Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 07:59:35.970 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-09-12 07:59:38.592 00:00:10.363 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:00:36.191 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-09-12 08:00:38.992 00:00:10.365 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:57:27.239 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:57:27.241 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:01:36.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-09-12 08:01:39.399 00:00:10.364 TCP 23.104.0.1:60948 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:01:58.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:01:58.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:02:36.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-09-12 08:02:39.800 00:00:10.362 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:03:36.823 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42486 12 10365 1 2025-09-12 08:03:40.202 00:00:10.395 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 15 1926 1 2025-09-12 08:04:40.638 00:00:10.372 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:04:37.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-09-12 08:05:37.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38164 10 6452 1 2025-09-12 08:05:41.049 00:00:10.366 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:06:37.503 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33438 10 6452 1 2025-09-12 08:06:41.452 00:00:10.366 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:06:58.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:06:58.645 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:03:27.243 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:03:27.241 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:07:37.676 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-09-12 08:07:41.858 00:00:10.334 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:08:37.895 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 12 10365 1 2025-09-12 08:08:42.229 00:00:10.438 TCP 23.104.0.1:38718 -> 1.101.0.1:3000 15 1926 1 2025-09-12 08:09:38.174 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-09-12 08:09:42.705 00:00:10.365 TCP 23.104.0.1:53952 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:10:38.396 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-09-12 08:10:43.105 00:00:10.359 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:11:38.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-09-12 08:11:43.501 00:00:10.322 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:11:58.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:11:58.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:12:38.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47426 10 6452 1 2025-09-12 08:12:43.862 00:00:10.372 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:09:27.244 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:09:27.242 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:13:39.041 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-09-12 08:13:44.277 00:00:10.369 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:14:39.268 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54400 10 6452 1 2025-09-12 08:14:44.694 00:00:10.374 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:15:39.492 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-09-12 08:15:45.110 00:00:10.372 TCP 23.104.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:16:39.672 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-09-12 08:16:58.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:16:45.522 00:00:10.367 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:16:58.789 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:17:39.850 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-09-12 08:17:45.927 00:00:10.389 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:18:40.103 00:00:10.519 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-09-12 08:18:46.353 00:00:10.319 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:15:27.245 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:15:27.244 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:19:40.663 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-09-12 08:19:46.709 00:00:10.321 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:20:40.883 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54132 10 6452 1 2025-09-12 08:20:47.096 00:00:10.368 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:21:41.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6452 1 2025-09-12 08:21:58.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:21:47.502 00:00:10.636 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:21:59.035 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:22:41.329 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-09-12 08:22:48.173 00:00:10.362 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:23:41.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47256 10 6452 1 2025-09-12 08:23:48.576 00:00:10.366 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:24:41.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6452 1 2025-09-12 08:24:48.994 00:00:10.324 TCP 23.104.0.1:45084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:21:27.247 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:21:27.244 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:25:42.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-09-12 08:25:49.363 00:00:10.343 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:26:42.221 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54270 10 6452 1 2025-09-12 08:26:59.140 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:26:59.104 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:26:49.756 00:00:10.385 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:27:42.440 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-09-12 08:27:50.180 00:00:10.325 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:28:42.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-09-12 08:28:50.541 00:00:10.324 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:29:42.877 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-09-12 08:29:50.902 00:00:10.328 TCP 23.104.0.1:37682 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:30:43.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45148 10 6452 1 2025-09-12 08:30:51.268 00:00:10.363 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:27:27.248 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:27:27.244 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:31:43.332 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-09-12 08:31:59.278 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:31:59.480 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:31:51.677 00:00:10.370 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:32:43.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-09-12 08:32:52.107 00:00:10.363 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:33:43.729 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-09-12 08:33:52.507 00:00:10.365 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:34:43.938 00:00:15.350 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-09-12 08:34:52.904 00:00:10.369 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:35:49.335 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-09-12 08:35:53.307 00:00:10.363 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:36:49.505 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-09-12 08:36:59.486 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:36:59.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:36:53.707 00:00:10.388 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:33:27.247 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:33:27.249 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:37:49.736 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-09-12 08:37:54.135 00:00:10.372 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:38:49.955 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 12 6556 1 2025-09-12 08:38:54.544 00:00:10.374 TCP 23.104.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:39:50.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-09-12 08:39:54.957 00:00:10.405 TCP 23.104.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:40:50.408 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-09-12 08:40:55.360 00:00:10.372 TCP 23.104.0.1:48612 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:41:50.608 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 10 6452 1 2025-09-12 08:41:59.413 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:41:59.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:41:55.762 00:00:10.382 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:42:50.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54488 10 6452 1 2025-09-12 08:42:56.179 00:00:10.328 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:39:27.252 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:39:27.249 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:43:51.068 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-09-12 08:43:56.540 00:00:10.364 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:44:51.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41598 10 6452 1 2025-09-12 08:44:56.939 00:00:10.380 TCP 23.104.0.1:55302 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:45:51.502 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43572 10 6452 1 2025-09-12 08:45:57.361 00:00:10.358 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:46:59.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:46:59.346 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:46:51.720 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-09-12 08:46:57.760 00:00:10.334 TCP 23.104.0.1:33084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:47:51.942 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-09-12 08:47:58.134 00:00:10.377 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:48:52.149 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-09-12 08:48:58.548 00:00:10.359 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:45:27.248 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:45:27.252 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:49:52.388 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 11 6504 1 2025-09-12 08:49:58.953 00:00:10.371 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:50:52.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 10 6452 1 2025-09-12 08:50:59.360 00:00:10.323 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:51:59.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:51:59.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:51:52.858 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58904 10 6452 1 2025-09-12 08:51:59.729 00:00:10.374 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:52:53.083 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-09-12 08:53:00.140 00:00:10.366 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:53:53.298 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-09-12 08:54:00.545 00:00:10.378 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:54:53.554 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48078 10 6452 1 2025-09-12 08:55:00.970 00:00:10.375 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:51:27.254 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 08:51:27.252 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:55:53.770 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-09-12 08:56:01.386 00:00:10.394 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:56:59.692 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 08:56:59.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 08:56:53.991 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-09-12 08:57:01.819 00:00:10.364 TCP 23.104.0.1:41262 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:57:54.208 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 10 6452 1 2025-09-12 08:58:02.219 00:00:10.375 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499209, total packets: 1566, avg bps: 1095, avg pps: 0, avg bpp: 318 Time window: 2025-09-12 07:57:27 - 2025-09-12 08:58:12 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 73038.5 Runtime: 0.0022s