Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 13:59:13.501 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 12 10367 1 2025-09-12 13:59:25.285 00:00:10.365 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:00:13.747 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42798 10 6452 1 2025-09-12 14:00:25.693 00:00:10.375 TCP 23.104.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:01:13.969 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-09-12 13:57:27.383 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 13:57:27.380 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:01:26.110 00:00:10.363 TCP 23.104.0.1:43048 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:02:05.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:02:05.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:02:14.262 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-09-12 14:02:26.514 00:00:10.367 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:03:14.473 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46600 10 6452 1 2025-09-12 14:03:26.916 00:00:10.340 TCP 23.104.0.1:46396 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:04:14.684 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56508 10 6452 1 2025-09-12 14:04:27.293 00:00:10.375 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:05:14.925 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45980 10 6452 1 2025-09-12 14:05:27.709 00:00:10.365 TCP 23.104.0.1:36644 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:06:15.131 00:00:10.483 TCP 1.101.0.1:3000 -> 22.102.0.1:48264 10 6452 1 2025-09-12 14:06:28.112 00:00:10.367 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:07:06.046 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:07:05.862 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:07:15.654 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35968 10 6452 1 2025-09-12 14:03:27.383 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:03:27.380 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:07:28.515 00:00:10.370 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:08:15.873 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-09-12 14:08:28.924 00:00:10.406 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:09:16.112 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-09-12 14:09:29.381 00:00:10.367 TCP 23.104.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:10:16.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-09-12 14:10:29.785 00:00:10.369 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:11:16.496 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-09-12 14:11:30.191 00:00:10.368 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:12:06.055 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:12:05.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:12:16.712 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-09-12 14:12:30.595 00:00:10.372 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:13:16.925 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-09-12 14:09:27.381 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:09:27.383 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:13:31.002 00:00:10.374 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:14:17.162 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54192 10 6452 1 2025-09-12 14:14:31.408 00:00:10.364 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:15:17.379 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39642 10 6452 1 2025-09-12 14:15:31.813 00:00:10.363 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:16:17.586 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49532 10 6452 1 2025-09-12 14:16:32.219 00:00:10.383 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:17:05.761 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:17:06.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:17:17.805 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51040 10 6452 1 2025-09-12 14:17:32.660 00:00:10.387 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:18:17.980 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40926 10 6452 1 2025-09-12 14:18:33.102 00:00:10.326 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:19:18.208 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36836 10 6452 1 2025-09-12 14:15:27.381 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:15:27.384 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:19:33.465 00:00:10.369 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:20:18.422 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45890 10 6452 1 2025-09-12 14:20:33.872 00:00:10.366 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:21:18.633 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-09-12 14:21:34.276 00:00:10.364 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:22:06.316 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:22:06.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:22:18.845 00:00:10.585 TCP 1.101.0.1:3000 -> 22.102.0.1:46072 10 6452 1 2025-09-12 14:22:34.675 00:00:10.365 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:23:19.474 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-09-12 14:23:35.100 00:00:10.368 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:24:19.691 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-09-12 14:24:35.506 00:00:10.366 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:25:19.865 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-09-12 14:21:27.385 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:21:27.387 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:25:35.908 00:00:10.364 TCP 23.104.0.1:44790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:26:20.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-09-12 14:26:36.309 00:00:10.371 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:27:06.330 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:27:06.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:27:20.296 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40790 10 6452 1 2025-09-12 14:27:36.725 00:00:10.328 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:28:20.476 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59786 10 6452 1 2025-09-12 14:28:37.106 00:00:10.360 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:29:20.697 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54626 10 6452 1 2025-09-12 14:29:37.509 00:00:10.366 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:30:20.871 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-12 14:30:37.916 00:00:10.378 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:31:21.081 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41884 10 6452 1 2025-09-12 14:27:27.385 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:27:27.388 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:31:38.338 00:00:10.855 TCP 23.104.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:32:06.267 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:32:06.292 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:32:21.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57894 10 6452 1 2025-09-12 14:32:39.229 00:00:11.096 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:33:21.469 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-09-12 14:33:40.359 00:00:10.366 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:34:21.683 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57464 10 6452 1 2025-09-12 14:34:40.762 00:00:10.379 TCP 23.104.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:35:21.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-09-12 14:35:41.178 00:00:10.366 TCP 23.104.0.1:40700 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:36:22.111 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-09-12 14:36:41.577 00:00:10.414 TCP 23.104.0.1:37798 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:37:06.502 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:37:06.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:33:27.392 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:33:27.389 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:37:22.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38394 10 6452 1 2025-09-12 14:37:42.031 00:00:10.367 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:38:22.535 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57378 10 6452 1 2025-09-12 14:38:42.436 00:00:10.373 TCP 23.104.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:39:22.748 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35840 10 6452 1 2025-09-12 14:39:42.850 00:00:10.391 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:40:22.921 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-09-12 14:40:43.280 00:00:10.368 TCP 23.104.0.1:50182 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:41:23.108 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38896 10 6452 1 2025-09-12 14:41:43.677 00:00:10.333 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:42:06.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:42:06.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:42:23.318 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56682 10 6452 1 2025-09-12 14:42:44.061 00:00:10.370 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:39:27.393 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:39:27.396 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:43:23.488 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 11 6813 1 2025-09-12 14:43:44.469 00:00:10.366 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:44:23.704 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42386 10 6452 1 2025-09-12 14:44:44.871 00:00:10.365 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:45:23.917 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 11 6504 1 2025-09-12 14:45:45.278 00:00:10.362 TCP 23.104.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:46:24.187 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6452 1 2025-09-12 14:46:45.681 00:00:10.382 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:47:06.829 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:47:06.460 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:47:24.396 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-09-12 14:47:46.116 00:00:10.371 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:48:24.607 00:00:10.976 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6452 1 2025-09-12 14:48:46.529 00:00:10.360 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:45:27.397 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:45:27.395 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:49:25.624 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-09-12 14:49:46.928 00:00:10.384 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:50:25.838 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58440 10 6452 1 2025-09-12 14:50:47.386 00:00:10.365 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:51:26.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-09-12 14:51:47.789 00:00:10.367 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:52:06.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:52:06.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:52:26.296 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 10 6452 1 2025-09-12 14:52:48.195 00:00:10.370 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:53:26.462 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-09-12 14:53:48.599 00:00:10.325 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:54:26.675 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6452 1 2025-09-12 14:54:48.966 00:00:10.627 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:51:27.398 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:51:27.396 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 14:55:26.861 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54182 10 6452 1 2025-09-12 14:55:49.634 00:00:10.364 TCP 23.104.0.1:45592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:56:27.087 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38264 10 6452 1 2025-09-12 14:56:50.034 00:00:10.371 TCP 23.104.0.1:39366 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:57:06.709 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 14:57:07.202 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 14:57:27.265 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-09-12 14:57:50.440 00:00:10.363 TCP 23.104.0.1:49646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:58:27.479 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 Summary: total flows: 163, total bytes: 501169, total packets: 1565, avg bps: 1092, avg pps: 0, avg bpp: 320 Time window: 2025-09-12 13:57:27 - 2025-09-12 14:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0028s flows/second: 59269.3 Runtime: 0.0028s