Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 14:59:17.223 00:00:10.369 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:59:39.661 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53822 10 6452 1 2025-09-13 15:00:17.626 00:00:10.362 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:00:39.893 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:57274 10 6452 1 2025-09-13 15:01:18.027 00:00:10.320 TCP 23.104.0.1:34810 -> 1.101.0.1:3000 11 1507 1 2025-09-13 14:57:27.897 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 14:57:27.894 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:01:40.485 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50936 10 6452 1 2025-09-13 15:02:18.383 00:00:10.364 TCP 23.104.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:02:35.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:02:35.903 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:02:40.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-09-13 15:03:18.783 00:00:10.326 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:03:40.925 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-09-13 15:04:19.148 00:00:10.363 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:04:41.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-09-13 15:05:19.551 00:00:10.369 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:05:41.353 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-09-13 15:06:19.968 00:00:10.324 TCP 23.104.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:06:41.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-09-13 15:03:27.895 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:03:27.899 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:07:20.332 00:00:10.365 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:07:36.222 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:07:36.097 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:07:41.791 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57110 10 6452 1 2025-09-13 15:08:20.735 00:00:10.370 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:08:41.965 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-09-13 15:09:21.139 00:00:10.388 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:09:42.187 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48470 10 6452 1 2025-09-13 15:10:21.564 00:00:10.332 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:10:42.424 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-09-13 15:11:21.929 00:00:10.394 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:11:42.651 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-09-13 15:12:22.354 00:00:10.370 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:12:36.003 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:12:35.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:12:42.871 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-09-13 15:09:27.896 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:09:27.899 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:13:22.760 00:00:10.366 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:13:43.077 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-09-13 15:14:23.167 00:00:10.383 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:14:43.300 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-09-13 15:15:23.592 00:00:10.367 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:15:43.519 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38384 10 6452 1 2025-09-13 15:16:24.005 00:00:10.366 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:16:43.697 00:00:11.367 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 10 6452 1 2025-09-13 15:17:36.207 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:17:36.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:17:24.409 00:00:10.369 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:17:45.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6452 1 2025-09-13 15:18:24.817 00:00:10.368 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:18:45.319 00:00:10.257 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 13 10419 1 2025-09-13 15:15:27.898 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:15:27.900 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:19:25.222 00:00:10.490 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 15 1926 1 2025-09-13 15:19:45.620 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53696 10 6452 1 2025-09-13 15:20:25.753 00:00:10.384 TCP 23.104.0.1:47956 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:20:45.844 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-09-13 15:21:26.172 00:00:10.371 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:21:46.082 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48952 10 6452 1 2025-09-13 15:22:36.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:22:26.583 00:00:10.320 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:22:36.260 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:22:46.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-09-13 15:23:26.940 00:00:15.504 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:23:46.520 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55170 11 6492 1 2025-09-13 15:24:32.523 00:00:10.370 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:24:46.739 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-09-13 15:21:27.902 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:21:27.900 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:25:32.928 00:00:10.387 TCP 23.104.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:25:46.925 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36036 10 6452 1 2025-09-13 15:26:33.356 00:00:10.366 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:26:47.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6452 1 2025-09-13 15:27:36.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:27:36.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:27:33.762 00:00:10.378 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:27:47.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-09-13 15:28:34.178 00:00:10.361 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:28:47.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-09-13 15:29:34.575 00:00:10.359 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:29:47.772 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-09-13 15:30:34.989 00:00:10.368 TCP 23.104.0.1:42242 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:30:47.989 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:56682 10 6452 1 2025-09-13 15:27:27.902 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:27:27.904 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:31:35.400 00:00:10.366 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:31:48.182 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46368 10 6452 1 2025-09-13 15:32:36.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:32:36.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:32:35.808 00:00:10.367 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:32:48.367 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54596 10 6452 1 2025-09-13 15:33:36.219 00:00:10.364 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:33:48.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6452 1 2025-09-13 15:34:36.623 00:00:10.331 TCP 23.104.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:34:48.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-09-13 15:35:36.984 00:00:10.365 TCP 23.104.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:35:49.014 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-09-13 15:36:37.388 00:00:10.326 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:36:49.231 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-09-13 15:33:27.906 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:33:27.903 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:37:36.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:37:36.500 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:37:37.751 00:00:10.391 TCP 23.104.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:37:49.460 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-09-13 15:38:38.181 00:00:10.367 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:38:49.679 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-09-13 15:39:38.585 00:00:10.361 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:39:49.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-09-13 15:40:38.984 00:00:10.365 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:40:50.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50924 10 6452 1 2025-09-13 15:41:39.388 00:00:10.360 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:41:50.332 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-09-13 15:42:36.604 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:42:36.600 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:42:39.786 00:00:10.367 TCP 23.104.0.1:46184 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:42:50.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-09-13 15:39:27.906 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:39:27.903 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:43:40.189 00:00:10.371 TCP 23.104.0.1:33392 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:43:50.764 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-09-13 15:44:40.600 00:00:10.366 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:44:50.982 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6452 1 2025-09-13 15:45:41.006 00:00:10.364 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:45:51.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-09-13 15:46:41.415 00:00:10.325 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:46:51.448 00:00:10.725 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-09-13 15:47:36.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:47:37.042 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:47:41.784 00:00:10.361 TCP 23.104.0.1:59446 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:47:52.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-09-13 15:48:42.183 00:00:10.378 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:48:52.416 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-09-13 15:45:27.909 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:45:27.906 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:49:42.591 00:00:10.361 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:49:52.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35762 10 6452 1 2025-09-13 15:50:42.991 00:00:10.372 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:50:52.840 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51490 10 6452 1 2025-09-13 15:51:43.403 00:00:10.499 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:51:53.006 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-09-13 15:52:36.572 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:52:36.916 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:52:43.951 00:00:10.389 TCP 23.104.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:52:53.232 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-09-13 15:53:44.395 00:00:10.363 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:53:53.406 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60086 10 6452 1 2025-09-13 15:54:44.795 00:00:10.367 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:54:53.631 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:53528 10 6452 1 2025-09-13 15:51:27.909 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:51:27.910 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 15:55:45.200 00:00:10.374 TCP 23.104.0.1:51928 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:55:53.953 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 6452 1 2025-09-13 15:56:45.607 00:00:10.367 TCP 23.104.0.1:34178 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:56:54.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-09-13 15:57:36.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 15:57:36.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 15:57:46.011 00:00:10.368 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:57:54.402 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 Summary: total flows: 162, total bytes: 494815, total packets: 1559, avg bps: 1088, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 14:57:27 - 2025-09-13 15:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0016s Wall: 0.0027s flows/second: 59167.3 Runtime: 0.0028s