Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 07:59:08.671 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2025-09-23 07:59:10.105 00:00:10.368 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:00:08.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-09-23 08:00:10.505 00:00:10.373 TCP 23.104.0.1:48936 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:56:32.367 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:01:10.917 00:00:10.437 TCP 23.104.0.1:40064 -> 1.101.0.1:3000 15 1926 1 2025-09-23 08:01:09.083 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33594 12 10367 1 2025-09-23 07:57:32.369 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:02:16.030 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:02:16.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:02:09.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-09-23 08:02:11.397 00:00:10.360 TCP 23.104.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:03:09.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-09-23 08:03:11.796 00:00:10.379 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:04:09.749 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-09-23 08:04:12.210 00:00:10.325 TCP 23.104.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:05:09.955 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 12 6556 1 2025-09-23 08:05:12.571 00:00:10.364 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:06:10.184 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-09-23 08:06:12.975 00:00:10.325 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:02:32.369 00:05:01.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:07:16.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:07:16.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:07:10.362 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56526 10 6452 1 2025-09-23 08:07:13.343 00:00:10.367 TCP 23.104.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:03:32.371 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:08:10.553 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-09-23 08:08:13.743 00:00:10.383 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:09:10.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6452 1 2025-09-23 08:09:14.165 00:00:10.363 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:10:10.978 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48280 10 6452 1 2025-09-23 08:10:14.566 00:00:10.369 TCP 23.104.0.1:53338 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:11:11.223 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-09-23 08:11:14.965 00:00:10.378 TCP 23.104.0.1:56338 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:12:16.440 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:12:16.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:12:11.391 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-09-23 08:12:15.389 00:00:10.360 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:08:32.374 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:13:11.610 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6452 1 2025-09-23 08:13:15.787 00:00:10.363 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:09:32.376 00:05:01.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:14:11.832 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-09-23 08:14:16.195 00:00:10.385 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:15:12.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33488 10 6452 1 2025-09-23 08:15:16.620 00:00:10.370 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:16:12.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-09-23 08:16:17.025 00:00:10.370 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:17:16.425 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:17:16.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:17:12.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 10 6452 1 2025-09-23 08:17:17.446 00:00:10.373 TCP 23.104.0.1:46142 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:18:12.726 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-09-23 08:18:17.865 00:00:10.327 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:14:32.376 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:19:13.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43980 10 6452 1 2025-09-23 08:19:18.229 00:00:10.368 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:15:32.380 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:20:13.337 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 10 6452 1 2025-09-23 08:20:18.636 00:00:10.366 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:21:13.509 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-09-23 08:21:19.055 00:00:10.363 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:22:16.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:22:16.462 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:22:13.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-09-23 08:22:19.469 00:00:10.370 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:23:13.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 12 6556 1 2025-09-23 08:23:19.866 00:00:10.368 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:24:14.189 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-09-23 08:24:20.274 00:00:10.364 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:20:32.377 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:25:14.363 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57416 10 6452 1 2025-09-23 08:25:20.678 00:00:10.367 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:21:32.380 00:05:01.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:26:14.582 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-09-23 08:26:21.102 00:00:10.362 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:27:16.643 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:27:16.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:27:14.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46578 10 6452 1 2025-09-23 08:27:21.504 00:00:10.365 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:28:15.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2025-09-23 08:28:21.907 00:00:10.329 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:29:15.222 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-09-23 08:29:22.275 00:00:10.932 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:30:15.436 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-09-23 08:26:32.379 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:30:23.244 00:00:10.374 TCP 23.104.0.1:44162 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:31:16.382 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-09-23 08:27:32.383 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:31:23.655 00:00:10.368 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:32:16.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:32:16.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:32:16.550 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44280 10 6452 1 2025-09-23 08:32:24.092 00:00:10.364 TCP 23.104.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:33:16.734 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-09-23 08:33:24.493 00:00:10.365 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:34:16.938 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-09-23 08:34:24.900 00:00:10.374 TCP 23.104.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:35:17.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 10 6452 1 2025-09-23 08:35:25.312 00:00:10.366 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:36:17.403 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-23 08:32:32.382 00:05:01.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:36:25.714 00:00:10.375 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:37:16.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:37:17.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:37:17.639 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-09-23 08:37:26.123 00:00:10.365 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:33:32.384 00:05:01.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:38:17.822 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-09-23 08:38:26.529 00:00:10.359 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:39:18.064 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-09-23 08:39:26.931 00:00:10.379 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:40:18.282 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44426 10 6452 1 2025-09-23 08:40:27.349 00:00:10.369 TCP 23.104.0.1:33816 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:41:18.491 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-09-23 08:41:27.758 00:00:10.378 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:42:16.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:42:16.795 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:42:18.702 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48502 10 6452 1 2025-09-23 08:38:32.382 00:05:01.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:42:28.175 00:00:10.360 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:43:18.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-09-23 08:39:32.386 00:05:01.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:43:28.573 00:00:10.332 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:44:19.125 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-09-23 08:44:28.945 00:00:10.376 TCP 23.104.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:45:19.350 00:00:10.446 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6452 1 2025-09-23 08:45:29.369 00:00:10.332 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:46:19.836 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-09-23 08:46:29.750 00:00:10.391 TCP 23.104.0.1:44116 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:47:16.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:47:17.181 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:47:20.090 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-09-23 08:47:30.192 00:00:10.372 TCP 23.104.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:48:20.262 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-09-23 08:44:32.383 00:05:01.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:48:30.601 00:00:10.363 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:49:20.482 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-09-23 08:45:32.390 00:05:01.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:49:31.003 00:00:10.372 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:50:20.698 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54808 10 6452 1 2025-09-23 08:50:31.406 00:00:10.366 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:51:20.911 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-09-23 08:51:31.810 00:00:10.360 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:52:17.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:52:17.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:52:21.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-09-23 08:52:32.209 00:00:10.368 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:53:21.341 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-09-23 08:53:32.615 00:00:10.364 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:54:21.567 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56020 10 6452 1 2025-09-23 08:50:32.388 00:05:01.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 08:54:33.016 00:00:10.369 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:55:21.784 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49054 10 6452 1 2025-09-23 08:51:32.389 00:05:01.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 08:55:33.432 00:00:10.363 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:56:22.003 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6452 1 2025-09-23 08:56:33.833 00:00:10.338 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:57:17.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 08:57:17.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 08:57:22.375 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-09-23 08:57:34.207 00:00:10.360 TCP 23.104.0.1:53416 -> 1.101.0.1:3000 11 1507 1 2025-09-23 08:58:22.589 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54866 10 6452 1 2025-09-23 08:58:34.605 00:00:10.950 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502890, total packets: 1582, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-09-23 07:56:32 - 2025-09-23 08:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0025s flows/second: 65995.0 Runtime: 0.0025s