Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 23:58:52.117 00:00:10.454 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 15 1926 1 2025-09-12 23:59:06.533 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 12 10367 1 2025-09-12 23:59:52.621 00:00:10.374 TCP 23.104.0.1:56412 -> 1.101.0.1:3000 12 1559 1 2025-09-13 00:00:06.778 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-09-13 00:00:53.034 00:00:10.360 TCP 23.104.0.1:38936 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:01:06.994 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-09-12 23:57:27.576 00:05:00.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 23:57:27.579 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:01:53.432 00:00:10.372 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:02:17.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:02:17.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:02:07.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-09-13 00:02:53.841 00:00:10.396 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:03:07.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-09-13 00:03:54.272 00:00:10.589 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:04:07.620 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-09-13 00:04:54.899 00:00:10.367 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:05:07.869 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6452 1 2025-09-13 00:05:55.305 00:00:10.365 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:06:08.094 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50642 10 6452 1 2025-09-13 00:06:55.708 00:00:10.363 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:07:17.999 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:07:08.309 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42044 10 6452 1 2025-09-13 00:07:18.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:03:27.576 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:03:27.579 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:07:56.117 00:00:10.363 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:08:08.526 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-09-13 00:08:56.527 00:00:10.360 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:09:08.734 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6452 1 2025-09-13 00:09:56.926 00:00:10.343 TCP 23.104.0.1:44490 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:10:08.957 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55198 10 6452 1 2025-09-13 00:10:57.307 00:00:10.363 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:11:09.206 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-13 00:11:57.707 00:00:10.371 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:12:17.831 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:12:18.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:12:09.435 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53306 10 6452 1 2025-09-13 00:12:58.111 00:00:10.326 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:13:09.656 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46760 10 6452 1 2025-09-13 00:09:27.579 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:09:27.578 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:13:58.483 00:00:10.365 TCP 23.104.0.1:34652 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:14:09.879 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-09-13 00:14:58.890 00:00:10.384 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:15:10.107 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45354 12 6556 1 2025-09-13 00:15:59.310 00:00:10.372 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:16:10.326 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-09-13 00:16:59.713 00:00:10.386 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:17:10.546 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53592 10 6452 1 2025-09-13 00:17:18.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:17:18.389 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:18:00.134 00:00:10.423 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:18:10.769 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6452 1 2025-09-13 00:19:00.599 00:00:10.369 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:19:10.991 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 2025-09-13 00:15:27.578 00:05:00.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:15:27.581 00:05:00.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:20:01.008 00:00:10.324 TCP 23.104.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:20:11.218 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52378 10 6452 1 2025-09-13 00:21:01.363 00:00:10.368 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:21:11.437 00:00:10.687 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-09-13 00:22:01.768 00:00:10.369 TCP 23.104.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:22:18.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:22:18.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:22:12.165 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-09-13 00:23:02.173 00:00:10.366 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:23:12.378 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-09-13 00:24:02.575 00:00:10.363 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:24:12.595 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55868 10 6452 1 2025-09-13 00:25:02.977 00:00:10.367 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:25:12.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50632 10 6452 1 2025-09-13 00:21:27.582 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:21:27.580 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:26:03.385 00:00:10.362 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:26:13.023 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-09-13 00:27:03.781 00:00:10.364 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:27:18.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:27:18.037 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:27:13.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-09-13 00:28:04.186 00:00:10.361 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:28:13.406 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-09-13 00:29:04.583 00:00:10.369 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:29:13.575 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51872 10 6452 1 2025-09-13 00:30:04.991 00:00:10.363 TCP 23.104.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:30:13.799 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35006 10 6452 1 2025-09-13 00:31:05.390 00:00:10.559 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:31:14.031 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38046 10 6452 1 2025-09-13 00:27:27.582 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:27:27.580 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:32:05.990 00:00:10.365 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:32:18.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:32:18.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:32:14.253 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 11 6492 1 2025-09-13 00:33:06.391 00:00:10.370 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:33:14.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-09-13 00:34:06.795 00:00:10.375 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:34:14.688 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6452 1 2025-09-13 00:35:07.197 00:00:10.373 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:35:14.911 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-09-13 00:36:07.614 00:00:10.351 TCP 23.104.0.1:48634 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:36:15.129 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-09-13 00:37:18.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:37:18.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:37:08.018 00:00:10.417 TCP 23.104.0.1:37242 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:37:15.354 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52798 10 6452 1 2025-09-13 00:33:27.581 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:33:27.584 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:38:08.476 00:00:10.363 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:38:15.602 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6452 1 2025-09-13 00:39:08.879 00:00:10.380 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:39:15.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-09-13 00:40:09.287 00:00:11.290 TCP 23.104.0.1:57948 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:40:15.997 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-09-13 00:41:10.615 00:00:10.388 TCP 23.104.0.1:38034 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:41:16.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-09-13 00:42:19.140 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:42:18.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:42:11.036 00:00:10.328 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:42:16.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 10 6452 1 2025-09-13 00:43:11.397 00:00:10.364 TCP 23.104.0.1:35592 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:43:16.628 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6452 1 2025-09-13 00:39:27.585 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:39:27.583 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:44:11.800 00:00:10.377 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:44:16.854 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:53254 10 6452 1 2025-09-13 00:45:12.218 00:00:10.366 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:45:17.251 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51586 10 6452 1 2025-09-13 00:46:12.619 00:00:10.322 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:46:17.456 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35792 10 6452 1 2025-09-13 00:47:18.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:47:18.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:47:12.982 00:00:10.373 TCP 23.104.0.1:42146 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:47:17.630 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-09-13 00:48:13.391 00:00:10.366 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:48:17.843 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45304 10 6452 1 2025-09-13 00:49:13.799 00:00:10.438 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 15 1926 1 2025-09-13 00:45:27.587 00:05:00.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:45:27.584 00:05:00.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:49:18.081 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 12 10365 1 2025-09-13 00:50:14.273 00:00:10.364 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:50:18.319 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-09-13 00:51:14.676 00:00:10.375 TCP 23.104.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:51:18.496 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-09-13 00:52:18.775 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:52:18.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:52:15.101 00:00:10.365 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:52:18.704 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-09-13 00:53:15.501 00:00:10.367 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:53:18.914 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-09-13 00:54:15.907 00:00:10.366 TCP 23.104.0.1:46798 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:54:19.133 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39814 10 6452 1 2025-09-13 00:55:16.312 00:00:10.370 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:51:27.586 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 00:55:19.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-09-13 00:51:27.589 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 00:56:19.566 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33090 10 6452 1 2025-09-13 00:56:16.712 00:00:10.380 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:57:18.839 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 00:57:18.708 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 00:57:17.128 00:00:10.370 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-09-13 00:57:19.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-09-13 00:58:19.987 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 10 6452 1 2025-09-13 00:58:17.530 00:00:10.322 TCP 23.104.0.1:58038 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507210, total packets: 1588, avg bps: 1107, avg pps: 0, avg bpp: 319 Time window: 2025-09-12 23:57:27 - 2025-09-13 00:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0000s Wall: 0.0022s flows/second: 73348.9 Runtime: 0.0023s