Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 08:58:50.116 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6438 1 2025-07-21 08:59:24.995 00:00:10.365 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:59:50.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51874 10 6438 1 2025-07-21 09:00:25.401 00:00:10.372 TCP 23.104.0.1:38826 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:00:50.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6438 1 2025-07-21 09:01:21.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:01:21.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:01:25.816 00:00:10.371 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:57:58.885 00:05:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:01:50.722 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6438 1 2025-07-21 08:57:58.889 00:05:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:02:26.235 00:00:10.366 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:02:50.932 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6438 1 2025-07-21 09:03:26.649 00:00:10.374 TCP 23.104.0.1:36690 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:03:51.169 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6438 1 2025-07-21 09:04:27.069 00:00:10.366 TCP 23.104.0.1:51208 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:04:51.399 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6438 1 2025-07-21 09:05:27.479 00:00:10.322 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:05:51.620 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6438 1 2025-07-21 09:06:21.658 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:06:21.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:06:27.839 00:00:10.346 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:06:51.791 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6438 1 2025-07-21 09:07:28.223 00:00:10.327 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:03:58.886 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:03:58.890 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:07:52.020 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43636 10 6438 1 2025-07-21 09:08:28.587 00:00:10.366 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:08:52.232 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6438 1 2025-07-21 09:09:28.998 00:00:10.319 TCP 23.104.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:09:52.448 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35454 10 6438 1 2025-07-21 09:10:29.355 00:00:10.363 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:10:52.656 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6438 1 2025-07-21 09:11:21.551 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:11:21.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:11:29.757 00:00:10.382 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:11:52.871 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6438 1 2025-07-21 09:12:30.170 00:00:10.366 TCP 23.104.0.1:48404 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:12:53.101 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6438 1 2025-07-21 09:13:30.576 00:00:10.362 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:09:58.892 00:05:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:09:58.890 00:05:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:13:53.311 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6438 1 2025-07-21 09:14:30.983 00:00:10.367 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:14:53.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6438 1 2025-07-21 09:15:31.393 00:00:10.371 TCP 23.104.0.1:39072 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:15:53.742 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6438 1 2025-07-21 09:16:21.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:16:21.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:16:31.805 00:00:10.438 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:16:53.972 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6438 1 2025-07-21 09:17:32.280 00:00:10.323 TCP 23.104.0.1:55798 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:17:54.225 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6438 1 2025-07-21 09:18:32.642 00:00:10.367 TCP 23.104.0.1:44890 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:18:54.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36830 10 6438 1 2025-07-21 09:19:33.052 00:00:10.327 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:15:58.893 00:05:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:15:58.890 00:05:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:19:54.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6438 1 2025-07-21 09:20:33.414 00:00:10.367 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:20:54.857 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6438 1 2025-07-21 09:21:21.918 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:21:21.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:21:33.826 00:00:10.364 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:21:55.092 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6438 1 2025-07-21 09:22:34.241 00:00:10.366 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:22:55.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6438 1 2025-07-21 09:23:34.649 00:00:10.376 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:23:55.526 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6438 1 2025-07-21 09:24:35.090 00:00:10.333 TCP 23.104.0.1:56748 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:24:55.703 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32994 10 6438 1 2025-07-21 09:25:35.462 00:00:10.374 TCP 23.104.0.1:37362 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:21:58.895 00:05:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:21:58.892 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:25:55.913 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6438 1 2025-07-21 09:26:21.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:26:22.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:26:35.880 00:00:10.387 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:26:56.121 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55420 13 6594 1 2025-07-21 09:27:36.305 00:00:10.333 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:27:56.365 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6438 1 2025-07-21 09:28:36.680 00:00:10.370 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:28:56.585 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6438 1 2025-07-21 09:29:37.102 00:00:10.359 TCP 23.104.0.1:54366 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:29:56.795 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6438 1 2025-07-21 09:30:37.512 00:00:10.360 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:30:57.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6438 1 2025-07-21 09:31:21.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:31:22.215 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:31:37.907 00:00:10.326 TCP 23.104.0.1:55320 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:27:58.897 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:27:58.895 00:05:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:31:57.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 10 6438 1 2025-07-21 09:32:38.272 00:00:10.320 TCP 23.104.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:32:57.442 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6438 1 2025-07-21 09:33:38.632 00:00:10.373 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:33:57.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49086 10 6438 1 2025-07-21 09:34:39.052 00:00:10.370 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:34:57.871 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6438 1 2025-07-21 09:35:39.462 00:00:10.356 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:35:58.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6438 1 2025-07-21 09:36:22.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:36:22.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:36:39.853 00:00:10.374 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:36:58.317 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6438 1 2025-07-21 09:37:40.276 00:00:10.362 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:33:58.895 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:33:58.899 00:05:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:37:58.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6438 1 2025-07-21 09:38:40.686 00:00:10.361 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:38:58.704 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6438 1 2025-07-21 09:39:41.095 00:00:10.367 TCP 23.104.0.1:39778 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:39:58.911 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6438 1 2025-07-21 09:40:41.499 00:00:10.325 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:40:59.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6438 1 2025-07-21 09:41:22.367 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:41:22.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:41:41.859 00:00:10.377 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:41:59.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6438 1 2025-07-21 09:42:42.269 00:00:10.367 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:42:59.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6438 1 2025-07-21 09:39:58.899 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:43:42.672 00:00:10.361 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:39:58.896 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:43:59.790 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6438 1 2025-07-21 09:44:43.102 00:00:10.365 TCP 23.104.0.1:47864 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:45:00.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6438 1 2025-07-21 09:45:43.522 00:00:10.364 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:46:00.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60934 10 6438 1 2025-07-21 09:46:22.309 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:46:22.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:46:43.925 00:00:10.386 TCP 23.104.0.1:34066 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:47:00.431 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50322 10 6438 1 2025-07-21 09:47:44.349 00:00:10.372 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:48:00.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6438 1 2025-07-21 09:48:44.757 00:00:10.378 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:49:00.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6438 1 2025-07-21 09:49:45.173 00:00:10.372 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:45:58.897 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:45:58.900 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:50:01.054 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60508 10 6438 1 2025-07-21 09:50:45.580 00:00:10.372 TCP 23.104.0.1:46634 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:51:01.267 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6438 1 2025-07-21 09:51:22.328 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:51:22.141 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:51:45.987 00:00:10.371 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:52:01.480 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6438 1 2025-07-21 09:52:46.397 00:00:10.368 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:53:01.688 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6438 1 2025-07-21 09:53:46.804 00:00:10.339 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:54:01.856 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6438 1 2025-07-21 09:54:47.181 00:00:10.345 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:55:02.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6438 1 2025-07-21 09:51:58.902 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 09:55:47.566 00:00:10.367 TCP 23.104.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:51:58.899 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 09:56:02.294 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49248 10 6438 1 2025-07-21 09:56:22.474 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 09:56:22.516 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 09:56:47.987 00:00:10.374 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:57:02.536 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6438 1 2025-07-21 09:57:48.404 00:00:10.363 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-07-21 09:58:02.704 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6438 1 Summary: total flows: 163, total bytes: 496157, total packets: 1564, avg bps: 1098, avg pps: 0, avg bpp: 317 Time window: 2025-07-21 08:57:58 - 2025-07-21 09:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0010s User: 0.0031s Wall: 0.0021s flows/second: 79082.9 Runtime: 0.0021s