Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 11:58:53.493 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53102 10 6452 1 2025-09-13 11:58:59.753 00:00:10.387 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:59:53.662 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41008 10 6452 1 2025-09-13 12:00:00.172 00:00:10.365 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:00:53.876 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-09-13 12:01:00.573 00:00:10.369 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:57:27.833 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:57:27.835 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:01:54.120 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-09-13 12:02:00.975 00:00:10.369 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:02:32.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:02:32.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:02:54.340 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39286 10 6452 1 2025-09-13 12:03:01.385 00:00:10.367 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:03:54.561 00:00:10.851 TCP 1.101.0.1:3000 -> 22.102.0.1:59984 12 10367 1 2025-09-13 12:04:01.790 00:00:10.442 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 15 1926 1 2025-09-13 12:04:55.454 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6452 1 2025-09-13 12:05:02.275 00:00:10.363 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:05:55.631 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 10 6452 1 2025-09-13 12:06:02.673 00:00:10.377 TCP 23.104.0.1:45032 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:06:55.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-09-13 12:07:03.104 00:00:10.361 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:03:27.839 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:03:27.842 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:07:32.336 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:07:32.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:07:56.043 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37372 10 6452 1 2025-09-13 12:08:03.508 00:00:10.364 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:08:56.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-09-13 12:09:03.909 00:00:10.530 TCP 23.104.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:09:56.469 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-09-13 12:10:04.474 00:00:10.369 TCP 23.104.0.1:56736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:10:56.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-09-13 12:11:04.876 00:00:10.368 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:11:56.900 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-09-13 12:12:05.283 00:00:10.369 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:12:32.486 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:12:32.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:12:57.134 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-09-13 12:13:05.692 00:00:10.365 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:09:27.839 00:05:00.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:09:27.842 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:13:57.356 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-09-13 12:14:06.102 00:00:10.373 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:14:57.579 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-09-13 12:15:06.513 00:00:10.362 TCP 23.104.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:15:57.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-09-13 12:16:06.918 00:00:10.393 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:16:58.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-09-13 12:17:07.351 00:00:10.368 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:17:33.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:17:33.060 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:17:58.245 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-09-13 12:18:07.755 00:00:10.391 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:18:58.951 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 12 10365 1 2025-09-13 12:19:08.184 00:00:10.400 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 15 1926 1 2025-09-13 12:15:27.842 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:15:27.844 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:19:59.210 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57366 10 6452 1 2025-09-13 12:20:08.630 00:00:10.377 TCP 23.104.0.1:36656 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:20:59.430 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-09-13 12:21:09.063 00:00:10.364 TCP 23.104.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:21:59.655 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-09-13 12:22:09.475 00:00:10.366 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:22:32.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:22:32.636 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:22:59.824 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-09-13 12:23:09.885 00:00:10.383 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:24:00.037 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34804 10 6452 1 2025-09-13 12:24:10.310 00:00:10.372 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:25:00.211 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2025-09-13 12:25:10.723 00:00:10.653 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:21:27.843 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:21:27.845 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:26:00.426 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55260 10 6452 1 2025-09-13 12:26:11.420 00:00:10.327 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:27:00.649 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50714 10 6452 1 2025-09-13 12:27:11.786 00:00:10.364 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:27:32.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:27:32.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:28:00.864 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45630 10 6452 1 2025-09-13 12:28:12.198 00:00:10.328 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:29:01.093 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-09-13 12:29:12.559 00:00:10.368 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:30:01.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-09-13 12:30:12.961 00:00:10.364 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:31:01.527 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-09-13 12:31:13.363 00:00:10.326 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:27:27.844 00:05:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:27:27.847 00:05:00.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:32:01.706 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6452 1 2025-09-13 12:32:13.728 00:00:10.375 TCP 23.104.0.1:44822 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:32:32.966 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:32:33.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:33:01.939 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-09-13 12:33:14.140 00:00:10.363 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:34:02.152 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-09-13 12:34:14.545 00:00:10.361 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:35:02.324 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43492 10 6452 1 2025-09-13 12:35:14.946 00:00:10.371 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:36:02.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 10 6452 1 2025-09-13 12:36:15.356 00:00:10.363 TCP 23.104.0.1:52268 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:37:02.761 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-09-13 12:37:15.751 00:00:10.388 TCP 23.104.0.1:60644 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:33:27.847 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:33:27.849 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:37:32.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:37:32.713 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:38:02.968 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 12 6556 1 2025-09-13 12:38:16.171 00:00:10.364 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:39:03.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-09-13 12:39:16.571 00:00:10.370 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:40:03.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-09-13 12:40:16.974 00:00:10.385 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:41:03.617 00:00:10.731 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-09-13 12:41:17.384 00:00:10.371 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:42:04.387 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-09-13 12:42:17.793 00:00:10.417 TCP 23.104.0.1:52870 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:42:33.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:42:33.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:43:04.614 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39648 10 6452 1 2025-09-13 12:39:27.848 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:39:27.851 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:43:18.251 00:00:10.373 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:44:04.831 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-09-13 12:44:18.662 00:00:10.367 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:45:05.085 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-09-13 12:45:19.099 00:00:10.372 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:46:05.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-09-13 12:46:19.524 00:00:10.394 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:47:05.529 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-09-13 12:47:19.987 00:00:10.364 TCP 23.104.0.1:32924 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:47:32.953 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:47:33.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:48:05.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-09-13 12:48:20.392 00:00:10.325 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:49:05.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-09-13 12:45:27.853 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:49:20.758 00:00:10.389 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:45:27.851 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:50:06.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-09-13 12:50:21.182 00:00:10.358 TCP 23.104.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:51:06.403 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-09-13 12:51:21.576 00:00:10.366 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:52:06.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6452 1 2025-09-13 12:52:33.327 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:52:21.981 00:00:10.369 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:52:33.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:53:06.823 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-09-13 12:53:22.390 00:00:10.363 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:54:07.039 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-09-13 12:54:22.787 00:00:10.363 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:55:07.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45064 10 6452 1 2025-09-13 12:51:27.852 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 12:51:27.854 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 12:55:23.202 00:00:10.368 TCP 23.104.0.1:54542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:56:07.433 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-09-13 12:56:23.605 00:00:10.367 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:57:07.652 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-09-13 12:57:33.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 12:57:24.009 00:00:10.322 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-09-13 12:57:33.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 12:58:07.882 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39824 10 6452 1 2025-09-13 12:58:24.368 00:00:10.368 TCP 23.104.0.1:50822 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507118, total packets: 1586, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-09-13 11:57:27 - 2025-09-13 12:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0022s Wall: 0.0020s flows/second: 82995.4 Runtime: 0.0020s