Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 22:59:19.362 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36132 10 6452 1 2025-09-11 22:59:36.981 00:00:10.366 TCP 23.104.0.1:57286 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:00:19.579 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-09-11 23:00:37.388 00:00:10.362 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:01:19.800 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-09-11 23:01:37.787 00:00:10.325 TCP 23.104.0.1:42146 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:01:48.039 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:01:47.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:02:20.035 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54222 10 6452 1 2025-09-11 23:02:38.148 00:00:10.365 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:03:20.202 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-09-11 23:03:38.556 00:00:10.363 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-09-11 22:59:27.091 00:06:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:04:20.408 00:00:15.565 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-09-11 23:04:38.955 00:00:10.369 TCP 23.104.0.1:40104 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:00:27.089 00:06:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:05:26.017 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35506 10 6452 1 2025-09-11 23:05:39.362 00:00:10.366 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:06:26.230 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-09-11 23:06:47.797 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:06:39.767 00:00:10.576 TCP 23.104.0.1:39676 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:06:47.734 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:07:26.408 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-09-11 23:07:40.412 00:00:10.362 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:08:26.624 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32868 10 6452 1 2025-09-11 23:08:40.811 00:00:10.368 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:09:26.837 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54942 10 6452 1 2025-09-11 23:09:41.220 00:00:10.325 TCP 23.104.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:10:27.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-09-11 23:10:41.580 00:00:10.361 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:06:27.093 00:06:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:11:27.285 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-09-11 23:11:47.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:11:47.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:11:41.982 00:00:10.963 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:07:27.090 00:06:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:12:27.498 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-09-11 23:12:42.985 00:00:10.365 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:13:27.708 00:00:10.554 TCP 1.101.0.1:3000 -> 22.102.0.1:39950 10 6452 1 2025-09-11 23:13:43.393 00:00:10.365 TCP 23.104.0.1:34850 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:14:28.311 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45226 10 6452 1 2025-09-11 23:14:43.798 00:00:10.367 TCP 23.104.0.1:59588 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:15:28.515 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-09-11 23:15:44.207 00:00:10.373 TCP 23.104.0.1:33556 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:16:28.740 00:00:10.557 TCP 1.101.0.1:3000 -> 22.102.0.1:40830 10 6452 1 2025-09-11 23:16:48.055 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:16:48.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:16:44.609 00:00:10.365 TCP 23.104.0.1:55530 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:17:29.338 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-09-11 23:17:45.018 00:00:10.359 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:13:27.094 00:06:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:18:29.566 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49084 10 6452 1 2025-09-11 23:18:45.419 00:00:10.368 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:14:27.092 00:06:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:19:29.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37800 10 6452 1 2025-09-11 23:19:45.826 00:00:10.396 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:20:30.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44312 10 6452 1 2025-09-11 23:20:46.258 00:00:10.361 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:21:30.229 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37014 10 6452 1 2025-09-11 23:21:48.064 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:21:47.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:21:46.654 00:00:10.366 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:22:30.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-09-11 23:22:47.071 00:00:10.360 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:23:30.612 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53470 10 6452 1 2025-09-11 23:23:47.472 00:00:10.324 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:24:30.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40830 10 6452 1 2025-09-11 23:24:47.832 00:00:10.374 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:20:27.096 00:06:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:25:31.069 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33810 10 6452 1 2025-09-11 23:25:48.239 00:00:11.003 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:21:27.093 00:06:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:26:31.298 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-09-11 23:26:48.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:26:48.357 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:26:49.285 00:00:10.364 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:27:31.478 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54788 10 6452 1 2025-09-11 23:27:49.687 00:00:10.322 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:28:31.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50588 10 6452 1 2025-09-11 23:29:31.914 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-09-11 23:28:50.053 00:01:10.768 TCP 23.104.0.1:58924 -> 1.101.0.1:3000 22 3014 1 2025-09-11 23:30:32.134 00:00:10.347 TCP 1.101.0.1:3000 -> 22.102.0.1:46244 10 6452 1 2025-09-11 23:30:50.861 00:00:10.374 TCP 23.104.0.1:34066 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:31:32.520 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44692 10 6452 1 2025-09-11 23:31:48.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:31:48.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:31:51.277 00:00:10.339 TCP 23.104.0.1:44424 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:27:27.095 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:32:32.736 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-09-11 23:32:51.667 00:00:10.360 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:28:27.093 00:06:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:33:32.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60006 10 6452 1 2025-09-11 23:33:52.089 00:00:10.911 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:34:33.182 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42042 10 6452 1 2025-09-11 23:34:53.052 00:00:10.368 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:35:33.404 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35870 10 6452 1 2025-09-11 23:35:53.456 00:00:10.367 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:36:33.627 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-09-11 23:36:48.373 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:36:48.354 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:36:53.860 00:00:15.531 TCP 23.104.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:37:33.849 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-09-11 23:37:59.441 00:00:10.371 TCP 23.104.0.1:36998 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:38:34.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2025-09-11 23:38:59.847 00:00:10.382 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:34:27.098 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:39:34.307 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 2025-09-11 23:40:00.267 00:00:10.367 TCP 23.104.0.1:37098 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:35:27.096 00:06:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:40:34.527 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44258 10 6452 1 2025-09-11 23:41:00.673 00:00:10.377 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:41:34.763 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-09-11 23:41:48.501 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:41:48.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:42:01.108 00:00:10.373 TCP 23.104.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:42:34.929 00:00:10.492 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-09-11 23:43:01.512 00:00:10.378 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:43:35.467 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 13 10417 1 2025-09-11 23:44:01.928 00:00:10.466 TCP 23.104.0.1:32966 -> 1.101.0.1:3000 15 1926 1 2025-09-11 23:44:35.776 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57748 10 6452 1 2025-09-11 23:45:02.436 00:00:10.322 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:45:36.002 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60622 10 6452 1 2025-09-11 23:46:02.796 00:00:10.349 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:41:27.098 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:46:36.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55010 10 6452 1 2025-09-11 23:46:48.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:46:48.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:47:03.181 00:00:10.370 TCP 23.104.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:42:27.100 00:06:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:47:36.444 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 10 6452 1 2025-09-11 23:48:03.591 00:00:10.323 TCP 23.104.0.1:36002 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:48:36.659 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-09-11 23:49:03.948 00:00:10.384 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:49:36.842 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-09-11 23:50:04.373 00:00:10.323 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:50:37.079 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:58190 10 6452 1 2025-09-11 23:51:04.735 00:00:10.329 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:51:48.582 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:51:48.880 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:51:37.584 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-09-11 23:52:05.109 00:00:10.367 TCP 23.104.0.1:37654 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:52:37.799 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-09-11 23:53:05.520 00:00:10.323 TCP 23.104.0.1:50508 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:48:27.104 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-11 23:53:38.014 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-09-11 23:54:05.885 00:00:10.360 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:49:27.101 00:06:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-11 23:54:38.229 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-09-11 23:55:06.282 00:00:10.364 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:55:38.454 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34212 10 6452 1 2025-09-11 23:56:06.687 00:00:10.324 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:56:38.667 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-09-11 23:56:48.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 23:56:48.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 23:57:07.059 00:00:10.388 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:57:38.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-09-11 23:58:07.487 00:00:10.363 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:58:39.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 Summary: total flows: 158, total bytes: 500241, total packets: 1552, avg bps: 1121, avg pps: 0, avg bpp: 322 Time window: 2025-09-11 22:59:19 - 2025-09-11 23:58:49 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 66469.4 Runtime: 0.0024s