Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 00:59:09.557 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60178 10 6452 1 2025-09-08 00:59:12.935 00:00:10.341 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:59:47.408 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:59:47.290 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:00:09.777 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-09-08 01:00:13.309 00:00:10.331 TCP 23.104.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:55:25.187 00:06:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:01:10.002 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-09-08 01:01:13.686 00:00:10.325 TCP 23.104.0.1:35598 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:02:10.216 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-09-08 01:02:14.048 00:00:10.366 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:03:10.419 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49304 12 10367 1 2025-09-08 01:03:14.451 00:00:10.441 TCP 23.104.0.1:55770 -> 1.101.0.1:3000 15 1926 1 2025-09-08 01:04:10.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-09-08 00:59:25.191 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:04:14.929 00:00:10.390 TCP 23.104.0.1:33862 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:04:47.401 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:04:47.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:05:10.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-09-08 01:05:15.358 00:00:10.374 TCP 23.104.0.1:60020 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:06:11.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60670 10 6452 1 2025-09-08 01:06:15.762 00:00:10.378 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:07:16.175 00:00:10.370 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:07:11.332 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:52184 10 6452 1 2025-09-08 01:02:25.190 00:06:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:08:11.835 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-09-08 01:08:16.587 00:00:10.374 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:09:12.052 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 10 6452 1 2025-09-08 01:09:17.005 00:00:10.363 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:09:47.540 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:09:47.492 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:10:12.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6452 1 2025-09-08 01:10:17.407 00:00:10.369 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:06:25.193 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:11:12.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45404 10 6452 1 2025-09-08 01:11:17.812 00:00:10.377 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:12:12.655 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51362 10 6452 1 2025-09-08 01:12:18.228 00:00:10.367 TCP 23.104.0.1:56304 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:13:12.872 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 12 10365 1 2025-09-08 01:13:18.637 00:00:10.908 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 15 1926 1 2025-09-08 01:09:25.189 00:06:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:14:13.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35124 10 6452 1 2025-09-08 01:14:19.585 00:00:10.319 TCP 23.104.0.1:41944 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:14:47.606 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:14:47.314 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:15:13.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-09-08 01:15:19.941 00:00:10.439 TCP 23.104.0.1:37814 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:16:13.536 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-09-08 01:16:20.417 00:00:10.367 TCP 23.104.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:17:13.756 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-09-08 01:17:20.824 00:00:10.364 TCP 23.104.0.1:57394 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:13:25.192 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:18:13.966 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47476 10 6452 1 2025-09-08 01:18:21.226 00:00:10.366 TCP 23.104.0.1:51560 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:19:14.150 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59814 10 6452 1 2025-09-08 01:19:21.631 00:00:10.363 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:19:47.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:19:47.537 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:20:14.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-09-08 01:20:22.033 00:00:10.374 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:21:14.529 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 10 6452 1 2025-09-08 01:16:25.191 00:06:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:21:22.447 00:00:10.751 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:22:14.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40618 10 6452 1 2025-09-08 01:22:23.240 00:00:10.366 TCP 23.104.0.1:58318 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:23:14.909 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:55250 10 6452 1 2025-09-08 01:23:23.650 00:00:10.367 TCP 23.104.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:24:15.098 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 10 6452 1 2025-09-08 01:24:24.064 00:00:10.364 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:24:47.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:24:47.820 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:25:15.315 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54396 11 6492 1 2025-09-08 01:20:25.194 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:25:24.468 00:00:10.413 TCP 23.104.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:26:15.490 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-09-08 01:26:24.921 00:00:10.385 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:27:15.660 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-09-08 01:27:25.346 00:00:10.326 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:23:25.198 00:06:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:28:15.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-09-08 01:28:25.713 00:00:10.377 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:29:16.098 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-09-08 01:29:26.126 00:00:10.369 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:29:47.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:29:47.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:30:16.788 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6452 1 2025-09-08 01:30:26.533 00:00:10.370 TCP 23.104.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:31:17.004 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50732 10 6452 1 2025-09-08 01:31:26.942 00:00:10.375 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:27:25.196 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:32:17.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-09-08 01:32:27.355 00:00:10.327 TCP 23.104.0.1:53340 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:33:17.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 10 6452 1 2025-09-08 01:33:27.719 00:00:10.377 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:34:17.643 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-09-08 01:34:28.133 00:00:10.421 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:34:47.997 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:34:47.930 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:30:25.193 00:06:00.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:35:17.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-09-08 01:35:28.594 00:00:10.374 TCP 23.104.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:36:18.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55406 10 6452 1 2025-09-08 01:36:29.009 00:00:10.363 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:37:18.257 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-09-08 01:37:29.409 00:00:10.366 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:38:18.468 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45322 10 6452 1 2025-09-08 01:38:29.811 00:00:10.369 TCP 23.104.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:34:25.198 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:39:18.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 12 6556 1 2025-09-08 01:39:30.217 00:00:10.323 TCP 23.104.0.1:45630 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:39:48.008 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:39:48.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:40:18.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-09-08 01:40:30.572 00:00:10.359 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:41:19.117 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58088 10 6452 1 2025-09-08 01:41:30.970 00:00:10.380 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:37:25.197 00:06:00.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:42:19.329 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34432 10 6452 1 2025-09-08 01:42:31.391 00:00:10.373 TCP 23.104.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:43:19.539 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54212 10 6452 1 2025-09-08 01:43:31.802 00:00:10.365 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:44:19.750 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41220 10 6452 1 2025-09-08 01:44:32.204 00:00:10.365 TCP 23.104.0.1:49598 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:44:48.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:44:47.992 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:45:19.963 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-09-08 01:45:32.605 00:00:10.336 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:41:25.201 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:46:20.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-09-08 01:46:32.980 00:00:10.368 TCP 23.104.0.1:43448 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:47:20.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-09-08 01:47:33.389 00:00:10.367 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:48:20.606 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-09-08 01:48:33.793 00:00:10.340 TCP 23.104.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:44:25.199 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:49:20.817 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6452 1 2025-09-08 01:49:34.171 00:00:10.419 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:49:48.156 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:49:48.219 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:50:21.038 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-09-08 01:50:34.628 00:00:10.369 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:51:21.218 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-09-08 01:51:35.050 00:00:16.688 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:52:21.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-09-08 01:52:41.779 00:00:10.371 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:48:25.203 00:06:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 01:53:21.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-09-08 01:53:42.191 00:00:10.373 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:54:21.874 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60050 10 6452 1 2025-09-08 01:54:48.442 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:54:48.167 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:54:42.601 00:00:10.363 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:55:22.104 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-09-08 01:55:43.007 00:00:10.317 TCP 23.104.0.1:35696 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:51:25.200 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 01:56:22.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-09-08 01:56:43.366 00:00:10.324 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:57:22.510 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-09-08 01:57:43.732 00:00:10.367 TCP 23.104.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:58:22.720 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42518 10 6452 1 Summary: total flows: 160, total bytes: 505528, total packets: 1574, avg bps: 1067, avg pps: 0, avg bpp: 321 Time window: 2025-09-08 00:55:25 - 2025-09-08 01:58:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0017s User: 0.0026s Wall: 0.0018s flows/second: 86861.1 Runtime: 0.0019s