Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 18:58:44.850 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56404 10 6452 1 2025-09-13 18:59:14.819 00:00:10.365 TCP 23.104.0.1:40596 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:59:45.113 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44160 10 6452 1 2025-09-13 19:00:15.224 00:00:10.326 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:00:45.326 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-09-13 19:01:15.584 00:00:10.361 TCP 23.104.0.1:42728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 18:57:27.978 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 18:57:27.982 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:01:45.506 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-09-13 19:02:15.985 00:00:10.578 TCP 23.104.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:02:40.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:02:40.666 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:02:45.725 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-09-13 19:03:16.597 00:00:10.366 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:03:45.964 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-09-13 19:04:17.001 00:00:10.367 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:04:46.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52496 10 6452 1 2025-09-13 19:05:17.405 00:00:10.762 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:05:46.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6452 1 2025-09-13 19:06:18.207 00:00:10.363 TCP 23.104.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:06:46.619 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-09-13 19:03:27.980 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:07:18.607 00:00:10.364 TCP 23.104.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:03:27.982 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:07:40.795 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:07:40.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:07:46.839 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-09-13 19:08:19.007 00:00:10.367 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:08:47.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-09-13 19:09:19.413 00:00:10.365 TCP 23.104.0.1:53958 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:09:47.471 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49222 10 6452 1 2025-09-13 19:10:19.818 00:00:10.368 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:10:47.692 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-09-13 19:11:20.223 00:00:10.363 TCP 23.104.0.1:37240 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:11:47.907 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-09-13 19:12:20.629 00:00:10.362 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:12:40.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:12:40.899 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:12:48.095 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6452 1 2025-09-13 19:09:27.983 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:13:21.030 00:00:10.367 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:09:27.980 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:13:48.307 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-09-13 19:14:21.438 00:00:10.365 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:14:48.537 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-09-13 19:15:21.840 00:00:10.397 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:15:48.759 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-09-13 19:16:22.275 00:00:10.328 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:16:48.980 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6452 1 2025-09-13 19:17:22.649 00:00:10.367 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:17:40.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:17:40.660 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:17:49.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-09-13 19:18:23.067 00:00:10.361 TCP 23.104.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:18:49.397 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46746 10 6452 1 2025-09-13 19:15:27.980 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:15:27.982 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:19:23.469 00:00:10.364 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:19:49.614 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-09-13 19:20:23.872 00:00:10.326 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:20:49.831 00:00:10.571 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-09-13 19:21:24.232 00:00:10.368 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:21:50.440 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55152 10 6452 1 2025-09-13 19:22:24.640 00:00:10.362 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:22:40.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:22:41.302 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:22:50.629 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6452 1 2025-09-13 19:23:25.053 00:00:10.362 TCP 23.104.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:23:50.873 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-09-13 19:24:25.452 00:00:10.370 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:24:51.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 10 6452 1 2025-09-13 19:21:27.981 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:21:27.984 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:25:25.859 00:00:10.375 TCP 23.104.0.1:43276 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:25:51.295 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49006 10 6452 1 2025-09-13 19:26:26.275 00:00:10.361 TCP 23.104.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:26:51.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-09-13 19:27:41.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:27:26.678 00:00:10.365 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:27:41.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:27:51.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-09-13 19:28:27.116 00:00:10.363 TCP 23.104.0.1:47908 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:28:51.952 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-09-13 19:29:27.515 00:00:10.332 TCP 23.104.0.1:54228 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:29:52.183 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-09-13 19:30:27.891 00:00:10.379 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:30:52.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-09-13 19:27:27.982 00:05:00.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:27:27.984 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:31:28.313 00:00:10.364 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:31:52.623 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-09-13 19:32:41.258 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:32:41.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:32:28.716 00:00:10.319 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:32:52.851 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-09-13 19:33:29.102 00:00:10.321 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:33:53.033 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 12 10367 1 2025-09-13 19:34:29.464 00:00:10.453 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 15 1926 1 2025-09-13 19:34:53.287 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-09-13 19:35:29.960 00:00:10.366 TCP 23.104.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:35:53.463 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36946 10 6452 1 2025-09-13 19:36:30.361 00:00:10.366 TCP 23.104.0.1:39774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:36:53.685 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-09-13 19:33:27.983 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:33:27.987 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:37:30.757 00:00:10.377 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:37:41.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:37:41.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:37:53.910 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:34630 10 6452 1 2025-09-13 19:38:31.173 00:00:10.369 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:38:54.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6452 1 2025-09-13 19:39:31.575 00:00:10.325 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:39:54.398 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-09-13 19:40:31.939 00:00:10.370 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:40:54.625 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-09-13 19:41:32.348 00:00:10.367 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:41:55.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-09-13 19:42:41.647 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:42:41.409 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:42:32.749 00:00:10.392 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:42:55.324 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-09-13 19:39:27.997 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:39:27.994 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:43:33.174 00:00:10.370 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:43:55.548 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49160 12 6556 1 2025-09-13 19:44:33.579 00:00:10.369 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:44:55.770 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-09-13 19:45:33.989 00:00:10.330 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:45:55.948 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-09-13 19:46:34.358 00:00:10.325 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:46:56.197 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 10 6452 1 2025-09-13 19:47:41.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:47:41.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:47:34.724 00:00:10.375 TCP 23.104.0.1:41722 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:47:56.421 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 10 6452 1 2025-09-13 19:48:35.132 00:00:10.367 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:48:56.605 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38826 10 6452 1 2025-09-13 19:45:27.996 00:05:00.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:45:27.998 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 19:49:35.534 00:00:10.366 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:49:56.821 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-09-13 19:50:35.941 00:00:10.383 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:50:57.041 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-09-13 19:51:36.364 00:00:10.324 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:51:57.260 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-09-13 19:52:41.715 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:52:41.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:52:36.734 00:00:10.327 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:52:57.479 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-09-13 19:53:37.118 00:00:10.369 TCP 23.104.0.1:36382 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:53:57.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-09-13 19:54:37.533 00:00:10.331 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:54:57.865 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-09-13 19:51:27.997 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 19:55:37.906 00:00:10.373 TCP 23.104.0.1:53704 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:55:58.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-09-13 19:51:28.000 00:06:00.861 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 19:56:38.331 00:00:10.368 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:56:58.335 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-09-13 19:57:41.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 19:57:41.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 19:57:38.739 00:00:10.367 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2025-09-13 19:57:58.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-09-13 19:58:39.143 00:00:10.372 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502909, total packets: 1582, avg bps: 1092, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 18:57:27 - 2025-09-13 19:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0011s Wall: 0.0033s flows/second: 48986.3 Runtime: 0.0034s