Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 15:58:42.444 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 12 10367 1 2025-09-12 15:59:15.728 00:00:10.446 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 15 1926 1 2025-09-12 15:59:42.691 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-09-12 16:00:16.216 00:00:11.961 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:00:42.865 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-09-12 16:01:18.219 00:00:10.371 TCP 23.104.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:57:27.420 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:57:27.418 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:01:43.088 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-09-12 16:02:08.026 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:02:08.282 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:02:18.630 00:00:10.363 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:02:43.297 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-09-12 16:03:19.034 00:00:10.338 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:03:43.506 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-12 16:04:19.411 00:00:10.364 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:04:43.676 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54070 10 6452 1 2025-09-12 16:05:19.813 00:00:10.330 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:05:43.912 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-09-12 16:06:20.184 00:00:10.375 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:06:44.125 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-09-12 16:07:08.252 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:07:08.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:07:20.596 00:00:10.368 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:03:27.420 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:03:27.418 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:07:44.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56924 10 6452 1 2025-09-12 16:08:21.004 00:00:10.366 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:08:44.512 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54386 10 6452 1 2025-09-12 16:09:21.411 00:00:10.363 TCP 23.104.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:09:44.729 00:00:10.855 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-09-12 16:10:21.811 00:00:10.382 TCP 23.104.0.1:34658 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:10:45.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-09-12 16:11:22.242 00:00:10.365 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:11:45.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-09-12 16:12:08.469 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:12:08.466 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:12:22.644 00:00:10.371 TCP 23.104.0.1:37240 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:12:46.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-09-12 16:09:27.422 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:09:27.420 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:13:23.063 00:00:10.403 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:13:46.292 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51556 12 6556 1 2025-09-12 16:14:23.502 00:00:10.327 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:14:46.504 00:00:19.302 TCP 1.101.0.1:3000 -> 22.102.0.1:50262 10 6452 1 2025-09-12 16:15:23.868 00:00:10.572 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:15:55.855 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 10 6452 1 2025-09-12 16:16:24.479 00:00:10.368 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:16:56.103 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-09-12 16:17:08.342 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:17:08.349 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:17:24.881 00:00:10.380 TCP 23.104.0.1:36822 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:17:56.281 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54126 10 6452 1 2025-09-12 16:18:25.300 00:00:10.362 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:18:56.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-09-12 16:15:27.421 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:15:27.423 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:19:25.703 00:00:10.368 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:19:56.703 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-09-12 16:20:26.111 00:00:10.366 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:20:56.913 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53750 10 6452 1 2025-09-12 16:21:26.512 00:00:10.366 TCP 23.104.0.1:44564 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:21:57.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-09-12 16:22:08.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:22:08.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:22:26.913 00:00:10.366 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:22:57.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39258 10 6452 1 2025-09-12 16:23:27.315 00:00:10.367 TCP 23.104.0.1:50640 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:23:57.513 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-09-12 16:24:27.720 00:00:10.332 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:24:57.733 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-09-12 16:21:27.422 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:21:27.424 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:25:28.104 00:00:10.362 TCP 23.104.0.1:34240 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:25:57.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60012 12 6556 1 2025-09-12 16:26:28.506 00:00:10.366 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:27:08.660 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:27:08.482 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:26:58.191 00:00:10.601 TCP 1.101.0.1:3000 -> 22.102.0.1:47348 10 6452 1 2025-09-12 16:27:28.910 00:00:10.324 TCP 23.104.0.1:45556 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:27:58.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-09-12 16:28:29.275 00:00:10.367 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:28:59.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34110 10 6452 1 2025-09-12 16:29:29.676 00:00:10.376 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:29:59.279 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-09-12 16:30:30.106 00:00:10.369 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:30:59.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-09-12 16:27:27.423 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:27:27.425 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:31:30.515 00:00:10.365 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:32:08.677 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:32:08.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:31:59.718 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52246 10 6452 1 2025-09-12 16:32:30.921 00:00:10.386 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:32:59.958 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-09-12 16:33:31.344 00:00:10.441 TCP 23.104.0.1:56634 -> 1.101.0.1:3000 15 1926 1 2025-09-12 16:34:00.182 00:00:10.840 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 12 10367 1 2025-09-12 16:34:31.835 00:00:10.379 TCP 23.104.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:35:01.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-09-12 16:35:32.249 00:00:10.438 TCP 23.104.0.1:37354 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:36:01.292 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50470 10 6452 1 2025-09-12 16:36:32.708 00:00:10.362 TCP 23.104.0.1:53062 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:37:01.462 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43700 10 6452 1 2025-09-12 16:37:09.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:37:09.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:33:27.425 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:33:27.427 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:37:33.107 00:00:10.367 TCP 23.104.0.1:41662 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:38:01.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-09-12 16:38:33.509 00:00:10.363 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:39:01.886 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49098 10 6452 1 2025-09-12 16:39:33.913 00:00:10.362 TCP 23.104.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:40:02.101 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-09-12 16:40:34.321 00:00:10.326 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:41:02.277 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45492 10 6452 1 2025-09-12 16:41:34.690 00:00:10.328 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:42:08.721 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:42:08.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:42:02.484 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-09-12 16:42:35.063 00:00:10.364 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:43:02.698 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57026 10 6452 1 2025-09-12 16:39:27.428 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:39:27.426 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:43:35.460 00:00:10.364 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:44:02.869 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-09-12 16:44:35.866 00:00:10.374 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:45:03.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-09-12 16:45:36.280 00:00:10.322 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:46:03.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-09-12 16:46:36.644 00:00:10.367 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:47:09.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:47:08.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:47:03.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-09-12 16:47:37.065 00:00:10.452 TCP 23.104.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:48:03.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-09-12 16:48:37.554 00:00:10.328 TCP 23.104.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:49:03.951 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-09-12 16:45:27.427 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:45:27.429 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:49:37.918 00:00:10.500 TCP 23.104.0.1:57796 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:50:04.177 00:00:10.475 TCP 1.101.0.1:3000 -> 22.102.0.1:45008 10 6452 1 2025-09-12 16:50:38.458 00:00:10.368 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:51:04.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-09-12 16:51:38.869 00:00:10.370 TCP 23.104.0.1:59866 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:52:09.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:52:09.350 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:52:04.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56492 10 6452 1 2025-09-12 16:52:39.277 00:00:10.326 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:53:05.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-09-12 16:53:39.640 00:00:10.368 TCP 23.104.0.1:58030 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:54:05.324 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46212 10 6452 1 2025-09-12 16:54:40.049 00:00:10.368 TCP 23.104.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:55:05.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-09-12 16:51:27.432 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:51:27.429 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 16:55:40.457 00:00:10.368 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:56:05.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-09-12 16:56:40.862 00:00:10.371 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:57:09.097 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 16:57:09.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 16:57:05.966 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-09-12 16:57:41.274 00:00:10.363 TCP 23.104.0.1:37616 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:58:06.150 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36038 10 6452 1 Summary: total flows: 163, total bytes: 505717, total packets: 1577, avg bps: 1108, avg pps: 0, avg bpp: 320 Time window: 2025-09-12 15:57:27 - 2025-09-12 16:58:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0013s Wall: 0.0026s flows/second: 62378.8 Runtime: 0.0026s