Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 22:58:50.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-09-03 22:59:34.985 00:00:10.363 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 11 1507 1 2025-09-03 22:59:50.922 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46016 10 6452 1 2025-09-03 23:00:35.391 00:00:10.322 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:00:51.158 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43958 10 6452 1 2025-09-03 23:01:35.755 00:00:10.333 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:01:51.372 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45744 10 6452 1 2025-09-03 23:02:36.126 00:00:10.324 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:02:49.546 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:02:49.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:02:51.545 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-09-03 23:03:36.490 00:00:10.369 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:03:51.715 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33078 10 6452 1 2025-09-03 22:59:23.175 00:06:00.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:04:36.898 00:00:10.326 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:04:51.943 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-09-03 23:00:23.172 00:06:00.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:05:37.266 00:00:10.362 TCP 23.104.0.1:41566 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:05:52.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-09-03 23:06:37.667 00:00:10.361 TCP 23.104.0.1:43438 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:06:52.346 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-09-03 23:07:49.545 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:07:38.090 00:00:10.360 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:07:49.546 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:07:52.523 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47734 10 6452 1 2025-09-03 23:08:38.489 00:00:10.539 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:08:52.748 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-09-03 23:09:39.098 00:00:10.318 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:09:52.915 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-09-03 23:10:39.452 00:00:10.374 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:10:53.104 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-09-03 23:06:23.176 00:06:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:11:39.871 00:00:10.363 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:11:53.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-09-03 23:07:23.174 00:06:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:12:49.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:12:49.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:12:40.272 00:00:10.366 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:12:53.527 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-09-03 23:13:40.681 00:00:10.372 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:13:53.741 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35088 10 6452 1 2025-09-03 23:14:41.109 00:00:10.379 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:14:53.959 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-09-03 23:15:41.515 00:00:10.365 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:15:54.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6452 1 2025-09-03 23:16:41.919 00:00:10.341 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:16:54.405 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-09-03 23:17:49.753 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:17:49.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:17:42.305 00:00:10.321 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:17:54.619 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-09-03 23:13:23.179 00:06:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:18:42.670 00:00:10.334 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:18:54.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-09-03 23:14:23.175 00:06:00.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:19:43.053 00:00:10.363 TCP 23.104.0.1:56598 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:19:55.072 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-09-03 23:20:43.455 00:00:10.389 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:20:55.287 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-09-03 23:21:43.882 00:00:10.382 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:21:55.496 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60834 10 6452 1 2025-09-03 23:22:49.980 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:22:49.884 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:22:44.303 00:00:10.363 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:22:55.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57494 10 6452 1 2025-09-03 23:23:44.708 00:00:10.393 TCP 23.104.0.1:53058 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:23:55.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-09-03 23:24:45.142 00:00:10.785 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:24:56.117 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55326 10 6452 1 2025-09-03 23:20:23.181 00:06:00.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:25:45.971 00:00:10.361 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:25:56.337 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-09-03 23:21:23.179 00:06:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:26:46.377 00:00:10.371 TCP 23.104.0.1:37952 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:26:56.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45422 10 6452 1 2025-09-03 23:27:49.857 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:27:49.858 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:27:46.787 00:00:10.437 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 15 1926 1 2025-09-03 23:27:56.720 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:37768 12 10365 1 2025-09-03 23:28:47.262 00:00:10.366 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:28:56.976 00:00:10.421 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-09-03 23:29:47.665 00:00:10.367 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:29:57.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-09-03 23:30:48.099 00:00:10.364 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:30:57.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46108 10 6452 1 2025-09-03 23:31:48.499 00:00:10.368 TCP 23.104.0.1:33862 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:31:57.844 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 10 6452 1 2025-09-03 23:27:23.183 00:06:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:32:49.886 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:32:50.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:32:48.901 00:00:10.327 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:32:58.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-09-03 23:28:23.180 00:06:00.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:33:49.271 00:00:10.364 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:33:58.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57086 10 6452 1 2025-09-03 23:34:49.675 00:00:10.373 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:34:58.516 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-09-03 23:35:50.115 00:00:10.326 TCP 23.104.0.1:58162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:35:58.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-09-03 23:36:50.479 00:00:10.371 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:36:58.946 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-09-03 23:37:50.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:37:49.880 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:37:50.888 00:00:10.369 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:37:59.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-09-03 23:38:51.294 00:00:10.363 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:38:59.386 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-09-03 23:34:23.183 00:06:00.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:39:51.696 00:00:10.369 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:39:59.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-09-03 23:35:23.180 00:06:00.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:40:52.108 00:00:10.377 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:40:59.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57422 10 6452 1 2025-09-03 23:41:52.525 00:00:10.367 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:42:00.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-09-03 23:42:50.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:42:50.201 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:42:52.925 00:00:10.344 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:43:00.257 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38236 10 6452 1 2025-09-03 23:43:53.309 00:00:10.363 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:44:00.476 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56416 10 6452 1 2025-09-03 23:44:53.714 00:00:10.372 TCP 23.104.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:45:00.682 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-09-03 23:45:54.123 00:00:10.368 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:46:00.859 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43848 10 6452 1 2025-09-03 23:41:23.184 00:06:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:46:54.529 00:00:10.330 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:47:01.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-09-03 23:42:23.182 00:06:00.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:47:50.122 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:47:50.218 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:47:54.910 00:00:10.335 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:48:01.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46340 10 6452 1 2025-09-03 23:48:55.282 00:00:10.371 TCP 23.104.0.1:56886 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:49:01.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-09-03 23:49:55.686 00:00:10.340 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:50:01.734 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-09-03 23:50:56.084 00:00:10.368 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:51:01.909 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-09-03 23:51:56.488 00:00:10.367 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:52:02.123 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-09-03 23:52:50.358 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:52:50.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:52:56.891 00:00:10.978 TCP 23.104.0.1:58388 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:53:02.336 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-09-03 23:48:23.186 00:06:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 23:53:57.909 00:00:10.322 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:54:02.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43488 10 6452 1 2025-09-03 23:49:23.184 00:06:00.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 23:54:58.270 00:00:10.481 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:55:02.766 00:00:10.375 TCP 1.101.0.1:3000 -> 22.102.0.1:39492 10 6452 1 2025-09-03 23:55:58.785 00:00:10.321 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:56:03.178 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-09-03 23:56:59.145 00:00:10.327 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:57:03.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46436 10 6452 1 2025-09-03 23:57:50.405 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 23:57:50.449 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 23:57:59.510 00:00:10.371 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:58:03.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40950 10 6452 1 Summary: total flows: 159, total bytes: 500189, total packets: 1551, avg bps: 1123, avg pps: 0, avg bpp: 322 Time window: 2025-09-03 22:58:50 - 2025-09-03 23:58:13 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0035s User: 0.0012s Wall: 0.0022s flows/second: 70795.6 Runtime: 0.0023s