Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 02:58:58.254 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52286 10 6452 1 2025-09-13 02:59:09.108 00:00:10.360 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:59:58.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35796 10 6452 1 2025-09-13 03:00:09.505 00:00:11.162 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:00:58.672 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:33794 11 6504 1 2025-09-13 03:01:10.708 00:00:10.363 TCP 23.104.0.1:60414 -> 1.101.0.1:3000 11 1507 1 2025-09-13 02:57:27.638 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 02:57:27.642 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:01:58.947 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-09-13 03:02:11.114 00:00:10.361 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:02:21.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:02:21.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:02:59.144 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-09-13 03:03:11.517 00:00:10.365 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:03:59.361 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-09-13 03:04:11.923 00:00:10.347 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:04:59.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-09-13 03:05:12.305 00:00:10.363 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:05:59.788 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-09-13 03:06:12.705 00:00:10.363 TCP 23.104.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:06:59.995 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6452 1 2025-09-13 03:07:21.610 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:07:21.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:07:13.104 00:00:10.369 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:03:27.640 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:03:27.641 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:08:00.183 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41614 10 6452 1 2025-09-13 03:08:13.515 00:00:10.325 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:09:00.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-09-13 03:09:13.875 00:00:10.328 TCP 23.104.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:10:00.604 00:00:12.281 TCP 1.101.0.1:3000 -> 22.102.0.1:55800 10 6452 1 2025-09-13 03:10:14.236 00:00:10.363 TCP 23.104.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:11:02.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36148 10 6452 1 2025-09-13 03:11:14.639 00:00:10.370 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:12:03.135 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-09-13 03:12:21.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:12:21.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:12:15.048 00:00:10.372 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:13:03.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58616 10 6452 1 2025-09-13 03:13:15.465 00:00:10.340 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:09:27.641 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:09:27.645 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:14:03.562 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-09-13 03:14:15.861 00:00:10.368 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:15:03.771 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-09-13 03:15:16.270 00:00:10.364 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:16:03.945 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-09-13 03:16:16.677 00:00:10.374 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:17:04.181 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-09-13 03:17:21.540 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:17:21.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:17:17.106 00:00:10.366 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:18:04.394 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6452 1 2025-09-13 03:18:17.508 00:00:10.421 TCP 23.104.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:19:04.616 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-09-13 03:15:27.644 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:19:17.969 00:00:10.326 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:15:27.647 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:20:05.376 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-09-13 03:20:18.335 00:00:10.362 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:21:05.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 2025-09-13 03:21:18.737 00:00:10.367 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:22:05.809 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-09-13 03:22:21.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:22:21.942 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:22:19.138 00:00:10.368 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:23:05.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58192 10 6452 1 2025-09-13 03:23:19.542 00:00:10.364 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:24:06.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-09-13 03:24:19.941 00:00:10.378 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:25:06.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-09-13 03:21:27.656 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:21:27.657 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:25:20.356 00:00:10.362 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:26:06.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-09-13 03:26:20.762 00:00:10.383 TCP 23.104.0.1:54934 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:27:06.870 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-09-13 03:27:21.698 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:27:22.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:27:21.185 00:00:10.362 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:28:07.117 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-09-13 03:28:21.583 00:00:10.372 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:29:07.350 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-09-13 03:29:21.993 00:00:10.370 TCP 23.104.0.1:60044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:30:07.575 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-09-13 03:30:22.401 00:00:19.998 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:31:07.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6452 1 2025-09-13 03:27:27.655 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:27:27.660 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:31:32.439 00:00:10.363 TCP 23.104.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:32:21.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:32:07.968 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-09-13 03:32:22.021 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:32:32.847 00:00:10.380 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:33:08.184 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-09-13 03:33:33.263 00:00:10.369 TCP 23.104.0.1:33192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:34:08.391 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49654 10 6452 1 2025-09-13 03:34:33.678 00:00:17.902 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:35:08.602 00:00:10.468 TCP 1.101.0.1:3000 -> 22.102.0.1:59062 10 6452 1 2025-09-13 03:35:41.620 00:00:10.386 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:36:09.118 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:48260 10 6452 1 2025-09-13 03:36:42.047 00:00:10.360 TCP 23.104.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:37:09.388 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 10 6452 1 2025-09-13 03:37:22.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:37:22.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:33:27.657 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:33:27.658 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:37:42.462 00:00:10.398 TCP 23.104.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:38:09.617 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-09-13 03:38:42.942 00:00:10.338 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:39:09.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 10 6452 1 2025-09-13 03:39:43.331 00:00:10.368 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:40:10.002 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6452 1 2025-09-13 03:40:43.748 00:00:10.398 TCP 23.104.0.1:42214 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:41:10.178 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50602 10 6452 1 2025-09-13 03:41:44.200 00:00:10.530 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:42:10.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-09-13 03:42:22.303 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:42:22.212 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:42:44.773 00:00:10.368 TCP 23.104.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:43:10.607 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52818 10 6452 1 2025-09-13 03:39:27.661 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:39:27.659 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:43:45.179 00:00:10.360 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:44:10.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41984 10 6452 1 2025-09-13 03:44:45.574 00:00:10.364 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:45:10.986 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-09-13 03:45:45.978 00:00:10.371 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:46:11.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 10 6452 1 2025-09-13 03:46:46.389 00:00:10.370 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:47:22.303 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:47:11.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37234 10 6452 1 2025-09-13 03:47:22.385 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:47:46.799 00:00:10.363 TCP 23.104.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:48:11.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-09-13 03:48:47.201 00:00:10.365 TCP 23.104.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:49:11.860 00:00:11.004 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6452 1 2025-09-13 03:45:27.666 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:45:27.663 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:49:47.606 00:00:10.324 TCP 23.104.0.1:53366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:50:12.903 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48964 10 6452 1 2025-09-13 03:50:47.966 00:00:22.613 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:51:13.120 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-09-13 03:52:00.631 00:00:10.364 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:52:22.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:52:22.440 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:52:13.340 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-09-13 03:53:01.057 00:00:10.369 TCP 23.104.0.1:41868 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:53:13.558 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51224 10 6452 1 2025-09-13 03:54:01.466 00:00:10.369 TCP 23.104.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:54:13.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-09-13 03:55:01.871 00:00:10.368 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:55:13.997 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 12 6556 1 2025-09-13 03:51:27.665 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:51:27.663 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 03:56:02.275 00:00:10.366 TCP 23.104.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:56:14.270 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36612 10 6452 1 2025-09-13 03:57:02.681 00:00:10.982 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:57:22.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 03:57:14.492 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47272 10 6452 1 2025-09-13 03:57:22.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 03:58:03.700 00:00:10.367 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:58:14.714 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56186 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1087, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 02:57:27 - 2025-09-13 03:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0008s Wall: 0.0026s flows/second: 62118.1 Runtime: 0.0026s