23 02:49:11.584 00:00:10.332 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:49:42.425 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6438 1 2025-07-23 02:50:11.952 00:00:10.366 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:50:42.637 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6438 1 2025-07-23 02:51:12.357 00:00:10.366 TCP 23.104.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:51:42.845 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6438 1 2025-07-23 02:52:11.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:52:11.521 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:52:12.761 00:00:10.339 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:52:43.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6438 1 2025-07-23 02:53:13.138 00:00:10.379 TCP 23.104.0.1:41140 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:53:43.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 10 6438 1 2025-07-23 02:48:59.686 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 02:48:59.689 00:06:00.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 02:54:13.557 00:00:10.367 TCP 23.104.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:54:43.510 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6438 1 2025-07-23 02:55:13.960 00:00:10.328 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:55:43.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50186 10 6438 1 2025-07-23 02:56:14.322 00:00:10.361 TCP 23.104.0.1:34510 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:56:43.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6438 1 2025-07-23 02:57:11.623 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 02:57:11.946 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 02:57:14.722 00:00:10.361 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-07-23 02:57:44.174 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6438 1 2025-07-23 02:58:15.117 00:00:10.364 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 507464, total packets: 1571, avg bps: 1135, avg pps: 0, avg bpp: 323 Time window: 2025-07-23 01:58:51 - 2025-07-23 02:58:25 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0026s User: 0.0018s Wall: 0.0024s flows/second: 65645.7 Runtime: 0.0024s