Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 03:59:04.110 00:00:10.359 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 03:59:14.934 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-09-13 04:00:04.512 00:00:10.330 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:00:15.159 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-09-13 04:01:04.877 00:00:10.377 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:01:15.371 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49734 10 6452 1 2025-09-13 03:57:27.666 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 03:57:27.665 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:02:05.290 00:00:10.638 TCP 23.104.0.1:55730 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:02:22.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:02:15.581 00:00:10.778 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-09-13 04:02:22.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:03:05.964 00:00:10.377 TCP 23.104.0.1:59632 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:03:16.396 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6452 1 2025-09-13 04:04:06.378 00:00:10.365 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:04:16.607 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-09-13 04:05:06.781 00:00:10.368 TCP 23.104.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:05:16.825 00:00:10.544 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-09-13 04:06:07.186 00:00:10.367 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:06:17.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-09-13 04:07:22.842 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:07:17.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60156 10 6452 1 2025-09-13 04:03:27.666 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:07:07.588 00:00:10.368 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:07:22.701 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:03:27.669 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:08:07.992 00:00:10.366 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:08:17.828 00:00:28.279 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-09-13 04:09:08.401 00:00:10.359 TCP 23.104.0.1:58630 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:09:36.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-09-13 04:10:08.845 00:00:10.388 TCP 23.104.0.1:56884 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:10:36.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-09-13 04:11:09.273 00:00:10.366 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:11:36.595 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48584 10 6452 1 2025-09-13 04:12:09.675 00:00:10.372 TCP 23.104.0.1:52496 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:12:22.876 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:12:22.861 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:12:36.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 12 6556 1 2025-09-13 04:13:10.101 00:00:10.364 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:09:27.669 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:09:27.666 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:13:37.037 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-09-13 04:14:10.504 00:00:10.362 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:14:37.256 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-09-13 04:15:10.903 00:00:10.365 TCP 23.104.0.1:53394 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:15:37.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-09-13 04:16:11.308 00:00:10.365 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:16:37.695 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-09-13 04:17:23.255 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:17:11.709 00:00:12.305 TCP 23.104.0.1:45490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:17:23.229 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:17:37.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36830 10 6452 1 2025-09-13 04:18:14.055 00:00:10.364 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:18:38.128 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6452 1 2025-09-13 04:19:14.457 00:00:10.361 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:15:27.669 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:15:27.672 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:19:38.346 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6452 1 2025-09-13 04:20:14.859 00:00:12.750 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1348 1 2025-09-13 04:20:30.090 00:00:10.280 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 10 1308 1 2025-09-13 04:20:38.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6452 1 2025-09-13 04:21:31.748 00:00:10.321 TCP 23.104.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:21:38.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-09-13 04:22:23.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:22:22.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:22:32.115 00:00:10.362 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:22:38.993 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-09-13 04:23:32.519 00:00:10.318 TCP 23.104.0.1:50124 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:23:39.214 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 12 10367 1 2025-09-13 04:24:32.875 00:00:10.442 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 15 1926 1 2025-09-13 04:24:39.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47778 10 6452 1 2025-09-13 04:21:27.672 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:21:27.670 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:25:33.357 00:00:10.605 TCP 23.104.0.1:41306 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:25:39.634 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-09-13 04:26:33.997 00:00:10.363 TCP 23.104.0.1:49474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:26:39.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-09-13 04:27:23.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:27:23.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:27:34.406 00:00:10.368 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:27:40.093 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6452 1 2025-09-13 04:28:34.813 00:00:10.369 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:28:40.313 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6452 1 2025-09-13 04:29:35.219 00:00:10.372 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:29:40.534 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-09-13 04:30:35.633 00:00:10.362 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:30:40.752 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 10 6452 1 2025-09-13 04:27:27.673 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:27:27.671 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:31:36.031 00:00:10.364 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:31:40.974 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6452 1 2025-09-13 04:32:23.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:32:23.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:32:36.434 00:00:10.363 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:32:41.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-09-13 04:33:36.835 00:00:10.347 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:33:41.412 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-09-13 04:34:41.625 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55138 10 6452 1 2025-09-13 04:34:37.221 00:00:10.367 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:35:37.629 00:00:10.364 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:35:41.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-09-13 04:36:38.034 00:00:10.364 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:36:42.072 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39126 10 6452 1 2025-09-13 04:37:23.349 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:37:23.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:33:27.675 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:33:27.674 00:05:00.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:37:38.436 00:00:10.368 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:37:42.283 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-09-13 04:38:38.839 00:00:10.391 TCP 23.104.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:38:42.593 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-09-13 04:39:39.272 00:00:10.364 TCP 23.104.0.1:53596 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:39:42.812 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-09-13 04:40:39.676 00:00:10.366 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:40:43.035 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57796 10 6452 1 2025-09-13 04:41:40.107 00:00:10.364 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:41:43.259 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-09-13 04:42:23.619 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:42:23.334 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:42:40.511 00:00:10.803 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:42:43.467 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50222 10 6452 1 2025-09-13 04:39:27.677 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:39:27.681 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:43:41.362 00:00:10.366 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:43:43.681 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57772 10 6452 1 2025-09-13 04:44:43.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42734 10 6452 1 2025-09-13 04:44:41.765 00:00:10.379 TCP 23.104.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:45:44.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-09-13 04:45:42.189 00:00:10.380 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:46:44.330 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-09-13 04:46:42.606 00:00:10.364 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:47:23.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:47:23.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:47:44.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46580 10 6452 1 2025-09-13 04:47:43.011 00:00:10.324 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:48:43.377 00:00:10.364 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:48:44.715 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55178 10 6452 1 2025-09-13 04:45:27.682 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:45:27.679 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:49:44.947 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-09-13 04:49:43.780 00:00:10.369 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:50:44.184 00:00:10.335 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:50:45.175 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-09-13 04:51:45.350 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43868 10 6452 1 2025-09-13 04:51:44.548 00:00:10.365 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:52:24.050 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:52:23.752 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:52:44.956 00:00:10.363 TCP 23.104.0.1:57736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:52:45.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 10 6452 1 2025-09-13 04:53:45.776 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 12 10367 1 2025-09-13 04:53:45.359 00:00:10.402 TCP 23.104.0.1:45646 -> 1.101.0.1:3000 15 1926 1 2025-09-13 04:54:45.796 00:00:10.366 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:54:46.019 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47122 10 6452 1 2025-09-13 04:51:27.681 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 04:51:27.683 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:55:46.237 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-09-13 04:55:46.200 00:00:10.368 TCP 23.104.0.1:33902 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:56:46.450 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60980 10 6452 1 2025-09-13 04:56:46.609 00:00:10.362 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:57:23.609 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 04:57:23.561 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 04:57:46.671 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-09-13 04:57:47.014 00:00:10.359 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500310, total packets: 1575, avg bps: 1102, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 03:57:27 - 2025-09-13 04:57:57 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0015s Wall: 0.0024s flows/second: 68752.2 Runtime: 0.0024s