Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 16:58:41.677 00:00:10.363 TCP 23.104.0.1:54100 -> 1.101.0.1:3000 11 1507 1 2025-09-12 16:59:06.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6452 1 2025-09-12 16:59:42.107 00:00:10.366 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:00:06.573 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-09-12 17:00:42.513 00:00:10.369 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:01:06.751 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-09-12 16:57:27.431 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 16:57:27.428 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:01:42.922 00:00:10.352 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:02:09.278 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:02:09.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:02:06.971 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47974 10 6452 1 2025-09-12 17:02:43.313 00:00:10.329 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:03:07.159 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-09-12 17:03:43.686 00:00:10.380 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:04:07.335 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-09-12 17:04:44.132 00:00:10.329 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:05:07.506 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-09-12 17:05:44.515 00:00:10.365 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:06:07.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50938 10 6452 1 2025-09-12 17:06:44.922 00:00:11.222 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:07:09.559 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:07:09.449 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:07:07.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-09-12 17:03:27.431 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:03:27.433 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:07:46.184 00:00:10.370 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:08:08.169 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-09-12 17:08:46.595 00:00:10.367 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:09:08.382 00:00:10.333 TCP 1.101.0.1:3000 -> 22.102.0.1:53402 10 6452 1 2025-09-12 17:09:46.992 00:00:10.369 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:10:08.755 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35574 10 6452 1 2025-09-12 17:10:47.393 00:00:10.366 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:11:08.967 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-09-12 17:11:47.796 00:00:10.366 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:12:09.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:12:09.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:12:09.147 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-09-12 17:12:48.198 00:00:10.421 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:13:09.361 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-09-12 17:09:27.430 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:09:27.434 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:13:48.640 00:00:10.371 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:14:09.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-09-12 17:14:49.049 00:00:10.368 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:15:09.789 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51072 10 6452 1 2025-09-12 17:15:49.453 00:00:10.363 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:16:10.001 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-09-12 17:16:49.855 00:00:10.389 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:17:09.527 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:17:09.466 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:17:10.175 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40582 10 6452 1 2025-09-12 17:17:50.279 00:00:10.367 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:18:10.390 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-09-12 17:18:50.682 00:00:10.388 TCP 23.104.0.1:35720 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:19:10.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-09-12 17:15:27.436 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:15:27.439 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:19:51.099 00:00:10.369 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:20:10.826 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35492 10 6452 1 2025-09-12 17:20:51.505 00:00:10.363 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:21:11.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-09-12 17:21:51.905 00:00:10.372 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:22:09.866 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:22:09.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:22:11.300 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-09-12 17:22:52.314 00:00:10.361 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:23:11.525 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-09-12 17:23:52.716 00:00:10.347 TCP 23.104.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:24:11.702 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-09-12 17:24:53.109 00:00:10.365 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:25:11.918 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-09-12 17:21:27.439 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:21:27.437 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:25:53.513 00:00:10.365 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:26:12.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49356 10 6452 1 2025-09-12 17:26:53.917 00:00:10.377 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:27:09.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:27:09.764 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:27:12.346 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-09-12 17:27:54.342 00:00:10.331 TCP 23.104.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:28:12.522 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36134 10 6452 1 2025-09-12 17:28:54.709 00:00:10.368 TCP 23.104.0.1:50900 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:29:12.692 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-09-12 17:29:55.124 00:00:10.373 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:30:12.908 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44768 10 6452 1 2025-09-12 17:30:55.548 00:00:10.364 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:31:13.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46720 10 6452 1 2025-09-12 17:27:27.439 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:27:27.441 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:31:55.948 00:00:10.382 TCP 23.104.0.1:48764 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:32:09.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:32:09.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:32:13.333 00:00:10.338 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-09-12 17:32:56.369 00:00:10.324 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:33:13.711 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-09-12 17:33:56.731 00:00:10.457 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 15 1926 1 2025-09-12 17:34:13.927 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 12 10365 1 2025-09-12 17:34:57.228 00:00:10.323 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:35:14.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-09-12 17:35:57.585 00:00:10.370 TCP 23.104.0.1:48422 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:36:14.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-09-12 17:37:10.118 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:36:57.996 00:00:10.372 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:37:10.086 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:37:14.600 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-09-12 17:33:27.441 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:33:27.440 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:37:58.398 00:00:10.367 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:38:14.819 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-09-12 17:38:58.801 00:00:10.441 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 15 1926 1 2025-09-12 17:39:15.071 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 12 10365 1 2025-09-12 17:39:59.283 00:00:10.367 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:40:15.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-09-12 17:40:59.690 00:00:10.370 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:41:15.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-09-12 17:42:10.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:42:00.114 00:00:10.322 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:42:10.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:42:15.738 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59300 10 6452 1 2025-09-12 17:43:00.482 00:00:10.373 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:43:15.909 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-09-12 17:39:27.440 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:39:27.443 00:05:00.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:44:00.891 00:00:10.395 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:44:16.139 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-09-12 17:45:01.324 00:00:10.370 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:45:16.350 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-09-12 17:46:01.731 00:00:10.368 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:46:16.517 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-09-12 17:47:10.204 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:47:10.135 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:47:02.137 00:00:10.324 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:47:16.689 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-09-12 17:48:02.511 00:00:10.368 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:48:16.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-09-12 17:49:02.938 00:00:10.381 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:49:17.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54196 10 6452 1 2025-09-12 17:45:27.444 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:45:27.447 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:50:03.355 00:00:10.325 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:50:17.338 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6452 1 2025-09-12 17:51:03.719 00:00:10.329 TCP 23.104.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:51:17.550 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2025-09-12 17:52:10.390 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:52:10.340 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:52:04.110 00:00:10.368 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:52:17.789 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-09-12 17:53:04.512 00:00:10.367 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:53:18.001 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58048 10 6452 1 2025-09-12 17:54:04.914 00:00:10.446 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 15 1926 1 2025-09-12 17:54:18.218 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 12 10367 1 2025-09-12 17:55:05.394 00:00:10.363 TCP 23.104.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:51:27.448 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 17:55:18.792 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-09-12 17:51:27.446 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 17:56:05.793 00:00:10.368 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:56:19.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49140 10 6452 1 2025-09-12 17:57:10.521 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 17:57:10.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 17:57:06.199 00:00:10.362 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:57:19.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-09-12 17:58:06.598 00:00:10.369 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:58:19.434 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 12 10365 1 Summary: total flows: 164, total bytes: 515259, total packets: 1592, avg bps: 1125, avg pps: 0, avg bpp: 323 Time window: 2025-09-12 16:57:27 - 2025-09-12 17:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0021s flows/second: 79156.0 Runtime: 0.0021s