Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 03:58:53.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6438 1 2025-07-22 03:59:01.863 00:00:10.333 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-07-22 03:59:54.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6438 1 2025-07-22 04:00:02.233 00:00:10.329 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:00:54.327 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6438 1 2025-07-22 04:01:02.597 00:00:10.364 TCP 23.104.0.1:58100 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:01:44.060 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:01:44.364 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 03:56:59.262 00:06:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 03:56:59.260 00:06:00.201 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:01:54.556 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6438 1 2025-07-22 04:02:03.001 00:00:10.323 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:02:54.778 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:55520 14 14266 1 2025-07-22 04:03:03.358 00:00:10.515 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 17 2239 1 2025-07-22 04:03:55.071 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55796 10 6438 1 2025-07-22 04:04:03.920 00:00:10.376 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:04:55.249 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6438 1 2025-07-22 04:05:04.330 00:00:10.367 TCP 23.104.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:05:55.433 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35262 10 6438 1 2025-07-22 04:06:04.733 00:00:10.324 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:06:44.668 00:00:00.010 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:06:44.667 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:06:55.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6438 1 2025-07-22 04:07:05.103 00:00:10.326 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:07:55.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38642 10 6438 1 2025-07-22 04:08:05.465 00:00:10.365 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:03:59.261 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:03:59.263 00:06:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:08:56.078 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6438 1 2025-07-22 04:09:05.866 00:00:10.369 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:09:56.249 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47452 10 6438 1 2025-07-22 04:10:06.282 00:00:10.366 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:10:56.421 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6438 1 2025-07-22 04:11:06.688 00:00:10.363 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:11:44.414 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:11:44.344 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:11:56.630 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6438 1 2025-07-22 04:12:07.104 00:00:10.363 TCP 23.104.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:12:56.842 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6438 1 2025-07-22 04:13:07.507 00:00:10.333 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:13:57.084 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 10 6438 1 2025-07-22 04:14:07.881 00:00:10.345 TCP 23.104.0.1:36920 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:14:57.254 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45710 10 6438 1 2025-07-22 04:15:08.261 00:00:10.364 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:10:59.267 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:10:59.265 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:15:57.463 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6438 1 2025-07-22 04:16:08.664 00:00:10.363 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:16:44.724 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:16:44.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:16:57.688 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6438 1 2025-07-22 04:17:09.100 00:00:10.322 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:17:57.863 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56032 10 6438 1 2025-07-22 04:18:09.465 00:00:10.328 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:18:58.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40200 10 6438 1 2025-07-22 04:19:09.829 00:00:10.360 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:19:58.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58322 10 6438 1 2025-07-22 04:20:10.231 00:00:10.360 TCP 23.104.0.1:40322 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:20:58.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6438 1 2025-07-22 04:21:10.625 00:00:10.364 TCP 23.104.0.1:41420 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:21:44.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:21:44.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:21:58.723 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6438 1 2025-07-22 04:22:11.032 00:00:10.325 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:17:59.270 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:17:59.271 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:22:58.943 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6438 1 2025-07-22 04:23:11.394 00:00:10.320 TCP 23.104.0.1:45648 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:23:59.128 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6438 1 2025-07-22 04:24:11.758 00:00:10.373 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:24:59.302 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6438 1 2025-07-22 04:25:12.167 00:00:10.346 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:25:59.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50752 10 6438 1 2025-07-22 04:26:12.551 00:00:10.367 TCP 23.104.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:26:44.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:26:44.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:26:59.737 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6438 1 2025-07-22 04:27:12.956 00:00:10.365 TCP 23.104.0.1:57806 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:27:59.944 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6438 1 2025-07-22 04:28:13.361 00:00:10.363 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:29:00.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37424 10 6438 1 2025-07-22 04:29:13.764 00:00:10.372 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:24:59.273 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:24:59.276 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:30:00.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6438 1 2025-07-22 04:30:14.178 00:00:10.363 TCP 23.104.0.1:55928 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:31:00.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6438 1 2025-07-22 04:31:14.577 00:00:10.363 TCP 23.104.0.1:42218 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:31:44.787 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:31:45.002 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:32:00.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35370 10 6438 1 2025-07-22 04:32:14.981 00:00:10.362 TCP 23.104.0.1:44850 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:33:01.028 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54146 12 10352 1 2025-07-22 04:33:15.382 00:00:10.401 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 15 1925 1 2025-07-22 04:34:01.277 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37556 10 6438 1 2025-07-22 04:34:15.822 00:00:10.382 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:35:01.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36304 10 6438 1 2025-07-22 04:35:16.244 00:00:10.374 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:36:01.668 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44894 10 6438 1 2025-07-22 04:36:16.660 00:00:10.367 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:36:44.938 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:36:44.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:31:59.279 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:31:59.276 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:37:01.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6438 1 2025-07-22 04:37:17.091 00:00:10.366 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:38:02.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48546 10 6438 1 2025-07-22 04:38:17.489 00:00:10.324 TCP 23.104.0.1:46638 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:39:02.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60474 10 6438 1 2025-07-22 04:39:17.868 00:00:10.370 TCP 23.104.0.1:47060 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:40:02.540 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6438 1 2025-07-22 04:40:18.275 00:00:10.367 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:41:02.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39712 10 6438 1 2025-07-22 04:41:18.674 00:00:10.366 TCP 23.104.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:41:45.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:41:45.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:42:02.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6438 1 2025-07-22 04:42:19.100 00:00:10.361 TCP 23.104.0.1:51976 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:43:03.198 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57314 10 6438 1 2025-07-22 04:43:19.506 00:00:10.370 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:38:59.282 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:38:59.278 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:44:03.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6438 1 2025-07-22 04:44:19.914 00:00:10.331 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:45:03.605 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6438 1 2025-07-22 04:45:20.292 00:00:10.361 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:46:03.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6438 1 2025-07-22 04:46:20.692 00:00:10.366 TCP 23.104.0.1:47856 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:46:45.233 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:46:45.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:47:03.987 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6438 1 2025-07-22 04:47:21.105 00:00:10.363 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:48:04.173 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6438 1 2025-07-22 04:48:21.510 00:00:10.367 TCP 23.104.0.1:36894 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:49:04.399 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6438 1 2025-07-22 04:49:21.908 00:00:10.368 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:50:04.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6438 1 2025-07-22 04:50:22.308 00:00:10.360 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:45:59.281 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:45:59.285 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:51:04.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58744 10 6438 1 2025-07-22 04:51:22.715 00:00:10.370 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:51:45.209 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:51:45.237 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:52:05.056 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6438 1 2025-07-22 04:52:23.117 00:00:10.321 TCP 23.104.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:53:05.264 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 10 6438 1 2025-07-22 04:53:23.478 00:00:10.362 TCP 23.104.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:54:05.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6438 1 2025-07-22 04:54:23.878 00:00:10.364 TCP 23.104.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:55:05.689 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6438 1 2025-07-22 04:55:24.284 00:00:10.371 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:56:05.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52270 10 6438 1 2025-07-22 04:56:24.690 00:00:10.364 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:56:45.537 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 04:56:45.236 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 04:57:06.090 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6438 1 2025-07-22 04:57:25.103 00:00:10.366 TCP 23.104.0.1:39440 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:52:59.284 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:52:59.287 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 04:58:06.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6438 1 2025-07-22 04:58:25.508 00:00:10.341 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 511138, total packets: 1600, avg bps: 1099, avg pps: 0, avg bpp: 319 Time window: 2025-07-22 03:56:59 - 2025-07-22 04:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0015s Wall: 0.0023s flows/second: 71674.8 Runtime: 0.0023s