Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 15:58:46.417 00:00:10.438 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 15 1926 1 2025-09-13 15:58:54.613 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55256 12 10367 1 2025-09-13 15:59:46.894 00:00:10.987 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 15:59:54.867 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6452 1 2025-09-13 16:00:47.919 00:00:10.386 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:00:55.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-09-13 15:57:27.908 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 15:57:27.911 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:01:48.340 00:00:10.371 TCP 23.104.0.1:52456 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:01:55.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-09-13 16:02:36.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:02:36.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:02:48.746 00:00:10.364 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:02:55.556 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-09-13 16:03:49.143 00:00:10.441 TCP 23.104.0.1:49866 -> 1.101.0.1:3000 15 1926 1 2025-09-13 16:03:55.775 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 12 10365 1 2025-09-13 16:04:49.624 00:00:10.726 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:04:56.032 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35086 10 6452 1 2025-09-13 16:05:50.387 00:00:10.364 TCP 23.104.0.1:34080 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:05:56.241 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-09-13 16:06:50.791 00:00:10.369 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:06:56.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-09-13 16:03:27.912 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:03:27.910 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:07:37.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:07:37.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:07:51.210 00:00:10.376 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:07:56.670 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-09-13 16:08:51.628 00:00:10.365 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:08:56.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-09-13 16:09:52.036 00:00:10.362 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:09:57.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6452 1 2025-09-13 16:10:52.440 00:00:10.368 TCP 23.104.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:10:57.321 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59206 10 6452 1 2025-09-13 16:11:52.844 00:00:10.389 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:11:57.493 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-09-13 16:12:37.252 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:12:37.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:12:53.266 00:00:10.390 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:12:57.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-09-13 16:09:27.922 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:09:27.924 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:13:53.732 00:00:10.374 TCP 23.104.0.1:50258 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:13:57.920 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-09-13 16:14:54.142 00:00:10.366 TCP 23.104.0.1:57598 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:14:58.126 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-09-13 16:15:54.548 00:00:10.333 TCP 23.104.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:15:58.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-09-13 16:16:54.923 00:00:10.382 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:16:58.575 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-09-13 16:17:37.442 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:17:37.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:17:55.342 00:00:10.366 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:17:58.748 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-09-13 16:18:55.743 00:00:10.364 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:18:58.935 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:40008 10 6452 1 2025-09-13 16:15:27.924 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:15:27.927 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:19:56.142 00:00:10.365 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:19:59.195 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-09-13 16:20:56.550 00:00:10.364 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:20:59.418 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58534 10 6452 1 2025-09-13 16:21:59.636 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-09-13 16:21:56.950 00:00:10.370 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:22:37.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:22:37.401 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:22:57.361 00:00:10.365 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:22:59.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-09-13 16:23:57.766 00:00:10.370 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:24:00.092 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-09-13 16:24:58.175 00:00:10.364 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:25:00.319 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60560 10 6452 1 2025-09-13 16:21:27.929 00:05:00.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:21:27.931 00:05:00.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:25:58.577 00:00:10.322 TCP 23.104.0.1:49298 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:26:00.536 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-09-13 16:26:58.937 00:00:10.339 TCP 23.104.0.1:49864 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:27:00.748 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-09-13 16:27:37.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:27:37.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:27:59.317 00:00:10.362 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 12 1559 1 2025-09-13 16:28:00.968 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42264 10 6452 1 2025-09-13 16:28:59.719 00:00:10.368 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:29:01.205 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-09-13 16:30:01.414 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-09-13 16:30:00.137 00:00:10.362 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:31:01.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-09-13 16:31:00.546 00:00:10.512 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:27:27.933 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:27:27.930 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:32:01.111 00:00:10.359 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:32:01.849 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-09-13 16:32:37.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:32:37.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:33:01.507 00:00:10.370 TCP 23.104.0.1:38806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:33:02.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-09-13 16:34:02.324 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-09-13 16:34:01.918 00:00:10.385 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:35:02.543 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46248 10 6452 1 2025-09-13 16:35:02.343 00:00:10.377 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:36:02.759 00:00:10.381 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:36:02.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36474 10 6452 1 2025-09-13 16:37:03.178 00:00:10.361 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:37:02.967 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-09-13 16:33:27.934 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:33:27.931 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:37:37.863 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:37:37.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:38:03.145 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-09-13 16:38:03.577 00:00:10.363 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:39:03.980 00:00:10.369 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:39:03.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50728 10 6452 1 2025-09-13 16:40:04.386 00:00:10.362 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:40:03.573 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-09-13 16:41:03.789 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-09-13 16:41:04.790 00:00:10.367 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:42:05.190 00:00:10.363 TCP 23.104.0.1:44328 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:42:03.955 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-09-13 16:42:37.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:42:37.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:43:04.192 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6452 1 2025-09-13 16:43:05.591 00:00:10.364 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:39:27.934 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:39:27.933 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:44:05.994 00:00:10.365 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:44:04.412 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-09-13 16:45:06.396 00:00:10.361 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:45:04.580 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-09-13 16:46:04.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-09-13 16:46:06.798 00:00:10.679 TCP 23.104.0.1:48404 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:47:04.997 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-09-13 16:47:07.515 00:00:10.365 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:47:37.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:47:37.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:48:05.194 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-09-13 16:48:07.920 00:00:10.404 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:49:05.407 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-09-13 16:49:08.354 00:00:10.367 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:45:27.933 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:45:27.937 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:50:05.623 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 10 6452 1 2025-09-13 16:50:08.762 00:00:10.381 TCP 23.104.0.1:42546 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:51:05.842 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44068 10 6452 1 2025-09-13 16:51:09.180 00:00:10.362 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:52:06.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43690 10 6452 1 2025-09-13 16:52:09.581 00:00:10.843 TCP 23.104.0.1:35494 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:52:37.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:52:38.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:53:06.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 10 6452 1 2025-09-13 16:53:10.463 00:00:10.368 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:54:06.517 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 12 10367 1 2025-09-13 16:54:10.870 00:00:10.494 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 15 1926 1 2025-09-13 16:55:06.764 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51296 10 6452 1 2025-09-13 16:55:11.401 00:00:10.371 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:51:27.936 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 16:51:27.938 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 16:56:06.989 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-09-13 16:56:11.806 00:00:10.360 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:57:07.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2025-09-13 16:57:12.207 00:00:10.362 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 16:57:38.375 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 16:57:38.192 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 16:58:07.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-09-13 16:58:12.606 00:00:10.365 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511400, total packets: 1591, avg bps: 1119, avg pps: 0, avg bpp: 321 Time window: 2025-09-13 15:57:27 - 2025-09-13 16:58:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0007s Wall: 0.0014s flows/second: 116984.0 Runtime: 0.0014s