Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 00:59:23.725 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59694 10 6452 1 2025-09-29 00:59:34.617 00:00:10.322 TCP 23.104.0.1:33854 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:00:00.880 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:00:01.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:00:23.939 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-09-29 00:56:35.047 00:05:01.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:00:34.981 00:00:10.434 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:01:24.182 00:00:10.502 TCP 1.101.0.1:3000 -> 22.102.0.1:39928 10 6452 1 2025-09-29 00:57:35.050 00:05:01.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:01:35.457 00:00:10.327 TCP 23.104.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:02:24.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-09-29 01:02:35.818 00:00:10.361 TCP 23.104.0.1:41936 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:03:24.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33102 10 6452 1 2025-09-29 01:03:36.214 00:00:10.361 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:04:25.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-09-29 01:05:00.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:04:36.614 00:00:15.745 TCP 23.104.0.1:59068 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:05:01.097 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:05:25.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-09-29 01:05:42.401 00:00:10.323 TCP 23.104.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:06:25.583 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-09-29 01:02:35.048 00:05:01.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:06:42.765 00:00:10.368 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:07:25.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-09-29 01:03:35.051 00:05:01.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:07:43.171 00:00:10.373 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:08:26.023 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48964 10 6452 1 2025-09-29 01:08:43.584 00:00:10.364 TCP 23.104.0.1:50950 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:09:26.238 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-09-29 01:09:43.987 00:00:10.365 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:10:01.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:10:01.119 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:10:26.416 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-09-29 01:10:44.395 00:00:10.360 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:11:26.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 10 6452 1 2025-09-29 01:11:44.795 00:00:10.363 TCP 23.104.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:12:26.846 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 12 10367 1 2025-09-29 01:08:35.050 00:05:01.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:12:45.198 00:00:10.438 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 15 1926 1 2025-09-29 01:13:27.106 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55084 10 6452 1 2025-09-29 01:09:35.052 00:05:01.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:13:45.675 00:00:10.370 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:14:27.294 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-09-29 01:14:46.098 00:00:10.363 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:15:01.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:15:01.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:15:27.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-09-29 01:15:46.507 00:00:10.364 TCP 23.104.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:16:27.719 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-09-29 01:16:46.912 00:00:10.364 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:17:27.926 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:33480 10 6452 1 2025-09-29 01:17:47.319 00:00:10.325 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:14:35.051 00:05:01.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:18:28.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-09-29 01:18:47.682 00:00:10.328 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:15:35.055 00:05:01.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:19:28.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52314 10 6452 1 2025-09-29 01:20:01.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:20:01.465 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:19:48.046 00:00:10.379 TCP 23.104.0.1:57188 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:20:28.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-09-29 01:20:48.463 00:00:10.326 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:21:28.769 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-09-29 01:21:48.830 00:00:10.375 TCP 23.104.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:22:28.984 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 12 6556 1 2025-09-29 01:22:49.237 00:00:10.381 TCP 23.104.0.1:57886 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:23:29.213 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-09-29 01:23:49.659 00:00:10.365 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:24:29.431 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-09-29 01:20:35.054 00:05:01.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:25:01.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:25:01.565 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:24:50.087 00:00:10.362 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:21:35.057 00:05:01.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:25:29.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-09-29 01:25:50.492 00:00:10.365 TCP 23.104.0.1:54674 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:26:29.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-09-29 01:26:50.898 00:00:10.376 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:27:30.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-09-29 01:27:51.311 00:00:10.373 TCP 23.104.0.1:42640 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:28:30.252 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-09-29 01:28:51.713 00:00:10.374 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:29:30.436 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-09-29 01:30:01.815 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:30:01.596 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:29:52.129 00:00:10.377 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:30:30.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49798 10 6452 1 2025-09-29 01:26:35.057 00:05:01.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:30:52.552 00:00:10.329 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:27:35.061 00:05:01.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:31:30.823 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36992 10 6452 1 2025-09-29 01:31:52.913 00:00:10.324 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:32:31.008 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-09-29 01:32:53.277 00:00:10.369 TCP 23.104.0.1:59752 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:33:31.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-09-29 01:33:53.685 00:00:10.366 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:34:31.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45626 10 6452 1 2025-09-29 01:35:01.879 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:35:02.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:34:54.105 00:00:10.369 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:35:31.605 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33692 10 6452 1 2025-09-29 01:35:54.511 00:00:10.365 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:36:31.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-09-29 01:32:35.059 00:05:01.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:36:54.915 00:00:10.422 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:33:35.061 00:05:01.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:37:31.995 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 12 10367 1 2025-09-29 01:37:55.378 00:00:10.436 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 15 1926 1 2025-09-29 01:38:32.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-09-29 01:38:55.854 00:00:10.334 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:39:32.732 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-09-29 01:40:01.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:40:01.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:39:56.225 00:00:10.365 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:40:32.944 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-09-29 01:40:56.633 00:00:10.320 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:41:33.137 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-09-29 01:41:56.996 00:00:10.365 TCP 23.104.0.1:44152 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:38:35.061 00:05:01.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:42:33.358 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-29 01:42:57.395 00:00:10.323 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:39:35.062 00:05:01.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:43:33.575 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-09-29 01:43:57.758 00:00:10.372 TCP 23.104.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:44:33.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-09-29 01:45:01.812 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:45:01.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:44:58.172 00:00:10.365 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:45:33.955 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-09-29 01:45:58.576 00:00:10.368 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:46:34.197 00:00:10.311 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-09-29 01:46:58.981 00:00:10.364 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:47:34.549 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-09-29 01:47:59.385 00:00:10.368 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:44:35.063 00:05:01.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:48:34.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-09-29 01:48:59.791 00:00:10.740 TCP 23.104.0.1:39748 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:45:35.066 00:05:01.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:49:34.972 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-09-29 01:50:01.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:50:01.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:50:00.568 00:00:10.363 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:50:35.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-09-29 01:51:00.972 00:00:10.365 TCP 23.104.0.1:41738 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:51:35.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-09-29 01:52:01.374 00:00:10.323 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:52:35.648 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-09-29 01:53:01.738 00:00:10.372 TCP 23.104.0.1:55204 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:53:35.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-29 01:54:02.143 00:00:10.373 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:50:35.066 00:05:01.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 01:54:36.034 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57498 10 6452 1 2025-09-29 01:55:02.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 01:55:02.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 01:55:02.557 00:00:10.324 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:51:35.067 00:05:01.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 01:55:36.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-09-29 01:56:02.925 00:00:10.389 TCP 23.104.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:56:36.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-09-29 01:57:03.362 00:00:10.363 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:57:36.683 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-09-29 01:58:03.764 00:00:10.370 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-09-29 01:58:36.900 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 Summary: total flows: 163, total bytes: 505613, total packets: 1575, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-09-29 00:56:35 - 2025-09-29 01:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0016s Wall: 0.0027s flows/second: 59465.2 Runtime: 0.0028s