Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 04:58:41.718 00:00:10.326 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-07-28 04:58:57.384 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38304 10 6452 1 2025-07-28 04:59:38.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 04:59:39.018 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 04:59:42.104 00:00:10.359 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-07-28 04:59:57.552 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 10 6452 1 2025-07-28 05:00:42.502 00:00:10.363 TCP 23.104.0.1:58482 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:00:57.781 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34566 10 6452 1 2025-07-28 05:01:42.906 00:00:10.330 TCP 23.104.0.1:56790 -> 1.101.0.1:3000 11 1507 1 2025-07-28 04:57:02.123 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:01:57.961 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37796 12 6556 1 2025-07-28 05:02:43.276 00:00:10.365 TCP 23.104.0.1:54568 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:02:58.187 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44986 10 6452 1 2025-07-28 05:03:43.676 00:00:10.371 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:03:58.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-07-28 05:04:38.527 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:04:38.891 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:04:44.108 00:00:10.354 TCP 23.104.0.1:33890 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:00:02.123 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:04:58.573 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-07-28 05:05:44.505 00:00:10.362 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:05:58.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-07-28 05:06:44.910 00:00:10.326 TCP 23.104.0.1:60002 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:06:58.995 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45700 10 6452 1 2025-07-28 05:07:45.276 00:00:10.362 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:07:59.210 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-07-28 05:08:45.683 00:00:10.366 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:04:02.127 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:08:59.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6452 1 2025-07-28 05:09:38.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:09:38.886 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:09:46.103 00:00:10.364 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:09:59.634 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-07-28 05:10:46.504 00:00:10.364 TCP 23.104.0.1:54454 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:10:59.845 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-07-28 05:11:46.903 00:00:10.363 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:07:02.127 00:06:00.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:12:00.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-07-28 05:12:47.310 00:00:10.368 TCP 23.104.0.1:49018 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:13:00.298 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-07-28 05:13:47.715 00:00:10.373 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:14:00.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-07-28 05:14:39.288 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:14:39.182 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:14:48.125 00:00:10.367 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:15:00.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 6452 1 2025-07-28 05:15:48.533 00:00:10.377 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:11:02.130 00:06:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:16:00.959 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58734 10 6452 1 2025-07-28 05:16:48.949 00:00:10.369 TCP 23.104.0.1:54284 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:17:01.181 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-07-28 05:17:49.356 00:00:10.324 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:18:01.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-07-28 05:18:49.725 00:00:10.375 TCP 23.104.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:14:02.128 00:06:00.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:19:01.607 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-07-28 05:19:39.567 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:19:39.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:19:50.148 00:00:10.366 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:20:01.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38290 10 6452 1 2025-07-28 05:20:50.546 00:00:10.377 TCP 23.104.0.1:34812 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:21:02.065 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-07-28 05:21:50.961 00:00:10.363 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:22:02.273 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60578 10 6452 1 2025-07-28 05:22:51.362 00:00:10.374 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:18:02.131 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:23:02.486 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-07-28 05:23:51.771 00:00:10.374 TCP 23.104.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:24:02.702 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53636 10 6452 1 2025-07-28 05:24:39.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:24:39.393 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:24:52.181 00:00:10.330 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:25:02.876 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51748 10 6452 1 2025-07-28 05:25:52.541 00:00:10.366 TCP 23.104.0.1:52012 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:21:02.128 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:26:03.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-07-28 05:26:52.951 00:00:10.369 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:27:03.315 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-07-28 05:27:53.359 00:00:10.367 TCP 23.104.0.1:53762 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:28:03.536 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56062 10 6452 1 2025-07-28 05:28:53.762 00:00:10.380 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:29:03.713 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-07-28 05:29:39.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:29:39.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:29:54.179 00:00:10.380 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:25:02.131 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:30:03.920 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-07-28 05:30:54.608 00:00:10.365 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:31:04.127 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50280 10 6452 1 2025-07-28 05:31:55.011 00:00:10.368 TCP 23.104.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:32:04.342 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42414 10 6452 1 2025-07-28 05:28:02.130 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:32:55.414 00:00:10.368 TCP 23.104.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:33:04.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-07-28 05:33:55.818 00:00:10.364 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:34:04.767 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50616 10 6452 1 2025-07-28 05:34:39.505 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:34:39.513 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:34:56.215 00:00:10.366 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:35:04.976 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-07-28 05:35:56.615 00:00:10.361 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:36:05.204 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-07-28 05:32:02.133 00:06:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:36:57.021 00:00:10.360 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:37:05.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-07-28 05:37:57.426 00:00:10.326 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:38:05.642 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:52584 12 10365 1 2025-07-28 05:38:57.796 00:00:10.444 TCP 23.104.0.1:36056 -> 1.101.0.1:3000 15 1926 1 2025-07-28 05:39:05.895 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58176 10 6452 1 2025-07-28 05:39:39.585 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:39:39.611 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:35:02.136 00:06:00.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:39:58.281 00:00:10.367 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:40:06.088 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-07-28 05:40:58.685 00:00:10.372 TCP 23.104.0.1:43610 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:41:06.261 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-07-28 05:41:59.110 00:00:10.364 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:42:06.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-07-28 05:42:59.513 00:00:10.365 TCP 23.104.0.1:45186 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:43:06.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58486 10 6452 1 2025-07-28 05:39:02.140 00:06:00.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:43:59.915 00:00:10.364 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:44:06.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-07-28 05:44:39.745 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:44:39.811 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:45:00.317 00:00:10.376 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:45:07.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-07-28 05:46:00.760 00:00:10.380 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:46:07.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46364 10 6452 1 2025-07-28 05:42:02.138 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:47:01.178 00:00:10.382 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:47:07.517 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-07-28 05:48:01.599 00:00:10.362 TCP 23.104.0.1:56106 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:48:07.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-07-28 05:49:02.001 00:00:10.358 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:49:07.940 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-07-28 05:49:39.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:49:39.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:50:02.397 00:00:10.325 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:50:08.183 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-07-28 05:46:02.141 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:51:02.763 00:00:10.382 TCP 23.104.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:51:08.372 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46590 12 6556 1 2025-07-28 05:52:03.184 00:00:10.366 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:52:08.587 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-07-28 05:53:03.593 00:00:10.368 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:53:08.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38376 10 6452 1 2025-07-28 05:49:02.138 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 05:54:04.001 00:00:10.367 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:54:09.031 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-07-28 05:54:39.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 05:54:39.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 05:55:04.402 00:00:10.367 TCP 23.104.0.1:44576 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:55:09.236 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6452 1 2025-07-28 05:56:04.810 00:00:10.366 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:56:09.449 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-07-28 05:57:05.216 00:00:10.325 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:57:09.672 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 12 6556 1 2025-07-28 05:53:02.142 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 05:58:05.579 00:00:10.367 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-07-28 05:58:09.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48312 10 6452 1 Summary: total flows: 161, total bytes: 502869, total packets: 1582, avg bps: 1081, avg pps: 0, avg bpp: 317 Time window: 2025-07-28 04:57:02 - 2025-07-28 05:59:02 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0027s User: 0.0018s Wall: 0.0030s flows/second: 53138.4 Runtime: 0.0030s