Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 08:58:56.525 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-09-22 08:59:32.380 00:00:10.366 TCP 23.104.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:59:56.748 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-09-22 08:56:31.926 00:05:01.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:00:32.786 00:00:10.325 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:00:56.927 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6452 1 2025-09-22 08:57:31.930 00:05:01.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:01:33.155 00:00:10.336 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:01:48.391 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:01:48.625 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:01:57.136 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-09-22 09:02:33.527 00:00:10.364 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:02:57.308 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-09-22 09:03:33.930 00:00:10.333 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:03:57.536 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58836 10 6452 1 2025-09-22 09:04:34.300 00:00:10.322 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:04:57.744 00:00:10.510 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-09-22 09:05:34.668 00:00:10.326 TCP 23.104.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:05:58.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36218 10 6452 1 2025-09-22 09:02:31.929 00:05:01.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:06:35.032 00:00:10.328 TCP 23.104.0.1:44622 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:06:48.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:06:48.564 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:06:58.506 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-09-22 09:03:31.931 00:05:01.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:07:35.398 00:00:10.369 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:07:58.694 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60390 10 6452 1 2025-09-22 09:08:35.810 00:00:10.333 TCP 23.104.0.1:44708 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:08:58.915 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-09-22 09:09:36.179 00:00:10.366 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:09:59.142 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33500 10 6452 1 2025-09-22 09:10:36.585 00:00:10.329 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:10:59.351 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-09-22 09:11:48.442 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:11:36.955 00:00:10.367 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:11:48.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:11:59.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-22 09:08:31.929 00:05:01.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:12:37.364 00:00:10.363 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:12:59.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-09-22 09:09:31.932 00:05:01.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:13:37.766 00:00:10.378 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:13:59.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-09-22 09:14:38.181 00:00:10.366 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:15:00.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-09-22 09:15:38.585 00:00:10.375 TCP 23.104.0.1:56430 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:16:00.395 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35112 10 6452 1 2025-09-22 09:16:38.996 00:00:10.359 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:16:48.711 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:16:48.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:17:00.603 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-09-22 09:17:39.402 00:00:10.433 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:18:00.811 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-09-22 09:14:31.931 00:05:01.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:18:39.878 00:00:10.350 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:19:01.031 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-09-22 09:15:31.933 00:05:01.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:19:40.262 00:00:10.327 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:20:01.253 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-09-22 09:20:40.626 00:00:10.370 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:21:01.478 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6452 1 2025-09-22 09:21:48.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:21:48.941 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:21:41.056 00:00:10.319 TCP 23.104.0.1:55914 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:22:01.693 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44432 10 6452 1 2025-09-22 09:22:41.413 00:00:10.367 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:23:01.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59638 10 6452 1 2025-09-22 09:23:41.820 00:00:10.409 TCP 23.104.0.1:40432 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:24:02.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6452 1 2025-09-22 09:20:31.932 00:05:01.353 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:24:42.270 00:00:10.367 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:25:02.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-09-22 09:21:31.934 00:05:01.351 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:25:42.677 00:00:10.370 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:26:02.551 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 10 6452 1 2025-09-22 09:26:48.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:26:49.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:26:43.105 00:00:10.363 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:27:02.747 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-09-22 09:27:43.514 00:00:10.361 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:28:02.966 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 12 6556 1 2025-09-22 09:28:43.917 00:00:10.334 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:29:03.191 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-09-22 09:29:44.289 00:00:10.332 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:30:03.370 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-09-22 09:26:31.933 00:05:01.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:30:44.660 00:00:10.361 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:31:03.595 00:00:12.255 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-09-22 09:27:31.936 00:05:01.349 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:31:49.351 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:31:49.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:31:45.082 00:00:10.362 TCP 23.104.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:32:05.886 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 10 6452 1 2025-09-22 09:32:45.484 00:00:10.362 TCP 23.104.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:33:06.085 00:00:10.631 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-09-22 09:33:45.885 00:00:10.376 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:34:06.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 10 6452 1 2025-09-22 09:34:46.305 00:00:10.364 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:35:06.975 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55528 10 6452 1 2025-09-22 09:35:46.708 00:00:10.380 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 12 1559 1 2025-09-22 09:36:07.218 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-22 09:32:31.934 00:05:01.354 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:36:49.337 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:36:49.484 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:36:47.125 00:00:10.374 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:37:07.444 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55964 10 6452 1 2025-09-22 09:33:31.938 00:05:01.349 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:37:47.534 00:00:10.356 TCP 23.104.0.1:58578 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:38:07.666 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39146 10 6452 1 2025-09-22 09:38:47.936 00:00:10.370 TCP 23.104.0.1:44032 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:39:07.876 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-09-22 09:39:48.345 00:00:10.325 TCP 23.104.0.1:48496 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:40:08.095 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-09-22 09:40:48.727 00:00:10.371 TCP 23.104.0.1:60434 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:41:08.301 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-09-22 09:41:49.347 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:41:49.307 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:41:49.141 00:00:10.362 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:42:08.482 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-09-22 09:38:31.936 00:05:01.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:42:49.545 00:00:10.958 TCP 23.104.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:43:08.691 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-09-22 09:39:31.940 00:05:01.349 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:43:50.542 00:00:10.795 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:44:08.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-09-22 09:44:51.376 00:00:10.396 TCP 23.104.0.1:50760 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:45:09.112 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42482 10 6452 1 2025-09-22 09:45:51.809 00:00:10.369 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:46:09.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44204 10 6452 1 2025-09-22 09:46:49.483 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:46:49.393 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:46:52.214 00:00:10.324 TCP 23.104.0.1:45752 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:47:09.506 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-09-22 09:47:52.577 00:00:10.366 TCP 23.104.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:48:09.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-09-22 09:44:31.938 00:05:01.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:48:52.983 00:00:10.367 TCP 23.104.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:49:09.906 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56816 10 6452 1 2025-09-22 09:45:31.940 00:05:01.350 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:49:53.392 00:00:10.367 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:50:10.124 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40038 10 6452 1 2025-09-22 09:50:53.799 00:00:10.369 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:51:10.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-09-22 09:51:49.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:51:49.596 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:51:54.206 00:00:10.388 TCP 23.104.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:52:10.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42782 10 6452 1 2025-09-22 09:52:54.669 00:00:10.326 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:53:10.777 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-09-22 09:53:55.032 00:00:10.364 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:54:10.997 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51990 10 6452 1 2025-09-22 09:50:31.937 00:05:01.356 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 09:54:55.434 00:00:10.367 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:55:11.214 00:00:10.966 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-09-22 09:51:31.942 00:05:01.353 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 09:55:55.837 00:00:10.378 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:56:12.220 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-09-22 09:56:50.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 09:56:49.651 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 09:56:56.253 00:00:10.366 TCP 23.104.0.1:59964 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:57:12.443 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-09-22 09:57:56.659 00:00:10.364 TCP 23.104.0.1:57660 -> 1.101.0.1:3000 11 1507 1 2025-09-22 09:58:12.685 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-09-22 08:56:31 - 2025-09-22 09:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0020s Wall: 0.0028s flows/second: 58906.7 Runtime: 0.0028s