Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 11:59:18.949 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-09-29 11:59:25.738 00:00:10.365 TCP 23.104.0.1:58578 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:00:14.286 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:00:14.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:00:19.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-09-29 12:00:26.137 00:00:10.359 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:56:35.247 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:01:19.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-09-29 12:01:26.535 00:00:10.368 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:57:35.250 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:02:19.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-09-29 12:02:26.941 00:00:10.371 TCP 23.104.0.1:58642 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:03:19.825 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-09-29 12:03:27.351 00:00:10.366 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:04:20.065 00:00:10.488 TCP 1.101.0.1:3000 -> 22.102.0.1:39514 10 6452 1 2025-09-29 12:04:27.756 00:00:10.379 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:05:14.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:05:14.679 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:05:20.593 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 10 6452 1 2025-09-29 12:05:28.173 00:00:10.367 TCP 23.104.0.1:46576 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:06:20.813 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33692 10 6452 1 2025-09-29 12:02:35.249 00:05:01.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:06:28.576 00:00:10.626 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:07:21.044 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 10 6452 1 2025-09-29 12:03:35.251 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:07:29.241 00:00:10.325 TCP 23.104.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:08:21.259 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-09-29 12:08:29.604 00:00:10.367 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:09:21.477 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-09-29 12:09:30.010 00:00:10.358 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:10:14.609 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:10:14.478 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:10:21.694 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59312 10 6452 1 2025-09-29 12:10:30.408 00:00:10.369 TCP 23.104.0.1:51484 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:11:21.912 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-09-29 12:11:30.813 00:00:10.366 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:12:22.139 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-29 12:12:31.215 00:00:10.366 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:08:35.250 00:05:01.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:13:22.330 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:38908 10 6452 1 2025-09-29 12:09:35.254 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:13:31.625 00:00:10.396 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:14:22.799 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-09-29 12:14:32.061 00:00:10.370 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:15:14.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:15:14.661 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:15:23.014 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46130 10 6452 1 2025-09-29 12:15:32.463 00:00:10.365 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:16:23.243 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34308 10 6452 1 2025-09-29 12:16:32.866 00:00:10.372 TCP 23.104.0.1:41890 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:17:23.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-09-29 12:17:33.280 00:00:10.364 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:18:23.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55194 10 6452 1 2025-09-29 12:14:35.251 00:05:01.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:18:33.683 00:00:10.371 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:15:35.254 00:05:01.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:19:23.879 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-09-29 12:19:34.097 00:00:10.367 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:20:14.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:20:14.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:20:24.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38180 10 6452 1 2025-09-29 12:20:34.501 00:00:10.374 TCP 23.104.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:21:24.291 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-09-29 12:21:34.908 00:00:10.324 TCP 23.104.0.1:55208 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:22:24.506 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 12 10369 1 2025-09-29 12:22:35.268 00:00:10.400 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 15 1926 1 2025-09-29 12:23:24.763 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-09-29 12:23:35.706 00:00:10.360 TCP 23.104.0.1:50128 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:24:24.985 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-09-29 12:20:35.253 00:05:01.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:24:36.109 00:00:10.367 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:25:14.895 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:25:14.629 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:25:25.233 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-09-29 12:21:35.256 00:05:01.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:25:36.514 00:00:10.363 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:26:25.460 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:37510 10 6452 1 2025-09-29 12:26:36.916 00:00:10.375 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:27:25.662 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-09-29 12:27:37.327 00:00:10.365 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:28:25.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-09-29 12:28:37.732 00:00:10.366 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:29:26.097 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42384 10 6452 1 2025-09-29 12:29:38.136 00:00:10.365 TCP 23.104.0.1:52692 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:30:14.869 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:30:14.996 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:30:26.276 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-09-29 12:26:35.256 00:05:01.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:30:38.543 00:00:10.369 TCP 23.104.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:31:26.494 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48264 10 6452 1 2025-09-29 12:27:35.257 00:05:01.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:31:38.953 00:00:10.366 TCP 23.104.0.1:55750 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:32:26.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-09-29 12:32:39.355 00:00:10.325 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:33:26.914 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-09-29 12:33:39.717 00:00:19.188 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:34:27.133 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43240 10 6452 1 2025-09-29 12:34:48.962 00:00:10.323 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:35:14.817 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:35:15.061 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:35:27.364 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-29 12:35:49.324 00:00:10.364 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:36:27.586 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59744 10 6452 1 2025-09-29 12:32:35.260 00:05:01.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:36:49.731 00:00:10.369 TCP 23.104.0.1:34510 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:37:27.814 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-09-29 12:33:35.262 00:05:01.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:37:50.137 00:00:10.322 TCP 23.104.0.1:34762 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:38:28.036 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 10 6452 1 2025-09-29 12:38:50.494 00:00:10.359 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:39:28.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48450 10 6452 1 2025-09-29 12:39:50.893 00:00:10.376 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:40:15.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:40:14.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:40:28.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-09-29 12:40:51.304 00:00:10.368 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:41:28.757 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-09-29 12:41:51.702 00:00:10.366 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:42:28.978 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-09-29 12:38:35.261 00:05:01.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:42:52.108 00:00:10.369 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:39:35.264 00:05:01.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:43:29.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-09-29 12:43:52.513 00:00:10.366 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:44:29.436 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55930 10 6452 1 2025-09-29 12:44:52.915 00:00:10.335 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:45:15.102 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:45:15.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:45:29.617 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52138 10 6452 1 2025-09-29 12:45:53.290 00:00:10.366 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:46:29.828 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 10 6452 1 2025-09-29 12:46:53.694 00:00:10.363 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:47:30.067 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-09-29 12:47:54.105 00:00:10.369 TCP 23.104.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:48:30.289 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50898 10 6452 1 2025-09-29 12:44:35.265 00:05:01.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:48:54.512 00:00:10.366 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:45:35.268 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:49:30.513 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-09-29 12:49:54.915 00:00:10.319 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:50:15.879 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:50:15.968 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:50:30.686 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-09-29 12:50:55.279 00:00:10.368 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:51:30.909 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6452 1 2025-09-29 12:51:55.680 00:00:10.365 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:52:31.130 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:34848 10 6452 1 2025-09-29 12:52:56.099 00:00:10.325 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:53:31.461 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-09-29 12:53:56.463 00:00:10.367 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:54:31.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57044 10 6452 1 2025-09-29 12:50:35.264 00:05:01.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 12:54:56.867 00:00:10.319 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:55:15.074 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 12:55:15.444 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 12:51:35.268 00:05:01.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 12:55:31.905 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 10 6452 1 2025-09-29 12:55:57.223 00:00:10.328 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:56:32.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59766 10 6452 1 2025-09-29 12:56:57.584 00:00:10.321 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:57:32.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 10 6452 1 2025-09-29 12:57:57.945 00:00:10.380 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-09-29 12:58:32.529 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42810 10 6452 1 Summary: total flows: 163, total bytes: 501177, total packets: 1567, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-09-29 11:56:35 - 2025-09-29 12:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0011s Wall: 0.0025s flows/second: 65725.0 Runtime: 0.0025s