Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 00:59:18.908 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6438 1 2025-07-23 00:59:27.589 00:00:10.361 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:00:19.124 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6438 1 2025-07-23 01:00:27.992 00:00:10.323 TCP 23.104.0.1:45934 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:01:19.341 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38990 10 6438 1 2025-07-23 01:01:28.353 00:00:10.316 TCP 23.104.0.1:59134 -> 1.101.0.1:3000 11 1507 1 2025-07-23 00:56:59.648 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 00:56:59.651 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:02:09.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:02:09.623 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:02:19.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6438 1 2025-07-23 01:02:28.707 00:00:10.370 TCP 23.104.0.1:57012 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:03:19.774 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6438 1 2025-07-23 01:03:29.115 00:00:10.366 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:04:19.992 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6438 1 2025-07-23 01:04:29.513 00:00:10.374 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:05:20.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 10 6438 1 2025-07-23 01:05:29.925 00:00:10.390 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:06:20.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 10 6438 1 2025-07-23 01:06:30.369 00:00:10.374 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:07:09.594 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:07:09.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:07:20.647 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6438 1 2025-07-23 01:07:30.786 00:00:10.369 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:08:20.855 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6438 1 2025-07-23 01:08:31.188 00:00:10.364 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:03:59.650 00:06:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:03:59.653 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:09:21.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6438 1 2025-07-23 01:09:31.596 00:00:10.367 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:10:21.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6438 1 2025-07-23 01:10:32.004 00:00:10.367 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:11:21.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55568 10 6438 1 2025-07-23 01:11:32.407 00:00:10.362 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:12:09.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:12:09.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:12:21.734 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6438 1 2025-07-23 01:12:32.815 00:00:10.335 TCP 23.104.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:13:21.951 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:60268 10 6438 1 2025-07-23 01:13:33.185 00:00:10.322 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:14:22.144 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6438 1 2025-07-23 01:14:33.546 00:00:10.363 TCP 23.104.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:15:22.353 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45932 10 6438 1 2025-07-23 01:15:33.945 00:00:10.335 TCP 23.104.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:10:59.658 00:06:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:10:59.656 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:16:22.567 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6438 1 2025-07-23 01:16:34.322 00:00:10.367 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:17:09.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:17:09.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:17:22.780 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6438 1 2025-07-23 01:17:34.727 00:00:10.325 TCP 23.104.0.1:47504 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:18:23.001 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6438 1 2025-07-23 01:18:35.105 00:00:10.364 TCP 23.104.0.1:57018 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:19:23.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6438 1 2025-07-23 01:19:35.509 00:00:10.365 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:20:23.439 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46440 10 6438 1 2025-07-23 01:20:35.909 00:00:10.363 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:21:23.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46532 10 6438 1 2025-07-23 01:21:36.313 00:00:10.326 TCP 23.104.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:22:09.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:22:09.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:22:23.861 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55260 10 6438 1 2025-07-23 01:22:36.674 00:00:10.360 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:17:59.657 00:06:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:17:59.656 00:06:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:23:24.086 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 12 10352 1 2025-07-23 01:23:37.104 00:00:10.445 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 15 1925 1 2025-07-23 01:24:24.330 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46294 10 6438 1 2025-07-23 01:24:37.590 00:00:10.327 TCP 23.104.0.1:33636 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:25:24.559 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6438 1 2025-07-23 01:25:37.949 00:00:10.370 TCP 23.104.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:26:24.784 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48684 10 6438 1 2025-07-23 01:26:38.358 00:00:10.322 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:27:10.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:27:09.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:27:25.008 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6438 1 2025-07-23 01:27:38.719 00:00:10.370 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:28:25.183 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57318 10 6438 1 2025-07-23 01:28:39.129 00:00:10.326 TCP 23.104.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:29:25.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58272 10 6438 1 2025-07-23 01:29:39.491 00:00:10.369 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:24:59.656 00:06:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:24:59.659 00:06:00.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:30:25.568 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6438 1 2025-07-23 01:30:39.895 00:00:10.375 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:31:25.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38838 10 6438 1 2025-07-23 01:31:40.305 00:00:10.360 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:32:10.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:32:10.305 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:32:25.995 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42812 10 6438 1 2025-07-23 01:32:40.704 00:00:10.366 TCP 23.104.0.1:33014 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:33:26.172 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6438 1 2025-07-23 01:33:41.113 00:00:10.330 TCP 23.104.0.1:53376 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:34:26.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6438 1 2025-07-23 01:34:41.473 00:00:10.321 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:35:26.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6438 1 2025-07-23 01:35:41.836 00:00:10.350 TCP 23.104.0.1:39468 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:36:26.818 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6438 1 2025-07-23 01:31:59.662 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:36:42.231 00:00:10.361 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:31:59.661 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:37:10.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:37:10.578 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:37:27.042 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6438 1 2025-07-23 01:37:42.631 00:00:10.363 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:38:27.254 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51914 10 6438 1 2025-07-23 01:38:43.035 00:00:10.347 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:39:27.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6438 1 2025-07-23 01:39:43.429 00:00:10.376 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:40:27.639 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38596 10 6438 1 2025-07-23 01:40:43.858 00:00:10.375 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:41:27.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6438 1 2025-07-23 01:41:44.279 00:00:10.328 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:42:10.444 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:42:10.144 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:42:28.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6438 1 2025-07-23 01:42:44.647 00:00:10.366 TCP 23.104.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:43:28.294 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6438 1 2025-07-23 01:43:45.047 00:00:10.363 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:38:59.660 00:06:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:38:59.664 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:44:28.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6438 1 2025-07-23 01:44:45.447 00:00:10.360 TCP 23.104.0.1:44824 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:45:28.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6438 1 2025-07-23 01:45:45.850 00:00:10.386 TCP 23.104.0.1:32838 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:46:28.936 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59068 10 6438 1 2025-07-23 01:46:46.272 00:00:10.366 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:47:10.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:47:10.621 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:47:29.165 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6438 1 2025-07-23 01:47:46.672 00:00:10.358 TCP 23.104.0.1:52090 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:48:29.392 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6438 1 2025-07-23 01:48:47.097 00:00:10.346 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:49:29.601 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56292 10 6438 1 2025-07-23 01:49:47.481 00:00:10.369 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:50:29.816 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6438 1 2025-07-23 01:50:47.890 00:00:10.382 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:45:59.663 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:45:59.665 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:51:30.065 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53850 10 6438 1 2025-07-23 01:51:48.309 00:00:10.368 TCP 23.104.0.1:34762 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:52:10.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:52:10.644 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:52:30.247 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6438 1 2025-07-23 01:52:48.713 00:00:10.377 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:53:30.456 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49546 10 6438 1 2025-07-23 01:53:49.127 00:00:10.375 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:54:30.674 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6438 1 2025-07-23 01:54:49.540 00:00:10.327 TCP 23.104.0.1:56922 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:55:30.846 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6438 1 2025-07-23 01:55:49.906 00:00:10.322 TCP 23.104.0.1:43442 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:56:31.075 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33440 10 6438 1 2025-07-23 01:56:50.267 00:00:10.363 TCP 23.104.0.1:38384 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:57:10.951 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 01:57:10.863 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 01:57:31.291 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6438 1 2025-07-23 01:52:59.666 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-23 01:57:50.672 00:00:10.367 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-07-23 01:52:59.663 00:06:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-23 01:58:31.498 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 10 6438 1 Summary: total flows: 161, total bytes: 501071, total packets: 1579, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-07-23 00:56:59 - 2025-07-23 01:58:59 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0025s User: 0.0012s Wall: 0.0019s flows/second: 84781.3 Runtime: 0.0019s