Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 03:58:57.921 00:00:10.403 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-07-25 03:59:06.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46656 10 6438 1 2025-07-25 03:59:58.363 00:00:10.367 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:00:06.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6438 1 2025-07-25 04:00:58.772 00:00:10.371 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:01:07.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6438 1 2025-07-25 04:01:59.179 00:00:10.361 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:02:07.326 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6438 1 2025-07-25 03:58:00.686 00:06:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:03:10.847 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:02:59.581 00:00:10.366 TCP 23.104.0.1:48638 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:03:11.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:03:07.567 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6438 1 2025-07-25 04:03:59.985 00:00:10.367 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:04:07.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60850 10 6438 1 2025-07-25 04:00:00.684 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:05:00.393 00:00:10.375 TCP 23.104.0.1:54090 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:05:07.957 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:34618 10 6438 1 2025-07-25 04:06:00.805 00:00:10.366 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:06:08.163 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6438 1 2025-07-25 04:07:01.207 00:00:10.365 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:07:08.372 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6438 1 2025-07-25 04:08:11.207 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:08:11.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:08:01.612 00:00:10.324 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:08:08.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6438 1 2025-07-25 04:09:01.972 00:00:10.359 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:09:08.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34040 10 6438 1 2025-07-25 04:05:00.687 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:10:02.375 00:00:10.361 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:10:09.033 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6438 1 2025-07-25 04:11:02.769 00:00:10.419 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:11:09.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6438 1 2025-07-25 04:07:00.685 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:12:03.232 00:00:10.320 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:12:09.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35112 10 6438 1 2025-07-25 04:13:11.066 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:13:11.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:13:03.590 00:00:10.363 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:13:09.634 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6438 1 2025-07-25 04:14:03.991 00:00:10.366 TCP 23.104.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:14:09.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6438 1 2025-07-25 04:15:04.393 00:00:10.366 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:15:10.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47152 10 6438 1 2025-07-25 04:16:04.803 00:00:10.368 TCP 23.104.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:16:10.244 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 10 6438 1 2025-07-25 04:12:00.688 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:17:05.208 00:00:10.366 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:17:10.460 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51820 10 6438 1 2025-07-25 04:18:11.482 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:18:11.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:18:05.613 00:00:10.324 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:18:10.629 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55590 10 6438 1 2025-07-25 04:14:00.687 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:19:05.975 00:00:10.380 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:19:10.842 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48562 10 6438 1 2025-07-25 04:20:06.400 00:00:10.361 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:20:11.011 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41118 10 6438 1 2025-07-25 04:21:11.225 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6438 1 2025-07-25 04:21:06.803 00:00:10.380 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:22:07.221 00:00:10.367 TCP 23.104.0.1:39626 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:22:11.413 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6438 1 2025-07-25 04:23:11.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:23:11.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:23:11.585 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6438 1 2025-07-25 04:23:07.628 00:00:10.330 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:19:00.692 00:06:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:24:11.795 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6438 1 2025-07-25 04:24:07.993 00:00:10.359 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:25:08.393 00:00:10.365 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:25:12.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6438 1 2025-07-25 04:21:00.690 00:06:00.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:26:08.795 00:00:10.366 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:26:12.240 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6438 1 2025-07-25 04:27:09.201 00:00:10.319 TCP 23.104.0.1:49826 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:27:12.409 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6438 1 2025-07-25 04:28:11.207 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:28:11.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:28:09.559 00:00:10.436 TCP 23.104.0.1:49028 -> 1.101.0.1:3000 15 1925 1 2025-07-25 04:28:12.726 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58082 12 10352 1 2025-07-25 04:29:10.035 00:00:10.324 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:29:12.971 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6438 1 2025-07-25 04:30:10.398 00:00:10.365 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:30:13.192 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6438 1 2025-07-25 04:26:00.694 00:06:00.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:31:10.803 00:00:10.366 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:31:13.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49132 10 6438 1 2025-07-25 04:32:11.208 00:00:10.368 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:32:13.601 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46818 10 6438 1 2025-07-25 04:28:00.691 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:33:11.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:33:11.707 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:33:13.828 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51074 12 10350 1 2025-07-25 04:33:11.611 00:00:10.439 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 15 1925 1 2025-07-25 04:34:12.116 00:00:10.368 TCP 23.104.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:34:14.083 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36180 10 6438 1 2025-07-25 04:35:12.522 00:00:10.362 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:35:14.254 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6438 1 2025-07-25 04:36:14.426 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6438 1 2025-07-25 04:36:12.922 00:00:10.396 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:37:14.598 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6438 1 2025-07-25 04:37:13.351 00:00:10.365 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:33:00.693 00:06:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:38:11.599 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:38:11.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:38:14.771 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6438 1 2025-07-25 04:38:13.753 00:00:10.382 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:39:14.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6438 1 2025-07-25 04:39:14.178 00:00:10.370 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:35:00.691 00:06:00.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:40:14.579 00:00:10.365 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:40:15.171 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6438 1 2025-07-25 04:41:14.981 00:00:10.336 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:41:15.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6438 1 2025-07-25 04:42:15.359 00:00:10.361 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:42:15.595 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6438 1 2025-07-25 04:43:11.955 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:43:12.016 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:43:15.755 00:00:10.389 TCP 23.104.0.1:43706 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:43:15.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6438 1 2025-07-25 04:44:16.032 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47222 10 6438 1 2025-07-25 04:44:16.187 00:00:10.375 TCP 23.104.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:40:00.695 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:45:16.208 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6438 1 2025-07-25 04:45:16.599 00:00:10.366 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:46:16.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6438 1 2025-07-25 04:46:17.002 00:00:10.361 TCP 23.104.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:42:00.697 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:47:16.634 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6438 1 2025-07-25 04:47:17.406 00:00:10.324 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:48:11.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:48:11.941 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:48:16.858 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:51332 11 6490 1 2025-07-25 04:48:17.774 00:00:10.373 TCP 23.104.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:49:17.142 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43480 10 6438 1 2025-07-25 04:49:18.194 00:00:10.327 TCP 23.104.0.1:59156 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:50:18.560 00:00:10.372 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:50:17.364 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6438 1 2025-07-25 04:51:17.593 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46372 10 6438 1 2025-07-25 04:51:18.970 00:00:10.400 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:47:00.701 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:52:17.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40624 10 6438 1 2025-07-25 04:52:19.409 00:00:10.364 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:53:11.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:53:12.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:53:19.812 00:00:10.370 TCP 23.104.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:53:18.044 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6438 1 2025-07-25 04:49:00.699 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 04:54:20.219 00:00:10.366 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:54:18.254 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54580 10 6438 1 2025-07-25 04:55:18.470 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6438 1 2025-07-25 04:55:20.622 00:00:10.366 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:56:21.028 00:00:10.364 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:56:18.680 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6438 1 2025-07-25 04:57:21.432 00:00:10.323 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:57:18.895 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58992 10 6438 1 2025-07-25 04:58:12.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 04:58:12.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 04:58:19.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6438 1 2025-07-25 04:58:21.794 00:00:10.368 TCP 23.104.0.1:40146 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 505238, total packets: 1569, avg bps: 1113, avg pps: 0, avg bpp: 322 Time window: 2025-07-25 03:58:00 - 2025-07-25 04:58:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0022s User: 0.0011s Wall: 0.0014s flows/second: 113724.6 Runtime: 0.0014s