Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 09:59:10.166 00:00:10.380 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:59:22.089 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34746 10 6452 1 2025-09-13 10:00:10.581 00:00:10.365 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:00:22.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48512 10 6452 1 2025-09-13 10:01:10.993 00:00:10.365 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:57:27.780 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:57:27.778 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:01:22.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36188 10 6452 1 2025-09-13 10:02:11.397 00:00:10.367 TCP 23.104.0.1:53208 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:02:29.855 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:02:29.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:02:22.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45402 10 6452 1 2025-09-13 10:03:11.801 00:00:10.329 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:03:22.952 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 10 6452 1 2025-09-13 10:04:12.162 00:00:10.362 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:04:23.209 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-09-13 10:05:12.564 00:00:10.363 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:05:23.424 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45662 10 6452 1 2025-09-13 10:06:12.968 00:00:10.365 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:06:23.662 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37294 10 6452 1 2025-09-13 10:07:13.373 00:00:10.365 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:07:29.936 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:03:27.782 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:03:27.780 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:07:29.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:07:23.875 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40610 10 6452 1 2025-09-13 10:08:13.779 00:00:10.368 TCP 23.104.0.1:34854 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:08:24.121 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-09-13 10:09:14.183 00:00:10.438 TCP 23.104.0.1:41118 -> 1.101.0.1:3000 15 1926 1 2025-09-13 10:09:24.319 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 12 10367 1 2025-09-13 10:10:14.669 00:00:10.376 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:10:24.563 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-09-13 10:11:15.105 00:00:10.366 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:11:24.772 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6452 1 2025-09-13 10:12:15.514 00:00:10.323 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:12:29.696 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:12:29.781 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:12:24.989 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-09-13 10:13:15.873 00:00:10.365 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:09:27.782 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:09:27.780 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:13:25.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 10 6452 1 2025-09-13 10:14:16.286 00:00:10.361 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:14:25.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45464 10 6452 1 2025-09-13 10:15:16.682 00:00:10.369 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:15:25.602 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-09-13 10:16:17.114 00:00:10.363 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:16:25.789 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-09-13 10:17:30.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:17:30.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:17:17.510 00:00:10.368 TCP 23.104.0.1:39834 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:17:26.008 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-09-13 10:18:17.915 00:00:10.381 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:18:26.225 00:00:14.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-09-13 10:15:27.783 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:19:18.335 00:00:10.365 TCP 23.104.0.1:57248 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:15:27.782 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:19:30.419 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-09-13 10:20:18.740 00:00:10.365 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:20:30.646 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-09-13 10:21:19.147 00:00:10.372 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:21:30.832 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6452 1 2025-09-13 10:22:30.295 00:00:00.013 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:22:30.209 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:22:19.545 00:00:10.323 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:22:31.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58588 10 6452 1 2025-09-13 10:23:19.902 00:00:10.328 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:23:31.304 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60622 10 6452 1 2025-09-13 10:24:20.267 00:00:10.439 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 15 1926 1 2025-09-13 10:24:31.514 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 12 10365 1 2025-09-13 10:21:27.782 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:21:27.785 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:25:20.745 00:00:10.364 TCP 23.104.0.1:60992 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:25:31.723 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 10 6452 1 2025-09-13 10:26:21.150 00:00:10.372 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:26:31.946 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-09-13 10:27:30.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:27:30.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:27:21.572 00:00:10.393 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:27:32.183 00:00:10.332 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-09-13 10:28:22.015 00:00:10.367 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:28:32.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58280 10 6452 1 2025-09-13 10:29:22.418 00:00:10.364 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:29:32.776 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-09-13 10:30:22.823 00:00:10.324 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:30:32.995 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-09-13 10:27:27.784 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:27:27.787 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:31:23.187 00:00:10.364 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:31:33.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-09-13 10:32:30.934 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:32:30.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:32:23.589 00:00:10.993 TCP 23.104.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:32:33.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54896 10 6452 1 2025-09-13 10:33:24.623 00:00:10.366 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:33:33.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-09-13 10:34:25.024 00:00:10.439 TCP 23.104.0.1:59314 -> 1.101.0.1:3000 15 1926 1 2025-09-13 10:34:33.819 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:47044 12 10367 1 2025-09-13 10:35:25.497 00:00:10.365 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:35:34.117 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-09-13 10:36:25.901 00:00:10.325 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:36:34.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-09-13 10:37:30.283 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:33:27.787 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:37:30.603 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:33:27.785 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:37:26.265 00:00:10.668 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:37:34.553 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-09-13 10:38:26.979 00:00:10.371 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:38:34.783 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36590 10 6452 1 2025-09-13 10:39:27.390 00:00:10.365 TCP 23.104.0.1:51482 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:39:34.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35104 10 6452 1 2025-09-13 10:40:27.820 00:00:10.364 TCP 23.104.0.1:45392 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:40:35.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-09-13 10:41:28.225 00:00:10.368 TCP 23.104.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:41:35.432 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-09-13 10:42:30.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:42:30.619 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:42:28.629 00:00:10.368 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:42:35.641 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36408 10 6452 1 2025-09-13 10:39:27.787 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:39:27.784 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:43:29.034 00:00:10.368 TCP 23.104.0.1:34354 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:43:35.857 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-09-13 10:44:29.436 00:00:10.361 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:44:36.093 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-09-13 10:45:29.840 00:00:10.375 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:45:36.314 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-09-13 10:46:30.255 00:00:10.357 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:46:36.540 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6452 1 2025-09-13 10:47:30.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:47:30.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:47:30.658 00:00:10.947 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:47:36.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-09-13 10:48:31.649 00:00:10.362 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:48:36.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6452 1 2025-09-13 10:45:27.787 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:45:27.790 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:49:32.054 00:00:10.416 TCP 23.104.0.1:56144 -> 1.101.0.1:3000 15 1926 1 2025-09-13 10:49:37.212 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47172 12 10367 1 2025-09-13 10:50:32.580 00:00:10.375 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:50:37.453 00:00:10.650 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-09-13 10:51:32.989 00:00:10.370 TCP 23.104.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:51:38.145 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-09-13 10:52:30.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:52:30.756 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:52:33.397 00:00:10.368 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:52:38.374 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-09-13 10:53:33.803 00:00:10.367 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:53:38.586 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-09-13 10:54:34.207 00:00:10.366 TCP 23.104.0.1:38894 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:54:38.794 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:46266 10 6452 1 2025-09-13 10:51:27.791 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 10:51:27.788 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 10:55:34.614 00:00:10.375 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:55:39.061 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43062 10 6452 1 2025-09-13 10:56:35.034 00:00:10.370 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:56:39.275 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-09-13 10:57:30.970 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 10:57:30.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 10:57:35.441 00:00:10.367 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:57:39.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-09-13 10:58:35.844 00:00:10.348 TCP 23.104.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-09-13 10:58:39.704 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55858 10 6452 1 Summary: total flows: 164, total bytes: 515682, total packets: 1596, avg bps: 1120, avg pps: 0, avg bpp: 323 Time window: 2025-09-13 09:57:27 - 2025-09-13 10:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0021s flows/second: 79724.8 Runtime: 0.0021s