Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 14:58:50.851 00:00:10.338 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:59:27.663 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50884 10 6452 1 2025-09-12 14:59:51.228 00:00:10.366 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:00:27.878 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-09-12 15:00:51.632 00:00:10.325 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-09-12 14:57:27.399 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 14:57:27.397 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:01:28.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-09-12 15:01:51.994 00:00:10.363 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:02:07.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:02:07.537 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:02:28.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-09-12 15:02:52.400 00:00:10.362 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:03:28.532 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-09-12 15:03:52.801 00:00:10.364 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:04:28.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-09-12 15:04:53.206 00:00:10.364 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:05:28.918 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-09-12 15:05:53.608 00:00:11.073 TCP 23.104.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:06:29.131 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:41494 10 6452 1 2025-09-12 15:06:54.723 00:00:10.375 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:07:07.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:07:06.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:03:27.401 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:03:27.397 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:07:29.892 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-09-12 15:07:55.139 00:00:10.362 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:08:30.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50502 10 6452 1 2025-09-12 15:08:55.542 00:00:10.363 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:09:30.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41614 10 6452 1 2025-09-12 15:09:55.940 00:00:10.333 TCP 23.104.0.1:42486 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:10:30.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6452 1 2025-09-12 15:10:56.316 00:00:10.370 TCP 23.104.0.1:36614 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:11:30.726 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-09-12 15:12:06.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:12:07.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:11:56.717 00:00:10.378 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:12:30.939 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-09-12 15:12:57.134 00:00:10.365 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:09:27.399 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:09:27.403 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:13:31.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-09-12 15:13:57.539 00:00:10.381 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:14:31.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39742 10 6452 1 2025-09-12 15:14:57.947 00:00:10.373 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:15:31.607 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-09-12 15:15:58.361 00:00:10.368 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:16:31.823 00:00:10.517 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-09-12 15:17:07.324 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:16:58.767 00:00:10.337 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:17:07.024 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:17:32.384 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-09-12 15:17:59.142 00:00:10.372 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:18:32.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-09-12 15:18:59.552 00:00:10.368 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:15:27.403 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:15:27.400 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:19:32.765 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-09-12 15:19:59.955 00:00:10.384 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:20:32.991 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-09-12 15:21:00.378 00:00:10.365 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:21:33.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-09-12 15:22:00.780 00:00:10.370 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:22:07.247 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:22:07.518 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:22:33.440 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-09-12 15:23:01.185 00:00:10.373 TCP 23.104.0.1:56222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:23:34.107 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-09-12 15:24:01.597 00:00:10.325 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:24:34.325 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-09-12 15:25:01.959 00:00:10.321 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:21:27.403 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:21:27.401 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:25:34.530 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 10 6452 1 2025-09-12 15:26:02.322 00:00:10.321 TCP 23.104.0.1:34556 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:26:34.746 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-09-12 15:27:07.649 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:27:07.720 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:27:02.675 00:00:10.363 TCP 23.104.0.1:47568 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:27:34.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-09-12 15:28:03.096 00:00:10.363 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:28:35.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-09-12 15:29:03.501 00:00:10.559 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:29:35.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39428 10 6452 1 2025-09-12 15:30:04.107 00:00:10.362 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:30:35.565 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:60804 10 6452 1 2025-09-12 15:31:04.509 00:00:10.322 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:27:27.405 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:27:27.402 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:31:36.436 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-09-12 15:32:07.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:32:07.560 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:32:04.866 00:00:10.366 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:32:36.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52334 10 6452 1 2025-09-12 15:33:05.270 00:00:10.322 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:33:36.867 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 12 10367 1 2025-09-12 15:34:05.631 00:00:10.401 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 15 1926 1 2025-09-12 15:34:37.131 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-09-12 15:35:06.100 00:00:10.364 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:35:37.346 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-09-12 15:36:06.509 00:00:10.362 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:36:37.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44778 10 6452 1 2025-09-12 15:37:07.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:37:07.736 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:37:06.911 00:00:10.364 TCP 23.104.0.1:49256 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:33:27.402 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:33:27.405 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:37:37.728 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-09-12 15:38:07.313 00:00:10.366 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:38:37.936 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38294 10 6452 1 2025-09-12 15:39:07.719 00:00:10.377 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:39:38.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-09-12 15:40:08.142 00:00:10.376 TCP 23.104.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:40:38.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-09-12 15:41:08.556 00:00:10.361 TCP 23.104.0.1:59916 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:41:38.600 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-09-12 15:42:08.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:42:07.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:42:08.957 00:00:10.364 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:42:38.816 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-09-12 15:43:09.357 00:00:10.364 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:39:27.407 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:39:27.405 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:43:39.063 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59166 10 6452 1 2025-09-12 15:44:09.764 00:00:10.377 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:44:39.307 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35452 10 6452 1 2025-09-12 15:45:10.204 00:00:10.364 TCP 23.104.0.1:54494 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:45:39.478 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 10 6452 1 2025-09-12 15:46:10.608 00:00:10.318 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:46:39.647 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-09-12 15:47:07.768 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:47:07.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:47:10.974 00:00:10.329 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:47:39.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-09-12 15:48:11.352 00:00:10.362 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:48:40.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50430 10 6452 1 2025-09-12 15:49:11.760 00:00:10.379 TCP 23.104.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:45:27.409 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:45:27.412 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:49:40.317 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52610 10 6452 1 2025-09-12 15:50:12.174 00:00:10.367 TCP 23.104.0.1:32868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:50:40.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-09-12 15:51:12.584 00:00:10.364 TCP 23.104.0.1:55260 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:51:40.698 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-09-12 15:52:08.125 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:52:08.221 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:52:12.993 00:00:10.361 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:52:40.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41150 10 6452 1 2025-09-12 15:53:13.397 00:00:10.328 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:53:41.124 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45682 10 6452 1 2025-09-12 15:54:13.761 00:00:10.339 TCP 23.104.0.1:41602 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:54:41.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-09-12 15:55:14.136 00:00:10.366 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:51:27.411 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 15:51:27.414 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 15:55:41.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51900 10 6452 1 2025-09-12 15:56:14.544 00:00:10.372 TCP 23.104.0.1:35248 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:56:41.729 00:00:10.465 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-09-12 15:57:07.927 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 15:57:08.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 15:57:14.946 00:00:10.334 TCP 23.104.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2025-09-12 15:57:42.231 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-09-12 15:58:15.320 00:00:10.367 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496230, total packets: 1568, avg bps: 1085, avg pps: 0, avg bpp: 316 Time window: 2025-09-12 14:57:27 - 2025-09-12 15:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0015s Wall: 0.0023s flows/second: 70113.0 Runtime: 0.0023s