Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 12:58:58.270 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40324 10 6452 1 2025-09-12 12:58:59.835 00:00:10.379 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:59:58.483 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42788 10 6452 1 2025-09-12 13:00:00.257 00:00:10.366 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:00:58.708 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49566 10 6452 1 2025-09-12 13:01:00.661 00:00:10.372 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:57:27.363 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:57:27.366 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:02:04.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:02:01.094 00:00:10.376 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:02:04.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:01:58.931 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-09-12 13:03:01.505 00:00:10.370 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:02:59.160 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-09-12 13:03:59.332 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-09-12 13:04:01.915 00:00:10.384 TCP 23.104.0.1:52442 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:04:59.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-09-12 13:05:02.336 00:00:10.367 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:05:59.898 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:44118 10 6452 1 2025-09-12 13:06:02.740 00:00:10.368 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:07:04.449 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:07:04.801 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:07:00.094 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43484 10 6452 1 2025-09-12 13:07:03.145 00:00:10.338 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:03:27.367 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:03:27.365 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:08:00.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-09-12 13:08:03.523 00:00:10.372 TCP 23.104.0.1:51802 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:09:00.536 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-09-12 13:09:03.960 00:00:10.368 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:10:00.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43542 10 6452 1 2025-09-12 13:10:04.367 00:00:10.323 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:11:00.960 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-09-12 13:11:04.727 00:00:10.376 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:12:04.851 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:12:04.888 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:12:01.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-09-12 13:12:05.142 00:00:10.724 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:13:01.399 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-09-12 13:13:05.902 00:00:10.372 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:09:27.371 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:09:27.368 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:14:01.616 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-09-12 13:14:06.308 00:00:10.362 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:15:01.827 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 11 6504 1 2025-09-12 13:15:06.709 00:00:10.372 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:16:02.103 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-09-12 13:16:07.114 00:00:10.328 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:17:05.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:17:05.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:17:02.292 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2025-09-12 13:17:07.478 00:00:10.364 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:18:02.506 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50460 10 6452 1 2025-09-12 13:18:07.878 00:00:10.343 TCP 23.104.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:19:02.683 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-09-12 13:19:08.255 00:00:10.366 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:15:27.369 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:15:27.371 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:20:02.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-09-12 13:20:08.658 00:00:10.364 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:21:03.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-09-12 13:21:09.085 00:00:10.375 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:22:05.038 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:22:05.252 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:22:03.330 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-09-12 13:22:09.498 00:00:10.321 TCP 23.104.0.1:38164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:23:03.550 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57766 10 6452 1 2025-09-12 13:23:09.854 00:00:10.387 TCP 23.104.0.1:49662 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:24:03.726 00:00:10.353 TCP 1.101.0.1:3000 -> 22.102.0.1:40356 10 6452 1 2025-09-12 13:24:10.275 00:00:10.366 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:25:04.113 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-09-12 13:25:10.680 00:00:10.377 TCP 23.104.0.1:49398 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:21:27.371 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:21:27.372 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:26:04.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42668 10 6452 1 2025-09-12 13:26:11.108 00:00:10.369 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:27:05.183 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:27:04.970 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:27:04.539 00:00:10.884 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-09-12 13:27:11.515 00:00:10.367 TCP 23.104.0.1:58392 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:28:05.462 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52256 10 6452 1 2025-09-12 13:28:11.924 00:00:10.343 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:29:05.672 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-09-12 13:29:12.310 00:00:10.362 TCP 23.104.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:30:05.886 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60932 10 6452 1 2025-09-12 13:30:12.714 00:00:11.051 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:31:06.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-09-12 13:31:13.805 00:00:10.362 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:27:27.371 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:27:27.373 00:05:00.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:32:05.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:32:05.192 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:32:06.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-12 13:32:14.205 00:00:10.327 TCP 23.104.0.1:52560 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:33:06.545 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-09-12 13:33:14.568 00:00:10.364 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:34:06.759 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-09-12 13:34:14.972 00:00:10.376 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:35:06.927 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-09-12 13:35:15.389 00:00:10.366 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:36:07.168 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-09-12 13:36:15.797 00:00:10.369 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:37:05.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:37:05.291 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:37:07.377 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-09-12 13:37:16.209 00:00:10.364 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:33:27.374 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:33:27.371 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:38:07.592 00:00:10.942 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-09-12 13:38:16.612 00:00:10.366 TCP 23.104.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:39:08.571 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 10 6452 1 2025-09-12 13:39:17.021 00:00:10.330 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:40:08.747 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-09-12 13:40:17.388 00:00:10.372 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:41:08.925 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41974 10 6452 1 2025-09-12 13:41:17.794 00:00:10.327 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:42:05.400 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:42:05.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:42:09.161 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-09-12 13:42:18.157 00:00:10.417 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:43:09.375 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44224 10 6452 1 2025-09-12 13:43:18.611 00:00:10.365 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:39:27.376 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:39:27.373 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:44:09.606 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 2025-09-12 13:44:19.018 00:00:10.362 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:45:09.776 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-09-12 13:45:19.418 00:00:10.374 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:46:09.989 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-09-12 13:46:19.831 00:00:10.555 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:47:05.491 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:47:05.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:47:10.213 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 2025-09-12 13:47:20.429 00:00:10.362 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:48:10.431 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45114 10 6452 1 2025-09-12 13:48:20.832 00:00:10.387 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:49:10.649 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-09-12 13:45:27.379 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:49:21.278 00:00:10.330 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:45:27.377 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:50:10.870 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50348 10 6452 1 2025-09-12 13:50:21.645 00:00:10.368 TCP 23.104.0.1:36386 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:51:11.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-09-12 13:51:22.060 00:00:10.321 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:52:05.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:52:05.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:52:11.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-09-12 13:52:22.422 00:00:10.366 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:53:11.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43026 10 6452 1 2025-09-12 13:53:22.841 00:00:10.385 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:54:11.731 00:00:10.570 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-09-12 13:54:23.265 00:00:10.321 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:55:12.343 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-09-12 13:51:27.381 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:51:27.377 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 13:55:23.626 00:00:10.361 TCP 23.104.0.1:50464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:56:12.560 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41784 10 6452 1 2025-09-12 13:56:24.033 00:00:10.369 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:57:05.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 13:57:05.687 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 13:57:12.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-09-12 13:57:24.437 00:00:10.327 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-09-12 13:58:12.985 00:00:10.474 TCP 1.101.0.1:3000 -> 22.102.0.1:52796 10 6452 1 2025-09-12 13:58:24.802 00:00:10.442 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 498819, total packets: 1577, avg bps: 1087, avg pps: 0, avg bpp: 316 Time window: 2025-09-12 12:57:27 - 2025-09-12 13:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0000s Wall: 0.0020s flows/second: 80358.2 Runtime: 0.0021s