Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 09:58:45.626 00:00:10.374 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-07-24 09:59:18.447 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39394 10 6438 1 2025-07-24 09:59:46.036 00:00:10.369 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-07-24 09:55:00.324 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:00:18.673 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 10 6438 1 2025-07-24 10:00:46.444 00:00:10.377 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:01:18.911 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56242 10 6438 1 2025-07-24 10:01:46.855 00:00:10.375 TCP 23.104.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:02:19.140 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58312 10 6438 1 2025-07-24 10:02:49.287 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:02:49.500 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:02:47.273 00:00:10.367 TCP 23.104.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:03:19.366 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33762 10 6438 1 2025-07-24 10:03:47.688 00:00:10.364 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:04:19.599 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6438 1 2025-07-24 10:04:48.098 00:00:10.357 TCP 23.104.0.1:36736 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:00:00.328 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:05:19.823 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 12 6542 1 2025-07-24 10:05:48.495 00:00:10.322 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:06:20.062 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6438 1 2025-07-24 10:06:48.854 00:00:10.376 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:02:00.325 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:07:20.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41984 10 6438 1 2025-07-24 10:07:49.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:07:49.282 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:07:49.269 00:00:10.363 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:08:20.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6438 1 2025-07-24 10:08:49.674 00:00:10.363 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:09:20.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47306 10 6438 1 2025-07-24 10:09:50.094 00:00:10.327 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:10:20.948 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6438 1 2025-07-24 10:10:50.453 00:00:10.363 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:11:21.178 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6438 1 2025-07-24 10:07:00.329 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:11:50.853 00:00:10.336 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:12:21.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6438 1 2025-07-24 10:12:49.487 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:12:49.738 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:12:51.227 00:00:10.443 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:13:21.560 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 12 10352 1 2025-07-24 10:09:00.326 00:06:00.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:13:51.700 00:00:10.401 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:14:21.805 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6438 1 2025-07-24 10:14:52.135 00:00:10.370 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:15:22.032 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 10 6438 1 2025-07-24 10:15:52.537 00:00:10.324 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:16:22.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6438 1 2025-07-24 10:16:52.901 00:00:10.373 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:17:22.462 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6438 1 2025-07-24 10:17:49.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:17:49.414 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:17:53.313 00:00:10.437 TCP 23.104.0.1:50064 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:18:22.683 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 12 10352 1 2025-07-24 10:14:00.332 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:18:53.804 00:00:10.328 TCP 23.104.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:19:22.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50876 10 6438 1 2025-07-24 10:19:54.171 00:00:10.358 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:20:23.174 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6438 1 2025-07-24 10:16:00.328 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:20:54.576 00:00:10.362 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:21:23.349 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6438 1 2025-07-24 10:21:54.980 00:00:10.336 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:22:23.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6438 1 2025-07-24 10:22:50.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:22:49.929 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:22:55.347 00:00:10.454 TCP 23.104.0.1:36840 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:23:23.730 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 12 10352 1 2025-07-24 10:23:55.840 00:00:10.369 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:24:23.963 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6438 1 2025-07-24 10:24:56.249 00:00:10.362 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:25:24.186 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6438 1 2025-07-24 10:21:00.333 00:06:00.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:25:56.648 00:00:10.321 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:26:24.409 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6438 1 2025-07-24 10:26:57.013 00:00:10.371 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:27:24.635 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55708 10 6438 1 2025-07-24 10:27:49.715 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:27:49.693 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:23:00.332 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:27:57.426 00:00:10.441 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:28:24.852 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 12 10350 1 2025-07-24 10:28:57.930 00:00:10.374 TCP 23.104.0.1:32794 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:29:25.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6438 1 2025-07-24 10:29:58.340 00:00:10.344 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:30:25.312 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6438 1 2025-07-24 10:30:58.719 00:00:10.324 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:31:25.530 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54300 10 6438 1 2025-07-24 10:31:59.096 00:00:10.366 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:32:25.704 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6438 1 2025-07-24 10:32:49.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:32:49.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:28:00.335 00:06:00.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:32:59.497 00:00:10.372 TCP 23.104.0.1:53476 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:33:25.937 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6438 1 2025-07-24 10:33:59.908 00:00:10.384 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:34:26.166 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6438 1 2025-07-24 10:30:00.334 00:06:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:35:00.333 00:00:10.367 TCP 23.104.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:35:26.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38822 10 6438 1 2025-07-24 10:36:00.737 00:00:10.325 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:36:26.598 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 12 6542 1 2025-07-24 10:37:01.108 00:00:10.322 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:37:26.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6438 1 2025-07-24 10:37:49.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:37:50.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:38:01.469 00:00:10.432 TCP 23.104.0.1:43190 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:38:27.040 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 12 10352 1 2025-07-24 10:39:01.938 00:00:10.369 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:39:27.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6438 1 2025-07-24 10:35:00.338 00:06:00.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:40:02.347 00:00:10.364 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:40:27.495 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6438 1 2025-07-24 10:41:02.748 00:00:10.340 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:41:27.716 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51794 10 6438 1 2025-07-24 10:37:00.341 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:42:03.122 00:00:10.362 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:42:27.938 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6438 1 2025-07-24 10:42:50.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:42:50.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:43:03.521 00:00:10.363 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:43:28.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6438 1 2025-07-24 10:44:03.924 00:00:10.383 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:44:28.393 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6438 1 2025-07-24 10:45:04.345 00:00:10.366 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:45:28.613 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6438 1 2025-07-24 10:46:04.745 00:00:10.363 TCP 23.104.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:46:28.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6438 1 2025-07-24 10:42:00.345 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:47:05.148 00:00:10.367 TCP 23.104.0.1:59518 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:47:29.081 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6438 1 2025-07-24 10:47:50.522 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:47:50.511 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:48:05.551 00:00:10.397 TCP 23.104.0.1:55136 -> 1.101.0.1:3000 15 1925 1 2025-07-24 10:48:29.253 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 13 10597 1 2025-07-24 10:44:00.345 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:49:05.985 00:00:10.368 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:49:29.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6645 1 2025-07-24 10:50:06.388 00:00:10.377 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:50:29.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6645 1 2025-07-24 10:51:06.803 00:00:10.377 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:51:29.939 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6645 1 2025-07-24 10:52:07.227 00:00:10.333 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:52:30.177 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6645 1 2025-07-24 10:52:50.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:52:50.394 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:53:07.599 00:00:10.362 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:53:30.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6645 1 2025-07-24 10:49:00.351 00:06:00.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 10:54:07.995 00:00:10.380 TCP 23.104.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:54:30.603 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6645 1 2025-07-24 10:55:08.420 00:00:10.325 TCP 23.104.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:55:30.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6645 1 2025-07-24 10:51:00.347 00:06:00.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 10:56:08.787 00:00:10.364 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:56:31.045 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6645 1 2025-07-24 10:57:09.186 00:00:10.362 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:57:31.270 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6645 1 2025-07-24 10:57:50.525 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 10:57:50.459 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 10:58:09.584 00:00:10.365 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-07-24 10:58:31.487 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6645 1 Summary: total flows: 161, total bytes: 525898, total packets: 1611, avg bps: 1100, avg pps: 0, avg bpp: 326 Time window: 2025-07-24 09:55:00 - 2025-07-24 10:58:41 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0035s User: 0.0012s Wall: 0.0033s flows/second: 49294.3 Runtime: 0.0033s