Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 16:59:07.646 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-09-13 16:59:13.009 00:00:10.361 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:00:07.878 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-09-13 17:00:13.409 00:00:10.324 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:01:08.112 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-09-13 17:01:13.771 00:00:10.332 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:57:27.940 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:57:27.936 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:02:08.331 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39022 10 6452 1 2025-09-13 17:02:14.139 00:00:10.363 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:02:38.386 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:02:38.195 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:03:08.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-09-13 17:03:14.546 00:00:10.374 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:04:08.765 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48306 10 6452 1 2025-09-13 17:04:14.960 00:00:10.364 TCP 23.104.0.1:41484 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:05:08.937 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-09-13 17:05:15.368 00:00:10.338 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:06:09.136 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33330 10 6452 1 2025-09-13 17:06:15.767 00:00:10.376 TCP 23.104.0.1:44720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:07:09.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 10 6452 1 2025-09-13 17:07:16.181 00:00:10.367 TCP 23.104.0.1:45422 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:03:27.940 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:03:27.938 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:07:38.464 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:07:38.265 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:08:09.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45324 10 6452 1 2025-09-13 17:08:16.589 00:00:10.368 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:09:09.777 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-09-13 17:09:16.998 00:00:10.365 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:10:09.992 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-09-13 17:10:17.403 00:00:10.365 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:11:10.212 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6452 1 2025-09-13 17:11:17.806 00:00:10.366 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:12:10.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-09-13 17:12:18.213 00:00:10.364 TCP 23.104.0.1:45250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:12:38.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:12:38.465 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:13:10.592 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-09-13 17:13:18.617 00:00:10.366 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:09:27.941 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:09:27.939 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:14:10.800 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-09-13 17:14:19.022 00:00:10.359 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:15:11.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46842 10 6452 1 2025-09-13 17:15:19.422 00:00:10.322 TCP 23.104.0.1:52390 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:16:11.230 00:00:10.765 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 11 6504 1 2025-09-13 17:16:19.783 00:00:10.861 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:17:12.048 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-09-13 17:17:20.688 00:00:10.358 TCP 23.104.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:17:38.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:17:38.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:18:12.269 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-09-13 17:18:21.095 00:00:10.361 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:19:12.496 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40226 12 10367 1 2025-09-13 17:15:27.942 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:15:27.944 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:19:21.497 00:00:10.638 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 15 1926 1 2025-09-13 17:20:12.742 00:00:11.008 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-09-13 17:20:22.169 00:00:10.369 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 12 1559 1 2025-09-13 17:21:13.785 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-09-13 17:21:22.576 00:00:10.368 TCP 23.104.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:22:14.011 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51128 10 6452 1 2025-09-13 17:22:22.982 00:00:10.367 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:22:38.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:22:38.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:23:14.234 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-09-13 17:23:23.384 00:00:10.363 TCP 23.104.0.1:51268 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:24:14.418 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-09-13 17:24:23.793 00:00:11.027 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:25:14.633 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-09-13 17:21:27.944 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:21:27.948 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:25:24.860 00:00:18.028 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:26:14.876 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44806 12 6556 1 2025-09-13 17:26:32.929 00:00:10.389 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:27:15.096 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45596 10 6452 1 2025-09-13 17:27:38.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:27:38.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:27:33.356 00:00:10.365 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:28:15.268 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 10 6452 1 2025-09-13 17:28:33.760 00:00:10.371 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:29:15.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6452 1 2025-09-13 17:29:34.173 00:00:10.365 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:30:15.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37316 10 6452 1 2025-09-13 17:30:34.577 00:00:10.361 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:31:15.926 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 10 6452 1 2025-09-13 17:27:27.947 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:27:27.949 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:31:34.979 00:00:10.371 TCP 23.104.0.1:40134 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:32:16.171 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-09-13 17:32:38.930 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:32:38.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:32:35.387 00:00:10.364 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:33:16.399 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-09-13 17:33:35.788 00:00:10.324 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:34:16.627 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-09-13 17:34:36.149 00:00:10.325 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:35:16.809 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-09-13 17:35:36.511 00:00:10.371 TCP 23.104.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:36:17.045 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39772 10 6452 1 2025-09-13 17:36:36.916 00:00:10.386 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:33:27.952 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:37:17.270 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-09-13 17:33:27.949 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:37:39.055 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:37:38.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:37:37.345 00:00:10.327 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:38:17.489 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57738 10 6452 1 2025-09-13 17:38:37.712 00:00:10.373 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:39:17.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-09-13 17:39:38.132 00:00:14.471 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:40:17.923 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:54846 10 6452 1 2025-09-13 17:40:42.677 00:00:10.374 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:41:18.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-09-13 17:41:43.121 00:00:10.365 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:42:18.386 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-09-13 17:42:39.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:42:38.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:42:43.523 00:00:10.362 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:43:18.562 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-09-13 17:39:27.949 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:39:27.953 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:43:43.923 00:00:10.377 TCP 23.104.0.1:53180 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:44:18.801 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-09-13 17:44:44.338 00:00:10.362 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:45:19.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-09-13 17:45:44.742 00:00:10.363 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:46:19.253 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-09-13 17:46:45.148 00:00:10.364 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:47:19.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-09-13 17:47:38.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:47:38.848 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:47:45.553 00:00:10.366 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:48:19.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43932 10 6452 1 2025-09-13 17:48:45.962 00:00:10.483 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:45:27.953 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:49:19.855 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-09-13 17:45:27.950 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:49:46.482 00:00:10.322 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:50:20.087 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-09-13 17:50:46.842 00:00:10.386 TCP 23.104.0.1:45838 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:51:20.307 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40160 10 6452 1 2025-09-13 17:51:47.264 00:00:10.362 TCP 23.104.0.1:59084 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:52:20.482 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58146 10 6452 1 2025-09-13 17:52:39.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:52:38.967 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:52:47.665 00:00:10.368 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:53:20.705 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-09-13 17:53:48.098 00:00:10.367 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:54:20.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55968 10 6452 1 2025-09-13 17:54:48.505 00:00:10.324 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:51:27.957 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:51:27.954 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 17:55:21.171 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45758 10 6452 1 2025-09-13 17:55:48.865 00:00:10.476 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:56:21.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-13 17:56:49.379 00:00:10.367 TCP 23.104.0.1:40144 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:57:21.608 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:58708 10 6452 1 2025-09-13 17:57:39.271 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 17:57:39.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 17:57:49.785 00:00:10.364 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 12 1559 1 2025-09-13 17:58:21.926 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 Summary: total flows: 163, total bytes: 501435, total packets: 1572, avg bps: 1094, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 16:57:27 - 2025-09-13 17:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0021s Wall: 0.0021s flows/second: 79358.3 Runtime: 0.0021s