Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 18:59:32.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-09-12 18:59:36.489 00:00:10.335 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:00:32.421 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-09-12 19:00:36.861 00:00:10.384 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:57:27.472 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:57:27.474 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:01:32.641 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-09-12 19:01:37.279 00:00:10.361 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:02:11.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:02:12.030 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:02:32.854 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-09-12 19:02:37.679 00:00:10.369 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:03:33.082 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51082 10 6452 1 2025-09-12 19:03:38.107 00:00:10.366 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:04:33.302 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50092 10 6452 1 2025-09-12 19:04:38.510 00:00:10.368 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:05:33.516 00:00:11.070 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6452 1 2025-09-12 19:05:38.916 00:00:10.390 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:06:34.627 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-09-12 19:06:39.343 00:00:10.363 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:07:11.933 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:07:12.077 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:03:27.475 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:03:27.477 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:07:34.833 00:00:10.822 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-09-12 19:07:39.742 00:00:10.813 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:08:35.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6452 1 2025-09-12 19:08:40.590 00:00:10.371 TCP 23.104.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:09:35.914 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-09-12 19:09:41.001 00:00:10.369 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:10:36.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 10 6452 1 2025-09-12 19:10:41.413 00:00:10.365 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:11:36.392 00:00:10.569 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-09-12 19:11:41.819 00:00:10.364 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:12:11.827 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:12:11.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:12:37.015 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48806 10 6452 1 2025-09-12 19:12:42.230 00:00:10.369 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:09:27.475 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:09:27.478 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:13:37.283 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-09-12 19:13:42.641 00:00:10.368 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:14:37.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-09-12 19:14:43.064 00:00:10.365 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:15:37.709 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-09-12 19:15:43.471 00:00:10.327 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:16:37.915 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57404 10 6452 1 2025-09-12 19:16:43.842 00:00:10.381 TCP 23.104.0.1:56406 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:17:12.267 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:17:12.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:17:38.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-09-12 19:17:44.263 00:00:10.364 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:18:38.341 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53054 10 6452 1 2025-09-12 19:18:44.676 00:00:10.370 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:15:27.479 00:05:00.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:15:27.478 00:05:00.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:19:38.555 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-09-12 19:19:45.106 00:00:10.371 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:20:38.773 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44812 10 6452 1 2025-09-12 19:20:45.515 00:00:10.366 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:21:38.989 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37244 10 6452 1 2025-09-12 19:21:45.920 00:00:10.388 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:22:12.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:22:12.186 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:22:39.216 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 10 6452 1 2025-09-12 19:22:46.346 00:00:10.364 TCP 23.104.0.1:42406 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:23:39.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-09-12 19:23:46.749 00:00:10.364 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:24:39.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-09-12 19:24:47.149 00:00:10.360 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:21:27.482 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:21:27.481 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:25:39.932 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-09-12 19:25:47.548 00:00:10.326 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:26:40.181 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-09-12 19:26:47.909 00:00:10.367 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:27:12.480 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:27:12.441 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:27:40.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6452 1 2025-09-12 19:27:48.316 00:00:10.365 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:28:40.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-09-12 19:28:48.720 00:00:10.323 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:29:40.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-09-12 19:29:49.110 00:00:10.366 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:30:41.034 00:00:12.940 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 10 6452 1 2025-09-12 19:30:49.513 00:00:10.481 TCP 23.104.0.1:46976 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:27:27.485 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:27:27.488 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:31:44.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-09-12 19:31:50.032 00:00:10.362 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:32:12.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:32:12.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:32:44.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-09-12 19:32:50.431 00:00:10.360 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:33:44.465 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-09-12 19:33:50.832 00:00:10.411 TCP 23.104.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:34:44.688 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-09-12 19:34:51.297 00:00:10.366 TCP 23.104.0.1:36860 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:35:44.861 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56554 10 6452 1 2025-09-12 19:35:51.701 00:00:10.367 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:36:45.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49442 10 6452 1 2025-09-12 19:36:52.110 00:00:10.364 TCP 23.104.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:37:12.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:37:12.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:33:27.490 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:33:27.488 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:37:45.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-09-12 19:37:52.511 00:00:10.368 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:38:45.513 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-09-12 19:38:52.919 00:00:10.347 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:39:45.733 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 10 6452 1 2025-09-12 19:39:53.304 00:00:10.363 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:40:45.953 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-09-12 19:40:53.705 00:00:10.406 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:41:46.187 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42096 10 6452 1 2025-09-12 19:41:54.151 00:00:10.329 TCP 23.104.0.1:40970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:42:12.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:42:12.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:42:46.398 00:00:10.283 TCP 1.101.0.1:3000 -> 22.102.0.1:43072 10 6452 1 2025-09-12 19:42:54.522 00:00:10.368 TCP 23.104.0.1:55482 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:39:27.493 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:39:27.490 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:43:46.725 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-09-12 19:43:54.928 00:00:10.407 TCP 23.104.0.1:55832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:44:46.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49904 10 6452 1 2025-09-12 19:44:55.354 00:00:10.365 TCP 23.104.0.1:45110 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:45:47.113 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-09-12 19:45:55.761 00:00:10.905 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:46:47.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6452 1 2025-09-12 19:46:56.706 00:00:10.364 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:47:13.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:47:12.920 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:47:47.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-09-12 19:47:57.111 00:00:10.368 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:48:47.715 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-09-12 19:48:57.516 00:00:10.367 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:45:27.492 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:45:27.495 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:49:47.927 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-09-12 19:49:57.922 00:00:10.394 TCP 23.104.0.1:33812 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:50:48.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-09-12 19:50:58.354 00:00:10.365 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:51:48.398 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6452 1 2025-09-12 19:51:58.778 00:00:10.326 TCP 23.104.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:52:12.791 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:52:12.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:52:48.620 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-09-12 19:52:59.136 00:00:10.367 TCP 23.104.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:53:48.844 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-09-12 19:53:59.544 00:00:10.360 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:54:49.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-09-12 19:54:59.946 00:00:10.372 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:51:27.497 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:51:27.496 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 19:55:49.305 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48702 10 6452 1 2025-09-12 19:56:00.356 00:00:10.364 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:56:49.524 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 12 6556 1 2025-09-12 19:57:00.758 00:00:10.376 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:57:13.171 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 19:57:13.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 19:57:49.735 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-09-12 19:58:01.176 00:00:10.366 TCP 23.104.0.1:51666 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490493, total packets: 1553, avg bps: 1076, avg pps: 0, avg bpp: 315 Time window: 2025-09-12 18:57:27 - 2025-09-12 19:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0021s Wall: 0.0021s flows/second: 78452.5 Runtime: 0.0021s