Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 14:58:42.923 00:00:10.383 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:59:04.641 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-07-28 14:59:50.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:59:50.808 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:59:43.344 00:00:10.370 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:55:02.312 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:00:04.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-07-28 15:00:43.755 00:00:10.384 TCP 23.104.0.1:36810 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:01:05.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37602 10 6452 1 2025-07-28 15:01:44.182 00:00:10.370 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:02:05.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49204 10 6452 1 2025-07-28 15:02:44.595 00:00:10.366 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:03:05.522 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41374 10 6452 1 2025-07-28 15:03:44.994 00:00:10.365 TCP 23.104.0.1:53268 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:59:02.316 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:04:05.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-07-28 15:04:50.823 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:04:50.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:04:45.394 00:00:10.367 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:05:05.949 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-07-28 15:05:45.797 00:00:10.361 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:06:06.177 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-07-28 15:06:46.205 00:00:10.335 TCP 23.104.0.1:34698 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:02:02.313 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:07:06.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-07-28 15:07:46.576 00:00:10.363 TCP 23.104.0.1:37542 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:08:06.567 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50818 10 6452 1 2025-07-28 15:08:46.976 00:00:10.368 TCP 23.104.0.1:54508 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:09:06.779 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60736 10 6452 1 2025-07-28 15:09:51.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:09:50.905 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:09:47.380 00:00:10.358 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:10:06.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60992 10 6452 1 2025-07-28 15:10:47.778 00:00:10.368 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:06:02.319 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:11:07.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-07-28 15:11:48.195 00:00:10.365 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:12:07.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6452 1 2025-07-28 15:12:48.596 00:00:10.341 TCP 23.104.0.1:46634 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:13:07.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-07-28 15:13:48.992 00:00:10.363 TCP 23.104.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:09:02.316 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:14:07.858 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43030 10 6452 1 2025-07-28 15:14:51.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:14:51.320 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:14:49.393 00:00:10.363 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:15:08.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37104 10 6452 1 2025-07-28 15:15:49.801 00:00:10.366 TCP 23.104.0.1:39262 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:16:08.291 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-07-28 15:16:50.212 00:00:10.369 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:17:08.503 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-07-28 15:17:50.621 00:00:10.364 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:13:02.321 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:18:08.720 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-07-28 15:18:51.028 00:00:10.364 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:19:08.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-07-28 15:19:51.008 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:19:51.296 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:19:51.434 00:00:10.365 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:20:09.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-07-28 15:16:02.317 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:20:51.836 00:00:10.385 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:21:09.324 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-07-28 15:21:52.259 00:00:10.362 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:22:09.541 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52032 10 6452 1 2025-07-28 15:22:52.657 00:00:10.366 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:23:09.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-07-28 15:23:53.086 00:00:10.366 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:24:09.927 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36188 10 6452 1 2025-07-28 15:24:51.078 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:24:51.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:24:53.487 00:00:10.364 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:20:02.321 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:25:10.165 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-07-28 15:25:53.890 00:00:10.369 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:26:10.381 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-07-28 15:26:54.291 00:00:10.470 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:27:10.591 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-07-28 15:27:54.801 00:00:10.363 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:23:02.320 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:28:10.813 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2025-07-28 15:28:55.205 00:00:10.362 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:29:11.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-07-28 15:29:51.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:29:51.672 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:29:55.603 00:00:10.364 TCP 23.104.0.1:44564 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:30:11.257 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48732 10 6452 1 2025-07-28 15:30:56.005 00:00:10.365 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:31:11.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6452 1 2025-07-28 15:27:02.326 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:31:56.412 00:00:10.335 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:32:11.690 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-07-28 15:32:56.784 00:00:10.363 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:33:11.908 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-07-28 15:33:57.189 00:00:10.325 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:34:12.118 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6452 1 2025-07-28 15:34:51.411 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:34:51.378 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:30:02.324 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:34:57.558 00:00:10.363 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:35:12.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56682 10 6452 1 2025-07-28 15:35:57.962 00:00:10.366 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:36:12.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-07-28 15:36:58.372 00:00:10.366 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:37:12.749 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47584 10 6452 1 2025-07-28 15:37:58.777 00:00:10.364 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:38:12.957 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-07-28 15:34:02.327 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:38:59.182 00:00:10.365 TCP 23.104.0.1:35434 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:39:13.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-07-28 15:39:51.710 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:39:51.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:39:59.582 00:00:10.366 TCP 23.104.0.1:34000 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:40:13.395 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6452 1 2025-07-28 15:40:59.981 00:00:10.364 TCP 23.104.0.1:59360 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:41:13.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56914 10 6452 1 2025-07-28 15:37:02.324 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:42:00.381 00:00:10.365 TCP 23.104.0.1:46854 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:42:13.816 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58602 10 6452 1 2025-07-28 15:43:00.784 00:00:10.374 TCP 23.104.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:43:13.986 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34622 10 6452 1 2025-07-28 15:44:01.196 00:00:10.364 TCP 23.104.0.1:45330 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:44:14.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47152 10 6452 1 2025-07-28 15:44:51.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:44:51.707 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:45:01.602 00:00:10.367 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:45:14.425 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-07-28 15:41:02.332 00:06:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:46:02.011 00:00:10.340 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:46:14.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-07-28 15:47:02.390 00:00:10.329 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:47:14.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6452 1 2025-07-28 15:48:02.763 00:00:10.376 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:48:15.014 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 12 10367 1 2025-07-28 15:44:02.329 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:49:03.182 00:00:10.443 TCP 23.104.0.1:35828 -> 1.101.0.1:3000 15 1926 1 2025-07-28 15:49:15.216 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-07-28 15:49:51.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:49:51.818 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:50:03.669 00:00:10.361 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:50:15.433 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-07-28 15:51:04.093 00:00:10.373 TCP 23.104.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:51:15.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-07-28 15:52:04.507 00:00:10.323 TCP 23.104.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:52:15.824 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-07-28 15:48:02.332 00:06:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 15:53:04.870 00:00:10.370 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:53:16.044 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-07-28 15:54:05.279 00:00:10.361 TCP 23.104.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:54:16.262 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-07-28 15:54:52.182 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 15:54:51.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 15:55:05.680 00:00:10.357 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:55:16.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58922 10 6452 1 2025-07-28 15:51:02.331 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 15:56:06.100 00:00:10.361 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:56:16.688 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-07-28 15:57:06.501 00:00:10.368 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:57:16.894 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-07-28 15:58:06.909 00:00:10.361 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-07-28 15:58:17.114 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53458 10 6452 1 Summary: total flows: 161, total bytes: 502559, total packets: 1576, avg bps: 1056, avg pps: 0, avg bpp: 318 Time window: 2025-07-28 14:55:02 - 2025-07-28 15:58:27 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0010s User: 0.0029s Wall: 0.0019s flows/second: 84294.5 Runtime: 0.0019s