Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 19:58:44.060 00:00:10.363 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-07-28 19:59:13.974 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54602 10 6452 1 2025-07-28 19:59:56.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 19:59:44.468 00:00:10.361 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-07-28 19:59:57.054 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:00:14.212 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-07-28 20:00:44.870 00:00:10.367 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-07-28 19:56:02.402 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:01:14.384 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53690 10 6452 1 2025-07-28 20:01:45.275 00:00:10.361 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:02:14.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-07-28 20:02:45.674 00:00:10.367 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:03:14.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-07-28 20:03:46.101 00:00:10.362 TCP 23.104.0.1:45612 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:04:15.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-07-28 20:04:56.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:04:46.509 00:00:10.360 TCP 23.104.0.1:40016 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:04:57.052 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:00:02.405 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:05:15.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-07-28 20:05:46.907 00:00:10.322 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:06:15.460 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-07-28 20:06:47.268 00:00:10.371 TCP 23.104.0.1:58028 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:07:15.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-07-28 20:07:47.677 00:00:10.371 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:03:02.402 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:08:15.889 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-07-28 20:08:48.109 00:00:10.376 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:09:16.110 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-07-28 20:09:57.486 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:09:48.522 00:00:10.360 TCP 23.104.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:09:57.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:10:16.319 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-07-28 20:10:48.922 00:00:10.386 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:11:16.490 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-07-28 20:11:49.352 00:00:10.362 TCP 23.104.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:07:02.407 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:12:16.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-07-28 20:12:49.758 00:00:10.379 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:13:16.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-07-28 20:13:50.177 00:00:10.367 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:14:17.160 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-07-28 20:14:57.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:14:50.582 00:00:10.369 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:14:57.290 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:10:02.406 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:15:17.345 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-07-28 20:15:50.989 00:00:10.329 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:16:17.533 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-07-28 20:16:51.354 00:00:10.368 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:17:17.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-07-28 20:17:51.759 00:00:10.334 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:18:17.984 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-07-28 20:18:52.136 00:00:10.367 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:14:02.409 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:19:18.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-07-28 20:19:57.659 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:19:57.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:19:52.540 00:00:11.208 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 13 1611 1 2025-07-28 20:20:18.395 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-07-28 20:20:53.792 00:00:10.367 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:21:18.568 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-07-28 20:17:02.406 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:21:54.201 00:00:10.323 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:22:18.739 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-07-28 20:22:54.564 00:00:10.378 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:23:18.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35218 12 6556 1 2025-07-28 20:23:54.980 00:00:10.368 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:24:19.182 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-07-28 20:24:57.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:24:57.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:24:55.394 00:00:10.370 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:25:19.356 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-07-28 20:25:55.803 00:00:10.374 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:21:02.411 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:26:19.572 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-07-28 20:26:56.214 00:00:10.364 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:27:19.781 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2025-07-28 20:27:56.617 00:00:10.372 TCP 23.104.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:28:20.001 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43002 10 6452 1 2025-07-28 20:24:02.408 00:06:00.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:28:57.023 00:00:10.324 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:29:20.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35092 10 6452 1 2025-07-28 20:29:57.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:29:57.525 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:29:57.381 00:00:10.365 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:30:20.394 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-07-28 20:30:57.786 00:00:10.361 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:31:20.570 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-07-28 20:31:58.188 00:00:10.365 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:32:20.742 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-07-28 20:28:02.417 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:32:58.590 00:00:10.364 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:33:20.948 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-07-28 20:33:58.991 00:00:10.365 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:34:21.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-07-28 20:34:57.468 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:34:57.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:34:59.395 00:00:10.359 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:35:21.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57596 10 6452 1 2025-07-28 20:31:02.414 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:35:59.796 00:00:10.363 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:36:21.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-07-28 20:37:00.199 00:00:10.374 TCP 23.104.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:37:21.778 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-07-28 20:38:00.609 00:00:10.365 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:38:21.953 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-07-28 20:39:01.014 00:00:10.363 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:39:22.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51790 10 6452 1 2025-07-28 20:39:57.518 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:39:57.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:35:02.419 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:40:01.421 00:00:10.368 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:40:22.392 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33172 10 6452 1 2025-07-28 20:41:01.831 00:00:10.385 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:41:22.626 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-07-28 20:42:02.254 00:00:10.363 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:42:22.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39436 10 6452 1 2025-07-28 20:38:02.417 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:43:02.655 00:00:10.326 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:43:23.073 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-07-28 20:44:03.018 00:00:10.326 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:44:23.296 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-07-28 20:44:58.314 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:44:57.977 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:45:03.380 00:00:10.369 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:45:23.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-07-28 20:46:03.782 00:00:10.367 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:46:23.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-07-28 20:42:02.420 00:06:00.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:47:04.184 00:00:10.367 TCP 23.104.0.1:51988 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:47:23.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36304 10 6452 1 2025-07-28 20:48:04.588 00:00:10.327 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:48:24.114 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 12 10367 1 2025-07-28 20:49:04.957 00:00:10.404 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 15 1926 1 2025-07-28 20:49:24.348 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-07-28 20:49:57.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:49:58.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:45:02.417 00:06:00.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:50:05.403 00:00:10.383 TCP 23.104.0.1:57098 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:50:24.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54446 10 6452 1 2025-07-28 20:51:05.820 00:00:10.327 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:51:24.770 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-07-28 20:52:06.186 00:00:10.377 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:52:24.948 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37902 10 6452 1 2025-07-28 20:53:06.602 00:00:10.370 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:53:25.172 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52060 10 6452 1 2025-07-28 20:49:02.422 00:06:00.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 20:54:07.015 00:00:10.366 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:54:25.378 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33720 10 6452 1 2025-07-28 20:54:57.949 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 20:54:57.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:55:07.424 00:00:10.361 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:55:25.591 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-07-28 20:56:07.839 00:00:10.333 TCP 23.104.0.1:46158 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:56:25.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60460 10 6452 1 2025-07-28 20:52:02.420 00:06:00.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 20:57:08.210 00:00:10.371 TCP 23.104.0.1:52654 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:57:25.975 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-07-28 20:58:08.618 00:00:10.519 TCP 23.104.0.1:60304 -> 1.101.0.1:3000 17 2241 1 2025-07-28 20:58:26.206 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 14 14282 1 Summary: total flows: 161, total bytes: 511331, total packets: 1590, avg bps: 1089, avg pps: 0, avg bpp: 321 Time window: 2025-07-28 19:56:02 - 2025-07-28 20:58:36 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0021s User: 0.0021s Wall: 0.0029s flows/second: 55496.6 Runtime: 0.0029s