Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 17:59:19.862 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-09-02 17:59:24.137 00:00:10.368 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:00:20.094 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:59798 10 6452 1 2025-09-02 18:00:24.544 00:00:10.361 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:01:20.583 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45760 10 6452 1 2025-09-02 18:01:24.943 00:00:10.333 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:02:14.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:02:14.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:02:20.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-09-02 18:02:25.315 00:00:10.362 TCP 23.104.0.1:50464 -> 1.101.0.1:3000 11 1507 1 2025-09-02 17:59:22.513 00:05:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:03:21.034 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38848 10 6452 1 2025-09-02 18:03:25.719 00:00:10.381 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:00:22.510 00:05:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:04:21.204 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-09-02 18:04:26.135 00:00:10.366 TCP 23.104.0.1:38242 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:05:21.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-09-02 18:05:26.538 00:00:10.365 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:06:21.595 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-09-02 18:06:26.943 00:00:10.367 TCP 23.104.0.1:49360 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:07:14.670 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:07:14.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:07:21.804 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-09-02 18:07:27.348 00:00:10.357 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:08:22.038 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-09-02 18:08:27.753 00:00:10.370 TCP 23.104.0.1:52184 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:05:22.515 00:05:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:09:22.212 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60776 10 6452 1 2025-09-02 18:09:28.165 00:00:10.363 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:06:22.512 00:05:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:10:22.402 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-09-02 18:10:28.568 00:00:10.367 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:11:22.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6452 1 2025-09-02 18:11:28.971 00:00:10.383 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:12:14.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:12:14.607 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:12:22.839 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-09-02 18:12:29.395 00:00:10.363 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:13:23.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-09-02 18:13:29.794 00:00:10.364 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:14:23.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-09-02 18:14:30.206 00:00:10.359 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:11:22.515 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:15:23.469 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 12 6556 1 2025-09-02 18:15:30.605 00:00:10.360 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:12:22.514 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:16:23.695 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-09-02 18:16:31.007 00:00:10.359 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:17:14.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:17:14.784 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:17:23.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-09-02 18:17:31.414 00:00:10.323 TCP 23.104.0.1:53402 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:18:24.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-09-02 18:18:31.778 00:00:10.368 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:19:24.340 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-09-02 18:19:32.184 00:00:10.328 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:20:24.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-09-02 18:20:32.548 00:00:10.324 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:17:22.518 00:05:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:21:24.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 10 6452 1 2025-09-02 18:21:32.908 00:00:10.365 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:22:14.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:22:14.797 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:18:22.515 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:22:24.984 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-09-02 18:22:33.315 00:00:10.360 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:23:25.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-09-02 18:23:33.713 00:00:10.378 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:24:25.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44714 10 6452 1 2025-09-02 18:24:34.139 00:00:10.361 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:25:25.642 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-09-02 18:25:34.539 00:00:10.360 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:26:25.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-09-02 18:26:34.937 00:00:10.372 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:27:14.985 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:27:14.999 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:23:22.519 00:05:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:27:26.038 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40108 10 6452 1 2025-09-02 18:27:35.353 00:00:10.367 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:24:22.516 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:28:26.291 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-09-02 18:28:35.756 00:00:10.340 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:29:26.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-09-02 18:29:36.132 00:00:10.377 TCP 23.104.0.1:59612 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:30:26.678 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-09-02 18:30:36.548 00:00:10.361 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:31:26.892 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-09-02 18:31:36.945 00:00:10.367 TCP 23.104.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:32:15.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:32:14.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:32:27.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-09-02 18:32:37.354 00:00:10.363 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:29:22.520 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:33:27.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-09-02 18:33:37.756 00:00:10.373 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:30:22.517 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:34:27.542 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-09-02 18:34:38.174 00:00:10.322 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:35:27.756 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-09-02 18:35:38.541 00:00:10.338 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:36:27.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-09-02 18:36:38.917 00:00:10.341 TCP 23.104.0.1:39904 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:37:15.386 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:37:15.230 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:37:28.206 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51748 10 6452 1 2025-09-02 18:37:39.301 00:00:10.363 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:38:28.417 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49626 10 6452 1 2025-09-02 18:38:39.698 00:00:10.367 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:35:22.521 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:39:28.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-09-02 18:39:40.121 00:00:10.369 TCP 23.104.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:36:22.519 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:40:28.838 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38286 10 6452 1 2025-09-02 18:40:40.532 00:00:10.325 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:41:29.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32930 10 6452 1 2025-09-02 18:41:40.894 00:00:10.346 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:42:15.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:42:15.265 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:42:29.294 00:00:10.667 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-09-02 18:42:41.305 00:00:10.366 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:43:30.004 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-09-02 18:43:41.707 00:00:10.361 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:44:30.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-09-02 18:44:42.111 00:00:10.322 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:41:22.523 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:45:30.433 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-09-02 18:45:42.473 00:00:10.368 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:42:22.521 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:46:30.608 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-09-02 18:46:42.883 00:00:10.399 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:47:15.731 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:47:15.507 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:47:30.827 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:47002 10 6452 1 2025-09-02 18:47:43.332 00:00:10.370 TCP 23.104.0.1:51812 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:48:31.202 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-09-02 18:48:43.740 00:00:10.372 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:49:31.420 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6452 1 2025-09-02 18:49:44.146 00:00:10.368 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:50:31.642 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-09-02 18:50:44.556 00:00:10.325 TCP 23.104.0.1:46126 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:47:22.524 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:51:31.855 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-09-02 18:51:44.918 00:00:10.365 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:52:15.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:52:15.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:48:22.522 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:52:32.097 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-09-02 18:52:45.324 00:00:10.363 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:53:32.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58450 10 6452 1 2025-09-02 18:53:45.727 00:00:10.379 TCP 23.104.0.1:55264 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:54:32.526 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-09-02 18:54:46.140 00:00:10.362 TCP 23.104.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:55:32.735 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-09-02 18:55:46.543 00:00:10.360 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:56:32.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-09-02 18:56:46.939 00:00:10.377 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:57:15.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 18:57:15.392 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 18:53:22.526 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 18:57:33.178 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-02 18:57:47.360 00:00:10.368 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:54:22.524 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 18:58:33.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57804 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1103, avg pps: 0, avg bpp: 317 Time window: 2025-09-02 17:59:19 - 2025-09-02 18:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0023s flows/second: 71897.3 Runtime: 0.0023s