Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 10:58:53.591 00:00:10.330 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:59:21.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51696 10 6452 1 2025-09-12 10:59:53.960 00:00:10.368 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:00:21.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-09-12 11:00:54.367 00:00:10.364 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 10:57:27.286 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 10:57:27.283 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:01:21.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 10 6452 1 2025-09-12 11:02:02.371 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:02:02.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:01:54.765 00:00:10.376 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:02:22.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-09-12 11:02:55.182 00:00:10.366 TCP 23.104.0.1:34320 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:03:22.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-09-12 11:03:55.585 00:00:10.328 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:04:22.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-09-12 11:04:55.956 00:00:10.365 TCP 23.104.0.1:45808 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:05:22.720 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-09-12 11:05:56.362 00:00:20.504 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:06:23.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-09-12 11:07:02.246 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:07:02.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:07:06.911 00:00:10.370 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:03:27.291 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:03:27.294 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:07:23.258 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-12 11:08:07.322 00:00:10.324 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:08:23.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-09-12 11:09:07.687 00:00:10.365 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:09:23.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-12 11:10:08.106 00:00:10.366 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:10:23.866 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-09-12 11:11:08.512 00:00:10.322 TCP 23.104.0.1:55942 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:11:24.093 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-09-12 11:12:02.533 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:12:02.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:12:08.877 00:00:10.373 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:12:24.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-09-12 11:13:09.286 00:00:10.369 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:09:27.295 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:09:27.292 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:13:24.555 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 12 10367 1 2025-09-12 11:14:09.689 00:00:10.582 TCP 23.104.0.1:35358 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:14:24.755 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-09-12 11:15:10.315 00:00:10.364 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:15:24.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-09-12 11:16:10.718 00:00:10.374 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:16:25.193 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-09-12 11:17:02.528 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:17:02.396 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:17:11.132 00:00:10.501 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:17:25.436 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-09-12 11:18:11.672 00:00:10.367 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:18:25.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-09-12 11:19:12.104 00:00:10.363 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:15:27.297 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:15:27.294 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:19:25.882 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-09-12 11:20:12.506 00:00:10.327 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:20:26.112 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-09-12 11:21:12.872 00:00:10.368 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:21:26.362 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-09-12 11:22:02.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:22:02.913 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:22:13.280 00:00:10.365 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:22:26.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-09-12 11:23:13.689 00:00:10.368 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:23:26.809 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-09-12 11:24:14.106 00:00:10.363 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:24:27.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39762 10 6452 1 2025-09-12 11:25:14.515 00:00:10.370 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:21:27.297 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:21:27.300 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:25:27.246 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-09-12 11:26:14.925 00:00:10.389 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:26:27.460 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-09-12 11:27:02.833 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:27:02.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:27:15.360 00:00:10.364 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:27:27.633 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-09-12 11:28:15.761 00:00:10.335 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:28:27.841 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-09-12 11:29:16.136 00:00:10.371 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:29:28.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-09-12 11:30:16.547 00:00:10.368 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:30:28.297 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-09-12 11:27:27.302 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:31:16.953 00:00:10.332 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:27:27.299 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:31:28.535 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-09-12 11:32:02.802 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:32:02.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:32:17.318 00:00:10.397 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:32:28.751 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-09-12 11:33:17.729 00:00:10.378 TCP 23.104.0.1:60390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:33:28.972 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 13 6608 1 2025-09-12 11:34:18.165 00:00:10.367 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:34:29.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-09-12 11:35:18.571 00:00:10.367 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:35:29.430 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-09-12 11:36:18.976 00:00:10.372 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:36:29.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-09-12 11:37:02.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:37:02.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:33:27.303 00:05:00.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:33:27.306 00:05:00.885 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:37:19.385 00:00:10.372 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:37:29.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-09-12 11:38:19.799 00:00:10.371 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:38:30.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41062 10 6452 1 2025-09-12 11:39:20.211 00:00:10.363 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:39:30.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-09-12 11:40:20.617 00:00:10.425 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:40:30.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-09-12 11:41:21.113 00:00:10.367 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:41:30.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-09-12 11:42:03.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:42:03.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:42:21.516 00:00:10.367 TCP 23.104.0.1:55444 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:42:30.895 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-09-12 11:39:27.304 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:39:27.307 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:43:21.919 00:00:10.377 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:43:31.130 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-12 11:44:22.332 00:00:10.360 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:44:31.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-12 11:45:22.731 00:00:10.379 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:45:31.589 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-09-12 11:46:23.138 00:00:10.370 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:46:32.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-09-12 11:47:03.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:47:03.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:47:23.549 00:00:10.365 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:47:32.781 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6452 1 2025-09-12 11:48:23.952 00:00:10.365 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:48:33.005 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-09-12 11:45:27.342 00:05:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:45:27.340 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:49:24.359 00:00:10.366 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:49:33.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-09-12 11:50:24.760 00:00:10.379 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:50:33.415 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-12 11:51:25.180 00:00:10.930 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:51:33.586 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-09-12 11:52:03.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:52:03.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:52:26.148 00:00:10.323 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:52:33.810 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-09-12 11:53:26.511 00:00:10.370 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:53:34.027 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-09-12 11:54:26.915 00:00:10.367 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:54:34.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-09-12 11:51:27.342 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:51:27.346 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 11:55:27.320 00:00:10.344 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:55:34.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-09-12 11:56:27.716 00:00:10.380 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:56:34.668 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-09-12 11:57:03.264 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 11:57:03.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 11:57:28.131 00:00:10.370 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:57:34.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-09-12 11:58:28.538 00:00:10.444 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 15 1926 1 2025-09-12 11:58:35.107 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 12 10367 1 Summary: total flows: 164, total bytes: 507172, total packets: 1587, avg bps: 1103, avg pps: 0, avg bpp: 319 Time window: 2025-09-12 10:57:27 - 2025-09-12 11:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0031s Wall: 0.0032s flows/second: 51930.1 Runtime: 0.0032s