Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 18:59:03.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6438 1 2025-07-22 18:59:02.450 00:00:10.360 TCP 23.104.0.1:34316 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:00:03.437 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6438 1 2025-07-22 19:00:02.847 00:00:10.389 TCP 23.104.0.1:60400 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:01:03.275 00:00:10.368 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:01:03.650 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6438 1 2025-07-22 19:02:02.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:02:02.211 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:02:03.683 00:00:10.368 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:02:03.863 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43776 10 6438 1 2025-07-22 19:03:04.058 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40048 10 6438 1 2025-07-22 19:03:04.105 00:00:10.357 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:04:04.505 00:00:10.369 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:04:04.278 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6438 1 2025-07-22 18:59:59.546 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 18:59:59.542 00:06:00.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:05:04.493 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58902 10 6438 1 2025-07-22 19:05:04.913 00:00:10.367 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:06:04.704 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6438 1 2025-07-22 19:06:05.318 00:00:10.358 TCP 23.104.0.1:39152 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:07:02.606 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:07:02.559 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:07:04.911 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6438 1 2025-07-22 19:07:05.717 00:00:10.367 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:08:05.122 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33670 10 6438 1 2025-07-22 19:08:06.124 00:00:10.371 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:09:05.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6438 1 2025-07-22 19:09:06.533 00:00:10.371 TCP 23.104.0.1:53058 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:10:05.541 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57158 10 6438 1 2025-07-22 19:10:06.952 00:00:10.378 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:11:05.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6438 1 2025-07-22 19:11:07.364 00:00:10.370 TCP 23.104.0.1:43696 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:06:59.549 00:06:00.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:12:02.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:06:59.546 00:06:00.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:12:02.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:12:05.973 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6438 1 2025-07-22 19:12:07.804 00:00:10.364 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:13:06.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41416 10 6438 1 2025-07-22 19:13:08.211 00:00:10.424 TCP 23.104.0.1:58974 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:14:06.409 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6438 1 2025-07-22 19:14:08.674 00:00:10.361 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:15:06.588 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35268 10 6438 1 2025-07-22 19:15:09.103 00:00:10.339 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:16:06.796 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38594 10 6438 1 2025-07-22 19:16:09.478 00:00:10.323 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:17:02.815 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:17:02.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:17:09.840 00:00:10.436 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:17:07.022 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 10 6438 1 2025-07-22 19:18:07.240 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6438 1 2025-07-22 19:18:10.316 00:00:10.370 TCP 23.104.0.1:43956 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:13:59.550 00:06:00.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:13:59.547 00:06:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:19:07.460 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6438 1 2025-07-22 19:19:10.723 00:00:10.376 TCP 23.104.0.1:59772 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:20:11.134 00:00:10.372 TCP 23.104.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:20:07.711 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6438 1 2025-07-22 19:21:11.542 00:00:10.327 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:21:07.921 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6438 1 2025-07-22 19:22:02.725 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:22:02.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:22:08.129 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6438 1 2025-07-22 19:22:11.909 00:00:10.371 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:23:08.318 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51458 10 6438 1 2025-07-22 19:23:12.313 00:00:10.372 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:24:08.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48372 10 6438 1 2025-07-22 19:24:12.729 00:00:10.372 TCP 23.104.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:25:08.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6438 1 2025-07-22 19:25:13.137 00:00:10.364 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:20:59.552 00:06:00.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:20:59.550 00:06:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:26:08.957 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6438 1 2025-07-22 19:26:13.541 00:00:10.366 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 12 1559 1 2025-07-22 19:27:02.823 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:27:02.956 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:27:09.200 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6438 1 2025-07-22 19:27:13.943 00:00:10.372 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:28:09.423 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6438 1 2025-07-22 19:28:14.351 00:00:10.367 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:29:09.651 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47248 10 6438 1 2025-07-22 19:29:14.757 00:00:10.386 TCP 23.104.0.1:54106 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:30:09.873 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6438 1 2025-07-22 19:30:15.187 00:00:10.359 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:31:10.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6438 1 2025-07-22 19:31:15.582 00:00:10.365 TCP 23.104.0.1:48238 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:32:03.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:32:03.011 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:32:10.315 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6438 1 2025-07-22 19:32:15.979 00:00:10.370 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:27:59.554 00:06:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:27:59.558 00:06:00.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:33:10.535 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6438 1 2025-07-22 19:33:16.386 00:00:10.369 TCP 23.104.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:34:10.703 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38538 10 6438 1 2025-07-22 19:34:16.795 00:00:10.368 TCP 23.104.0.1:57876 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:35:10.928 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6438 1 2025-07-22 19:35:17.202 00:00:10.322 TCP 23.104.0.1:49842 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:36:11.126 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6438 1 2025-07-22 19:36:17.562 00:00:10.358 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:37:03.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:37:03.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:37:11.349 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6438 1 2025-07-22 19:37:17.968 00:00:10.369 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:38:11.567 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38786 10 6438 1 2025-07-22 19:38:18.378 00:00:10.418 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:39:11.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37864 10 6438 1 2025-07-22 19:39:18.836 00:00:10.388 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:34:59.557 00:06:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:34:59.554 00:06:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:40:12.046 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6438 1 2025-07-22 19:40:19.262 00:00:10.369 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:41:12.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44448 10 6438 1 2025-07-22 19:41:19.669 00:00:10.364 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:42:03.393 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:42:02.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:42:12.400 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50792 10 6438 1 2025-07-22 19:42:20.101 00:00:10.327 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:43:12.576 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 10 6438 1 2025-07-22 19:43:20.467 00:00:10.370 TCP 23.104.0.1:54698 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:44:12.788 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6438 1 2025-07-22 19:44:20.885 00:00:10.379 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:45:13.001 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6438 1 2025-07-22 19:45:21.303 00:00:10.373 TCP 23.104.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:46:13.222 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6438 1 2025-07-22 19:46:21.744 00:00:10.363 TCP 23.104.0.1:40820 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:41:59.557 00:06:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:41:59.556 00:06:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:47:03.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:47:03.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:47:13.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6438 1 2025-07-22 19:47:22.147 00:00:10.361 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:48:13.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6438 1 2025-07-22 19:48:22.546 00:00:10.369 TCP 23.104.0.1:35720 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:49:13.823 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6438 1 2025-07-22 19:49:22.957 00:00:10.378 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:50:14.066 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6438 1 2025-07-22 19:50:23.379 00:00:10.323 TCP 23.104.0.1:48158 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:51:14.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45972 10 6438 1 2025-07-22 19:51:23.751 00:00:10.387 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:52:03.286 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:52:03.636 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:52:14.456 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6438 1 2025-07-22 19:52:24.167 00:00:10.363 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:53:14.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6438 1 2025-07-22 19:53:24.567 00:00:10.321 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:48:59.557 00:06:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 19:48:59.560 00:06:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 19:54:14.885 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6438 1 2025-07-22 19:54:24.925 00:00:10.374 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:55:15.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37688 10 6438 1 2025-07-22 19:55:25.340 00:00:10.362 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:56:15.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 10 6438 1 2025-07-22 19:56:25.742 00:00:10.365 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:57:03.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 19:57:03.763 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 19:57:15.541 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6438 1 2025-07-22 19:57:26.146 00:00:10.328 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-07-22 19:58:15.752 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41410 10 6438 1 2025-07-22 19:58:26.507 00:00:10.366 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 496576, total packets: 1557, avg bps: 1111, avg pps: 0, avg bpp: 318 Time window: 2025-07-22 18:59:02 - 2025-07-22 19:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0025s User: 0.0017s Wall: 0.0020s flows/second: 79447.0 Runtime: 0.0020s