Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 15:58:50.614 00:00:10.371 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-09-10 15:58:56.805 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-09-10 15:59:51.036 00:00:10.326 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-09-10 15:59:57.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-09-10 15:56:26.420 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:00:51.404 00:00:10.375 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:01:10.584 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:00:57.249 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-09-10 16:01:10.581 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:01:51.816 00:00:10.327 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:01:57.473 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56108 10 6452 1 2025-09-10 16:02:52.181 00:00:10.363 TCP 23.104.0.1:40478 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:02:57.723 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48612 10 6452 1 2025-09-10 16:03:52.581 00:00:10.443 TCP 23.104.0.1:50790 -> 1.101.0.1:3000 15 1926 1 2025-09-10 16:03:57.898 00:00:10.804 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 13 13939 1 2025-09-10 16:00:26.423 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:04:53.079 00:00:10.365 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:04:58.745 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-09-10 16:05:53.480 00:00:10.367 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:06:10.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:05:58.953 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 12 6556 1 2025-09-10 16:06:10.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:02:26.423 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:06:53.886 00:00:10.371 TCP 23.104.0.1:42888 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:06:59.190 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-09-10 16:07:54.299 00:00:10.363 TCP 23.104.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:07:59.400 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-09-10 16:08:54.702 00:00:10.436 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 15 1926 1 2025-09-10 16:08:59.573 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 13 13939 1 2025-09-10 16:09:55.178 00:00:10.359 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:09:59.818 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-09-10 16:06:26.427 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:10:55.573 00:00:10.364 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:11:10.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:11:00.054 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-09-10 16:11:10.805 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:11:55.975 00:00:10.368 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:12:00.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-09-10 16:08:26.424 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:12:56.384 00:00:10.361 TCP 23.104.0.1:49602 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:13:00.483 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37912 10 6452 1 2025-09-10 16:14:00.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6452 1 2025-09-10 16:13:56.785 00:00:10.318 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:14:57.142 00:00:10.364 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:15:00.953 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6452 1 2025-09-10 16:16:10.712 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:16:01.184 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-09-10 16:15:57.540 00:00:10.362 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:16:10.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:12:26.427 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:16:57.938 00:00:10.381 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:17:01.400 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-09-10 16:17:58.369 00:00:10.367 TCP 23.104.0.1:60554 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:18:01.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-09-10 16:14:26.424 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:18:58.776 00:00:10.441 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 15 1926 1 2025-09-10 16:19:01.825 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 12 10365 1 2025-09-10 16:19:59.257 00:00:10.377 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:20:02.083 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-09-10 16:21:11.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:20:59.684 00:00:10.374 TCP 23.104.0.1:39652 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:21:10.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:21:02.261 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-09-10 16:22:00.113 00:00:10.728 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:22:02.471 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-09-10 16:18:26.428 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:23:00.901 00:00:10.328 TCP 23.104.0.1:60494 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:23:02.700 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-09-10 16:24:01.269 00:00:10.323 TCP 23.104.0.1:37926 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:24:02.967 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-09-10 16:20:26.425 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:25:01.628 00:00:10.361 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:25:03.205 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36730 10 6452 1 2025-09-10 16:26:11.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:26:11.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:26:02.028 00:00:10.362 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:26:03.428 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54730 10 6452 1 2025-09-10 16:27:02.428 00:00:10.370 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:27:03.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-09-10 16:28:03.810 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 10 6452 1 2025-09-10 16:28:02.834 00:00:10.938 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:24:26.429 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:29:03.986 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-09-10 16:29:03.805 00:00:10.376 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:30:04.215 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48482 10 6452 1 2025-09-10 16:30:04.211 00:00:10.363 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:26:26.427 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:31:10.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:31:10.974 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:31:04.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-09-10 16:31:04.625 00:00:11.128 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:32:05.792 00:00:10.426 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:32:04.660 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-09-10 16:33:04.882 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-10 16:33:06.259 00:00:10.329 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:34:05.072 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-09-10 16:34:06.621 00:00:10.372 TCP 23.104.0.1:55626 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:30:26.433 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:35:05.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-09-10 16:35:07.030 00:00:10.374 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:36:10.984 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:36:11.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:36:05.514 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36946 10 6452 1 2025-09-10 16:36:07.433 00:00:10.325 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:32:26.429 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:37:05.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-09-10 16:37:07.793 00:00:10.367 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:38:05.946 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-09-10 16:38:08.204 00:00:10.365 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:39:06.176 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60294 10 6452 1 2025-09-10 16:39:08.613 00:00:10.322 TCP 23.104.0.1:46278 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:40:06.349 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-09-10 16:40:08.975 00:00:10.337 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:36:26.432 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:41:11.115 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:41:11.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:41:06.563 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-09-10 16:41:09.356 00:00:10.362 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:42:06.789 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55634 10 6452 1 2025-09-10 16:42:09.759 00:00:10.392 TCP 23.104.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:38:26.430 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:43:10.186 00:00:10.360 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:43:07.005 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-09-10 16:44:10.585 00:00:10.364 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:44:07.250 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-09-10 16:45:10.988 00:00:10.367 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:45:07.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50576 10 6452 1 2025-09-10 16:46:11.290 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:46:11.393 00:00:10.389 TCP 23.104.0.1:55314 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:46:12.041 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:46:07.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-09-10 16:42:26.433 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:47:07.950 00:00:24.015 TCP 1.101.0.1:3000 -> 22.102.0.1:35998 10 6452 1 2025-09-10 16:47:11.831 00:00:20.224 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:44:26.431 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:48:22.149 00:00:10.357 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:48:22.016 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47672 10 6452 1 2025-09-10 16:49:22.240 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-09-10 16:49:22.551 00:00:10.322 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:50:22.908 00:00:10.360 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:50:22.461 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 10 6452 1 2025-09-10 16:51:11.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:51:11.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:51:22.687 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-09-10 16:51:23.307 00:00:10.327 TCP 23.104.0.1:49488 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:48:26.435 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:52:23.672 00:00:10.360 TCP 23.104.0.1:42958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:52:22.918 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-09-10 16:53:24.104 00:00:10.360 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:53:23.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40174 10 6452 1 2025-09-10 16:50:26.433 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 16:54:24.504 00:00:10.367 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:54:23.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47640 10 6452 1 2025-09-10 16:55:23.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55468 10 6452 1 2025-09-10 16:55:24.907 00:00:11.015 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:56:11.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 16:56:11.484 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 16:56:23.811 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6452 1 2025-09-10 16:56:25.964 00:00:10.375 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:57:24.050 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57400 10 6452 1 2025-09-10 16:57:26.380 00:00:10.365 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-09-10 16:54:26.435 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 16:58:24.264 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48112 10 6452 1 2025-09-10 16:58:26.779 00:00:10.956 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 518596, total packets: 1594, avg bps: 1097, avg pps: 0, avg bpp: 325 Time window: 2025-09-10 15:56:26 - 2025-09-10 16:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0024s flows/second: 68498.9 Runtime: 0.0024s