Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 08:58:54.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41296 10 6452 1 2025-09-12 08:59:02.619 00:00:10.364 TCP 23.104.0.1:58352 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:59:54.592 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-09-12 09:00:03.060 00:00:10.324 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:00:54.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-09-12 09:01:03.423 00:00:10.371 TCP 23.104.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-09-12 08:57:27.255 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 08:57:27.257 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:01:59.771 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:01:59.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:01:54.985 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57954 10 6452 1 2025-09-12 09:02:03.833 00:00:10.390 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:02:55.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33938 10 6452 1 2025-09-12 09:03:04.259 00:00:10.368 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:03:55.419 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:34478 10 6452 1 2025-09-12 09:04:04.670 00:00:10.387 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:04:56.153 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41832 10 6452 1 2025-09-12 09:05:05.118 00:00:10.365 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:05:56.366 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50294 10 6452 1 2025-09-12 09:06:05.521 00:00:10.325 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:06:59.933 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:06:59.691 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:06:56.573 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-09-12 09:07:05.884 00:00:10.612 TCP 23.104.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:03:27.255 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:03:27.259 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:07:56.794 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-09-12 09:08:06.538 00:00:10.365 TCP 23.104.0.1:33794 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:08:57.004 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6452 1 2025-09-12 09:09:06.942 00:00:10.332 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:09:57.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-09-12 09:10:07.314 00:00:10.361 TCP 23.104.0.1:46384 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:10:57.427 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-09-12 09:11:07.715 00:00:10.373 TCP 23.104.0.1:51102 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:11:59.904 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:12:00.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:11:57.599 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-09-12 09:12:08.128 00:00:10.382 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:12:57.813 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6452 1 2025-09-12 09:13:08.561 00:00:10.328 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:09:27.258 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:09:27.260 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:13:58.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 10 6452 1 2025-09-12 09:14:08.934 00:00:10.376 TCP 23.104.0.1:51840 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:14:58.297 00:00:10.566 TCP 1.101.0.1:3000 -> 22.102.0.1:35502 10 6452 1 2025-09-12 09:15:09.350 00:00:10.360 TCP 23.104.0.1:36696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:15:58.900 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-09-12 09:16:09.750 00:00:10.371 TCP 23.104.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:16:59.986 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:16:59.922 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:16:59.079 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-09-12 09:17:10.156 00:00:10.364 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:17:59.301 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-09-12 09:18:10.555 00:00:10.367 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:18:59.527 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-09-12 09:19:10.958 00:00:10.330 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:15:27.262 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:15:27.260 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:19:59.736 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56244 10 6452 1 2025-09-12 09:20:11.329 00:00:10.364 TCP 23.104.0.1:45106 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:20:59.917 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-09-12 09:21:11.729 00:00:10.368 TCP 23.104.0.1:44622 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:22:00.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:22:00.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:22:00.136 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-09-12 09:22:12.138 00:00:10.367 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:23:00.345 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60300 10 6452 1 2025-09-12 09:23:12.544 00:00:10.365 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:24:00.557 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55840 10 6452 1 2025-09-12 09:24:12.950 00:00:10.369 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:25:00.774 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-09-12 09:25:13.357 00:00:10.368 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:21:27.263 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:21:27.260 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:26:00.947 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-09-12 09:26:13.762 00:00:10.379 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:27:00.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:27:00.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:27:01.148 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44396 10 6452 1 2025-09-12 09:27:14.179 00:00:10.365 TCP 23.104.0.1:45114 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:28:01.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-09-12 09:28:14.581 00:00:10.364 TCP 23.104.0.1:49906 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:29:01.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-09-12 09:29:14.984 00:00:10.367 TCP 23.104.0.1:33480 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:30:01.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52462 10 6452 1 2025-09-12 09:30:15.390 00:00:10.322 TCP 23.104.0.1:41994 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:31:01.999 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49746 10 6452 1 2025-09-12 09:27:27.262 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:31:15.753 00:00:10.989 TCP 23.104.0.1:60828 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:27:27.264 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:32:00.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:32:00.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:32:02.219 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-09-12 09:32:16.792 00:00:10.371 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:33:02.452 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-09-12 09:33:17.200 00:00:10.433 TCP 23.104.0.1:45238 -> 1.101.0.1:3000 15 1926 1 2025-09-12 09:34:02.663 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33570 12 10367 1 2025-09-12 09:34:17.675 00:00:10.322 TCP 23.104.0.1:43528 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:35:02.861 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-09-12 09:35:18.032 00:00:10.361 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:36:03.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-09-12 09:36:18.434 00:00:10.368 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:37:00.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:37:00.470 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:37:03.304 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59162 10 6452 1 2025-09-12 09:33:27.266 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:37:18.842 00:00:10.389 TCP 23.104.0.1:47722 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:33:27.265 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:38:03.526 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6452 1 2025-09-12 09:38:19.277 00:00:10.366 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:39:03.750 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-09-12 09:39:19.683 00:00:10.373 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:40:04.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54984 10 6452 1 2025-09-12 09:40:20.114 00:00:10.366 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:41:04.507 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-09-12 09:41:20.519 00:00:10.365 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:42:00.560 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:42:00.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:42:04.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-09-12 09:42:20.924 00:00:10.385 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:43:04.937 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-09-12 09:39:27.269 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:43:21.348 00:00:10.371 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:39:27.266 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:44:05.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52220 10 6452 1 2025-09-12 09:44:21.758 00:00:10.380 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:45:05.409 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 10 6452 1 2025-09-12 09:45:22.177 00:00:10.362 TCP 23.104.0.1:55544 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:46:05.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-09-12 09:46:22.577 00:00:10.414 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:47:00.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:47:00.699 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:47:05.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-09-12 09:47:23.031 00:00:10.367 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:48:06.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-09-12 09:48:23.435 00:00:10.399 TCP 23.104.0.1:52542 -> 1.101.0.1:3000 15 1926 1 2025-09-12 09:49:06.297 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 12 10365 1 2025-09-12 09:45:27.267 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:45:27.269 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:49:23.874 00:00:10.365 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:50:06.500 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41236 10 6452 1 2025-09-12 09:50:24.283 00:00:10.362 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:51:06.693 00:00:10.618 TCP 1.101.0.1:3000 -> 22.102.0.1:40062 10 6452 1 2025-09-12 09:51:24.687 00:00:10.371 TCP 23.104.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:52:00.922 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:52:00.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:52:07.349 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50280 10 6452 1 2025-09-12 09:52:25.107 00:00:10.364 TCP 23.104.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:53:07.520 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-09-12 09:53:25.513 00:00:10.363 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:54:07.724 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60510 10 6452 1 2025-09-12 09:54:25.916 00:00:10.374 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:55:07.902 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-09-12 09:51:27.270 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 09:51:27.268 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 09:55:26.328 00:00:10.324 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:56:08.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-09-12 09:56:26.690 00:00:10.376 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:57:00.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 09:57:01.005 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 09:57:08.305 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-09-12 09:57:27.112 00:00:10.363 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 09:58:08.519 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-09-12 09:58:27.514 00:00:10.365 TCP 23.104.0.1:35710 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1105, avg pps: 0, avg bpp: 320 Time window: 2025-09-12 08:57:27 - 2025-09-12 09:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0009s Wall: 0.0021s flows/second: 78965.2 Runtime: 0.0021s