Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 03:58:47.830 00:00:10.353 TCP 23.104.0.1:48680 -> 1.101.0.1:3000 11 1507 1 2025-09-12 03:54:27.170 00:06:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 03:59:35.589 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-09-12 03:59:48.231 00:00:10.366 TCP 23.104.0.1:41020 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:00:35.777 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-09-12 04:00:48.632 00:00:10.333 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:01:35.997 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-09-12 04:01:53.979 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:01:53.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:01:49.003 00:00:10.362 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:02:36.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-09-12 04:02:49.404 00:00:10.364 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:03:36.394 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40258 10 6452 1 2025-09-12 04:03:49.816 00:00:10.327 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:04:36.611 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-09-12 04:04:50.181 00:00:10.366 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:00:27.173 00:06:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 04:05:36.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-09-12 04:05:50.583 00:00:10.367 TCP 23.104.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:01:27.171 00:06:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 04:06:37.003 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6452 1 2025-09-12 04:06:54.042 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:06:53.805 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:06:50.992 00:00:10.365 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:07:37.458 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45526 10 6452 1 2025-09-12 04:07:51.391 00:00:10.419 TCP 23.104.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:08:37.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-09-12 04:08:51.854 00:00:10.339 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:09:37.892 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-09-12 04:09:52.229 00:00:10.364 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:10:38.084 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-09-12 04:10:52.632 00:00:10.362 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:11:38.310 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-09-12 04:11:54.042 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:11:54.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:11:53.034 00:00:10.327 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:07:27.174 00:06:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 04:12:38.525 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-09-12 04:12:53.394 00:00:10.321 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:08:27.171 00:06:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 04:13:38.748 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-09-12 04:13:53.756 00:00:10.381 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:14:38.963 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:38844 13 6608 1 2025-09-12 04:14:54.177 00:00:10.366 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:15:39.232 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-09-12 04:15:54.584 00:00:10.369 TCP 23.104.0.1:33850 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:16:39.457 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48482 10 6452 1 2025-09-12 04:16:53.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:16:53.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:16:54.993 00:00:10.367 TCP 23.104.0.1:53960 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:17:39.675 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-09-12 04:17:55.394 00:00:10.368 TCP 23.104.0.1:57204 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:18:39.885 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-09-12 04:18:55.796 00:00:10.376 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:14:27.175 00:06:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 04:15:27.172 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:19:40.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-09-12 04:19:56.206 00:00:10.333 TCP 23.104.0.1:55980 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:20:40.306 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-09-12 04:20:56.577 00:00:10.326 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:21:40.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52560 10 6452 1 2025-09-12 04:21:54.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:21:53.931 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:21:56.936 00:00:10.382 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:22:40.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-09-12 04:22:57.351 00:00:10.326 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:23:40.947 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35400 10 6452 1 2025-09-12 04:23:57.709 00:00:10.367 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:24:41.178 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-09-12 04:24:58.123 00:00:10.367 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:21:27.177 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:21:27.173 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:25:41.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-09-12 04:25:58.532 00:00:10.338 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:26:41.564 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-09-12 04:26:54.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:26:54.429 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:26:58.914 00:00:10.339 TCP 23.104.0.1:52956 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:27:41.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42624 10 6452 1 2025-09-12 04:27:59.296 00:00:10.367 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:28:41.990 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-09-12 04:28:59.699 00:00:10.368 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:29:42.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-09-12 04:30:00.109 00:00:10.367 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:30:42.429 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-09-12 04:31:00.515 00:00:10.364 TCP 23.104.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:27:27.177 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:27:27.179 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:31:42.640 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-09-12 04:31:54.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:31:54.269 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:32:00.924 00:00:10.390 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:32:42.858 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-09-12 04:33:01.353 00:00:10.365 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:33:43.090 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-09-12 04:34:01.754 00:00:10.381 TCP 23.104.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:34:43.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36040 10 6452 1 2025-09-12 04:35:02.171 00:00:10.325 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:35:43.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57344 10 6452 1 2025-09-12 04:36:02.538 00:00:10.361 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:36:54.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:36:43.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59082 10 6452 1 2025-09-12 04:36:54.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:37:02.933 00:00:10.392 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:33:27.178 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:33:27.179 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:37:43.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-09-12 04:38:03.361 00:00:10.362 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:38:44.186 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-09-12 04:39:03.762 00:00:10.337 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:39:44.410 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-09-12 04:40:04.136 00:00:10.325 TCP 23.104.0.1:44616 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:40:44.626 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-09-12 04:41:04.497 00:00:10.367 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:41:44.807 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-09-12 04:41:54.593 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:41:54.519 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:42:04.901 00:00:10.370 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:42:45.041 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-09-12 04:43:05.309 00:00:10.371 TCP 23.104.0.1:33550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:39:27.179 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:39:27.181 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:43:45.254 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-09-12 04:44:05.712 00:00:10.339 TCP 23.104.0.1:36842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:44:45.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-09-12 04:45:06.107 00:00:10.362 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:45:45.650 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-09-12 04:46:06.509 00:00:10.364 TCP 23.104.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:46:54.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:46:45.868 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-09-12 04:46:54.929 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:47:06.910 00:00:10.365 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:47:46.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53898 10 6452 1 2025-09-12 04:48:07.331 00:00:10.366 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:48:46.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-09-12 04:49:07.737 00:00:10.367 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:45:27.184 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:45:27.187 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:49:46.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6452 1 2025-09-12 04:50:08.149 00:00:10.364 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:50:46.754 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-09-12 04:51:08.561 00:00:10.365 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:51:54.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:51:54.698 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:51:46.974 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-09-12 04:52:08.964 00:00:10.382 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:52:47.223 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-09-12 04:53:09.384 00:00:10.373 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:53:47.442 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-09-12 04:54:09.800 00:00:10.365 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:54:47.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-09-12 04:55:10.207 00:00:10.375 TCP 23.104.0.1:52418 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:51:27.189 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 04:51:27.193 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 04:55:47.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42108 10 6452 1 2025-09-12 04:56:10.619 00:00:10.369 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:56:54.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 04:56:54.711 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 04:56:48.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-09-12 04:57:11.025 00:00:10.330 TCP 23.104.0.1:46726 -> 1.101.0.1:3000 11 1507 1 2025-09-12 04:57:48.324 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-09-12 04:58:11.415 00:00:10.373 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 492052, total packets: 1565, avg bps: 1026, avg pps: 0, avg bpp: 314 Time window: 2025-09-12 03:54:27 - 2025-09-12 04:58:21 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0028s Wall: 0.0026s flows/second: 61855.0 Runtime: 0.0026s