Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 08:59:22.805 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33076 10 6452 1 2025-09-23 08:59:35.591 00:00:10.362 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:00:23.029 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39450 10 6452 1 2025-09-23 08:56:32.388 00:05:01.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:00:35.992 00:00:10.367 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:01:23.216 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-09-23 08:57:32.391 00:05:01.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:01:36.393 00:00:10.325 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:02:17.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:02:17.345 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:02:23.446 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-09-23 09:02:36.756 00:00:10.328 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:03:23.664 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6452 1 2025-09-23 09:03:37.120 00:00:10.365 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:04:23.878 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-09-23 09:04:37.525 00:00:10.372 TCP 23.104.0.1:33812 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:05:24.086 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-09-23 09:05:37.934 00:00:10.380 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:06:24.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-09-23 09:02:32.389 00:05:01.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:06:38.348 00:00:10.370 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:07:17.506 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:07:17.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:03:32.391 00:05:01.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:07:24.526 00:00:10.744 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-09-23 09:07:38.759 00:00:10.371 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:08:25.316 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-09-23 09:08:39.172 00:00:10.360 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:09:25.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-09-23 09:09:39.571 00:00:10.368 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:10:25.750 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-09-23 09:10:39.976 00:00:10.372 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:11:25.965 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36734 10 6452 1 2025-09-23 09:11:40.384 00:00:10.920 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:12:17.618 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:12:17.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:12:26.150 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-09-23 09:08:32.391 00:05:01.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:12:41.344 00:00:10.323 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:13:26.365 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-09-23 09:09:32.393 00:05:01.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:13:41.699 00:00:10.368 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:14:26.577 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-09-23 09:14:42.110 00:00:10.418 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:15:26.746 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-09-23 09:15:42.576 00:00:10.379 TCP 23.104.0.1:46254 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:16:26.955 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-09-23 09:16:43.001 00:00:10.366 TCP 23.104.0.1:52696 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:17:17.491 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:17:17.668 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:17:27.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-09-23 09:17:43.415 00:00:10.329 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:14:32.391 00:05:01.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:18:27.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43700 10 6452 1 2025-09-23 09:18:43.784 00:00:10.366 TCP 23.104.0.1:58392 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:15:32.395 00:05:01.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:19:27.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49858 10 6452 1 2025-09-23 09:19:44.191 00:00:10.378 TCP 23.104.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:20:27.820 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58900 10 6452 1 2025-09-23 09:20:44.603 00:00:10.366 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:21:28.041 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-09-23 09:21:45.008 00:00:10.320 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:22:18.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:22:17.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:22:28.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6452 1 2025-09-23 09:22:45.365 00:00:10.365 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:23:28.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-09-23 09:23:45.767 00:00:10.374 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:20:32.392 00:05:01.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:24:28.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-09-23 09:24:46.178 00:00:10.367 TCP 23.104.0.1:50144 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:21:32.395 00:05:01.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:25:28.895 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-09-23 09:25:46.580 00:00:10.366 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:26:29.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-23 09:26:46.986 00:00:10.366 TCP 23.104.0.1:53966 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:27:17.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:27:17.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:27:29.332 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-09-23 09:27:47.390 00:00:10.361 TCP 23.104.0.1:37420 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:28:29.587 00:00:10.310 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-09-23 09:28:47.790 00:00:10.367 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:29:29.937 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-09-23 09:29:48.195 00:00:10.362 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:26:32.395 00:05:01.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:30:30.177 00:00:10.329 TCP 1.101.0.1:3000 -> 22.102.0.1:38436 10 6452 1 2025-09-23 09:30:48.597 00:00:10.364 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:27:32.397 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:31:30.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50362 10 6452 1 2025-09-23 09:31:49.004 00:00:10.369 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:32:17.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:32:17.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:32:30.771 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-09-23 09:32:49.413 00:00:10.325 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:33:30.937 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-09-23 09:33:49.773 00:00:10.370 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:34:31.170 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-09-23 09:34:50.178 00:00:10.362 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:35:31.339 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-09-23 09:35:50.581 00:00:10.363 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:32:32.398 00:05:01.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:36:31.550 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-09-23 09:36:50.988 00:00:10.372 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:37:18.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:37:18.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:33:32.399 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:37:31.763 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-09-23 09:37:51.401 00:00:10.324 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:38:31.972 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-09-23 09:38:51.762 00:00:10.370 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:39:32.204 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57676 10 6452 1 2025-09-23 09:39:52.173 00:00:10.364 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:40:32.419 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-09-23 09:40:52.572 00:00:10.366 TCP 23.104.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:41:32.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32794 10 6452 1 2025-09-23 09:41:52.973 00:00:10.371 TCP 23.104.0.1:54692 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:42:18.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:42:18.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:38:32.398 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:42:32.982 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-09-23 09:42:53.381 00:00:10.375 TCP 23.104.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:39:32.401 00:05:01.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:43:33.202 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-09-23 09:43:53.798 00:00:10.371 TCP 23.104.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:44:33.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-09-23 09:44:54.207 00:00:10.383 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:45:33.589 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-09-23 09:45:54.634 00:00:10.321 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:46:33.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60822 10 6452 1 2025-09-23 09:46:54.997 00:00:10.363 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:47:18.355 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:47:18.105 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:47:34.011 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-09-23 09:47:55.400 00:00:10.357 TCP 23.104.0.1:48622 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:44:32.400 00:05:01.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:48:34.230 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-09-23 09:48:55.797 00:00:10.370 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:45:32.402 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:49:34.441 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55626 10 6452 1 2025-09-23 09:49:56.203 00:00:10.324 TCP 23.104.0.1:32858 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:50:34.610 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49904 10 6452 1 2025-09-23 09:50:56.569 00:00:10.322 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:51:34.829 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 12 10367 1 2025-09-23 09:51:56.929 00:00:10.418 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 15 1926 1 2025-09-23 09:52:18.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:52:18.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:52:35.100 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40580 10 6452 1 2025-09-23 09:52:57.389 00:00:10.367 TCP 23.104.0.1:41712 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:53:35.274 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-09-23 09:53:57.794 00:00:10.714 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:50:32.403 00:05:01.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 09:54:35.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58788 10 6452 1 2025-09-23 09:54:58.563 00:00:10.819 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:51:32.405 00:05:01.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 09:55:35.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37348 10 6452 1 2025-09-23 09:55:59.434 00:00:10.366 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:56:35.905 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:45708 10 6452 1 2025-09-23 09:56:59.839 00:00:10.384 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:57:18.553 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 09:57:18.583 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 09:57:36.090 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51370 11 6492 1 2025-09-23 09:58:00.259 00:00:10.322 TCP 23.104.0.1:33324 -> 1.101.0.1:3000 11 1507 1 2025-09-23 09:58:36.304 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 Summary: total flows: 163, total bytes: 501215, total packets: 1568, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-09-23 08:56:32 - 2025-09-23 09:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0020s Wall: 0.0024s flows/second: 68081.2 Runtime: 0.0024s