Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 01:59:19.260 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-07-28 01:59:35.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 01:59:35.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 01:59:28.973 00:00:10.369 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-07-28 01:55:02.070 00:06:00.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:00:19.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-07-28 02:00:29.383 00:00:10.359 TCP 23.104.0.1:50204 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:01:19.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2025-07-28 02:01:29.788 00:00:10.361 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:02:19.861 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35074 10 6452 1 2025-07-28 02:02:30.190 00:00:10.374 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-07-28 01:58:02.070 00:06:00.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:03:20.040 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6452 1 2025-07-28 02:03:30.605 00:00:10.365 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:04:20.253 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-07-28 02:04:35.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:04:35.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:04:31.031 00:00:10.370 TCP 23.104.0.1:41796 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:05:20.463 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-07-28 02:05:31.444 00:00:10.360 TCP 23.104.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:06:20.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35300 10 6452 1 2025-07-28 02:06:31.852 00:00:10.376 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:02:02.073 00:06:00.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:07:20.853 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-07-28 02:07:32.269 00:00:10.365 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:08:21.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56018 10 6452 1 2025-07-28 02:08:32.674 00:00:10.365 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:09:21.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-07-28 02:09:35.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:09:35.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:09:33.106 00:00:10.360 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:05:02.071 00:06:00.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:10:21.474 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46062 10 6452 1 2025-07-28 02:10:33.507 00:00:10.364 TCP 23.104.0.1:44980 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:11:21.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47328 10 6452 1 2025-07-28 02:11:33.909 00:00:10.363 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:12:21.906 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-07-28 02:12:34.310 00:00:10.359 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:13:22.125 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-07-28 02:13:34.710 00:00:10.368 TCP 23.104.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:09:02.075 00:06:00.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:14:35.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:14:22.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46634 10 6452 1 2025-07-28 02:14:35.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:14:35.112 00:00:10.357 TCP 23.104.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:15:22.555 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-07-28 02:15:35.510 00:00:10.362 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:16:22.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42358 10 6452 1 2025-07-28 02:16:35.914 00:00:10.360 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:12:02.073 00:06:00.239 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:17:22.937 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6452 1 2025-07-28 02:17:36.323 00:00:10.365 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:18:23.169 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 12 10367 1 2025-07-28 02:18:36.727 00:00:10.450 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 15 1926 1 2025-07-28 02:19:23.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-07-28 02:19:35.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:19:35.637 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:19:37.215 00:00:10.320 TCP 23.104.0.1:34538 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:20:23.594 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 2025-07-28 02:20:37.578 00:00:10.368 TCP 23.104.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:16:02.076 00:06:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:21:23.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-07-28 02:21:37.986 00:00:10.360 TCP 23.104.0.1:45210 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:22:24.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6452 1 2025-07-28 02:22:38.386 00:00:10.363 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:23:24.245 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46848 12 10367 1 2025-07-28 02:23:38.786 00:00:10.450 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 15 1926 1 2025-07-28 02:19:02.075 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:24:24.485 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-07-28 02:24:35.735 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:24:35.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:24:39.275 00:00:10.363 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:25:24.710 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-07-28 02:25:39.683 00:00:10.378 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:26:24.926 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-07-28 02:26:40.108 00:00:10.366 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:27:25.174 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6452 1 2025-07-28 02:27:40.514 00:00:10.366 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:23:02.076 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:28:25.378 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 12 10367 1 2025-07-28 02:28:40.919 00:00:10.435 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 15 1926 1 2025-07-28 02:29:35.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:29:25.625 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40916 10 6452 1 2025-07-28 02:29:35.972 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:29:41.387 00:00:10.375 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:30:25.797 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-07-28 02:30:41.806 00:00:10.375 TCP 23.104.0.1:41150 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:26:02.074 00:06:00.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:31:25.974 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37022 10 6452 1 2025-07-28 02:31:42.248 00:00:10.328 TCP 23.104.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:32:26.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-07-28 02:32:42.613 00:00:10.325 TCP 23.104.0.1:58598 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:33:26.422 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 12 10365 1 2025-07-28 02:33:42.980 00:00:10.773 TCP 23.104.0.1:44596 -> 1.101.0.1:3000 15 1926 1 2025-07-28 02:34:26.623 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55020 10 6452 1 2025-07-28 02:34:35.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:34:35.764 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:34:43.789 00:00:10.367 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:30:02.079 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:35:26.799 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42244 10 6452 1 2025-07-28 02:35:44.197 00:00:10.319 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:36:27.015 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58752 10 6452 1 2025-07-28 02:36:44.557 00:00:10.361 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:37:27.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-07-28 02:37:44.961 00:00:10.365 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:33:02.077 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:38:27.400 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54184 10 6452 1 2025-07-28 02:38:45.367 00:00:10.327 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:39:35.923 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:39:35.834 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:39:27.617 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58442 10 6452 1 2025-07-28 02:39:45.734 00:00:10.320 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:40:27.790 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-07-28 02:40:46.104 00:00:10.365 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:41:27.973 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-07-28 02:41:46.509 00:00:10.360 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:37:02.083 00:06:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:42:28.208 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6452 1 2025-07-28 02:42:46.906 00:00:10.365 TCP 23.104.0.1:57876 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:43:28.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-07-28 02:43:47.308 00:00:10.372 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:44:36.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:44:35.909 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:44:28.665 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-07-28 02:44:47.712 00:00:10.372 TCP 23.104.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:40:02.081 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:45:28.878 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6452 1 2025-07-28 02:45:48.128 00:00:10.363 TCP 23.104.0.1:49458 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:46:29.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-07-28 02:46:48.533 00:00:10.359 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:47:29.323 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-07-28 02:47:48.933 00:00:10.345 TCP 23.104.0.1:33546 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:48:29.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-07-28 02:48:49.315 00:00:10.367 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:44:02.085 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:49:36.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:49:36.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:49:29.756 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6452 1 2025-07-28 02:49:49.717 00:00:10.375 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:50:29.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6452 1 2025-07-28 02:50:50.132 00:00:10.414 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:51:30.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44930 10 6452 1 2025-07-28 02:51:50.585 00:00:10.380 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:47:02.083 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 02:52:30.380 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-07-28 02:52:50.997 00:00:10.358 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:53:30.594 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54226 10 6452 1 2025-07-28 02:53:51.393 00:00:10.370 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:54:36.243 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 02:54:36.341 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 02:54:30.823 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-07-28 02:54:51.800 00:00:10.371 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:55:31.057 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-07-28 02:51:02.088 00:06:00.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 02:55:52.206 00:00:10.372 TCP 23.104.0.1:38408 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:56:31.272 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49370 10 6452 1 2025-07-28 02:56:52.616 00:00:10.417 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:57:31.490 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59912 10 6452 1 2025-07-28 02:57:53.100 00:00:10.381 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-07-28 02:58:31.704 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42982 10 6452 1 Summary: total flows: 160, total bytes: 514052, total packets: 1583, avg bps: 1076, avg pps: 0, avg bpp: 324 Time window: 2025-07-28 01:55:02 - 2025-07-28 02:58:41 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0046s User: 0.0000s Wall: 0.0022s flows/second: 73063.5 Runtime: 0.0022s