Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 17:58:50.193 00:00:10.365 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:59:22.133 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-09-13 17:59:50.600 00:00:10.364 TCP 23.104.0.1:50208 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:00:22.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-09-13 18:00:51.001 00:00:10.367 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-09-13 17:57:27.957 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 17:57:27.955 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:01:22.871 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47472 10 6452 1 2025-09-13 18:01:51.407 00:00:10.364 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:02:23.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-09-13 18:02:39.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:02:39.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:02:51.811 00:00:10.368 TCP 23.104.0.1:45734 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:03:23.315 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-09-13 18:03:52.219 00:00:10.367 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:04:23.536 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55406 10 6452 1 2025-09-13 18:04:52.622 00:00:10.366 TCP 23.104.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:05:23.763 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37124 10 6452 1 2025-09-13 18:05:53.025 00:00:10.364 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:06:23.983 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 13 6608 1 2025-09-13 18:06:53.430 00:00:10.336 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:03:27.958 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:03:27.960 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:07:24.237 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:36278 10 6452 1 2025-09-13 18:07:39.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:07:39.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:07:53.821 00:00:10.416 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:08:24.664 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:42414 10 6452 1 2025-09-13 18:08:54.280 00:00:10.438 TCP 23.104.0.1:38132 -> 1.101.0.1:3000 15 1926 1 2025-09-13 18:09:24.978 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:41062 12 10367 1 2025-09-13 18:09:54.763 00:00:10.378 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:10:25.251 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45394 10 6452 1 2025-09-13 18:10:55.175 00:00:10.324 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:11:25.483 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37490 10 6452 1 2025-09-13 18:11:55.537 00:00:10.357 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:12:25.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-09-13 18:12:39.739 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:12:39.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:12:55.934 00:00:10.377 TCP 23.104.0.1:42460 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:09:27.962 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:09:27.960 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:13:25.903 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6452 1 2025-09-13 18:13:56.349 00:00:10.516 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 17 2241 1 2025-09-13 18:14:26.112 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:39288 14 14278 1 2025-09-13 18:14:56.905 00:00:10.368 TCP 23.104.0.1:60794 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:15:26.389 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-09-13 18:15:57.312 00:00:10.368 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:16:26.569 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 10 6452 1 2025-09-13 18:16:57.715 00:00:10.378 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:17:26.782 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36462 10 6452 1 2025-09-13 18:17:39.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:17:39.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:17:58.130 00:00:10.325 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:18:26.958 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-09-13 18:18:58.494 00:00:10.369 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:15:27.961 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:15:27.964 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:19:27.139 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57920 10 6452 1 2025-09-13 18:19:58.899 00:00:10.366 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:20:27.354 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-09-13 18:20:59.303 00:00:10.366 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:21:27.527 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-09-13 18:21:59.709 00:00:10.363 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:22:27.757 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60694 10 6452 1 2025-09-13 18:22:39.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:22:39.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:23:00.111 00:00:10.362 TCP 23.104.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:23:27.968 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-09-13 18:24:00.514 00:00:10.373 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:24:28.206 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6452 1 2025-09-13 18:25:00.923 00:00:10.356 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:21:27.963 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:21:27.965 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:25:28.426 00:00:19.441 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-09-13 18:26:01.310 00:00:10.374 TCP 23.104.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:26:37.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-13 18:27:01.722 00:00:10.376 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:27:39.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:27:40.158 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:27:38.131 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-09-13 18:28:02.141 00:00:10.368 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:28:38.362 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-09-13 18:29:02.544 00:00:10.325 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:29:38.579 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59912 10 6452 1 2025-09-13 18:30:02.906 00:00:10.361 TCP 23.104.0.1:39782 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:30:38.794 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-09-13 18:31:03.308 00:00:10.329 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:27:27.966 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:27:27.968 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:31:39.033 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-09-13 18:32:03.676 00:00:10.364 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:32:40.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:32:39.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:32:39.245 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49300 10 6452 1 2025-09-13 18:33:04.105 00:00:10.357 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:33:39.469 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-09-13 18:34:04.501 00:00:10.323 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:34:39.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-09-13 18:35:04.875 00:00:10.343 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:35:39.912 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-09-13 18:36:05.267 00:00:10.368 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:36:40.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-09-13 18:37:05.677 00:00:10.366 TCP 23.104.0.1:60096 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:33:27.973 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:33:27.971 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:37:40.622 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:37:40.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:37:40.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40648 10 6452 1 2025-09-13 18:38:06.104 00:00:10.366 TCP 23.104.0.1:51316 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:38:40.574 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45064 10 6452 1 2025-09-13 18:39:06.509 00:00:10.370 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:39:40.822 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-09-13 18:40:06.914 00:00:10.365 TCP 23.104.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:40:41.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-09-13 18:41:07.317 00:00:10.369 TCP 23.104.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:41:41.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-09-13 18:42:07.725 00:00:10.389 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:42:40.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:42:40.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:42:41.500 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54286 10 6452 1 2025-09-13 18:43:08.136 00:00:10.366 TCP 23.104.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:39:27.974 00:05:00.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:39:27.972 00:05:00.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:43:41.713 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-09-13 18:44:08.539 00:00:10.603 TCP 23.104.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:44:41.923 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-09-13 18:45:09.182 00:00:10.328 TCP 23.104.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:45:42.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38410 10 6452 1 2025-09-13 18:46:09.546 00:00:10.340 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:46:42.361 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6452 1 2025-09-13 18:47:09.929 00:00:10.387 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:47:40.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:47:40.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:47:42.567 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-09-13 18:48:10.360 00:00:10.364 TCP 23.104.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:48:42.783 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-09-13 18:49:10.762 00:00:10.374 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:45:27.975 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:45:27.977 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:49:42.965 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 12 6556 1 2025-09-13 18:50:11.177 00:00:10.364 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:50:43.190 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35400 10 6452 1 2025-09-13 18:51:11.578 00:00:10.367 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:51:43.408 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-09-13 18:52:11.987 00:00:10.370 TCP 23.104.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:52:40.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:52:40.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:52:43.631 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-09-13 18:53:12.390 00:00:10.366 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:53:43.804 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-09-13 18:54:12.793 00:00:10.365 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:54:44.028 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-09-13 18:55:13.199 00:00:10.368 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:51:27.978 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:51:27.980 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 18:55:44.200 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-09-13 18:56:13.602 00:00:10.365 TCP 23.104.0.1:45352 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:56:44.411 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60684 10 6452 1 2025-09-13 18:57:14.003 00:00:10.376 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:57:40.623 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 18:57:40.679 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 18:57:44.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-09-13 18:58:14.413 00:00:10.367 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505050, total packets: 1583, avg bps: 1104, avg pps: 0, avg bpp: 319 Time window: 2025-09-13 17:57:27 - 2025-09-13 18:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0022s flows/second: 72669.2 Runtime: 0.0023s