Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 00:59:16.160 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-09-04 00:59:24.967 00:00:10.361 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:00:16.372 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50174 10 6452 1 2025-09-04 01:00:25.367 00:00:10.320 TCP 23.104.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:01:16.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-09-04 01:01:25.727 00:00:10.371 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:02:16.756 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-09-04 01:02:26.142 00:00:10.362 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:02:51.835 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:02:51.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:58:23.206 00:06:00.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:03:16.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38842 10 6452 1 2025-09-04 01:03:26.546 00:00:10.362 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:59:23.205 00:06:00.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:04:17.194 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51280 10 6452 1 2025-09-04 01:04:26.951 00:00:10.367 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:05:17.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-09-04 01:05:27.359 00:00:10.365 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:06:17.582 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-09-04 01:06:27.763 00:00:10.374 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:07:17.795 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-09-04 01:07:28.185 00:00:10.329 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:07:51.944 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:07:52.199 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:08:17.961 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40986 12 6556 1 2025-09-04 01:08:28.549 00:00:11.030 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:09:18.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60660 10 6452 1 2025-09-04 01:09:29.618 00:00:10.326 TCP 23.104.0.1:56524 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:05:23.208 00:06:00.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:10:18.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33576 10 6452 1 2025-09-04 01:10:29.977 00:00:10.371 TCP 23.104.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:06:23.206 00:06:00.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:11:18.615 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-09-04 01:11:30.379 00:00:10.366 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:12:18.830 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54762 10 6452 1 2025-09-04 01:12:30.782 00:00:10.368 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:12:51.888 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:12:52.065 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:13:19.007 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-09-04 01:13:31.185 00:00:10.372 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:14:19.227 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-09-04 01:14:31.590 00:00:10.367 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:15:19.442 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-09-04 01:15:31.996 00:00:10.362 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:16:19.653 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-09-04 01:16:32.398 00:00:10.364 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:12:23.210 00:06:00.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:17:19.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57056 10 6452 1 2025-09-04 01:17:32.804 00:00:10.370 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:17:51.884 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:17:52.216 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:13:23.209 00:06:00.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:18:20.041 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55698 10 6452 1 2025-09-04 01:18:33.216 00:00:10.364 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:19:20.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-09-04 01:19:33.615 00:00:10.333 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:20:20.472 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-09-04 01:20:33.992 00:00:10.367 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:21:20.682 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-09-04 01:21:34.395 00:00:10.462 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:22:20.854 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58692 10 6452 1 2025-09-04 01:22:34.895 00:00:10.344 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:22:52.018 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:22:52.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:23:21.082 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6452 1 2025-09-04 01:23:35.281 00:00:10.362 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:19:23.211 00:06:00.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:24:21.255 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56728 10 6452 1 2025-09-04 01:24:35.684 00:00:10.363 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:20:23.209 00:06:00.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:25:21.429 00:00:10.789 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-09-04 01:25:36.103 00:00:10.374 TCP 23.104.0.1:43792 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:26:22.257 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51746 10 6452 1 2025-09-04 01:26:36.521 00:00:10.325 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:27:22.474 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-04 01:27:36.891 00:00:10.365 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:27:52.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:27:52.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:28:22.644 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54036 10 6452 1 2025-09-04 01:28:37.295 00:00:10.369 TCP 23.104.0.1:59176 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:29:22.819 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49526 10 6452 1 2025-09-04 01:29:37.699 00:00:10.367 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:30:22.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-09-04 01:30:38.105 00:00:10.366 TCP 23.104.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:26:23.211 00:06:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:31:23.215 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 11 6504 1 2025-09-04 01:31:38.521 00:00:10.376 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:27:23.210 00:06:00.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:32:23.484 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38312 10 6452 1 2025-09-04 01:32:38.936 00:00:10.378 TCP 23.104.0.1:49642 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:32:52.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:32:52.408 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:33:23.700 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-09-04 01:33:39.352 00:00:10.364 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:34:23.878 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-09-04 01:34:39.751 00:00:10.322 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:35:24.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 10 6452 1 2025-09-04 01:35:40.118 00:00:10.363 TCP 23.104.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:36:24.311 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-09-04 01:36:40.522 00:00:10.366 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:37:24.529 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-09-04 01:37:40.930 00:00:10.384 TCP 23.104.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:37:52.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:37:52.524 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:33:23.246 00:06:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:38:24.742 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37158 10 6452 1 2025-09-04 01:38:41.353 00:00:10.748 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:34:23.245 00:06:00.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:39:24.912 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 2025-09-04 01:39:42.158 00:00:10.329 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:40:25.108 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-09-04 01:40:42.523 00:00:10.421 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:41:25.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-09-04 01:41:43.006 00:00:10.322 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:42:25.540 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-09-04 01:42:52.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:42:43.369 00:00:10.365 TCP 23.104.0.1:47392 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:42:52.638 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:43:25.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-09-04 01:43:43.773 00:00:10.374 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:44:25.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58174 12 6556 1 2025-09-04 01:44:44.180 00:00:10.359 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:40:23.274 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:45:26.183 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-09-04 01:45:44.578 00:00:10.367 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:41:23.272 00:06:00.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:46:26.363 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-09-04 01:46:44.981 00:00:10.372 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:47:26.537 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-09-04 01:47:52.694 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:47:45.387 00:00:10.380 TCP 23.104.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:47:52.675 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:48:26.707 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-09-04 01:48:45.815 00:00:10.364 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:49:26.887 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6452 1 2025-09-04 01:49:46.222 00:00:10.372 TCP 23.104.0.1:47882 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:50:27.121 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-09-04 01:50:46.637 00:00:10.379 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:51:27.293 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-09-04 01:51:47.063 00:00:10.366 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:47:23.276 00:06:00.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:52:27.510 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6452 1 2025-09-04 01:52:53.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:52:52.886 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:52:47.469 00:00:10.364 TCP 23.104.0.1:39088 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:48:23.273 00:06:00.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 01:53:27.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-09-04 01:53:47.868 00:00:10.368 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:54:27.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-09-04 01:54:48.273 00:00:10.361 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:55:28.106 00:00:10.548 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-09-04 01:55:48.674 00:00:10.373 TCP 23.104.0.1:48840 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:56:28.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-09-04 01:56:49.107 00:00:10.366 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:57:28.911 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-09-04 01:57:52.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 01:57:52.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 01:57:49.513 00:00:10.361 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:58:29.132 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 Summary: total flows: 159, total bytes: 496117, total packets: 1550, avg bps: 1097, avg pps: 0, avg bpp: 320 Time window: 2025-09-04 00:58:23 - 2025-09-04 01:58:39 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0028s User: 0.0019s Wall: 0.0023s flows/second: 68801.6 Runtime: 0.0023s