Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 04:58:47.413 00:00:10.364 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:58:46.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-09-13 04:59:47.817 00:00:10.368 TCP 23.104.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-09-13 04:59:47.120 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-09-13 05:00:48.224 00:00:10.326 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:00:47.342 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54250 10 6452 1 2025-09-13 04:57:27.685 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 04:57:27.683 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:01:48.590 00:00:10.366 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:01:47.521 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-09-13 05:02:24.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:02:24.128 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:02:47.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44916 10 6452 1 2025-09-13 05:02:48.992 00:00:10.370 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:03:49.395 00:00:10.324 TCP 23.104.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:03:47.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-13 05:04:48.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-09-13 05:04:49.761 00:00:10.385 TCP 23.104.0.1:38514 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:05:50.181 00:00:10.358 TCP 23.104.0.1:60374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:05:48.339 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-09-13 05:06:48.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-09-13 05:06:50.578 00:00:10.367 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:07:23.855 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:07:23.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:03:27.686 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:03:27.684 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:07:48.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-09-13 05:07:50.986 00:00:10.370 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:08:51.394 00:00:10.367 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:08:48.981 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55906 10 6452 1 2025-09-13 05:09:49.217 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55792 10 6452 1 2025-09-13 05:09:51.796 00:00:10.366 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:10:49.431 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-09-13 05:10:52.201 00:00:10.366 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:11:49.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-09-13 05:11:52.602 00:00:10.322 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:12:23.971 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:12:23.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:12:49.814 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35068 10 6452 1 2025-09-13 05:12:52.963 00:00:10.370 TCP 23.104.0.1:44454 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:09:27.686 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:09:27.688 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:13:50.033 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-09-13 05:13:53.368 00:00:10.365 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:14:50.242 00:00:10.356 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-09-13 05:14:53.769 00:00:10.330 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:15:50.635 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-09-13 05:15:54.134 00:00:10.366 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:16:50.816 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-09-13 05:16:54.537 00:00:10.368 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:17:23.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:17:24.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:17:51.032 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50174 10 6452 1 2025-09-13 05:17:54.943 00:00:10.381 TCP 23.104.0.1:59768 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:18:51.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-09-13 05:18:55.362 00:00:10.368 TCP 23.104.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:15:27.685 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:15:27.688 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:19:51.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47208 10 6452 1 2025-09-13 05:19:55.768 00:00:10.368 TCP 23.104.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:20:51.674 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-13 05:20:56.177 00:00:10.474 TCP 23.104.0.1:38964 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:21:51.898 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-09-13 05:21:56.689 00:00:10.365 TCP 23.104.0.1:50912 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:22:24.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:22:24.402 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:22:52.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-09-13 05:22:57.109 00:00:10.368 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:23:52.357 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35014 12 10365 1 2025-09-13 05:23:57.516 00:00:10.440 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 15 1926 1 2025-09-13 05:24:52.598 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-09-13 05:24:57.989 00:00:10.330 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:21:27.686 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:21:27.690 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:25:52.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55216 10 6452 1 2025-09-13 05:25:58.356 00:00:10.408 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:26:53.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 10 6452 1 2025-09-13 05:26:58.801 00:00:10.373 TCP 23.104.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:27:24.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:27:24.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:27:53.283 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2025-09-13 05:27:59.215 00:00:10.322 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:28:53.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-09-13 05:28:59.579 00:00:10.364 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:29:53.711 00:00:10.313 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-09-13 05:29:59.985 00:00:10.367 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:30:54.072 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45398 10 6452 1 2025-09-13 05:31:00.389 00:00:10.367 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:27:27.689 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:27:27.692 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:31:54.289 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-09-13 05:32:00.797 00:00:10.376 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:32:24.152 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:32:24.399 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:32:54.511 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-09-13 05:33:01.206 00:00:10.363 TCP 23.104.0.1:41432 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:33:54.740 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-09-13 05:34:01.612 00:00:10.366 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:34:54.956 00:00:10.711 TCP 1.101.0.1:3000 -> 22.102.0.1:34838 10 6452 1 2025-09-13 05:35:02.020 00:00:10.363 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:35:55.706 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-09-13 05:36:02.424 00:00:10.324 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:36:55.931 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-09-13 05:37:02.791 00:00:10.366 TCP 23.104.0.1:58482 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:37:24.599 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:37:24.503 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:33:27.692 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:33:27.691 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:37:56.177 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45976 10 6452 1 2025-09-13 05:38:03.194 00:00:10.615 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:38:56.400 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-09-13 05:39:03.849 00:00:10.388 TCP 23.104.0.1:38094 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:39:56.569 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34174 10 6452 1 2025-09-13 05:40:04.279 00:00:10.324 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:40:56.781 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47024 10 6452 1 2025-09-13 05:41:04.643 00:00:10.326 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:41:56.959 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-09-13 05:42:05.007 00:00:10.323 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:42:24.654 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:42:24.515 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:42:57.151 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-09-13 05:43:05.369 00:00:10.359 TCP 23.104.0.1:40766 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:39:27.696 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:39:27.692 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:43:57.360 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-09-13 05:44:05.770 00:00:10.371 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:44:57.578 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-09-13 05:45:06.181 00:00:10.374 TCP 23.104.0.1:33210 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:45:57.788 00:00:12.506 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-09-13 05:46:06.601 00:00:10.366 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:47:00.339 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-09-13 05:47:07.007 00:00:10.381 TCP 23.104.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:47:24.877 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:47:24.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:48:00.548 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-09-13 05:48:07.427 00:00:10.365 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:49:00.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-09-13 05:49:07.830 00:00:10.641 TCP 23.104.0.1:36772 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:45:27.694 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:45:27.696 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:50:00.984 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6452 1 2025-09-13 05:50:08.521 00:00:10.394 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:51:01.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33590 10 6452 1 2025-09-13 05:51:08.993 00:00:10.362 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:52:01.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-09-13 05:52:24.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:52:09.400 00:00:10.371 TCP 23.104.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:52:25.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:53:01.653 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-09-13 05:53:09.811 00:00:10.370 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:54:01.877 00:00:20.756 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-09-13 05:54:10.221 00:00:12.492 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:55:12.754 00:00:10.378 TCP 23.104.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:55:12.678 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-09-13 05:51:27.697 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 05:51:27.694 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 05:56:12.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-09-13 05:56:13.171 00:00:10.361 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:57:24.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 05:57:13.577 00:00:10.320 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:57:13.110 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-09-13 05:57:24.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 05:58:13.935 00:00:10.729 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 05:58:13.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 12 6556 1 Summary: total flows: 164, total bytes: 502784, total packets: 1580, avg bps: 1099, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 04:57:27 - 2025-09-13 05:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0026s flows/second: 63298.6 Runtime: 0.0026s