Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 02:59:20.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-12 02:59:22.631 00:00:10.359 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:00:21.086 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-09-12 03:00:23.061 00:00:10.373 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:01:21.307 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-09-12 03:01:23.473 00:00:10.365 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:01:52.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:01:52.761 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:02:21.540 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 6452 1 2025-09-12 02:57:27.150 00:06:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:02:23.869 00:00:10.367 TCP 23.104.0.1:34646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:58:27.147 00:06:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:03:21.768 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 12 10367 1 2025-09-12 03:03:24.272 00:00:10.450 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 15 1926 1 2025-09-12 03:04:22.008 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42606 10 6452 1 2025-09-12 03:04:24.777 00:00:10.335 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:05:22.236 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6452 1 2025-09-12 03:05:25.142 00:00:10.699 TCP 23.104.0.1:59406 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:06:25.904 00:00:10.374 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:06:22.456 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 11 6504 1 2025-09-12 03:06:52.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:06:52.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:07:26.315 00:00:10.322 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:07:22.733 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-09-12 03:08:22.902 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-09-12 03:08:26.678 00:00:10.370 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:04:27.151 00:06:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:09:23.124 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-09-12 03:09:27.106 00:00:10.335 TCP 23.104.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:05:27.150 00:06:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:10:23.346 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-09-12 03:10:27.472 00:00:10.363 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:11:23.578 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44434 10 6452 1 2025-09-12 03:11:27.871 00:00:10.367 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:11:52.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:11:52.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:12:23.803 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 10 6452 1 2025-09-12 03:12:28.272 00:00:10.366 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:13:23.971 00:00:11.072 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-09-12 03:13:28.675 00:00:10.365 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:14:25.086 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-09-12 03:14:29.099 00:00:10.367 TCP 23.104.0.1:46422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:15:25.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-09-12 03:15:29.503 00:00:10.368 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:11:27.153 00:06:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:16:25.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52248 10 6452 1 2025-09-12 03:16:29.908 00:00:10.367 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:16:53.114 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:16:53.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:12:27.151 00:06:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:17:25.723 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-09-12 03:17:30.317 00:00:10.366 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:18:25.932 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:47272 10 6452 1 2025-09-12 03:18:30.724 00:00:10.365 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:19:26.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41366 10 6452 1 2025-09-12 03:19:31.132 00:00:10.369 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:20:26.394 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-09-12 03:20:31.538 00:00:10.367 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:21:26.615 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-09-12 03:21:31.943 00:00:10.378 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:21:53.044 00:00:00.053 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:21:53.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:22:26.837 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49414 10 6452 1 2025-09-12 03:22:32.361 00:00:10.377 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:18:27.161 00:06:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:23:27.083 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 12 10367 1 2025-09-12 03:23:32.776 00:00:10.442 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 15 1926 1 2025-09-12 03:19:27.159 00:06:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:24:27.323 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:51162 10 6452 1 2025-09-12 03:24:33.262 00:00:10.368 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:25:27.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6452 1 2025-09-12 03:25:33.662 00:00:10.367 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:26:27.887 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44910 10 6452 1 2025-09-12 03:26:34.081 00:00:10.325 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:26:52.920 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:26:53.178 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:27:28.129 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-09-12 03:27:34.445 00:00:10.362 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:28:28.303 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-09-12 03:28:34.840 00:00:10.385 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:29:28.480 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-09-12 03:29:35.265 00:00:10.363 TCP 23.104.0.1:41658 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:25:27.162 00:06:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:30:28.705 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56152 10 6452 1 2025-09-12 03:30:35.668 00:00:10.365 TCP 23.104.0.1:47428 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:26:27.160 00:06:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:31:28.878 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36164 10 6452 1 2025-09-12 03:31:36.104 00:00:10.379 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:31:53.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:31:52.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:32:29.096 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 10 6452 1 2025-09-12 03:32:36.546 00:00:10.379 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:33:29.313 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-09-12 03:33:36.974 00:00:10.370 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:34:29.536 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-09-12 03:34:37.382 00:00:10.363 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:35:29.753 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-09-12 03:35:37.790 00:00:10.381 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:36:29.976 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48430 10 6452 1 2025-09-12 03:36:38.218 00:00:10.365 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:36:53.308 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:36:53.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:32:27.162 00:06:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:37:30.222 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44388 10 6452 1 2025-09-12 03:37:38.625 00:00:10.373 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:33:27.161 00:06:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:38:30.445 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59382 14 10471 1 2025-09-12 03:38:39.035 00:00:10.447 TCP 23.104.0.1:42378 -> 1.101.0.1:3000 15 1926 1 2025-09-12 03:39:30.695 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-09-12 03:39:39.522 00:00:10.362 TCP 23.104.0.1:48758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:40:30.916 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 11 6504 1 2025-09-12 03:40:39.923 00:00:10.392 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:41:31.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-09-12 03:41:40.357 00:00:10.363 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:41:53.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:41:53.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:42:31.414 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59856 10 6452 1 2025-09-12 03:42:40.763 00:00:11.100 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:43:31.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-09-12 03:43:41.902 00:00:10.369 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:39:27.165 00:06:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:44:31.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50126 10 6452 1 2025-09-12 03:44:42.311 00:00:10.325 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:40:27.162 00:06:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:45:32.088 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-09-12 03:45:42.670 00:00:10.366 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:46:32.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60686 10 6452 1 2025-09-12 03:46:53.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:46:43.100 00:00:10.322 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:46:53.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:47:32.518 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-09-12 03:47:43.463 00:00:10.358 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:48:32.747 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-09-12 03:48:43.860 00:00:10.366 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:49:32.959 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 12 6556 1 2025-09-12 03:49:44.267 00:00:10.327 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:50:33.199 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:53822 10 6452 1 2025-09-12 03:50:44.628 00:00:10.364 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:46:27.168 00:06:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:51:33.385 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-09-12 03:51:53.557 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:51:53.443 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:51:45.030 00:00:10.321 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:47:27.165 00:06:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:52:33.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-09-12 03:52:45.388 00:00:10.367 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:53:33.810 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6452 1 2025-09-12 03:53:45.792 00:00:10.375 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:54:34.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-09-12 03:54:46.205 00:00:10.371 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:55:34.256 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59496 10 6452 1 2025-09-12 03:55:46.619 00:00:10.368 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:56:34.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-09-12 03:56:53.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 03:56:53.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 03:56:47.024 00:00:10.366 TCP 23.104.0.1:45256 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:57:34.677 00:00:10.647 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-09-12 03:57:47.425 00:00:10.365 TCP 23.104.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:53:27.172 00:06:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 03:58:35.363 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35730 10 6452 1 Summary: total flows: 160, total bytes: 510032, total packets: 1583, avg bps: 1096, avg pps: 0, avg bpp: 322 Time window: 2025-09-12 02:57:27 - 2025-09-12 03:59:27 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0038s User: 0.0000s Wall: 0.0015s flows/second: 110032.6 Runtime: 0.0015s