Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 17:58:50.582 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6438 1 2025-07-22 17:59:38.320 00:00:10.422 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:59:50.799 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53528 10 6438 1 2025-07-22 18:00:38.785 00:00:10.367 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:00:50.972 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 12 6542 1 2025-07-22 18:01:39.196 00:00:10.362 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:01:51.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55040 10 6438 1 2025-07-22 18:02:01.331 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:56:59.525 00:06:00.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:02:01.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:56:59.522 00:06:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:02:39.599 00:00:10.360 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:02:51.404 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 12 10352 1 2025-07-22 18:03:40.000 00:00:10.434 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 15 1925 1 2025-07-22 18:03:51.642 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6438 1 2025-07-22 18:04:40.470 00:00:10.360 TCP 23.104.0.1:48052 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:04:51.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 10 6438 1 2025-07-22 18:05:40.866 00:00:10.365 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:05:52.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6438 1 2025-07-22 18:06:41.277 00:00:10.365 TCP 23.104.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:07:01.225 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:07:01.308 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:06:52.291 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6438 1 2025-07-22 18:07:41.687 00:00:10.366 TCP 23.104.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:07:52.498 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6438 1 2025-07-22 18:08:42.106 00:00:10.323 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:03:59.527 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:03:59.530 00:06:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:08:52.708 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6438 1 2025-07-22 18:09:42.472 00:00:10.364 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:09:52.920 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6438 1 2025-07-22 18:10:42.881 00:00:10.374 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:10:53.137 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47858 10 6438 1 2025-07-22 18:11:43.293 00:00:10.363 TCP 23.104.0.1:56614 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:12:01.238 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:12:01.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:11:53.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6438 1 2025-07-22 18:12:43.696 00:00:10.372 TCP 23.104.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:12:53.529 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6438 1 2025-07-22 18:13:44.128 00:00:10.363 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:13:53.738 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34844 10 6438 1 2025-07-22 18:14:44.530 00:00:10.367 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:14:53.962 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 12 6542 1 2025-07-22 18:15:44.938 00:00:10.380 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:10:59.531 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:10:59.528 00:06:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:15:54.201 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6438 1 2025-07-22 18:16:45.363 00:00:10.366 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:17:01.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:17:01.471 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:16:54.375 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6438 1 2025-07-22 18:17:45.777 00:00:10.369 TCP 23.104.0.1:36870 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:17:54.581 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34830 10 6438 1 2025-07-22 18:18:46.186 00:00:10.364 TCP 23.104.0.1:46434 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:18:54.800 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6438 1 2025-07-22 18:19:46.597 00:00:10.364 TCP 23.104.0.1:46768 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:19:55.010 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6438 1 2025-07-22 18:20:47.001 00:00:10.326 TCP 23.104.0.1:48984 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:20:55.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6438 1 2025-07-22 18:21:47.368 00:00:10.363 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:22:01.627 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:22:01.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:21:55.440 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6438 1 2025-07-22 18:17:59.532 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:22:47.771 00:00:10.369 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:17:59.529 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:22:55.612 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 12 10350 1 2025-07-22 18:23:48.179 00:00:10.440 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 15 1925 1 2025-07-22 18:23:55.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6438 1 2025-07-22 18:24:48.661 00:00:10.373 TCP 23.104.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:24:56.078 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6438 1 2025-07-22 18:25:49.115 00:00:10.365 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:25:56.309 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6438 1 2025-07-22 18:27:01.899 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:27:01.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:26:49.522 00:00:10.364 TCP 23.104.0.1:33420 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:26:56.543 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6438 1 2025-07-22 18:27:49.932 00:00:10.384 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:27:56.767 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6438 1 2025-07-22 18:28:50.351 00:00:10.364 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:28:56.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6438 1 2025-07-22 18:24:59.530 00:06:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:29:50.754 00:00:10.392 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:24:59.532 00:06:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:29:57.178 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46980 10 6438 1 2025-07-22 18:30:51.192 00:00:10.364 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:30:57.353 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6438 1 2025-07-22 18:32:01.623 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:31:51.593 00:00:10.324 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:32:01.724 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:31:57.529 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39126 10 6438 1 2025-07-22 18:32:51.959 00:00:10.365 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:32:57.696 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6438 1 2025-07-22 18:33:52.362 00:00:10.364 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:33:57.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6438 1 2025-07-22 18:34:52.763 00:00:10.381 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:34:58.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6438 1 2025-07-22 18:35:53.180 00:00:10.322 TCP 23.104.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:35:58.343 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53798 10 6438 1 2025-07-22 18:37:01.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:31:59.534 00:06:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:37:01.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:31:59.531 00:06:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:36:53.541 00:00:10.367 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:36:58.514 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55664 10 6438 1 2025-07-22 18:37:53.964 00:00:10.454 TCP 23.104.0.1:38518 -> 1.101.0.1:3000 15 1925 1 2025-07-22 18:37:58.686 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 12 10350 1 2025-07-22 18:38:54.456 00:00:10.367 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:38:58.922 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52894 10 6438 1 2025-07-22 18:39:54.858 00:00:10.379 TCP 23.104.0.1:51334 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:39:59.169 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6438 1 2025-07-22 18:40:55.278 00:00:10.320 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:40:59.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6438 1 2025-07-22 18:42:02.012 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:42:02.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:41:55.634 00:00:10.364 TCP 23.104.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:41:59.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6438 1 2025-07-22 18:42:56.040 00:00:10.364 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:42:59.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6438 1 2025-07-22 18:38:59.532 00:06:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:38:59.535 00:06:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:43:56.460 00:00:10.326 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:44:00.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53798 10 6438 1 2025-07-22 18:45:00.247 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43456 10 6438 1 2025-07-22 18:44:56.823 00:00:10.362 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:46:00.456 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34618 10 6438 1 2025-07-22 18:45:57.243 00:00:10.372 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:47:02.109 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:47:02.045 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:47:00.663 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33552 10 6438 1 2025-07-22 18:46:57.652 00:00:10.367 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:47:58.063 00:00:10.363 TCP 23.104.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:48:00.874 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6438 1 2025-07-22 18:49:01.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36134 10 6438 1 2025-07-22 18:48:58.465 00:00:10.367 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:50:01.329 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6438 1 2025-07-22 18:49:58.866 00:00:10.334 TCP 23.104.0.1:54510 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:45:59.533 00:06:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:45:59.537 00:06:00.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:50:59.234 00:00:10.359 TCP 23.104.0.1:55678 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:51:01.565 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6438 1 2025-07-22 18:52:02.221 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:52:02.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:52:01.733 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49842 10 6438 1 2025-07-22 18:51:59.634 00:00:10.364 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:53:00.044 00:00:10.372 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:53:01.947 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6438 1 2025-07-22 18:54:00.450 00:00:10.365 TCP 23.104.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:54:02.179 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6438 1 2025-07-22 18:55:00.866 00:00:10.364 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:55:02.400 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6438 1 2025-07-22 18:56:01.271 00:00:10.327 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:56:02.616 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6438 1 2025-07-22 18:57:02.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 18:57:02.497 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 18:57:02.832 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6438 1 2025-07-22 18:57:01.636 00:00:10.370 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:52:59.542 00:06:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 18:52:59.544 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:58:02.048 00:00:10.369 TCP 23.104.0.1:51802 -> 1.101.0.1:3000 11 1507 1 2025-07-22 18:58:03.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6438 1 Summary: total flows: 161, total bytes: 509939, total packets: 1595, avg bps: 1096, avg pps: 0, avg bpp: 319 Time window: 2025-07-22 17:56:59 - 2025-07-22 18:58:59 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0041s User: 0.0000s Wall: 0.0020s flows/second: 79435.7 Runtime: 0.0020s