Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 10:59:36.228 00:00:10.372 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:59:39.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35660 10 6452 1 2025-09-13 11:00:36.638 00:00:10.376 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:00:40.125 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-09-13 10:57:27.790 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:57:27.792 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:01:37.060 00:00:10.370 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:01:40.296 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-13 11:02:30.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:02:31.029 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:02:40.514 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-09-13 11:02:37.467 00:00:10.371 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:03:37.880 00:00:10.388 TCP 23.104.0.1:38342 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:03:40.736 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-09-13 11:04:40.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-09-13 11:04:38.310 00:00:10.367 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:05:41.191 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-09-13 11:05:38.711 00:00:10.376 TCP 23.104.0.1:57316 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:06:39.136 00:00:10.327 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:06:41.366 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-09-13 11:07:31.060 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:03:27.795 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:07:31.189 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:03:27.791 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:07:39.500 00:00:10.365 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:07:41.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-09-13 11:08:41.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-09-13 11:08:39.905 00:00:10.360 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:09:40.307 00:00:10.367 TCP 23.104.0.1:41584 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:09:41.996 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-09-13 11:10:40.716 00:00:10.319 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:10:42.225 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57086 10 6452 1 2025-09-13 11:11:41.108 00:00:10.334 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:11:42.448 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-09-13 11:12:31.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:12:31.267 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:12:41.494 00:00:10.329 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:12:42.664 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36558 10 6452 1 2025-09-13 11:09:27.795 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:09:27.792 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:13:42.845 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-09-13 11:13:41.858 00:00:10.427 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:14:42.326 00:00:10.371 TCP 23.104.0.1:44390 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:14:43.085 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:54570 10 6452 1 2025-09-13 11:15:43.335 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-09-13 11:15:42.735 00:00:10.328 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:16:43.110 00:00:10.366 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:16:43.553 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-09-13 11:17:31.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:17:31.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:17:43.515 00:00:10.331 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:17:43.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-09-13 11:18:43.882 00:00:10.399 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:18:43.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-09-13 11:15:27.793 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:15:27.795 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:19:44.314 00:00:10.368 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:19:44.219 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-09-13 11:20:44.717 00:00:10.369 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:20:44.439 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-09-13 11:21:45.130 00:00:10.367 TCP 23.104.0.1:52358 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:21:44.608 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-09-13 11:22:31.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:22:31.339 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:22:45.536 00:00:10.371 TCP 23.104.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:22:44.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6452 1 2025-09-13 11:23:45.954 00:00:10.323 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:23:45.075 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-09-13 11:24:45.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 10 6452 1 2025-09-13 11:24:46.317 00:00:10.327 TCP 23.104.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:21:27.796 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:21:27.793 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:25:45.511 00:00:11.069 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 11 6504 1 2025-09-13 11:25:46.676 00:00:10.330 TCP 23.104.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:26:46.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-09-13 11:26:47.053 00:00:10.361 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:27:31.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:27:31.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:27:46.833 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-09-13 11:27:47.450 00:00:10.325 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:28:47.814 00:00:10.370 TCP 23.104.0.1:38262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:28:47.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55164 10 6452 1 2025-09-13 11:29:48.219 00:00:10.370 TCP 23.104.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:29:47.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-09-13 11:30:47.497 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-09-13 11:30:48.631 00:00:10.321 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:27:27.795 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:27:27.798 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:31:48.985 00:00:10.328 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:31:47.703 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6452 1 2025-09-13 11:32:31.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:32:31.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:32:49.350 00:00:10.360 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:32:47.936 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-09-13 11:33:48.136 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-09-13 11:33:49.751 00:00:10.343 TCP 23.104.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:34:48.354 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44132 10 6452 1 2025-09-13 11:34:50.139 00:00:10.362 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:35:50.543 00:00:10.363 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:35:48.575 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-09-13 11:36:48.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-09-13 11:36:50.949 00:00:10.370 TCP 23.104.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:37:31.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:33:27.799 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:37:31.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:33:27.797 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:37:51.349 00:00:10.367 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:37:48.956 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 12 6556 1 2025-09-13 11:38:49.186 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-09-13 11:38:51.757 00:00:10.386 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:39:49.396 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-09-13 11:39:52.181 00:00:10.361 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:40:49.563 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6452 1 2025-09-13 11:40:52.581 00:00:10.371 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:41:49.774 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6452 1 2025-09-13 11:41:52.987 00:00:10.361 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:42:31.995 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:42:31.998 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:42:49.980 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:57868 10 6452 1 2025-09-13 11:42:53.393 00:00:10.363 TCP 23.104.0.1:59408 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:39:27.804 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:39:27.801 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:43:50.227 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-09-13 11:43:53.795 00:00:10.364 TCP 23.104.0.1:40022 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:44:50.403 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33784 10 6452 1 2025-09-13 11:44:54.195 00:00:10.323 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:45:50.626 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-09-13 11:45:54.553 00:00:10.365 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:46:50.841 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-09-13 11:46:54.952 00:00:10.373 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:47:31.858 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:47:31.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:47:51.097 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-09-13 11:47:55.362 00:00:10.369 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:48:51.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33278 10 6452 1 2025-09-13 11:48:55.772 00:00:10.371 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:45:27.828 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:45:27.830 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:49:51.522 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-09-13 11:49:56.182 00:00:10.366 TCP 23.104.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:50:51.745 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-09-13 11:50:56.585 00:00:10.338 TCP 23.104.0.1:46486 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:51:52.004 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52582 10 6452 1 2025-09-13 11:51:56.951 00:00:10.366 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:52:32.016 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:52:32.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:52:52.230 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-09-13 11:52:57.358 00:00:10.362 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:53:52.419 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-09-13 11:53:57.761 00:00:10.374 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:54:52.631 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6452 1 2025-09-13 11:54:58.173 00:00:10.362 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:51:27.831 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 11:51:27.834 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 11:55:52.855 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-09-13 11:55:58.576 00:00:10.367 TCP 23.104.0.1:36490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:56:53.100 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-09-13 11:56:58.982 00:00:10.326 TCP 23.104.0.1:39290 -> 1.101.0.1:3000 11 1507 1 2025-09-13 11:57:32.232 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 11:57:32.202 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 11:57:53.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 10 6452 1 2025-09-13 11:57:59.346 00:00:10.363 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490545, total packets: 1554, avg bps: 1077, avg pps: 0, avg bpp: 315 Time window: 2025-09-13 10:57:27 - 2025-09-13 11:58:09 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0022s User: 0.0034s Wall: 0.0021s flows/second: 77583.6 Runtime: 0.0021s