Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 00:58:45.758 00:00:10.373 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:59:28.835 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55424 10 6438 1 2025-07-25 00:59:46.168 00:00:10.359 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:00:29.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6438 1 2025-07-25 01:00:46.567 00:00:10.365 TCP 23.104.0.1:38686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 00:56:00.619 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:01:29.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50692 10 6438 1 2025-07-25 01:01:46.977 00:00:10.369 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:02:29.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6438 1 2025-07-25 00:58:00.619 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:02:47.389 00:00:10.364 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:03:07.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:03:07.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:03:29.646 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6438 1 2025-07-25 01:03:47.789 00:00:10.352 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:04:29.862 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6438 1 2025-07-25 01:04:48.183 00:00:10.325 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:05:30.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6438 1 2025-07-25 01:05:48.546 00:00:10.367 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:06:30.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6438 1 2025-07-25 01:06:48.947 00:00:10.371 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:07:30.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 10 6438 1 2025-07-25 01:07:49.353 00:00:10.361 TCP 23.104.0.1:52778 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:03:00.620 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:08:07.580 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:08:07.210 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:08:30.724 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 12 10350 1 2025-07-25 01:08:49.759 00:00:10.449 TCP 23.104.0.1:39674 -> 1.101.0.1:3000 15 1925 1 2025-07-25 01:09:30.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6438 1 2025-07-25 01:09:50.247 00:00:10.364 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:05:00.619 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:10:31.133 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6438 1 2025-07-25 01:10:50.649 00:00:10.325 TCP 23.104.0.1:51762 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:11:31.344 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6438 1 2025-07-25 01:11:51.014 00:00:10.324 TCP 23.104.0.1:60828 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:12:31.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6438 1 2025-07-25 01:12:51.385 00:00:10.374 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:13:07.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:13:07.468 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:13:31.771 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6438 1 2025-07-25 01:13:51.799 00:00:10.361 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:14:31.939 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35720 10 6438 1 2025-07-25 01:10:00.623 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:14:52.203 00:00:10.368 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:15:32.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6438 1 2025-07-25 01:15:52.612 00:00:10.368 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:16:32.389 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6438 1 2025-07-25 01:12:00.620 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:16:53.027 00:00:10.317 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:17:32.599 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6438 1 2025-07-25 01:17:53.381 00:00:10.334 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:18:07.837 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:18:07.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:18:32.822 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6438 1 2025-07-25 01:18:53.744 00:00:10.366 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:19:32.990 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37348 10 6438 1 2025-07-25 01:19:54.149 00:00:10.362 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:20:33.206 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6438 1 2025-07-25 01:20:54.552 00:00:10.364 TCP 23.104.0.1:54958 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:21:33.377 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6438 1 2025-07-25 01:17:00.622 00:06:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:21:54.983 00:00:10.371 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:22:33.595 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6438 1 2025-07-25 01:22:55.386 00:00:10.364 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:23:07.968 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:23:07.763 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:23:33.813 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6438 1 2025-07-25 01:19:00.622 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:23:55.784 00:00:10.360 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:24:34.042 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6438 1 2025-07-25 01:24:56.184 00:00:10.363 TCP 23.104.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:25:34.263 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6438 1 2025-07-25 01:25:56.586 00:00:10.366 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:26:34.477 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6438 1 2025-07-25 01:26:56.989 00:00:10.368 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:27:34.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6438 1 2025-07-25 01:28:07.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:28:07.931 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:27:57.399 00:00:10.366 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:28:34.902 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33230 10 6438 1 2025-07-25 01:24:00.635 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:28:57.806 00:00:10.364 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:29:35.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6438 1 2025-07-25 01:29:58.205 00:00:10.375 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:30:35.306 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49138 10 6438 1 2025-07-25 01:26:00.632 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:30:58.617 00:00:10.366 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:31:35.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6438 1 2025-07-25 01:31:59.022 00:00:10.369 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:32:35.734 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6438 1 2025-07-25 01:33:08.009 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:32:59.432 00:00:10.367 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:33:07.977 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:33:35.904 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6438 1 2025-07-25 01:33:59.835 00:00:10.383 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:34:36.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6438 1 2025-07-25 01:35:00.257 00:00:10.366 TCP 23.104.0.1:39904 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:35:36.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52438 10 6438 1 2025-07-25 01:31:00.637 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:36:00.664 00:00:10.325 TCP 23.104.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:36:36.548 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6438 1 2025-07-25 01:37:01.029 00:00:10.366 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:37:36.762 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6438 1 2025-07-25 01:33:00.634 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:38:07.924 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:38:08.188 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:38:01.431 00:00:10.319 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:38:36.936 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55704 10 6438 1 2025-07-25 01:39:01.795 00:00:10.363 TCP 23.104.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:39:37.168 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6438 1 2025-07-25 01:40:02.199 00:00:10.390 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:40:37.344 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6438 1 2025-07-25 01:41:02.645 00:00:10.369 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:41:37.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6438 1 2025-07-25 01:42:03.061 00:00:10.365 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:42:37.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6438 1 2025-07-25 01:38:00.639 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:43:08.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:43:08.255 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:43:03.465 00:00:10.365 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:43:37.990 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45530 10 6438 1 2025-07-25 01:44:03.866 00:00:10.370 TCP 23.104.0.1:56812 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:44:38.211 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6438 1 2025-07-25 01:40:00.636 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:45:04.273 00:00:10.321 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:45:38.427 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6438 1 2025-07-25 01:46:04.630 00:00:10.358 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:46:38.650 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6438 1 2025-07-25 01:47:05.031 00:00:10.327 TCP 23.104.0.1:35936 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:47:38.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6438 1 2025-07-25 01:48:08.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:48:08.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:48:05.409 00:00:10.361 TCP 23.104.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:48:39.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6438 1 2025-07-25 01:49:05.815 00:00:10.424 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:49:39.294 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41706 10 6438 1 2025-07-25 01:45:00.638 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:50:06.282 00:00:10.366 TCP 23.104.0.1:38552 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:50:39.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53506 10 6438 1 2025-07-25 01:51:06.680 00:00:10.377 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:51:39.736 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6438 1 2025-07-25 01:47:00.637 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 01:52:07.108 00:00:10.365 TCP 23.104.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:52:39.902 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6438 1 2025-07-25 01:53:08.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:53:08.475 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:53:07.507 00:00:10.368 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:53:40.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6438 1 2025-07-25 01:54:07.913 00:00:10.366 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:54:40.304 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55870 10 6438 1 2025-07-25 01:55:08.313 00:00:10.366 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:55:40.515 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6438 1 2025-07-25 01:56:08.714 00:00:10.374 TCP 23.104.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:56:40.685 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6438 1 2025-07-25 01:52:00.639 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 01:57:09.124 00:00:10.322 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:57:40.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49046 10 6438 1 2025-07-25 01:58:08.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 01:58:08.380 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 01:58:09.481 00:00:10.365 TCP 23.104.0.1:57952 -> 1.101.0.1:3000 11 1507 1 2025-07-25 01:58:41.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6438 1 Summary: total flows: 161, total bytes: 501715, total packets: 1576, avg bps: 1064, avg pps: 0, avg bpp: 318 Time window: 2025-07-25 00:56:00 - 2025-07-25 01:58:51 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0029s User: 0.0010s Wall: 0.0017s flows/second: 96180.5 Runtime: 0.0017s