Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 00:59:20.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6452 1 2025-09-13 00:59:17.889 00:00:10.337 TCP 23.104.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:00:20.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60666 10 6452 1 2025-09-13 01:00:18.266 00:00:10.368 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:57:27.589 00:05:00.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:01:18.672 00:00:10.390 TCP 23.104.0.1:55646 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:01:20.648 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-09-13 00:57:27.586 00:05:00.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:02:18.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:02:19.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:02:19.116 00:00:10.362 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:02:20.867 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-09-13 01:03:19.521 00:00:10.364 TCP 23.104.0.1:56860 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:03:21.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-09-13 01:04:19.927 00:00:10.434 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:04:21.301 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-09-13 01:05:20.404 00:00:10.328 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:05:22.082 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-09-13 01:06:20.769 00:00:10.374 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:06:22.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 10 6452 1 2025-09-13 01:07:18.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:07:18.920 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:03:27.593 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:07:21.177 00:00:10.363 TCP 23.104.0.1:33794 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:03:27.589 00:05:00.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:07:22.476 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-09-13 01:08:21.582 00:00:10.365 TCP 23.104.0.1:57558 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:08:22.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-09-13 01:09:21.985 00:00:10.414 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:09:22.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38930 10 6452 1 2025-09-13 01:10:23.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-09-13 01:10:22.442 00:00:10.365 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:11:23.318 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-09-13 01:11:22.847 00:00:10.382 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:12:19.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:12:19.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:12:23.265 00:00:10.731 TCP 23.104.0.1:53782 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:12:23.533 00:00:10.428 TCP 1.101.0.1:3000 -> 22.102.0.1:55728 10 6452 1 2025-09-13 01:09:27.594 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:09:27.591 00:05:00.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:13:24.061 00:00:10.361 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:13:24.006 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-09-13 01:14:24.464 00:00:10.366 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:14:24.226 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-09-13 01:15:24.871 00:00:10.365 TCP 23.104.0.1:40834 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:15:24.436 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-09-13 01:16:25.276 00:00:10.364 TCP 23.104.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:16:24.657 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56098 10 6452 1 2025-09-13 01:17:19.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:17:19.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:17:24.882 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34010 10 6452 1 2025-09-13 01:17:25.681 00:00:10.981 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:18:25.108 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-09-13 01:18:26.698 00:00:10.364 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:15:27.596 00:05:00.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:15:27.594 00:05:00.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:19:25.332 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-09-13 01:19:27.109 00:00:10.327 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:20:25.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-09-13 01:20:27.469 00:00:10.379 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:21:25.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-09-13 01:21:27.883 00:00:10.383 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:22:19.616 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:22:19.365 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:22:25.942 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51850 10 6452 1 2025-09-13 01:22:28.305 00:00:10.328 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:23:26.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6452 1 2025-09-13 01:23:28.675 00:00:10.362 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:24:26.397 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-09-13 01:24:29.103 00:00:10.366 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:21:27.595 00:05:00.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:21:27.596 00:05:00.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:25:26.585 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-09-13 01:25:29.508 00:00:10.960 TCP 23.104.0.1:42976 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:26:26.799 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56212 10 6452 1 2025-09-13 01:26:30.501 00:00:10.362 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:27:19.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:27:19.551 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:27:30.908 00:00:10.326 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:27:26.964 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50348 10 6452 1 2025-09-13 01:28:31.272 00:00:10.367 TCP 23.104.0.1:44094 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:28:27.138 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41400 10 6452 1 2025-09-13 01:29:27.353 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-09-13 01:29:31.676 00:00:10.368 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:30:27.531 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39554 10 6452 1 2025-09-13 01:30:32.103 00:00:10.365 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:27:27.596 00:05:00.911 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:27:27.599 00:05:00.906 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:31:27.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-09-13 01:31:32.503 00:00:10.367 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:32:19.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:32:19.697 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:32:27.954 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34202 10 6452 1 2025-09-13 01:32:32.907 00:00:10.325 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:33:28.202 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-09-13 01:33:33.268 00:00:10.324 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:34:28.513 00:00:10.511 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-09-13 01:34:33.632 00:00:10.368 TCP 23.104.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:35:29.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-09-13 01:35:34.047 00:00:10.362 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:36:29.251 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-09-13 01:36:34.447 00:00:10.369 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:37:19.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:37:19.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:33:27.598 00:05:00.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:33:27.597 00:05:00.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:37:29.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-09-13 01:37:34.860 00:00:10.372 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:38:29.671 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46710 12 10365 1 2025-09-13 01:38:35.276 00:00:10.450 TCP 23.104.0.1:44410 -> 1.101.0.1:3000 15 1926 1 2025-09-13 01:39:29.910 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-09-13 01:39:35.760 00:00:10.329 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:40:30.128 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59714 10 6452 1 2025-09-13 01:40:36.127 00:00:10.367 TCP 23.104.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:41:30.349 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33242 10 6452 1 2025-09-13 01:41:36.534 00:00:10.372 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:42:19.599 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:42:19.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:42:30.566 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53670 10 6452 1 2025-09-13 01:42:36.945 00:00:10.366 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:39:27.599 00:05:00.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:39:27.597 00:05:00.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:43:30.789 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 2025-09-13 01:43:37.350 00:00:10.364 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:44:31.010 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-09-13 01:44:37.751 00:00:10.391 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:45:31.228 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6452 1 2025-09-13 01:45:38.182 00:00:10.370 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:46:31.447 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-09-13 01:46:38.590 00:00:10.367 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:47:19.612 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:47:20.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:47:31.657 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43228 10 6452 1 2025-09-13 01:47:38.993 00:00:10.367 TCP 23.104.0.1:59578 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:48:31.870 00:00:10.616 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-09-13 01:48:39.402 00:00:10.364 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:45:27.599 00:05:00.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:45:27.603 00:05:00.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:49:32.528 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38708 10 6452 1 2025-09-13 01:49:39.803 00:00:10.370 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:50:32.738 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-09-13 01:50:40.206 00:00:10.326 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:51:32.958 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 12 6556 1 2025-09-13 01:51:40.572 00:00:10.362 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:52:20.180 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:52:19.970 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:52:33.190 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-09-13 01:52:40.973 00:00:10.326 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:53:33.368 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:56018 12 10367 1 2025-09-13 01:53:41.335 00:00:10.440 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 15 1926 1 2025-09-13 01:54:33.617 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-09-13 01:54:41.811 00:00:10.361 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:51:27.622 00:05:00.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 01:51:27.623 00:05:00.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:55:33.835 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51692 10 6452 1 2025-09-13 01:55:42.210 00:00:10.364 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:56:34.031 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-09-13 01:56:42.612 00:00:10.359 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:57:19.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 01:57:20.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 01:57:34.254 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-09-13 01:57:43.012 00:00:10.362 TCP 23.104.0.1:49930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:58:34.421 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:49970 10 6452 1 Summary: total flows: 163, total bytes: 505611, total packets: 1575, avg bps: 1100, avg pps: 0, avg bpp: 321 Time window: 2025-09-13 00:57:27 - 2025-09-13 01:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0027s flows/second: 61096.7 Runtime: 0.0027s