Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-27 23:58:51.864 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-07-27 23:59:32.770 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 23:59:32.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 23:59:41.126 00:00:10.371 TCP 23.104.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-07-27 23:59:52.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-07-28 00:00:41.532 00:00:10.367 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:00:52.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-07-27 23:56:02.024 00:06:00.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:01:41.934 00:00:10.383 TCP 23.104.0.1:47532 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:01:52.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-07-28 00:02:42.379 00:00:10.436 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:02:52.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-07-28 00:03:42.856 00:00:10.379 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:03:52.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58382 10 6452 1 2025-07-27 23:59:02.025 00:06:00.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:04:33.004 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:04:32.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:04:43.277 00:00:10.333 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:04:53.178 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-07-28 00:05:43.649 00:00:10.364 TCP 23.104.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:05:53.396 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36224 10 6452 1 2025-07-28 00:06:44.065 00:00:10.356 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:06:53.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-07-28 00:07:44.461 00:00:10.363 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:07:53.821 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-07-28 00:03:02.031 00:06:00.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:08:44.869 00:00:10.441 TCP 23.104.0.1:38470 -> 1.101.0.1:3000 15 1926 1 2025-07-28 00:08:54.038 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34956 12 10365 1 2025-07-28 00:09:33.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:09:33.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:09:45.347 00:00:10.365 TCP 23.104.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:09:54.280 00:00:10.860 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-07-28 00:10:45.748 00:00:10.392 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:06:02.032 00:06:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:10:56.234 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50546 10 6452 1 2025-07-28 00:11:46.177 00:00:10.360 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:11:56.441 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50438 10 6452 1 2025-07-28 00:12:46.579 00:00:10.322 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:12:56.656 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-07-28 00:13:46.942 00:00:10.331 TCP 23.104.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:13:56.840 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52608 10 6452 1 2025-07-28 00:14:33.080 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:14:33.179 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:14:47.317 00:00:10.372 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:10:02.036 00:06:00.226 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:14:57.016 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-07-28 00:15:47.730 00:00:10.370 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:15:57.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42046 10 6452 1 2025-07-28 00:16:48.138 00:00:10.368 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:16:57.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-07-28 00:17:48.539 00:00:10.369 TCP 23.104.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:13:02.034 00:06:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:17:57.663 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-07-28 00:18:48.948 00:00:10.397 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 15 1926 1 2025-07-28 00:18:57.871 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 12 10367 1 2025-07-28 00:19:33.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:19:33.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:19:49.384 00:00:10.366 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:19:58.117 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-07-28 00:20:49.781 00:00:10.368 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:20:58.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-07-28 00:21:50.187 00:00:10.362 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:17:02.038 00:06:00.226 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:21:58.541 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-07-28 00:22:50.583 00:00:10.361 TCP 23.104.0.1:38524 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:22:58.715 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6452 1 2025-07-28 00:23:50.985 00:00:10.323 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:23:58.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36020 10 6452 1 2025-07-28 00:24:33.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:24:33.024 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:24:51.346 00:00:10.362 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:20:02.035 00:06:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:24:59.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 10 6452 1 2025-07-28 00:25:51.746 00:00:10.321 TCP 23.104.0.1:35042 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:25:59.316 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60172 10 6452 1 2025-07-28 00:26:52.108 00:00:10.364 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:26:59.531 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-07-28 00:27:52.510 00:00:10.330 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:27:59.743 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-07-28 00:24:02.038 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:28:52.873 00:00:10.376 TCP 23.104.0.1:55930 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:28:59.952 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 12 6556 1 2025-07-28 00:29:33.536 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:29:33.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:29:53.295 00:00:10.363 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:30:00.190 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-07-28 00:30:53.693 00:00:10.366 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:31:00.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-07-28 00:31:54.112 00:00:10.343 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:27:02.036 00:06:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:32:00.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-07-28 00:32:54.494 00:00:10.362 TCP 23.104.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:33:00.837 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-07-28 00:33:54.893 00:00:10.364 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:34:01.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-07-28 00:34:33.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:34:33.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:34:55.296 00:00:10.366 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:35:01.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-07-28 00:31:02.045 00:06:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:35:55.699 00:00:10.365 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:36:01.435 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-07-28 00:36:56.112 00:00:10.323 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:37:01.686 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-07-28 00:37:56.470 00:00:10.363 TCP 23.104.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:38:01.866 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60586 10 6452 1 2025-07-28 00:34:02.037 00:06:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:38:56.872 00:00:10.327 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:39:02.091 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36780 10 6452 1 2025-07-28 00:39:33.671 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:39:33.516 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:39:57.235 00:00:10.367 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:40:02.302 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54324 10 6452 1 2025-07-28 00:40:57.641 00:00:10.367 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:41:02.511 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-07-28 00:41:58.059 00:00:10.366 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:42:02.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-07-28 00:38:02.041 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:42:58.466 00:00:10.368 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:43:02.947 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-07-28 00:43:58.868 00:00:10.368 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:44:03.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-07-28 00:44:34.686 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:44:34.652 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:44:59.273 00:00:10.326 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:45:03.341 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-07-28 00:41:02.040 00:06:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:45:59.637 00:00:10.367 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:46:03.512 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56342 10 6452 1 2025-07-28 00:47:00.065 00:00:10.361 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:47:03.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-07-28 00:48:00.464 00:00:10.372 TCP 23.104.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:48:03.936 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-07-28 00:49:00.879 00:00:10.371 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:49:04.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-07-28 00:49:33.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:49:33.885 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:45:02.045 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:50:01.301 00:00:10.364 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:50:04.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6452 1 2025-07-28 00:51:01.709 00:00:10.381 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:51:04.598 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6452 1 2025-07-28 00:52:04.829 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-07-28 00:52:02.123 00:00:10.327 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:48:02.041 00:06:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 00:53:02.489 00:00:10.371 TCP 23.104.0.1:51998 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:53:05.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-07-28 00:54:05.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-07-28 00:54:02.900 00:00:10.371 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:54:33.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 00:54:33.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 00:55:03.320 00:00:10.366 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:55:05.439 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53708 10 6452 1 2025-07-28 00:56:05.620 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-07-28 00:56:03.725 00:00:10.376 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:52:02.048 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 00:57:05.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6452 1 2025-07-28 00:57:04.146 00:00:10.369 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:58:04.550 00:00:10.367 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-07-28 00:58:06.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 Summary: total flows: 160, total bytes: 505488, total packets: 1573, avg bps: 1082, avg pps: 0, avg bpp: 321 Time window: 2025-07-27 23:56:02 - 2025-07-28 00:58:16 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0011s User: 0.0034s Wall: 0.0029s flows/second: 54308.4 Runtime: 0.0030s