Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 01:59:09.764 00:00:10.373 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:59:29.390 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-07-29 02:00:03.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:00:04.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:00:10.173 00:00:10.365 TCP 23.104.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:00:29.612 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47306 10 6452 1 2025-07-29 02:01:10.577 00:00:10.380 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:01:29.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41294 10 6452 1 2025-07-29 01:57:02.498 00:06:00.265 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:02:11.016 00:00:10.367 TCP 23.104.0.1:47772 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:02:30.001 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-07-29 02:03:11.426 00:00:10.361 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:03:30.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-07-29 02:04:11.831 00:00:10.353 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:04:30.427 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-07-29 02:05:03.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:00:02.496 00:06:00.270 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:05:04.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:05:12.219 00:00:10.362 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:05:30.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-07-29 02:06:12.623 00:00:10.364 TCP 23.104.0.1:39088 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:06:30.851 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42576 10 6452 1 2025-07-29 02:07:13.026 00:00:10.360 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:07:31.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-07-29 02:08:13.425 00:00:10.327 TCP 23.104.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:08:31.294 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6452 1 2025-07-29 02:04:02.499 00:06:00.265 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:09:13.791 00:00:10.367 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:09:31.503 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44778 10 6452 1 2025-07-29 02:10:04.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:10:04.250 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:10:14.193 00:00:10.324 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:10:31.715 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-07-29 02:11:14.554 00:00:10.369 TCP 23.104.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:11:31.921 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-07-29 02:07:02.496 00:06:00.271 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:12:14.961 00:00:10.365 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:12:32.093 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40930 10 6452 1 2025-07-29 02:13:15.362 00:00:10.365 TCP 23.104.0.1:43244 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:13:32.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-07-29 02:14:15.765 00:00:10.376 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:14:32.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51612 10 6452 1 2025-07-29 02:15:04.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:15:04.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:15:16.180 00:00:10.368 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:15:32.694 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49236 10 6452 1 2025-07-29 02:11:02.500 00:06:00.265 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:16:16.584 00:00:10.362 TCP 23.104.0.1:59422 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:16:32.908 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42774 11 6492 1 2025-07-29 02:17:16.979 00:00:10.366 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:17:33.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-07-29 02:18:17.384 00:00:10.364 TCP 23.104.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:18:33.334 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-07-29 02:14:02.498 00:06:00.270 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:19:17.797 00:00:10.341 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:19:33.550 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53708 10 6452 1 2025-07-29 02:20:04.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:20:04.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:20:18.175 00:00:10.365 TCP 23.104.0.1:49338 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:20:33.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50638 10 6452 1 2025-07-29 02:21:18.578 00:00:10.366 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:21:33.977 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-07-29 02:22:18.990 00:00:10.366 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:22:34.206 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52202 10 6452 1 2025-07-29 02:18:02.503 00:06:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:23:19.395 00:00:10.363 TCP 23.104.0.1:33252 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:23:34.382 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-07-29 02:24:19.798 00:00:10.375 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:24:34.592 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50894 10 6452 1 2025-07-29 02:25:04.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:25:04.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:25:20.200 00:00:10.363 TCP 23.104.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:25:34.767 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48392 10 6452 1 2025-07-29 02:21:02.503 00:06:00.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:26:20.605 00:00:10.380 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:26:34.978 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-07-29 02:27:21.009 00:00:10.365 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:27:35.217 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-07-29 02:28:21.411 00:00:10.369 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:28:35.434 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-07-29 02:29:21.821 00:00:10.327 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:29:35.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-07-29 02:30:04.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:30:04.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:25:02.504 00:06:00.263 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:30:22.189 00:00:10.366 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:30:35.866 00:00:10.517 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-07-29 02:31:22.596 00:00:10.369 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:31:36.422 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47624 10 6452 1 2025-07-29 02:32:23.007 00:00:10.363 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:32:36.635 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-07-29 02:28:02.502 00:06:00.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:33:23.412 00:00:10.442 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 15 1926 1 2025-07-29 02:33:36.811 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 12 10367 1 2025-07-29 02:34:23.901 00:00:10.376 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:34:37.077 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-07-29 02:35:05.786 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:35:05.994 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:35:24.318 00:00:10.369 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:35:37.247 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-07-29 02:36:24.727 00:00:10.372 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:36:37.466 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-07-29 02:32:02.505 00:06:00.262 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:37:25.136 00:00:10.363 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:37:37.639 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52670 10 6452 1 2025-07-29 02:38:25.537 00:00:10.358 TCP 23.104.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:38:37.814 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-07-29 02:39:25.934 00:00:10.386 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:39:37.986 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-07-29 02:40:05.043 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:35:02.503 00:06:00.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:40:05.302 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:40:26.362 00:00:10.325 TCP 23.104.0.1:36482 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:40:38.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51674 10 6452 1 2025-07-29 02:41:26.723 00:00:10.336 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:41:38.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6452 1 2025-07-29 02:42:27.117 00:00:10.367 TCP 23.104.0.1:50490 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:42:38.632 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58910 10 6452 1 2025-07-29 02:43:27.520 00:00:10.326 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:43:38.862 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38820 10 6452 1 2025-07-29 02:39:02.509 00:06:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:44:27.888 00:00:10.381 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:44:39.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53676 10 6452 1 2025-07-29 02:45:04.874 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:45:05.058 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:45:28.315 00:00:10.364 TCP 23.104.0.1:40428 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:45:39.322 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52410 10 6452 1 2025-07-29 02:46:28.717 00:00:10.371 TCP 23.104.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:46:39.510 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-07-29 02:42:02.508 00:06:00.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:47:29.132 00:00:10.331 TCP 23.104.0.1:42092 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:47:39.681 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6452 1 2025-07-29 02:48:29.502 00:00:10.361 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:48:39.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-07-29 02:49:29.902 00:00:10.369 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:49:40.115 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46342 10 6452 1 2025-07-29 02:50:05.274 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:50:05.202 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:50:30.305 00:00:10.322 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:50:40.328 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-07-29 02:46:02.510 00:06:00.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:51:30.669 00:00:10.418 TCP 23.104.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:51:40.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-07-29 02:52:31.131 00:00:10.364 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:52:40.762 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-07-29 02:53:31.533 00:00:10.329 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:53:40.981 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-07-29 02:49:02.507 00:06:00.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 02:54:31.899 00:00:10.363 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:54:41.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-07-29 02:55:05.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 02:55:05.232 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 02:55:32.304 00:00:12.149 TCP 23.104.0.1:35380 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:55:41.378 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-07-29 02:56:34.493 00:00:10.368 TCP 23.104.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:56:41.589 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6452 1 2025-07-29 02:57:34.891 00:00:10.386 TCP 23.104.0.1:34558 -> 1.101.0.1:3000 11 1507 1 2025-07-29 02:57:41.763 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-07-29 02:53:02.512 00:06:00.270 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 02:58:35.313 00:00:10.324 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 496147, total packets: 1567, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-07-29 01:57:02 - 2025-07-29 02:59:02 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0026s User: 0.0013s Wall: 0.0021s flows/second: 76924.4 Runtime: 0.0021s