Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 12:58:54.721 00:00:10.368 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-07-28 12:59:48.511 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 12:59:39.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44894 10 6452 1 2025-07-28 12:59:48.305 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 12:59:55.122 00:00:10.364 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:00:39.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35192 10 6452 1 2025-07-28 12:56:02.285 00:06:00.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:00:55.525 00:00:10.326 TCP 23.104.0.1:54562 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:01:39.677 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-07-28 13:01:55.888 00:00:10.382 TCP 23.104.0.1:36036 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:02:39.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44384 10 6452 1 2025-07-28 13:02:56.309 00:00:10.368 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:03:40.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49138 10 6452 1 2025-07-28 13:03:56.716 00:00:10.373 TCP 23.104.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:04:40.330 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-07-28 13:04:48.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:04:48.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:00:02.290 00:06:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:04:57.128 00:00:10.365 TCP 23.104.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:05:40.495 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-07-28 13:05:57.534 00:00:10.360 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:06:40.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 10 6452 1 2025-07-28 13:06:57.935 00:00:10.377 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:07:40.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-07-28 13:03:02.287 00:06:00.221 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:07:58.357 00:00:10.364 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:08:41.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45912 10 6452 1 2025-07-28 13:08:58.761 00:00:10.373 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:09:48.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:09:41.321 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42042 10 6452 1 2025-07-28 13:09:48.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:09:59.170 00:00:10.367 TCP 23.104.0.1:40936 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:10:41.530 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-07-28 13:10:59.573 00:00:10.363 TCP 23.104.0.1:59554 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:11:41.754 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-07-28 13:07:02.290 00:06:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:11:59.975 00:00:10.370 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:12:41.964 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-07-28 13:13:00.382 00:00:10.376 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:13:42.184 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-07-28 13:14:00.797 00:00:10.361 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:14:48.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:14:48.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:14:42.409 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-07-28 13:10:02.287 00:06:00.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:15:01.198 00:00:10.322 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:15:42.620 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-07-28 13:16:01.558 00:00:10.364 TCP 23.104.0.1:50398 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:16:42.839 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33922 10 6452 1 2025-07-28 13:17:01.962 00:00:10.329 TCP 23.104.0.1:42004 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:17:43.077 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-07-28 13:18:02.330 00:00:10.361 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:18:43.286 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57168 10 6452 1 2025-07-28 13:14:02.295 00:06:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:19:02.733 00:00:10.371 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:19:48.925 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:19:48.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:19:43.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46578 10 6452 1 2025-07-28 13:20:03.148 00:00:10.368 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:20:43.714 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-07-28 13:21:03.549 00:00:10.372 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:21:43.925 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:52866 10 6452 1 2025-07-28 13:17:02.292 00:06:00.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:22:03.958 00:00:10.367 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:22:44.121 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-07-28 13:23:04.366 00:00:10.360 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:23:44.293 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-07-28 13:24:04.767 00:00:10.374 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:24:48.971 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:24:48.692 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:24:44.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6452 1 2025-07-28 13:25:05.179 00:00:10.363 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:25:44.720 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-07-28 13:21:02.295 00:06:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:26:05.585 00:00:10.379 TCP 23.104.0.1:45162 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:26:44.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-07-28 13:27:05.999 00:00:10.367 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:27:45.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-07-28 13:28:06.407 00:00:10.329 TCP 23.104.0.1:42212 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:28:45.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-07-28 13:24:02.293 00:06:00.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:29:06.774 00:00:10.374 TCP 23.104.0.1:36962 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:29:49.366 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:29:49.019 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:29:45.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-07-28 13:30:07.176 00:00:10.619 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:30:45.824 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-07-28 13:31:07.833 00:00:10.385 TCP 23.104.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:31:45.995 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-07-28 13:32:08.255 00:00:10.362 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:32:46.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-07-28 13:28:02.296 00:06:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:33:08.670 00:00:10.365 TCP 23.104.0.1:45882 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:33:46.424 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-07-28 13:34:09.096 00:00:10.364 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:34:49.276 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:34:49.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:34:46.673 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38556 10 6452 1 2025-07-28 13:35:09.498 00:00:10.365 TCP 23.104.0.1:45770 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:35:46.887 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33980 10 6452 1 2025-07-28 13:31:02.294 00:06:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:36:09.905 00:00:10.368 TCP 23.104.0.1:45498 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:36:47.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47350 10 6452 1 2025-07-28 13:37:10.314 00:00:10.361 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:37:47.329 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-07-28 13:38:10.717 00:00:10.370 TCP 23.104.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:38:47.541 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-07-28 13:39:11.128 00:00:10.365 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:39:49.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:39:49.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:39:47.757 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33132 10 6452 1 2025-07-28 13:35:02.297 00:06:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:40:11.540 00:00:10.361 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:40:47.973 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 12 6556 1 2025-07-28 13:41:11.943 00:00:10.323 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:41:48.194 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-07-28 13:42:12.309 00:00:10.363 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:42:48.367 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-07-28 13:38:02.295 00:06:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:43:12.708 00:00:10.325 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:43:48.539 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-07-28 13:44:13.103 00:00:10.371 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:44:49.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:44:49.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:44:48.712 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-07-28 13:45:13.518 00:00:10.325 TCP 23.104.0.1:60070 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:45:48.888 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6452 1 2025-07-28 13:46:13.882 00:00:10.333 TCP 23.104.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:46:49.101 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 11 6504 1 2025-07-28 13:42:02.300 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:47:14.256 00:00:10.363 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:47:49.370 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-07-28 13:48:14.661 00:00:10.372 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:48:49.579 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-07-28 13:49:15.083 00:00:10.336 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:49:49.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:49:49.508 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:49:49.866 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-07-28 13:45:02.295 00:06:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:50:15.463 00:00:10.371 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:50:50.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45284 10 6452 1 2025-07-28 13:51:15.861 00:00:10.373 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:51:50.308 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58020 10 6452 1 2025-07-28 13:52:16.273 00:00:10.365 TCP 23.104.0.1:45394 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:52:50.479 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-07-28 13:53:16.681 00:00:10.324 TCP 23.104.0.1:44574 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:53:50.704 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55812 10 6452 1 2025-07-28 13:49:02.299 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 13:54:17.064 00:00:10.368 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:54:49.390 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:54:49.446 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:54:50.927 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-07-28 13:55:17.468 00:00:10.363 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:55:51.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-07-28 13:56:17.868 00:00:10.369 TCP 23.104.0.1:48910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:56:51.341 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-07-28 13:52:02.298 00:06:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 13:57:18.274 00:00:10.402 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:57:51.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39694 10 6452 1 2025-07-28 13:58:18.690 00:00:10.366 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 491929, total packets: 1563, avg bps: 1050, avg pps: 0, avg bpp: 314 Time window: 2025-07-28 12:56:02 - 2025-07-28 13:58:29 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0033s User: 0.0011s Wall: 0.0034s flows/second: 47393.3 Runtime: 0.0034s