Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 23:59:04.816 00:00:10.374 TCP 23.104.0.1:49006 -> 1.101.0.1:3000 11 1507 1 2025-07-25 23:59:21.893 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6438 1 2025-07-26 00:00:05.230 00:00:10.372 TCP 23.104.0.1:36136 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:00:22.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6438 1 2025-07-26 00:01:05.641 00:00:10.361 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:01:22.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6438 1 2025-07-25 23:58:01.112 00:04:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-26 00:02:06.047 00:00:10.372 TCP 23.104.0.1:57848 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:02:22.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44256 10 6438 1 2025-07-26 00:03:06.458 00:00:10.366 TCP 23.104.0.1:49912 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:03:22.717 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59174 10 6438 1 2025-07-26 00:03:35.092 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:03:34.789 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 23:59:01.116 00:06:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-26 00:04:06.865 00:00:10.322 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:04:22.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6438 1 2025-07-26 00:05:07.223 00:00:10.364 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:05:23.110 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49330 10 6438 1 2025-07-26 00:06:07.628 00:00:10.367 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:06:23.318 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6438 1 2025-07-26 00:03:01.114 00:04:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-26 00:07:08.032 00:00:10.361 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:07:23.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46424 10 6438 1 2025-07-26 00:06:01.116 00:02:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 6 369 1 2025-07-26 00:08:08.428 00:00:10.325 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:08:35.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:08:35.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:08:23.709 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6438 1 2025-07-26 00:09:08.791 00:00:10.364 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:09:23.923 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6438 1 2025-07-26 00:10:09.193 00:00:10.363 TCP 23.104.0.1:51408 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:10:24.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58170 10 6438 1 2025-07-26 00:11:09.595 00:00:10.343 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:11:24.347 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43164 10 6438 1 2025-07-26 00:12:09.972 00:00:10.334 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:12:24.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6438 1 2025-07-26 00:09:01.117 00:04:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:08:01.116 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-26 00:13:10.341 00:00:10.362 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:13:24.786 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6438 1 2025-07-26 00:13:35.317 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:13:35.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:14:10.743 00:00:10.387 TCP 23.104.0.1:60008 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:14:25.015 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6438 1 2025-07-26 00:15:11.169 00:00:10.375 TCP 23.104.0.1:38842 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:15:25.246 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 10 6438 1 2025-07-26 00:16:11.585 00:00:10.364 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:16:25.455 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6438 1 2025-07-26 00:17:11.982 00:00:10.336 TCP 23.104.0.1:60102 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:17:25.662 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6438 1 2025-07-26 00:14:01.118 00:04:00.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:18:12.356 00:00:10.366 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:18:35.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:18:25.853 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41446 10 6438 1 2025-07-26 00:18:35.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:19:12.757 00:00:10.377 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:19:26.078 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6438 1 2025-07-26 00:15:01.118 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-26 00:20:13.167 00:00:10.367 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:20:26.292 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6438 1 2025-07-26 00:21:13.575 00:00:10.368 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:21:26.504 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6438 1 2025-07-26 00:22:13.986 00:00:10.367 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:22:26.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6438 1 2025-07-26 00:19:01.123 00:04:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:23:14.393 00:00:10.371 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:23:35.651 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:23:35.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:23:26.926 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6438 1 2025-07-26 00:22:01.120 00:02:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-07-26 00:24:14.806 00:00:10.363 TCP 23.104.0.1:54426 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:24:27.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6438 1 2025-07-26 00:25:15.210 00:00:10.360 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:25:27.328 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59360 10 6438 1 2025-07-26 00:26:15.608 00:00:10.369 TCP 23.104.0.1:57572 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:26:27.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6438 1 2025-07-26 00:27:16.020 00:00:10.504 TCP 23.104.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:27:27.752 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6438 1 2025-07-26 00:28:16.571 00:00:10.372 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:28:35.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:28:35.760 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:28:27.927 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6438 1 2025-07-26 00:25:01.122 00:04:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-26 00:24:01.123 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-26 00:29:16.985 00:00:10.374 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:29:28.125 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6438 1 2025-07-26 00:30:17.401 00:00:10.366 TCP 23.104.0.1:48240 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:30:28.298 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6438 1 2025-07-26 00:31:17.805 00:00:10.365 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:31:28.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6438 1 2025-07-26 00:32:18.204 00:00:10.365 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:32:28.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6438 1 2025-07-26 00:33:18.599 00:00:10.360 TCP 23.104.0.1:33016 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:33:35.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:33:35.699 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:33:28.938 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50430 10 6438 1 2025-07-26 00:30:01.123 00:04:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-26 00:34:18.997 00:00:10.370 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:34:29.173 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6438 1 2025-07-26 00:35:19.406 00:00:10.364 TCP 23.104.0.1:34694 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:35:29.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6438 1 2025-07-26 00:31:01.126 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-26 00:36:19.805 00:00:10.373 TCP 23.104.0.1:43294 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:36:29.613 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6438 1 2025-07-26 00:37:20.217 00:00:10.367 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:37:29.823 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6438 1 2025-07-26 00:38:20.631 00:00:10.373 TCP 23.104.0.1:51334 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:38:36.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:38:36.507 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:38:30.002 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6438 1 2025-07-26 00:35:01.127 00:04:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-26 00:39:21.034 00:00:10.364 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:39:30.226 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6438 1 2025-07-26 00:38:01.128 00:02:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 6 369 1 2025-07-26 00:40:21.434 00:00:10.383 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:40:30.393 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45408 10 6438 1 2025-07-26 00:41:21.860 00:00:10.368 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:41:30.564 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46532 10 6438 1 2025-07-26 00:42:22.270 00:00:10.363 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:42:30.777 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57966 10 6438 1 2025-07-26 00:43:35.835 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:43:35.808 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:43:22.672 00:00:10.361 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:43:30.993 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6438 1 2025-07-26 00:44:23.094 00:00:10.366 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:44:31.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6438 1 2025-07-26 00:40:01.124 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-26 00:41:01.128 00:04:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:45:23.497 00:00:10.361 TCP 23.104.0.1:47818 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:45:31.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43686 10 6438 1 2025-07-26 00:46:23.899 00:00:10.370 TCP 23.104.0.1:36456 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:46:31.641 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58328 10 6438 1 2025-07-26 00:47:24.303 00:00:10.363 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:47:31.849 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50296 10 6438 1 2025-07-26 00:48:35.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:48:24.706 00:00:10.438 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 15 1925 1 2025-07-26 00:48:35.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:48:32.075 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 12 10352 1 2025-07-26 00:49:25.182 00:00:10.363 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:49:32.276 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6438 1 2025-07-26 00:46:01.128 00:04:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:50:25.586 00:00:10.363 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:50:32.493 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6438 1 2025-07-26 00:51:25.989 00:00:10.364 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:51:32.707 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 10 6438 1 2025-07-26 00:47:01.125 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-26 00:52:26.394 00:00:10.369 TCP 23.104.0.1:47284 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:52:32.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6438 1 2025-07-26 00:53:36.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:53:35.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:53:26.804 00:00:10.450 TCP 23.104.0.1:39232 -> 1.101.0.1:3000 15 1925 1 2025-07-26 00:53:33.132 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 12 10352 1 2025-07-26 00:54:27.284 00:00:10.367 TCP 23.104.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:54:33.371 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6438 1 2025-07-26 00:51:01.128 00:04:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-26 00:55:27.693 00:00:10.362 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:55:33.598 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51278 10 6438 1 2025-07-26 00:54:01.125 00:02:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 6 369 1 2025-07-26 00:56:28.111 00:00:10.364 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:56:33.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40846 10 6438 1 2025-07-26 00:57:28.523 00:00:10.370 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:57:34.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6438 1 2025-07-26 00:58:36.233 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-26 00:58:36.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-26 00:58:28.927 00:00:10.393 TCP 23.104.0.1:41922 -> 1.101.0.1:3000 11 1507 1 2025-07-26 00:58:34.249 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36312 10 6438 1 Summary: total flows: 166, total bytes: 505680, total packets: 1576, avg bps: 1110, avg pps: 0, avg bpp: 320 Time window: 2025-07-25 23:58:01 - 2025-07-26 00:58:44 Total flows processed: 166, passed: 166, Blocks skipped: 0, Bytes read: 17328 Sys: 0.0028s User: 0.0014s Wall: 0.0029s flows/second: 58166.6 Runtime: 0.0029s