Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 19:58:49.957 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 12 6556 1 2025-09-12 19:59:01.591 00:00:10.370 TCP 23.104.0.1:52750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:59:50.189 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56630 10 6452 1 2025-09-12 20:00:01.999 00:00:10.336 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:00:50.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46230 10 6452 1 2025-09-12 20:01:02.376 00:00:10.366 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-09-12 19:57:27.498 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 19:57:27.496 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:01:50.572 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41284 10 6452 1 2025-09-12 20:02:13.024 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:02:02.782 00:00:10.323 TCP 23.104.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:02:12.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:02:50.782 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-09-12 20:03:03.142 00:00:10.367 TCP 23.104.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:03:50.952 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 12 6556 1 2025-09-12 20:04:03.556 00:00:10.370 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:04:51.194 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-09-12 20:05:03.963 00:00:10.366 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:05:51.410 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54042 10 6452 1 2025-09-12 20:06:04.370 00:00:10.363 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:06:51.625 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-09-12 20:07:12.891 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:07:12.819 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:07:04.776 00:00:10.368 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:03:27.499 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:03:27.498 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:07:51.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-09-12 20:08:05.182 00:00:10.372 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:08:52.014 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42444 10 6452 1 2025-09-12 20:09:05.597 00:00:10.365 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:09:52.219 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-09-12 20:10:06.004 00:00:10.368 TCP 23.104.0.1:58886 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:10:52.433 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32788 10 6452 1 2025-09-12 20:11:06.409 00:00:10.370 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:11:52.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-09-12 20:12:13.339 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:12:13.331 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:12:06.819 00:00:10.327 TCP 23.104.0.1:41994 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:12:52.876 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-09-12 20:13:07.188 00:00:10.360 TCP 23.104.0.1:58942 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:09:27.497 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:09:27.499 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:13:53.073 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 12 10367 1 2025-09-12 20:14:07.584 00:00:10.436 TCP 23.104.0.1:60310 -> 1.101.0.1:3000 15 1926 1 2025-09-12 20:14:53.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-09-12 20:15:08.089 00:00:10.360 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:15:53.524 00:00:10.787 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-09-12 20:16:08.490 00:00:10.361 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:16:54.348 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6452 1 2025-09-12 20:17:13.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:17:13.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:17:08.899 00:00:10.371 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:17:54.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-09-12 20:18:09.310 00:00:10.367 TCP 23.104.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:18:54.733 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 12 10367 1 2025-09-12 20:19:09.719 00:00:10.459 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 15 1926 1 2025-09-12 20:15:27.503 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:15:27.505 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:19:54.937 00:00:10.322 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-09-12 20:20:10.215 00:00:10.529 TCP 23.104.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:20:55.294 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-09-12 20:21:10.811 00:00:10.361 TCP 23.104.0.1:41926 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:21:55.783 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6452 1 2025-09-12 20:22:13.241 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:22:13.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:22:11.214 00:00:10.362 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:22:55.995 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-09-12 20:23:11.615 00:00:10.362 TCP 23.104.0.1:43540 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:23:56.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6452 1 2025-09-12 20:24:12.016 00:00:10.361 TCP 23.104.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:24:56.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46790 10 6452 1 2025-09-12 20:25:12.414 00:00:10.328 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:21:27.509 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:21:27.505 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:25:56.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-09-12 20:26:12.778 00:00:10.369 TCP 23.104.0.1:34072 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:26:56.855 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 11 6492 1 2025-09-12 20:27:13.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:27:13.226 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:27:13.185 00:00:10.327 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:27:57.097 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-09-12 20:28:13.540 00:00:10.359 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:28:57.304 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48560 10 6452 1 2025-09-12 20:29:13.939 00:00:10.374 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:29:57.483 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53864 10 6452 1 2025-09-12 20:30:14.347 00:00:10.377 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:30:57.675 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33770 10 6452 1 2025-09-12 20:31:14.761 00:00:10.379 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:27:27.508 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:27:27.505 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:31:57.882 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39258 10 6452 1 2025-09-12 20:32:13.344 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:32:13.571 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:32:15.174 00:00:10.329 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:32:58.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-09-12 20:33:15.537 00:00:10.368 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:33:58.324 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41514 10 6452 1 2025-09-12 20:34:15.939 00:00:10.376 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:34:58.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-09-12 20:35:16.350 00:00:10.356 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:35:58.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34852 10 6452 1 2025-09-12 20:36:16.748 00:00:10.378 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:36:58.928 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-09-12 20:37:13.672 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:37:13.588 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:33:27.510 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:33:27.512 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:37:17.163 00:00:10.367 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:37:59.183 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-09-12 20:38:17.571 00:00:10.323 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:38:59.391 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-09-12 20:39:17.927 00:00:10.397 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:39:59.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-09-12 20:40:18.361 00:00:10.671 TCP 23.104.0.1:40842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:40:59.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-09-12 20:41:19.089 00:00:10.360 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:42:00.040 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-09-12 20:42:13.821 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:42:13.502 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:42:19.497 00:00:10.375 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:43:00.272 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 10 6452 1 2025-09-12 20:39:27.514 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:39:27.517 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:43:19.927 00:00:10.388 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:44:00.444 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41490 10 6452 1 2025-09-12 20:44:20.354 00:00:10.369 TCP 23.104.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:45:00.656 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53528 10 6452 1 2025-09-12 20:45:20.767 00:00:10.367 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:46:00.869 00:00:19.238 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-09-12 20:46:21.173 00:00:10.368 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:47:13.847 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:47:13.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:47:10.148 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-09-12 20:47:21.580 00:00:10.370 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:48:10.362 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37768 10 6452 1 2025-09-12 20:48:21.994 00:00:10.362 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:49:10.534 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-09-12 20:45:27.513 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:45:27.516 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:49:22.396 00:00:10.363 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:50:10.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-09-12 20:50:22.801 00:00:10.369 TCP 23.104.0.1:60264 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:51:10.959 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-09-12 20:51:23.211 00:00:10.367 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:52:13.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:52:13.263 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:52:23.618 00:00:10.365 TCP 23.104.0.1:33694 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:52:11.149 00:00:21.615 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 10 6452 1 2025-09-12 20:53:24.017 00:00:10.317 TCP 23.104.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:53:22.804 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40442 10 6452 1 2025-09-12 20:54:24.379 00:00:10.364 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:54:23.034 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6452 1 2025-09-12 20:51:27.516 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 20:51:27.518 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:55:24.776 00:00:10.369 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:55:23.249 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-09-12 20:56:25.181 00:00:10.326 TCP 23.104.0.1:36158 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:56:23.464 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-09-12 20:57:14.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 20:57:14.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 20:57:23.671 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:54636 10 6452 1 2025-09-12 20:57:25.546 00:00:10.365 TCP 23.104.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:58:25.948 00:00:10.375 TCP 23.104.0.1:42724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:58:23.878 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 Summary: total flows: 164, total bytes: 507264, total packets: 1589, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-09-12 19:57:27 - 2025-09-12 20:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0028s flows/second: 57644.0 Runtime: 0.0029s