Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 01:58:43.413 00:00:10.364 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:59:34.768 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51356 10 6452 1 2025-09-13 01:59:43.819 00:00:10.364 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:00:34.974 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-09-13 02:00:44.235 00:00:10.364 TCP 23.104.0.1:38826 -> 1.101.0.1:3000 11 1507 1 2025-09-13 01:57:27.627 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 01:57:27.624 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:01:35.214 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-09-13 02:01:44.642 00:00:10.419 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:02:20.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:02:20.321 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:02:35.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-09-13 02:02:45.105 00:00:10.324 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:03:35.657 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 12 10367 1 2025-09-13 02:03:45.472 00:00:10.458 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 15 1926 1 2025-09-13 02:04:35.916 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-09-13 02:04:45.984 00:00:10.374 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:05:36.121 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-09-13 02:05:46.398 00:00:10.370 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:06:36.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-09-13 02:06:46.809 00:00:10.370 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:07:20.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:07:20.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:03:27.627 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:03:27.626 00:05:00.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:07:36.568 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-09-13 02:07:47.218 00:00:10.361 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:08:36.744 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-09-13 02:08:47.619 00:00:10.366 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:09:36.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-09-13 02:09:48.027 00:00:10.360 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:10:37.183 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-09-13 02:10:48.424 00:00:10.371 TCP 23.104.0.1:45210 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:11:37.405 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-09-13 02:11:48.835 00:00:10.388 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:12:20.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:12:20.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:12:37.634 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-09-13 02:12:49.264 00:00:10.365 TCP 23.104.0.1:53546 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:09:27.630 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:09:27.628 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:13:37.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6452 1 2025-09-13 02:13:49.669 00:00:10.324 TCP 23.104.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:14:38.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-09-13 02:14:50.035 00:00:10.368 TCP 23.104.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:15:38.252 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46126 10 6452 1 2025-09-13 02:15:50.440 00:00:10.613 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:16:38.472 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-09-13 02:16:51.113 00:00:10.363 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:17:20.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:17:20.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:17:38.690 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-09-13 02:17:51.512 00:00:10.360 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:18:38.897 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-09-13 02:18:51.910 00:00:10.366 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:15:27.632 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:15:27.629 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:19:39.120 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-09-13 02:19:52.313 00:00:10.331 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:20:39.332 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-09-13 02:20:52.687 00:00:10.366 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:21:39.504 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40904 10 6452 1 2025-09-13 02:21:53.112 00:00:10.366 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:22:20.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:22:20.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:22:39.728 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-09-13 02:22:53.516 00:00:10.367 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:23:39.899 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 10 6452 1 2025-09-13 02:23:53.923 00:00:10.386 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:24:40.116 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-09-13 02:24:54.350 00:00:10.364 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:21:27.629 00:05:00.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:21:27.632 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:25:40.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-09-13 02:25:54.749 00:00:10.391 TCP 23.104.0.1:33750 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:26:40.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56966 10 6452 1 2025-09-13 02:26:55.180 00:00:10.327 TCP 23.104.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:27:20.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:27:20.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:27:40.714 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-09-13 02:27:55.547 00:00:10.325 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:28:40.886 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-09-13 02:28:55.911 00:00:10.323 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:29:41.107 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6452 1 2025-09-13 02:29:56.271 00:00:10.363 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:30:41.283 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6452 1 2025-09-13 02:30:56.668 00:00:10.395 TCP 23.104.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:27:27.635 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:27:27.632 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:31:41.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-09-13 02:31:57.109 00:00:10.367 TCP 23.104.0.1:37832 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:32:20.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:32:20.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:32:41.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50430 10 6452 1 2025-09-13 02:32:57.513 00:00:10.368 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:33:41.946 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-09-13 02:33:57.915 00:00:10.373 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:34:42.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-09-13 02:34:58.329 00:00:11.000 TCP 23.104.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:35:42.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-09-13 02:35:59.366 00:00:10.364 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:36:42.610 00:00:10.521 TCP 1.101.0.1:3000 -> 22.102.0.1:47154 11 6504 1 2025-09-13 02:36:59.768 00:00:10.378 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:37:21.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:37:20.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:33:27.634 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:33:27.636 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:37:43.172 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-09-13 02:38:00.190 00:00:10.366 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:38:43.354 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-09-13 02:39:00.595 00:00:10.364 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:39:43.582 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41286 10 6452 1 2025-09-13 02:40:00.994 00:00:10.370 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:40:43.798 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52804 10 6452 1 2025-09-13 02:41:01.407 00:00:10.368 TCP 23.104.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:41:43.979 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40206 10 6452 1 2025-09-13 02:42:01.829 00:00:10.390 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:42:21.206 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:42:21.249 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:42:44.218 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-09-13 02:43:02.259 00:00:10.367 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:39:27.637 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:39:27.634 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:43:44.435 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-09-13 02:44:02.668 00:00:10.705 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:44:44.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-09-13 02:45:03.414 00:00:10.339 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:45:44.826 00:00:20.425 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-09-13 02:46:03.805 00:00:10.384 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:46:55.288 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-09-13 02:47:04.226 00:00:10.368 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:47:21.216 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:47:20.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:47:55.511 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-09-13 02:48:04.628 00:00:10.368 TCP 23.104.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:48:55.725 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43690 10 6452 1 2025-09-13 02:49:05.047 00:00:10.367 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:45:27.635 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:45:27.637 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:49:55.942 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6452 1 2025-09-13 02:50:05.448 00:00:10.370 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:50:56.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49654 10 6452 1 2025-09-13 02:51:05.851 00:00:10.399 TCP 23.104.0.1:36164 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:51:56.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46844 10 6452 1 2025-09-13 02:52:06.270 00:00:10.365 TCP 23.104.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:52:21.041 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:52:21.196 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:52:56.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-09-13 02:53:06.669 00:00:10.364 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:53:56.821 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-09-13 02:54:07.096 00:00:10.359 TCP 23.104.0.1:52898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:54:57.064 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-09-13 02:55:07.497 00:00:10.360 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:51:27.639 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 02:51:27.636 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:55:57.240 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-09-13 02:56:07.895 00:00:10.373 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:56:57.421 00:00:10.563 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-09-13 02:57:21.821 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 02:57:21.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 02:57:08.308 00:00:10.362 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:57:58.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48098 10 6452 1 2025-09-13 02:58:08.708 00:00:10.362 TCP 23.104.0.1:42016 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496282, total packets: 1569, avg bps: 1087, avg pps: 0, avg bpp: 316 Time window: 2025-09-13 01:57:27 - 2025-09-13 02:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 75294.2 Runtime: 0.0022s