Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 22:58:52.960 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 12 10367 1 2025-09-12 22:59:26.723 00:00:10.373 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:59:53.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-12 23:00:27.139 00:00:10.328 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:00:53.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-09-12 22:57:27.552 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:57:27.554 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:01:27.521 00:00:10.372 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:01:53.609 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-09-12 23:02:16.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:02:16.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:02:27.935 00:00:10.388 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:02:53.834 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-09-12 23:03:28.363 00:00:10.319 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:03:54.073 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6452 1 2025-09-12 23:04:28.722 00:00:10.384 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:04:54.295 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57536 10 6452 1 2025-09-12 23:05:29.143 00:00:10.365 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:05:54.512 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-09-12 23:06:29.547 00:00:10.371 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:06:54.737 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40264 10 6452 1 2025-09-12 23:07:16.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:07:16.708 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:03:27.559 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:03:27.554 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:07:29.963 00:00:10.367 TCP 23.104.0.1:59230 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:07:54.946 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-12 23:08:30.366 00:00:10.360 TCP 23.104.0.1:60646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:08:55.204 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-09-12 23:09:30.763 00:00:10.377 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:09:55.375 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-09-12 23:10:31.179 00:00:10.365 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:10:55.547 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-09-12 23:11:31.577 00:00:10.324 TCP 23.104.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:11:55.782 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-09-12 23:12:16.872 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:12:16.824 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:12:31.943 00:00:10.336 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:12:55.956 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-09-12 23:09:27.562 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:09:27.560 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:13:32.317 00:00:10.441 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 15 1926 1 2025-09-12 23:13:56.194 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:51996 12 10365 1 2025-09-12 23:14:32.802 00:00:10.378 TCP 23.104.0.1:60804 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:14:56.729 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-09-12 23:15:33.238 00:00:10.371 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:15:56.944 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-09-12 23:16:33.650 00:00:10.369 TCP 23.104.0.1:44786 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:16:57.184 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-09-12 23:17:16.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:17:16.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:17:34.064 00:00:10.328 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:17:57.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-09-12 23:18:34.430 00:00:10.365 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:18:57.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47982 10 6452 1 2025-09-12 23:15:27.564 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:15:27.561 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:19:34.835 00:00:10.387 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:19:57.846 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6452 1 2025-09-12 23:20:35.258 00:00:10.363 TCP 23.104.0.1:56940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:20:58.033 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-09-12 23:21:35.660 00:00:10.324 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:21:58.247 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-09-12 23:22:16.710 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:22:17.304 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:22:36.021 00:00:10.363 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:22:58.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50990 10 6452 1 2025-09-12 23:23:36.417 00:00:10.782 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:23:58.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-09-12 23:24:37.233 00:00:10.365 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:24:58.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-09-12 23:21:27.562 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:21:27.565 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:25:37.639 00:00:10.369 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:25:59.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-09-12 23:26:38.049 00:00:10.369 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:26:59.333 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-09-12 23:27:16.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:27:17.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:27:38.454 00:00:10.363 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:27:59.566 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-09-12 23:28:38.857 00:00:10.379 TCP 23.104.0.1:44884 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:28:59.787 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42768 10 6452 1 2025-09-12 23:29:39.276 00:00:10.419 TCP 23.104.0.1:56024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:30:00.008 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-09-12 23:30:39.753 00:00:10.380 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:31:00.281 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:45130 10 6452 1 2025-09-12 23:27:27.565 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:27:27.568 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:31:40.179 00:00:10.326 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:32:00.772 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55414 10 6452 1 2025-09-12 23:32:17.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:32:17.903 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:32:40.542 00:00:10.359 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:33:00.979 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 10 6452 1 2025-09-12 23:33:40.941 00:00:10.739 TCP 23.104.0.1:35762 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:34:01.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6452 1 2025-09-12 23:34:41.718 00:00:10.367 TCP 23.104.0.1:50458 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:35:01.440 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-09-12 23:35:42.127 00:00:10.364 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:36:01.665 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-09-12 23:36:42.530 00:00:11.005 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:37:01.888 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6452 1 2025-09-12 23:37:17.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:37:17.037 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:33:27.569 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:33:27.565 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:37:43.580 00:00:10.391 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:38:02.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-09-12 23:38:44.007 00:00:10.361 TCP 23.104.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:39:02.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-09-12 23:39:44.403 00:00:10.373 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:40:02.504 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 10 6452 1 2025-09-12 23:40:44.813 00:00:10.364 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:41:02.677 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-09-12 23:41:45.217 00:00:10.363 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:42:17.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:42:02.895 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-09-12 23:42:17.273 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:42:45.618 00:00:10.362 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:43:03.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-09-12 23:39:27.566 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:39:27.569 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:43:46.017 00:00:10.368 TCP 23.104.0.1:48474 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:44:03.297 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6452 1 2025-09-12 23:44:46.423 00:00:10.367 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:45:03.519 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-09-12 23:45:46.829 00:00:10.389 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:46:03.737 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-09-12 23:46:47.257 00:00:10.372 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:47:03.969 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57210 13 6608 1 2025-09-12 23:47:17.218 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:47:17.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:47:47.662 00:00:10.363 TCP 23.104.0.1:57892 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:48:04.189 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-09-12 23:48:48.089 00:00:10.366 TCP 23.104.0.1:53830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:49:04.413 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-09-12 23:45:27.572 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:45:27.574 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:49:48.495 00:00:10.374 TCP 23.104.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:50:04.636 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-09-12 23:50:48.903 00:00:10.386 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:51:04.813 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2025-09-12 23:51:49.325 00:00:10.372 TCP 23.104.0.1:50666 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:52:05.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32976 10 6452 1 2025-09-12 23:52:17.656 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:52:17.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:52:49.735 00:00:10.371 TCP 23.104.0.1:50906 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:53:05.251 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-09-12 23:53:50.143 00:00:10.365 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:54:05.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-09-12 23:54:50.544 00:00:10.364 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:55:05.676 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-09-12 23:51:27.577 00:05:00.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 23:51:27.574 00:05:00.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:55:50.944 00:00:10.335 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:56:05.884 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-09-12 23:56:51.320 00:00:10.319 TCP 23.104.0.1:41846 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:57:06.098 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-09-12 23:57:17.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 23:57:17.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 23:57:51.678 00:00:10.373 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 23:58:06.312 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 Summary: total flows: 163, total bytes: 505244, total packets: 1572, avg bps: 1107, avg pps: 0, avg bpp: 321 Time window: 2025-09-12 22:57:27 - 2025-09-12 23:58:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0014s Wall: 0.0022s flows/second: 73323.8 Runtime: 0.0022s