Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 13:58:49.501 00:00:10.360 TCP 23.104.0.1:47222 -> 1.101.0.1:3000 11 1507 1 2025-09-13 13:59:25.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-09-13 13:59:49.915 00:00:10.396 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:00:25.622 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59694 10 6452 1 2025-09-13 14:00:50.351 00:00:10.365 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-09-13 13:57:27.878 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 13:57:27.877 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:01:25.841 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50438 10 6452 1 2025-09-13 14:01:50.759 00:00:10.382 TCP 23.104.0.1:46664 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:02:34.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:02:34.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:02:26.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6452 1 2025-09-13 14:02:51.184 00:00:10.370 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:03:26.296 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-09-13 14:03:51.594 00:00:10.328 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:04:26.509 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-09-13 14:04:51.975 00:00:10.327 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:05:26.739 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6452 1 2025-09-13 14:05:52.339 00:00:10.364 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:06:26.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-09-13 14:06:52.743 00:00:10.367 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:03:27.877 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:03:27.880 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:07:34.805 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:07:34.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:07:27.127 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6452 1 2025-09-13 14:07:53.149 00:00:10.367 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:08:27.345 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-09-13 14:08:53.553 00:00:10.387 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:09:27.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6452 1 2025-09-13 14:09:53.979 00:00:10.365 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:10:27.785 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-09-13 14:10:54.383 00:00:10.626 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:11:27.959 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-09-13 14:11:55.055 00:00:10.365 TCP 23.104.0.1:56524 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:12:34.990 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:12:34.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:12:28.143 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-09-13 14:12:55.461 00:00:10.318 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:09:27.882 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:09:27.881 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:13:28.357 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-09-13 14:13:55.822 00:00:10.359 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:14:28.543 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6452 1 2025-09-13 14:14:56.219 00:00:10.367 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:15:28.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 10 6452 1 2025-09-13 14:15:56.623 00:00:10.369 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:16:28.924 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-09-13 14:16:57.029 00:00:10.365 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:17:35.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:17:35.002 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:17:29.155 00:00:10.497 TCP 1.101.0.1:3000 -> 22.102.0.1:51888 10 6452 1 2025-09-13 14:17:57.430 00:00:10.368 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:18:29.694 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-09-13 14:18:57.837 00:00:10.549 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:15:27.881 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:15:27.884 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:19:29.919 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-09-13 14:19:58.423 00:00:10.356 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:20:30.155 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54050 10 6452 1 2025-09-13 14:20:58.817 00:00:10.327 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:21:30.377 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-09-13 14:21:59.187 00:00:10.364 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:22:34.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:22:34.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:22:30.548 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 12 6556 1 2025-09-13 14:22:59.586 00:00:10.366 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:23:30.760 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59562 10 6452 1 2025-09-13 14:23:59.992 00:00:12.410 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:24:30.979 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43782 10 6452 1 2025-09-13 14:25:02.467 00:00:10.317 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:21:27.887 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:21:27.885 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:25:31.228 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-09-13 14:26:02.827 00:00:10.386 TCP 23.104.0.1:50348 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:26:31.439 00:00:10.544 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-09-13 14:27:03.252 00:00:10.358 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:27:35.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:27:35.195 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:27:32.026 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-09-13 14:28:03.646 00:00:10.877 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:28:32.243 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-09-13 14:29:04.556 00:00:10.358 TCP 23.104.0.1:51620 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:29:32.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34344 10 6452 1 2025-09-13 14:30:04.951 00:00:10.368 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:30:32.678 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52616 10 6452 1 2025-09-13 14:31:05.356 00:00:10.364 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:27:27.888 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:27:27.886 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:31:32.852 00:00:10.887 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6452 1 2025-09-13 14:32:05.765 00:00:10.375 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:32:35.303 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:32:35.277 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:32:33.780 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-09-13 14:33:06.180 00:00:10.367 TCP 23.104.0.1:33550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:33:33.999 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44040 10 6452 1 2025-09-13 14:34:06.592 00:00:10.367 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:34:34.228 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-09-13 14:35:07.002 00:00:10.360 TCP 23.104.0.1:53578 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:35:34.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53162 10 6452 1 2025-09-13 14:36:07.402 00:00:10.361 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:36:34.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-09-13 14:37:07.803 00:00:10.372 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:33:27.889 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:33:27.887 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:37:35.055 00:00:00.058 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:37:35.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:37:34.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-09-13 14:38:08.216 00:00:10.367 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:38:35.104 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 2025-09-13 14:39:08.622 00:00:10.361 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:39:35.314 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-09-13 14:40:09.024 00:00:10.375 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:40:35.523 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-09-13 14:41:09.441 00:00:10.362 TCP 23.104.0.1:55306 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:41:35.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-09-13 14:42:09.841 00:00:10.393 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:42:35.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:42:35.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:42:35.955 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-09-13 14:43:10.276 00:00:10.361 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:39:27.887 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:39:27.890 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:43:36.189 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-09-13 14:44:10.672 00:00:10.363 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:44:36.422 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58862 10 6452 1 2025-09-13 14:45:11.104 00:00:10.364 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:45:36.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41130 10 6452 1 2025-09-13 14:46:11.508 00:00:10.365 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:46:36.816 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51914 10 6452 1 2025-09-13 14:47:11.914 00:00:10.371 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:47:35.558 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:47:35.478 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:47:37.069 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-09-13 14:48:12.325 00:00:10.370 TCP 23.104.0.1:36112 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:48:37.301 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-09-13 14:49:12.738 00:00:10.413 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:45:27.890 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:45:27.892 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:49:37.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-09-13 14:50:13.202 00:00:10.366 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:50:37.750 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53752 10 6452 1 2025-09-13 14:51:13.602 00:00:10.782 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:51:37.975 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6452 1 2025-09-13 14:52:14.424 00:00:10.365 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:52:35.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:52:35.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:52:38.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-09-13 14:53:14.828 00:00:10.383 TCP 23.104.0.1:60506 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:53:38.383 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-09-13 14:54:15.256 00:00:10.321 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:54:38.604 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-09-13 14:55:15.610 00:00:10.367 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:51:27.893 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 14:51:27.896 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:55:38.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44738 10 6452 1 2025-09-13 14:56:16.015 00:00:10.377 TCP 23.104.0.1:49434 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:56:38.992 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-09-13 14:57:16.429 00:00:10.367 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:57:35.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 14:57:35.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 14:57:39.230 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-09-13 14:58:16.834 00:00:10.354 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:58:39.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1083, avg pps: 0, avg bpp: 316 Time window: 2025-09-13 13:57:27 - 2025-09-13 14:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0054s Wall: 0.0070s flows/second: 23452.6 Runtime: 0.0070s