Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 22:59:03.183 00:00:10.896 TCP 1.101.0.1:3000 -> 22.102.0.1:57428 10 6452 1 2025-09-14 22:59:21.993 00:00:10.327 TCP 23.104.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:00:04.132 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35986 10 6452 1 2025-09-14 22:56:28.499 00:05:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:00:22.361 00:00:10.333 TCP 23.104.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:01:04.314 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51722 10 6452 1 2025-09-14 22:57:28.501 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:01:22.732 00:00:10.372 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:02:04.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-09-14 23:02:23.139 00:00:10.381 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:03:14.398 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:03:04.713 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-09-14 23:03:14.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:03:23.543 00:00:10.321 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:04:04.927 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-09-14 23:04:23.941 00:00:10.387 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:05:05.136 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-09-14 23:05:24.363 00:00:10.367 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:06:05.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-09-14 23:02:28.498 00:05:00.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:06:24.768 00:00:10.371 TCP 23.104.0.1:48416 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:07:05.565 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34682 10 6452 1 2025-09-14 23:03:28.502 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:07:25.179 00:00:10.361 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:08:14.492 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:08:05.776 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-09-14 23:08:14.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:08:25.584 00:00:10.419 TCP 23.104.0.1:39118 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:09:05.989 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-09-14 23:09:26.057 00:00:10.368 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:10:06.210 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6452 1 2025-09-14 23:10:26.466 00:00:10.372 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:11:06.435 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6452 1 2025-09-14 23:11:26.879 00:00:10.360 TCP 23.104.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:12:06.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-09-14 23:08:28.504 00:05:00.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:12:27.281 00:00:10.365 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:13:06.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-09-14 23:13:14.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:13:14.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:09:28.508 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:13:27.685 00:00:10.366 TCP 23.104.0.1:51844 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:14:07.044 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-09-14 23:14:28.109 00:00:10.391 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:15:07.255 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-09-14 23:15:28.535 00:00:10.365 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:16:07.471 00:00:10.900 TCP 1.101.0.1:3000 -> 22.102.0.1:42270 10 6452 1 2025-09-14 23:16:28.941 00:00:10.383 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:17:08.412 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47362 10 6452 1 2025-09-14 23:17:29.363 00:00:10.362 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:18:14.871 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:18:14.945 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:18:08.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-09-14 23:14:28.508 00:05:00.948 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:18:29.764 00:00:10.667 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:19:08.831 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-09-14 23:15:28.510 00:05:00.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:19:30.470 00:00:10.367 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:20:09.066 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-09-14 23:20:30.874 00:00:10.365 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:21:09.276 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-09-14 23:21:31.280 00:00:10.362 TCP 23.104.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:22:09.487 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-09-14 23:22:31.681 00:00:10.362 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:23:14.729 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:23:14.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:23:09.700 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50048 10 6452 1 2025-09-14 23:23:32.108 00:00:10.361 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:24:09.909 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-09-14 23:20:28.510 00:05:00.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:24:32.518 00:00:10.345 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:25:10.100 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6452 1 2025-09-14 23:21:28.512 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:25:32.925 00:00:10.384 TCP 23.104.0.1:39548 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:26:10.317 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-09-14 23:26:33.345 00:00:10.361 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:27:10.672 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-09-14 23:27:33.746 00:00:10.369 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:28:14.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:28:14.919 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:28:10.899 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-09-14 23:28:34.154 00:00:10.327 TCP 23.104.0.1:52674 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:29:11.123 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:34240 10 6452 1 2025-09-14 23:29:34.516 00:00:10.368 TCP 23.104.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:30:11.312 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-09-14 23:26:28.513 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:30:34.923 00:00:10.386 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:31:11.569 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-09-14 23:27:28.514 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:31:35.348 00:00:10.362 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:32:11.796 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-09-14 23:32:35.751 00:00:10.576 TCP 23.104.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:33:15.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:33:15.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:33:12.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-09-14 23:33:36.359 00:00:10.365 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:34:12.227 00:00:10.513 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-09-14 23:34:36.766 00:00:10.323 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:35:12.783 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33288 10 6452 1 2025-09-14 23:35:37.127 00:00:10.366 TCP 23.104.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:36:13.013 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58254 10 6452 1 2025-09-14 23:32:28.513 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:36:37.531 00:00:10.360 TCP 23.104.0.1:56466 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:37:13.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-09-14 23:33:28.515 00:05:00.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:37:37.931 00:00:10.389 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:38:14.857 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:38:14.953 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:38:13.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-09-14 23:38:38.368 00:00:10.323 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:39:13.657 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-09-14 23:39:38.728 00:00:10.332 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:40:13.868 00:00:10.653 TCP 1.101.0.1:3000 -> 22.102.0.1:52974 10 6452 1 2025-09-14 23:40:39.109 00:00:10.368 TCP 23.104.0.1:37626 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:41:14.560 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-09-14 23:41:39.519 00:00:10.360 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:42:14.779 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57370 10 6452 1 2025-09-14 23:38:28.514 00:05:00.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:42:39.918 00:00:10.372 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:43:15.095 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:43:15.236 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:43:14.997 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-09-14 23:39:28.517 00:05:00.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:43:40.328 00:00:10.366 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:44:15.213 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44082 10 6452 1 2025-09-14 23:44:40.734 00:00:10.374 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:45:15.385 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-09-14 23:45:41.135 00:00:10.368 TCP 23.104.0.1:45080 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:46:15.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60372 11 6492 1 2025-09-14 23:46:41.541 00:00:10.598 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:47:15.769 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41374 10 6452 1 2025-09-14 23:47:42.181 00:00:10.323 TCP 23.104.0.1:52212 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:48:15.375 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:48:15.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:48:15.945 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-09-14 23:44:28.514 00:05:00.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:48:42.543 00:00:10.365 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:49:16.176 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48188 10 6452 1 2025-09-14 23:45:28.517 00:05:00.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:49:42.942 00:00:10.377 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:50:16.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-09-14 23:50:43.358 00:00:10.364 TCP 23.104.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:51:16.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-09-14 23:51:43.763 00:00:10.333 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:52:16.822 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 12 6556 1 2025-09-14 23:52:44.138 00:00:10.377 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:53:15.839 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:53:15.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:53:17.064 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:36666 10 6452 1 2025-09-14 23:53:44.560 00:00:10.373 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:54:17.408 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54234 10 6452 1 2025-09-14 23:50:28.515 00:05:00.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 23:54:44.974 00:00:10.376 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:51:28.517 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 23:55:17.580 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-09-14 23:55:45.384 00:00:10.361 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:56:17.776 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 10 6452 1 2025-09-14 23:56:45.789 00:00:10.460 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:57:18.012 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 10 6452 1 2025-09-14 23:57:46.288 00:00:10.362 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:58:15.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 23:58:15.707 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 23:58:18.189 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 Summary: total flows: 163, total bytes: 496985, total packets: 1564, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-09-14 22:56:28 - 2025-09-14 23:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0015s Wall: 0.0021s flows/second: 77364.7 Runtime: 0.0021s