Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 06:59:01.504 00:00:10.365 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-09-12 06:59:21.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-09-12 07:00:01.911 00:00:10.363 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:00:21.251 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48618 10 6452 1 2025-09-12 07:01:02.316 00:00:10.379 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-12 06:57:27.220 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 06:57:27.219 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:01:21.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39712 10 6452 1 2025-09-12 07:01:57.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:01:57.314 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:02:02.734 00:00:10.366 TCP 23.104.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:02:21.683 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-09-12 07:03:03.140 00:00:10.369 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:03:21.895 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41714 10 6452 1 2025-09-12 07:04:03.560 00:00:10.369 TCP 23.104.0.1:49062 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:04:22.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-09-12 07:05:03.966 00:00:10.365 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:05:22.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33708 10 6452 1 2025-09-12 07:06:04.371 00:00:10.374 TCP 23.104.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:06:22.538 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:33248 10 6452 1 2025-09-12 07:06:57.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:06:57.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:07:04.780 00:00:10.327 TCP 23.104.0.1:46184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:03:27.221 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:03:27.219 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:07:22.803 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-09-12 07:08:05.141 00:00:10.368 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:08:23.033 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-09-12 07:09:05.550 00:00:10.363 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:09:23.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-09-12 07:10:05.948 00:00:10.329 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:10:23.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-09-12 07:11:06.317 00:00:10.327 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:11:23.669 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:39138 11 6504 1 2025-09-12 07:11:57.353 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:11:57.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:12:06.676 00:00:10.366 TCP 23.104.0.1:40394 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:12:23.946 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-09-12 07:13:07.103 00:00:10.369 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:09:27.223 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:09:27.227 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:13:24.178 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-09-12 07:14:07.509 00:00:10.369 TCP 23.104.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:14:24.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37952 10 6452 1 2025-09-12 07:15:07.924 00:00:10.393 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:15:24.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-09-12 07:16:08.357 00:00:10.367 TCP 23.104.0.1:54084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:16:24.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-09-12 07:16:57.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:16:57.574 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:17:08.762 00:00:10.376 TCP 23.104.0.1:35644 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:17:25.057 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-09-12 07:18:09.179 00:00:10.363 TCP 23.104.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:18:25.274 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47330 10 6452 1 2025-09-12 07:19:09.581 00:00:10.368 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:15:27.228 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:15:27.226 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:19:25.486 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36388 10 6452 1 2025-09-12 07:20:09.983 00:00:10.370 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:20:25.658 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-09-12 07:21:10.390 00:00:10.364 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:21:25.879 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-09-12 07:21:57.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:21:57.842 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:22:10.794 00:00:10.369 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:22:26.462 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-09-12 07:23:11.202 00:00:10.367 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:23:26.692 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45204 10 6452 1 2025-09-12 07:24:11.605 00:00:10.363 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:24:26.911 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2025-09-12 07:25:12.007 00:00:10.365 TCP 23.104.0.1:39238 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:21:27.228 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:21:27.226 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:25:27.135 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6452 1 2025-09-12 07:26:12.414 00:00:10.367 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:26:27.358 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-09-12 07:26:57.947 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:26:57.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:27:12.819 00:00:10.371 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:27:27.533 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59574 10 6452 1 2025-09-12 07:28:13.224 00:00:10.325 TCP 23.104.0.1:45350 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:28:27.756 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-09-12 07:29:13.586 00:00:10.359 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:29:27.982 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:55190 10 6452 1 2025-09-12 07:30:13.983 00:00:22.903 TCP 23.104.0.1:45602 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:30:28.174 00:00:10.962 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-09-12 07:27:27.232 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:27:27.228 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:31:29.180 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 10 6452 1 2025-09-12 07:31:26.925 00:00:10.388 TCP 23.104.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:31:57.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:31:58.021 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:32:29.400 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43582 10 6452 1 2025-09-12 07:32:27.349 00:00:10.358 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:33:27.746 00:00:10.369 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:33:29.625 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2025-09-12 07:34:28.152 00:00:10.362 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:34:30.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-09-12 07:35:30.419 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59276 10 6452 1 2025-09-12 07:35:28.563 00:00:10.324 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:36:28.923 00:00:10.381 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:36:30.645 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37574 10 6452 1 2025-09-12 07:36:58.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:36:58.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:33:27.233 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:33:27.230 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:37:29.348 00:00:10.359 TCP 23.104.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:37:30.866 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-09-12 07:38:29.747 00:00:10.362 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:38:31.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6452 1 2025-09-12 07:39:31.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-09-12 07:39:30.150 00:00:10.362 TCP 23.104.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:40:30.552 00:00:10.360 TCP 23.104.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:40:31.518 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-09-12 07:41:31.727 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:55338 12 6556 1 2025-09-12 07:41:30.955 00:00:10.323 TCP 23.104.0.1:50158 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:41:58.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:41:58.269 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:42:31.316 00:00:10.368 TCP 23.104.0.1:48316 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:42:31.938 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59406 10 6452 1 2025-09-12 07:39:27.233 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:39:27.231 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:43:31.721 00:00:10.381 TCP 23.104.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:43:32.191 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46100 10 6452 1 2025-09-12 07:44:32.402 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-09-12 07:44:32.137 00:00:10.369 TCP 23.104.0.1:42656 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:45:32.538 00:00:10.322 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:45:32.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-09-12 07:46:32.826 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-09-12 07:46:32.893 00:00:10.322 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:46:58.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:46:58.090 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:47:33.255 00:00:10.358 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:47:33.045 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-09-12 07:48:33.252 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-09-12 07:48:33.652 00:00:10.363 TCP 23.104.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:45:27.235 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:45:27.233 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:49:34.058 00:00:10.369 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:49:33.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55632 10 6452 1 2025-09-12 07:50:33.690 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-09-12 07:50:34.460 00:00:10.363 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:51:34.860 00:00:10.372 TCP 23.104.0.1:54766 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:51:33.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 11 6492 1 2025-09-12 07:51:58.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:51:58.404 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:52:34.121 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42324 10 6452 1 2025-09-12 07:52:35.278 00:00:10.325 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:53:34.305 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-09-12 07:53:35.644 00:00:10.365 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:54:34.487 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-09-12 07:54:36.057 00:00:10.363 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:51:27.237 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 07:51:27.241 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 07:55:36.459 00:00:10.368 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:55:34.701 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-09-12 07:56:34.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51378 10 6452 1 2025-09-12 07:56:36.862 00:00:10.369 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:56:58.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 07:56:58.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 07:57:35.118 00:00:10.598 TCP 1.101.0.1:3000 -> 22.102.0.1:50738 10 6452 1 2025-09-12 07:57:37.269 00:00:10.882 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 07:58:35.749 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-09-12 07:58:38.185 00:00:10.362 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498544, total packets: 1576, avg bps: 1083, avg pps: 0, avg bpp: 316 Time window: 2025-09-12 06:57:27 - 2025-09-12 07:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0020s flows/second: 81030.3 Runtime: 0.0020s