Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 04:59:03.813 00:00:10.329 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-07-23 04:59:09.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6438 1 2025-07-23 04:54:59.721 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 04:54:59.722 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:00:04.181 00:00:10.362 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:00:09.954 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6438 1 2025-07-23 05:01:04.583 00:00:10.364 TCP 23.104.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:01:10.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6438 1 2025-07-23 05:02:14.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:02:04.986 00:00:10.363 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:02:14.511 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:02:10.389 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6438 1 2025-07-23 05:03:05.392 00:00:10.359 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:03:10.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6438 1 2025-07-23 05:04:05.785 00:00:10.322 TCP 23.104.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:04:10.771 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6438 1 2025-07-23 05:05:06.147 00:00:10.364 TCP 23.104.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:05:10.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6438 1 2025-07-23 05:06:06.543 00:00:10.379 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:06:11.210 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6438 1 2025-07-23 05:01:59.724 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:01:59.725 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:07:14.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:07:14.611 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:07:06.947 00:00:10.372 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:07:11.431 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6438 1 2025-07-23 05:08:11.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6438 1 2025-07-23 05:08:07.366 00:00:10.360 TCP 23.104.0.1:33976 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:09:07.762 00:00:10.376 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:09:11.866 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6438 1 2025-07-23 05:10:08.171 00:00:10.361 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:10:12.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36352 10 6438 1 2025-07-23 05:11:08.572 00:00:10.367 TCP 23.104.0.1:38730 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:11:12.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6438 1 2025-07-23 05:12:14.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:12:14.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:12:08.979 00:00:10.372 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:12:12.516 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49640 10 6438 1 2025-07-23 05:13:09.391 00:00:10.366 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:13:12.746 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39138 10 6438 1 2025-07-23 05:08:59.723 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:08:59.725 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:14:09.793 00:00:10.379 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:14:12.962 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49680 10 6438 1 2025-07-23 05:15:10.199 00:00:10.370 TCP 23.104.0.1:39570 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:15:13.145 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6438 1 2025-07-23 05:16:10.604 00:00:10.367 TCP 23.104.0.1:59430 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:16:13.328 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6438 1 2025-07-23 05:17:14.632 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:17:14.878 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:17:11.010 00:00:10.364 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:17:13.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6438 1 2025-07-23 05:18:11.411 00:00:10.363 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:18:13.758 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6438 1 2025-07-23 05:19:11.815 00:00:10.366 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:19:13.973 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6438 1 2025-07-23 05:20:14.201 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6438 1 2025-07-23 05:20:12.217 00:00:10.365 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:15:59.723 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:15:59.726 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:21:14.416 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58656 10 6438 1 2025-07-23 05:21:12.625 00:00:10.363 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:22:14.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:22:14.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:22:13.029 00:00:10.329 TCP 23.104.0.1:39610 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:22:14.582 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6438 1 2025-07-23 05:23:13.398 00:00:10.377 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:23:14.752 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6438 1 2025-07-23 05:24:13.817 00:00:10.374 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:24:14.969 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35368 10 6438 1 2025-07-23 05:25:14.229 00:00:10.369 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:25:15.210 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 10 6438 1 2025-07-23 05:26:14.636 00:00:10.360 TCP 23.104.0.1:55730 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:26:15.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6438 1 2025-07-23 05:27:15.193 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:27:15.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:27:15.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41084 10 6438 1 2025-07-23 05:27:15.035 00:00:10.322 TCP 23.104.0.1:39346 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:22:59.724 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:22:59.728 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:28:15.395 00:00:10.330 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:28:15.865 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36094 10 6438 1 2025-07-23 05:29:16.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50884 10 6438 1 2025-07-23 05:29:15.767 00:00:10.384 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:30:16.190 00:00:10.365 TCP 23.104.0.1:48464 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:30:16.314 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6438 1 2025-07-23 05:31:16.588 00:00:10.366 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:31:16.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6438 1 2025-07-23 05:32:14.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:32:14.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:32:16.736 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6438 1 2025-07-23 05:32:16.990 00:00:10.372 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:33:17.405 00:00:10.363 TCP 23.104.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:33:16.943 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60316 10 6438 1 2025-07-23 05:34:17.808 00:00:10.364 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:34:17.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6438 1 2025-07-23 05:29:59.725 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:29:59.728 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:35:17.386 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37016 10 6438 1 2025-07-23 05:35:18.211 00:00:10.365 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:36:18.614 00:00:10.359 TCP 23.104.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:36:17.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6438 1 2025-07-23 05:37:15.081 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:37:14.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:37:17.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6438 1 2025-07-23 05:37:19.014 00:00:10.361 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:38:18.039 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6438 1 2025-07-23 05:38:19.421 00:00:10.368 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:39:19.824 00:00:10.367 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:39:18.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6438 1 2025-07-23 05:40:18.471 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6438 1 2025-07-23 05:40:20.226 00:00:10.367 TCP 23.104.0.1:50646 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:41:20.630 00:00:10.367 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:41:18.685 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:44648 11 6490 1 2025-07-23 05:36:59.730 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:36:59.728 00:06:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:42:15.318 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:42:15.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:42:21.029 00:00:10.368 TCP 23.104.0.1:56400 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:42:18.953 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 12 6542 1 2025-07-23 05:43:19.203 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6438 1 2025-07-23 05:43:21.437 00:00:10.370 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:44:19.416 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6438 1 2025-07-23 05:44:21.861 00:00:10.371 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:45:19.585 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6438 1 2025-07-23 05:45:22.271 00:00:10.362 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:46:19.755 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43764 10 6438 1 2025-07-23 05:46:22.673 00:00:10.378 TCP 23.104.0.1:34178 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:47:15.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:47:15.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:47:19.972 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6438 1 2025-07-23 05:47:23.107 00:00:10.322 TCP 23.104.0.1:38144 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:48:20.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6438 1 2025-07-23 05:48:23.471 00:00:10.333 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:43:59.730 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:43:59.732 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:49:20.417 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6438 1 2025-07-23 05:49:23.839 00:00:10.383 TCP 23.104.0.1:52968 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:50:20.660 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6438 1 2025-07-23 05:50:24.262 00:00:10.322 TCP 23.104.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:51:20.875 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6438 1 2025-07-23 05:51:24.624 00:00:10.363 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:52:15.469 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:52:15.508 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:52:21.105 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49394 10 6438 1 2025-07-23 05:52:25.027 00:00:10.371 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:53:21.281 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6438 1 2025-07-23 05:53:25.432 00:00:10.364 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:54:21.494 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 10 6438 1 2025-07-23 05:54:25.834 00:00:10.375 TCP 23.104.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:55:21.716 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 11 6478 1 2025-07-23 05:55:26.248 00:00:10.382 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:50:59.734 00:06:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 05:50:59.732 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 05:56:21.929 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47758 10 6438 1 2025-07-23 05:56:26.652 00:00:10.368 TCP 23.104.0.1:39570 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:57:15.641 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 05:57:15.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 05:57:22.161 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6438 1 2025-07-23 05:57:27.065 00:00:10.332 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-07-23 05:58:22.373 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46270 10 6438 1 2025-07-23 05:58:27.437 00:00:10.370 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 498442, total packets: 1588, avg bps: 1044, avg pps: 0, avg bpp: 313 Time window: 2025-07-23 04:54:59 - 2025-07-23 05:58:37 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0014s Wall: 0.0023s flows/second: 70558.4 Runtime: 0.0023s