Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 06:58:46.347 00:00:10.325 TCP 23.104.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 06:59:40.022 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59178 10 6452 1 2025-09-13 06:59:46.714 00:00:10.370 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:00:40.237 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-09-13 07:00:47.122 00:00:10.364 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-09-13 06:57:27.719 00:05:00.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 06:57:27.717 00:05:00.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:01:40.463 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-09-13 07:01:47.527 00:00:10.369 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:02:26.225 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:02:26.238 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:02:40.686 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-09-13 07:02:47.929 00:00:10.383 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:03:40.860 00:00:10.672 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-09-13 07:03:48.349 00:00:10.374 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:04:41.570 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44508 10 6452 1 2025-09-13 07:04:48.767 00:00:10.378 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:05:41.793 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56512 10 6452 1 2025-09-13 07:05:49.187 00:00:10.360 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:06:42.018 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57222 10 6452 1 2025-09-13 07:06:49.586 00:00:10.380 TCP 23.104.0.1:42752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:07:26.330 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:07:26.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:03:27.717 00:05:00.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:03:27.720 00:05:00.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:07:42.229 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-09-13 07:07:50.003 00:00:10.373 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:08:42.449 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-09-13 07:08:50.415 00:00:10.358 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:09:42.670 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-09-13 07:09:50.817 00:00:10.370 TCP 23.104.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:10:42.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-09-13 07:10:51.235 00:00:10.361 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:11:43.106 00:00:11.230 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-09-13 07:11:51.639 00:00:10.366 TCP 23.104.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:12:26.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:12:26.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:12:44.374 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54094 10 6452 1 2025-09-13 07:12:52.046 00:00:10.366 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:09:27.721 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:09:27.720 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:13:44.593 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45414 10 6452 1 2025-09-13 07:13:52.452 00:00:10.369 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:14:44.818 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-09-13 07:14:52.858 00:00:10.372 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:15:45.046 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6452 1 2025-09-13 07:15:53.270 00:00:10.322 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:16:45.262 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52946 10 6452 1 2025-09-13 07:16:53.631 00:00:10.322 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:17:26.440 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:17:26.521 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:17:45.480 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-09-13 07:17:53.990 00:00:10.369 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:18:45.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52818 10 6452 1 2025-09-13 07:18:54.398 00:00:10.366 TCP 23.104.0.1:43174 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:15:27.725 00:05:00.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:15:27.726 00:05:00.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:19:45.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-09-13 07:19:54.807 00:00:10.326 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:20:46.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6452 1 2025-09-13 07:20:55.175 00:00:10.362 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:21:46.302 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-09-13 07:21:55.576 00:00:10.364 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:22:26.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:22:26.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:22:46.522 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-09-13 07:22:55.976 00:00:10.329 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:23:46.691 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-09-13 07:23:56.341 00:00:10.365 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:24:46.907 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45446 10 6452 1 2025-09-13 07:24:56.746 00:00:10.364 TCP 23.104.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:21:27.728 00:05:00.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:21:27.729 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:25:47.131 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36606 10 6452 1 2025-09-13 07:25:57.147 00:00:10.363 TCP 23.104.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:26:47.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32788 10 6452 1 2025-09-13 07:26:57.548 00:00:10.365 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:27:26.887 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:27:27.106 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:27:47.526 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-09-13 07:27:57.952 00:00:10.366 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:28:47.758 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6452 1 2025-09-13 07:28:58.354 00:00:10.370 TCP 23.104.0.1:52756 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:29:47.995 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34200 10 6452 1 2025-09-13 07:29:58.761 00:00:10.380 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:30:48.225 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53242 10 6452 1 2025-09-13 07:30:59.182 00:00:10.365 TCP 23.104.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:27:27.737 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:27:27.734 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:31:48.434 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39658 10 6452 1 2025-09-13 07:31:59.593 00:00:10.974 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:32:26.893 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:32:26.836 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:32:48.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-09-13 07:33:00.606 00:00:10.367 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:33:48.859 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44256 10 6452 1 2025-09-13 07:34:01.008 00:00:10.359 TCP 23.104.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:34:49.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-09-13 07:35:01.412 00:00:10.372 TCP 23.104.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:35:49.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2025-09-13 07:36:01.817 00:00:10.366 TCP 23.104.0.1:49114 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:36:49.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-09-13 07:37:02.224 00:00:10.362 TCP 23.104.0.1:33626 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:37:26.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:37:27.062 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:33:27.738 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:33:27.735 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:37:49.716 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-09-13 07:38:02.626 00:00:10.364 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:38:49.890 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 12 10367 1 2025-09-13 07:39:03.030 00:00:10.401 TCP 23.104.0.1:33368 -> 1.101.0.1:3000 15 1926 1 2025-09-13 07:39:50.095 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34820 10 6452 1 2025-09-13 07:40:03.467 00:00:10.379 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:40:50.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-09-13 07:41:03.892 00:00:10.370 TCP 23.104.0.1:44574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:41:50.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34238 10 6452 1 2025-09-13 07:42:04.303 00:00:10.361 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:42:26.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:42:27.090 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:42:50.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-09-13 07:43:04.702 00:00:10.363 TCP 23.104.0.1:33338 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:39:27.737 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:39:27.738 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:43:50.938 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-09-13 07:44:05.107 00:00:17.498 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:44:51.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-09-13 07:45:12.650 00:00:10.366 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:45:51.382 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44438 10 6452 1 2025-09-13 07:46:13.080 00:00:10.417 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:46:51.597 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2025-09-13 07:47:13.541 00:00:10.368 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:47:27.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:47:27.241 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:47:51.811 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-09-13 07:48:13.943 00:00:10.890 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:48:52.044 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-09-13 07:49:14.866 00:00:10.370 TCP 23.104.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:45:27.741 00:05:00.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:45:27.738 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:49:52.271 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-09-13 07:50:15.276 00:00:10.361 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:50:52.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-09-13 07:51:15.678 00:00:11.049 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:51:52.715 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40692 10 6452 1 2025-09-13 07:52:27.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:52:16.766 00:00:10.377 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:52:27.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:52:52.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-09-13 07:53:17.183 00:00:10.318 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:53:53.138 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 12 10367 1 2025-09-13 07:54:17.542 00:00:10.442 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 15 1926 1 2025-09-13 07:54:53.373 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-09-13 07:55:18.020 00:00:10.364 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:51:27.741 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 07:51:27.739 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 07:55:53.590 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54210 10 6452 1 2025-09-13 07:56:18.424 00:00:10.371 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:56:53.802 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6452 1 2025-09-13 07:57:27.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 07:57:18.828 00:00:10.379 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-09-13 07:57:27.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 07:57:53.969 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-09-13 07:58:19.242 00:00:10.365 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500564, total packets: 1574, avg bps: 1093, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 06:57:27 - 2025-09-13 07:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0018s Wall: 0.0023s flows/second: 71491.3 Runtime: 0.0023s