Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 17:59:07.008 00:00:10.452 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 15 1926 1 2025-09-12 17:59:19.677 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-09-12 18:00:07.503 00:00:10.323 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:00:19.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-09-12 18:01:07.868 00:00:10.375 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-09-12 17:57:27.458 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:01:20.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-09-12 17:57:27.454 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:02:11.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:02:10.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:02:08.284 00:00:10.369 TCP 23.104.0.1:46594 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:02:20.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48208 10 6452 1 2025-09-12 18:03:08.693 00:00:10.876 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:03:20.530 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36176 10 6452 1 2025-09-12 18:04:09.609 00:00:10.324 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:04:20.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34694 10 6452 1 2025-09-12 18:05:09.972 00:00:10.368 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:05:20.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-09-12 18:06:10.379 00:00:10.367 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:06:21.191 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-09-12 18:07:10.885 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:07:10.775 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:07:10.788 00:00:10.369 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:07:21.402 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-09-12 18:03:27.457 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:03:27.459 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:08:11.199 00:00:10.371 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:08:21.573 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57852 10 6452 1 2025-09-12 18:09:11.611 00:00:10.324 TCP 23.104.0.1:38134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:09:21.790 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53054 10 6452 1 2025-09-12 18:10:11.975 00:00:10.383 TCP 23.104.0.1:57546 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:10:21.959 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35774 10 6452 1 2025-09-12 18:11:12.398 00:00:13.635 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:11:22.185 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-09-12 18:12:10.799 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:12:10.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:12:16.111 00:00:10.367 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:12:22.356 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6452 1 2025-09-12 18:13:16.520 00:00:10.366 TCP 23.104.0.1:60876 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:09:27.457 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:09:27.460 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:13:22.569 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-09-12 18:14:16.941 00:00:10.335 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:14:22.740 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-09-12 18:15:17.312 00:00:10.371 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:15:22.953 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-09-12 18:16:17.721 00:00:10.374 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:16:23.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-09-12 18:17:11.057 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:17:10.929 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:17:18.139 00:00:10.367 TCP 23.104.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:17:23.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37718 10 6452 1 2025-09-12 18:18:18.550 00:00:10.364 TCP 23.104.0.1:53392 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:18:23.560 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55432 10 6452 1 2025-09-12 18:15:27.460 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:19:18.954 00:00:10.361 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:15:27.463 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:19:23.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-09-12 18:20:19.360 00:00:10.371 TCP 23.104.0.1:34300 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:20:23.984 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39448 10 6452 1 2025-09-12 18:21:19.772 00:00:10.370 TCP 23.104.0.1:40052 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:21:24.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6452 1 2025-09-12 18:22:10.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:22:11.082 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:22:20.181 00:00:10.363 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:22:24.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-09-12 18:23:20.579 00:00:10.375 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:23:24.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-09-12 18:24:20.993 00:00:10.366 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:24:24.866 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-09-12 18:25:21.400 00:00:10.362 TCP 23.104.0.1:53044 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:21:27.464 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:21:27.461 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:25:25.060 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-09-12 18:26:21.801 00:00:10.370 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:26:25.279 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40826 10 6452 1 2025-09-12 18:27:11.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:27:11.259 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:27:25.458 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-09-12 18:27:22.207 00:00:10.325 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:28:22.572 00:00:10.364 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:28:25.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2025-09-12 18:29:25.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-09-12 18:29:22.975 00:00:10.322 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:30:23.340 00:00:10.322 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:30:26.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50056 10 6452 1 2025-09-12 18:27:27.466 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:27:27.463 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:31:26.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-09-12 18:31:23.699 00:00:10.375 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:32:11.654 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:32:11.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:32:26.547 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-09-12 18:32:24.109 00:00:11.754 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:33:26.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 10 6452 1 2025-09-12 18:33:25.909 00:00:10.362 TCP 23.104.0.1:48714 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:34:26.313 00:00:10.367 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:34:26.974 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-09-12 18:35:26.716 00:00:10.371 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:35:27.206 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-09-12 18:36:27.128 00:00:10.367 TCP 23.104.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:36:27.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6452 1 2025-09-12 18:37:11.603 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:37:11.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:33:27.468 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:33:27.466 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:37:27.534 00:00:10.360 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:37:27.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-09-12 18:38:27.937 00:00:10.456 TCP 23.104.0.1:36318 -> 1.101.0.1:3000 15 1926 1 2025-09-12 18:38:27.847 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 12 10365 1 2025-09-12 18:39:28.432 00:00:10.371 TCP 23.104.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:39:28.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6452 1 2025-09-12 18:40:28.835 00:00:10.396 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:40:28.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41160 10 6452 1 2025-09-12 18:41:29.273 00:00:10.352 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:41:28.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 10 6452 1 2025-09-12 18:42:11.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:42:11.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:42:28.720 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-09-12 18:42:29.639 00:00:10.368 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:39:27.469 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:39:27.468 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:43:30.064 00:00:10.329 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:43:28.893 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-09-12 18:44:29.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-09-12 18:44:30.429 00:00:10.365 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:45:30.831 00:00:10.353 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:45:29.336 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-09-12 18:46:31.225 00:00:10.324 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:46:29.507 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55964 11 6492 1 2025-09-12 18:47:11.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:47:11.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:47:31.585 00:00:10.366 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:47:29.726 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-09-12 18:48:29.893 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-09-12 18:48:31.988 00:00:10.370 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:45:27.471 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:45:27.473 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:49:30.084 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 12 6556 1 2025-09-12 18:49:32.396 00:00:10.362 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:50:30.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-09-12 18:50:32.799 00:00:10.368 TCP 23.104.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:51:30.508 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-09-12 18:51:33.207 00:00:10.363 TCP 23.104.0.1:41306 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:52:11.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:52:11.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:52:30.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-09-12 18:52:33.607 00:00:10.368 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:53:30.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 10 6452 1 2025-09-12 18:53:34.022 00:00:10.369 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:54:31.174 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-09-12 18:54:34.432 00:00:10.370 TCP 23.104.0.1:41974 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:51:27.472 00:05:00.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 18:51:27.470 00:05:00.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 18:55:31.390 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-09-12 18:55:34.844 00:00:10.342 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:56:31.561 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-09-12 18:56:35.224 00:00:10.366 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:57:11.703 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 18:57:11.638 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 18:57:31.774 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34852 10 6452 1 2025-09-12 18:57:35.629 00:00:10.369 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-09-12 18:58:31.992 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-09-12 18:58:36.067 00:00:10.365 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503243, total packets: 1585, avg bps: 1094, avg pps: 0, avg bpp: 317 Time window: 2025-09-12 17:57:27 - 2025-09-12 18:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0000s Wall: 0.0025s flows/second: 64691.6 Runtime: 0.0026s