Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 04:59:06.540 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41268 10 6438 1 2025-07-22 04:59:25.881 00:00:10.387 TCP 23.104.0.1:43724 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:00:06.752 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48234 10 6438 1 2025-07-22 05:00:26.306 00:00:10.369 TCP 23.104.0.1:53574 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:01:06.961 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6438 1 2025-07-22 05:01:26.714 00:00:10.368 TCP 23.104.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:01:45.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:01:45.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:02:07.241 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6438 1 2025-07-22 05:02:27.120 00:00:10.362 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:03:07.451 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6438 1 2025-07-22 05:03:27.522 00:00:10.397 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:04:07.663 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6438 1 2025-07-22 05:04:27.960 00:00:10.370 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-07-22 04:59:59.288 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 04:59:59.292 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:05:07.835 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32992 10 6438 1 2025-07-22 05:05:28.362 00:00:10.371 TCP 23.104.0.1:53614 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:06:08.078 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53338 10 6438 1 2025-07-22 05:06:45.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:06:28.773 00:00:10.375 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:06:45.607 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:07:08.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6438 1 2025-07-22 05:07:29.182 00:00:10.366 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:08:08.461 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 12 10350 1 2025-07-22 05:08:29.587 00:00:10.397 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 15 1925 1 2025-07-22 05:09:08.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6438 1 2025-07-22 05:09:30.022 00:00:10.364 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:10:08.919 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47420 10 6438 1 2025-07-22 05:10:30.430 00:00:10.364 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:11:09.141 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59544 10 6438 1 2025-07-22 05:11:30.835 00:00:10.395 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:11:45.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:11:45.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:06:59.292 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:06:59.295 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:12:09.350 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43346 10 6438 1 2025-07-22 05:12:31.259 00:00:10.363 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:13:09.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60736 10 6438 1 2025-07-22 05:13:31.663 00:00:10.365 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:14:09.743 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34244 10 6438 1 2025-07-22 05:14:32.090 00:00:10.367 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:15:09.974 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6438 1 2025-07-22 05:15:32.494 00:00:10.363 TCP 23.104.0.1:53858 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:16:10.203 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6438 1 2025-07-22 05:16:45.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:16:32.900 00:00:10.376 TCP 23.104.0.1:40510 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:16:45.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:17:10.376 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 10 6438 1 2025-07-22 05:17:33.320 00:00:10.321 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:18:10.586 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6438 1 2025-07-22 05:18:33.679 00:00:10.363 TCP 23.104.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:13:59.293 00:06:00.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:13:59.297 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:19:10.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6438 1 2025-07-22 05:19:34.103 00:00:10.373 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:20:10.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6438 1 2025-07-22 05:20:34.506 00:00:10.367 TCP 23.104.0.1:35096 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:21:11.221 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6438 1 2025-07-22 05:21:45.903 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:21:34.908 00:00:10.335 TCP 23.104.0.1:58988 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:21:46.119 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:22:11.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6438 1 2025-07-22 05:22:35.282 00:00:10.371 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:23:11.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48490 10 6438 1 2025-07-22 05:23:35.691 00:00:10.364 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:24:11.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6438 1 2025-07-22 05:24:36.109 00:00:10.326 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:25:12.038 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55764 10 6438 1 2025-07-22 05:25:36.473 00:00:10.373 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:20:59.297 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:20:59.295 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:26:12.208 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6438 1 2025-07-22 05:26:45.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:26:46.087 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:26:36.875 00:00:10.369 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:27:12.380 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6438 1 2025-07-22 05:27:37.284 00:00:10.367 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:28:12.589 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6438 1 2025-07-22 05:28:37.691 00:00:10.364 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:29:12.802 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53690 10 6438 1 2025-07-22 05:29:38.103 00:00:10.360 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:30:13.015 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6438 1 2025-07-22 05:30:38.503 00:00:10.324 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:31:13.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6438 1 2025-07-22 05:31:46.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:31:45.950 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:31:38.886 00:00:10.333 TCP 23.104.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:32:13.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6438 1 2025-07-22 05:32:39.256 00:00:10.365 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:27:59.300 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:27:59.298 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:33:13.655 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6438 1 2025-07-22 05:33:39.658 00:00:10.365 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:34:13.869 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6438 1 2025-07-22 05:34:40.069 00:00:10.364 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:35:14.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46668 10 6438 1 2025-07-22 05:35:40.471 00:00:10.363 TCP 23.104.0.1:41080 -> 1.101.0.1:3000 12 1559 1 2025-07-22 05:36:14.308 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53390 10 6438 1 2025-07-22 05:36:46.353 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:36:46.465 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:36:40.870 00:00:10.375 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:37:14.487 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 6438 1 2025-07-22 05:37:41.291 00:00:10.362 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:38:14.694 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43774 10 6438 1 2025-07-22 05:38:41.697 00:00:10.365 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:39:14.902 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6438 1 2025-07-22 05:39:42.100 00:00:10.362 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:34:59.300 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:34:59.304 00:06:00.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:40:15.089 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33880 10 6438 1 2025-07-22 05:40:42.503 00:00:10.376 TCP 23.104.0.1:44258 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:41:15.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45408 10 6438 1 2025-07-22 05:41:46.112 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:41:46.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:41:42.921 00:00:10.389 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:42:15.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56148 10 6438 1 2025-07-22 05:42:43.349 00:00:10.367 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:43:15.734 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6438 1 2025-07-22 05:43:43.757 00:00:10.375 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:44:15.902 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6438 1 2025-07-22 05:44:44.171 00:00:10.319 TCP 23.104.0.1:41388 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:45:16.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6438 1 2025-07-22 05:45:44.529 00:00:10.371 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:46:16.346 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6438 1 2025-07-22 05:46:46.519 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:46:46.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:46:44.932 00:00:10.393 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:41:59.314 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:41:59.310 00:06:00.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:47:16.517 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6438 1 2025-07-22 05:47:45.365 00:00:10.382 TCP 23.104.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:48:16.737 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6438 1 2025-07-22 05:48:45.777 00:00:10.370 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:49:16.907 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6438 1 2025-07-22 05:49:46.183 00:00:10.363 TCP 23.104.0.1:53794 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:50:17.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6438 1 2025-07-22 05:50:46.577 00:00:10.330 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:51:17.327 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6438 1 2025-07-22 05:51:46.651 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:51:46.716 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:51:46.943 00:00:10.381 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:52:17.500 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33548 10 6438 1 2025-07-22 05:52:47.358 00:00:10.365 TCP 23.104.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:53:17.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34386 10 6438 1 2025-07-22 05:53:47.761 00:00:10.380 TCP 23.104.0.1:48940 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:48:59.306 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 05:48:59.309 00:06:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 05:54:17.939 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39870 10 6438 1 2025-07-22 05:54:48.178 00:00:10.325 TCP 23.104.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:55:18.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6438 1 2025-07-22 05:55:48.543 00:00:10.363 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:56:18.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6438 1 2025-07-22 05:56:46.604 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 05:56:46.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 05:56:48.944 00:00:10.369 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:57:18.597 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6438 1 2025-07-22 05:57:49.347 00:00:10.362 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-07-22 05:58:18.768 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6438 1 Summary: total flows: 159, total bytes: 499399, total packets: 1552, avg bps: 1121, avg pps: 0, avg bpp: 321 Time window: 2025-07-22 04:59:06 - 2025-07-22 05:58:28 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0023s User: 0.0023s Wall: 0.0023s flows/second: 69223.0 Runtime: 0.0023s