Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 13:58:51.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-07-28 13:59:19.103 00:00:10.376 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-07-28 13:59:49.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 13:59:49.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 13:59:51.934 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-07-28 14:00:19.519 00:00:10.377 TCP 23.104.0.1:58424 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:00:52.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39484 10 6452 1 2025-07-28 13:56:02.301 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:01:19.935 00:00:10.379 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:01:52.391 00:00:10.502 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-07-28 14:02:20.354 00:00:10.367 TCP 23.104.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:02:52.933 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-07-28 14:03:20.767 00:00:10.374 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:03:53.162 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-07-28 13:59:02.299 00:06:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:04:21.175 00:00:10.368 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:04:49.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:04:49.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:04:53.373 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-07-28 14:05:21.581 00:00:10.325 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:05:53.584 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-07-28 14:06:21.941 00:00:10.366 TCP 23.104.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:06:53.758 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-07-28 14:07:22.350 00:00:10.324 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:07:53.968 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46114 10 6452 1 2025-07-28 14:03:02.304 00:06:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:08:22.713 00:00:10.328 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:08:54.151 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-07-28 14:09:23.102 00:00:10.366 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:09:49.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:09:49.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:09:54.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-07-28 14:10:23.507 00:00:10.363 TCP 23.104.0.1:38286 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:10:54.571 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-07-28 14:06:02.301 00:06:00.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:11:23.910 00:00:10.364 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:11:54.781 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-07-28 14:12:24.312 00:00:10.327 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:12:54.991 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:43670 10 6452 1 2025-07-28 14:13:24.675 00:00:10.396 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 15 1926 1 2025-07-28 14:13:55.177 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 12 10365 1 2025-07-28 14:14:25.115 00:00:10.363 TCP 23.104.0.1:54766 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:14:49.748 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:14:49.935 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:14:55.421 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-07-28 14:10:02.305 00:06:00.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:15:25.513 00:00:10.364 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:15:55.629 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6452 1 2025-07-28 14:16:25.921 00:00:10.381 TCP 23.104.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:16:55.842 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-07-28 14:17:26.339 00:00:10.324 TCP 23.104.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:17:56.011 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33076 10 6452 1 2025-07-28 14:13:02.303 00:06:00.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:18:26.704 00:00:10.368 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:18:56.230 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-07-28 14:19:27.116 00:00:10.334 TCP 23.104.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:19:49.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:19:49.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:19:56.454 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-07-28 14:20:27.487 00:00:10.325 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:20:56.665 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-07-28 14:21:27.853 00:00:10.370 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:17:02.306 00:06:00.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:21:56.872 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-07-28 14:22:28.269 00:00:10.361 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:22:57.104 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6452 1 2025-07-28 14:23:28.670 00:00:10.363 TCP 23.104.0.1:45586 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:23:57.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-07-28 14:24:29.102 00:00:10.367 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:24:50.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:24:50.065 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:20:02.304 00:06:00.239 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:24:57.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-07-28 14:25:29.515 00:00:10.368 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:25:57.728 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-07-28 14:26:29.936 00:00:10.376 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:26:57.954 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-07-28 14:27:30.366 00:00:10.368 TCP 23.104.0.1:35322 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:27:58.195 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-07-28 14:28:30.771 00:00:10.331 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:24:02.307 00:06:00.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:28:58.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 10 6452 1 2025-07-28 14:29:31.143 00:00:10.368 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:29:49.937 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:29:50.282 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:29:58.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-07-28 14:30:31.555 00:00:10.366 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:30:58.850 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-07-28 14:31:31.961 00:00:10.361 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:27:02.307 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:31:59.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-07-28 14:32:32.362 00:00:10.361 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:32:59.291 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-07-28 14:33:32.764 00:00:10.387 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:33:59.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-07-28 14:34:33.183 00:00:10.359 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:34:51.400 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:34:51.309 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:34:59.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50376 10 6452 1 2025-07-28 14:35:33.580 00:00:10.362 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:31:02.310 00:06:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:35:59.936 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-07-28 14:36:33.981 00:00:10.387 TCP 23.104.0.1:40610 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:37:00.128 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-07-28 14:37:34.404 00:00:10.363 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:38:00.298 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43782 10 6452 1 2025-07-28 14:38:34.805 00:00:10.370 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:34:02.309 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:39:00.466 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44748 10 6452 1 2025-07-28 14:39:35.214 00:00:10.365 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:39:50.556 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:39:50.178 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:40:00.679 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-07-28 14:40:35.616 00:00:10.370 TCP 23.104.0.1:44454 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:41:00.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55450 10 6452 1 2025-07-28 14:41:36.027 00:00:10.367 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:42:01.080 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-07-28 14:42:36.426 00:00:10.367 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:38:02.311 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:43:01.253 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59744 10 6452 1 2025-07-28 14:43:36.828 00:00:10.357 TCP 23.104.0.1:55724 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:44:01.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-07-28 14:44:50.649 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:44:37.224 00:00:10.366 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:44:50.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:45:01.635 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-07-28 14:45:37.630 00:00:10.369 TCP 23.104.0.1:41368 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:41:02.309 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:46:01.849 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-07-28 14:46:38.032 00:00:10.361 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:47:02.076 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-07-28 14:47:38.436 00:00:10.364 TCP 23.104.0.1:57740 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:48:02.285 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58290 10 6452 1 2025-07-28 14:48:38.840 00:00:10.461 TCP 23.104.0.1:51964 -> 1.101.0.1:3000 15 1926 1 2025-07-28 14:49:02.497 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43764 12 10367 1 2025-07-28 14:49:50.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:49:50.558 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:49:39.350 00:00:10.372 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:45:02.312 00:06:00.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:50:02.708 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-07-28 14:50:39.763 00:00:10.329 TCP 23.104.0.1:35812 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:51:02.929 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34006 10 6452 1 2025-07-28 14:51:40.132 00:00:10.323 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:52:03.134 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56444 10 6452 1 2025-07-28 14:52:40.493 00:00:10.361 TCP 23.104.0.1:45960 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:48:02.310 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 14:53:03.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-07-28 14:53:40.898 00:00:10.365 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:54:03.561 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-07-28 14:54:50.813 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 14:54:50.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 14:54:41.300 00:00:10.367 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:55:03.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-07-28 14:55:41.707 00:00:10.323 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:56:04.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53794 10 6452 1 2025-07-28 14:56:42.107 00:00:10.367 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:52:02.315 00:06:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 14:57:04.214 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36280 10 6452 1 2025-07-28 14:57:42.512 00:00:10.367 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-07-28 14:58:04.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 Summary: total flows: 160, total bytes: 505384, total packets: 1571, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-07-28 13:56:02 - 2025-07-28 14:58:14 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0018s User: 0.0027s Wall: 0.0022s flows/second: 73399.2 Runtime: 0.0022s