Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 03:59:09.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-09-21 03:59:24.925 00:00:10.345 TCP 23.104.0.1:48174 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:00:09.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-09-21 04:00:25.311 00:00:10.758 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-09-21 03:56:31.380 00:05:01.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:01:13.561 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:01:13.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:01:09.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60320 10 6452 1 2025-09-21 04:01:26.119 00:00:10.365 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-21 03:57:31.383 00:05:01.320 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:02:10.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38642 10 6452 1 2025-09-21 04:02:26.518 00:00:10.374 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:03:10.248 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-09-21 04:03:26.930 00:00:10.379 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:04:10.424 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-09-21 04:04:27.351 00:00:10.366 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:05:10.649 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-21 04:05:27.758 00:00:10.334 TCP 23.104.0.1:55706 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:06:13.841 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:06:13.756 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:06:10.878 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58126 10 6452 1 2025-09-21 04:02:31.380 00:05:01.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:06:28.131 00:00:10.321 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:07:11.106 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-09-21 04:03:31.382 00:05:01.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:07:28.492 00:00:10.363 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:08:11.314 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-09-21 04:08:28.892 00:00:10.374 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:09:11.485 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6452 1 2025-09-21 04:09:29.308 00:00:10.364 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:10:11.699 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-09-21 04:10:29.710 00:00:10.362 TCP 23.104.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:11:14.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:11:14.397 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:11:11.877 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-09-21 04:11:30.122 00:00:10.366 TCP 23.104.0.1:39914 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:12:12.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-09-21 04:08:31.381 00:05:01.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:12:30.520 00:00:10.364 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:13:12.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-09-21 04:09:31.385 00:05:01.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:13:30.923 00:00:10.383 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:14:12.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 2025-09-21 04:14:31.342 00:00:10.323 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:15:12.756 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-09-21 04:15:31.700 00:00:10.364 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:16:13.933 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:16:14.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:16:12.968 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 12 10365 1 2025-09-21 04:16:32.103 00:00:10.438 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 15 1926 1 2025-09-21 04:17:13.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50654 10 6452 1 2025-09-21 04:17:32.581 00:00:10.366 TCP 23.104.0.1:59816 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:18:13.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-09-21 04:14:31.382 00:05:01.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:18:32.981 00:00:10.336 TCP 23.104.0.1:58086 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:19:13.645 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-09-21 04:15:31.385 00:05:01.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:19:33.355 00:00:10.362 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:20:13.862 00:00:10.379 TCP 1.101.0.1:3000 -> 22.102.0.1:35738 10 6452 1 2025-09-21 04:20:33.766 00:00:10.374 TCP 23.104.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:21:14.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:21:14.809 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:21:14.281 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 2025-09-21 04:21:34.175 00:00:10.366 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:22:14.516 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:41176 10 6452 1 2025-09-21 04:22:34.581 00:00:10.367 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:23:14.912 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-09-21 04:23:34.982 00:00:10.370 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:24:15.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43910 10 6452 1 2025-09-21 04:20:31.384 00:05:01.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:24:35.390 00:00:10.367 TCP 23.104.0.1:58198 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:25:15.361 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-09-21 04:21:31.389 00:05:01.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:25:35.792 00:00:10.363 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:26:14.022 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:26:14.334 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:26:15.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-09-21 04:26:36.194 00:00:10.363 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:27:15.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-09-21 04:27:36.596 00:00:10.362 TCP 23.104.0.1:42664 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:28:16.011 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-09-21 04:28:36.997 00:00:10.375 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:29:16.224 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-09-21 04:29:37.408 00:00:10.330 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:30:16.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-09-21 04:26:31.387 00:05:01.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:30:37.774 00:00:10.368 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:31:14.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:31:14.106 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:31:16.615 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-09-21 04:27:31.390 00:05:01.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:31:38.180 00:00:10.366 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:32:16.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52272 10 6452 1 2025-09-21 04:32:38.585 00:00:10.447 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:33:17.065 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-09-21 04:33:39.093 00:00:10.488 TCP 23.104.0.1:52776 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:34:17.283 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-09-21 04:34:39.622 00:00:10.371 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:35:17.512 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35224 10 6452 1 2025-09-21 04:35:40.031 00:00:10.365 TCP 23.104.0.1:39676 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:36:14.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:36:14.372 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:36:17.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-09-21 04:32:31.388 00:05:01.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:36:40.435 00:00:10.945 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:37:17.951 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-09-21 04:33:31.391 00:05:01.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:37:41.419 00:00:10.370 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:38:18.197 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-09-21 04:38:41.824 00:00:10.366 TCP 23.104.0.1:43514 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:39:18.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-09-21 04:39:42.224 00:00:10.363 TCP 23.104.0.1:49006 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:40:18.604 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-09-21 04:40:42.626 00:00:10.364 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:41:14.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:41:14.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:41:18.818 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44822 10 6452 1 2025-09-21 04:41:43.029 00:00:10.370 TCP 23.104.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:42:19.050 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-09-21 04:38:31.389 00:05:01.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:42:43.441 00:00:10.366 TCP 23.104.0.1:36124 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:43:19.264 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-09-21 04:39:31.392 00:05:01.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:43:43.847 00:00:10.338 TCP 23.104.0.1:43618 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:44:19.490 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6452 1 2025-09-21 04:44:44.222 00:00:10.365 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:45:19.667 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43130 10 6452 1 2025-09-21 04:45:44.630 00:00:10.379 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:46:14.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:46:14.579 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:46:19.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-09-21 04:46:45.051 00:00:10.366 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:47:20.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-09-21 04:47:45.457 00:00:10.334 TCP 23.104.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:48:20.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 10 6452 1 2025-09-21 04:44:31.390 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:48:45.829 00:00:10.386 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:49:20.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-09-21 04:45:31.394 00:05:01.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:49:46.251 00:00:10.363 TCP 23.104.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:50:20.760 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48952 10 6452 1 2025-09-21 04:50:46.650 00:00:10.368 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:51:14.595 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:51:14.617 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:51:20.976 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46342 10 6452 1 2025-09-21 04:51:47.058 00:00:10.364 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:52:21.195 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-09-21 04:52:47.462 00:00:10.365 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:53:21.419 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58518 10 6452 1 2025-09-21 04:53:47.869 00:00:10.366 TCP 23.104.0.1:58454 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:54:21.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-09-21 04:50:31.394 00:05:01.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 04:54:48.275 00:00:10.366 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:55:21.852 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-09-21 04:51:31.397 00:05:01.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 04:55:48.682 00:00:10.365 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:56:14.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 04:56:14.744 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 04:56:22.065 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-09-21 04:56:49.099 00:00:10.321 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:57:22.280 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-09-21 04:57:49.462 00:00:10.364 TCP 23.104.0.1:37140 -> 1.101.0.1:3000 11 1507 1 2025-09-21 04:58:22.493 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 11 6813 1 Summary: total flows: 163, total bytes: 501534, total packets: 1568, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-09-21 03:56:31 - 2025-09-21 04:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0016s Wall: 0.0034s flows/second: 48611.5 Runtime: 0.0034s