Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 14:58:43.923 00:00:10.430 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 14:58:46.219 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55906 10 6870 1 2025-09-14 14:59:44.391 00:00:10.370 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-09-14 14:59:46.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6870 1 2025-09-14 14:56:28.358 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:00:44.799 00:00:10.364 TCP 23.104.0.1:55414 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:00:46.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6870 1 2025-09-14 14:57:28.360 00:05:00.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:01:45.202 00:00:10.367 TCP 23.104.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:01:46.822 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6870 1 2025-09-14 15:02:45.610 00:00:10.378 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:03:04.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:02:47.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59256 10 6870 1 2025-09-14 15:03:04.905 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:03:46.022 00:00:10.361 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:03:47.284 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6870 1 2025-09-14 15:04:46.419 00:00:10.384 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:04:47.535 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50048 10 6870 1 2025-09-14 15:05:47.715 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6870 1 2025-09-14 15:05:46.841 00:00:10.389 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:02:28.358 00:05:00.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:06:47.952 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 12 6974 1 2025-09-14 15:06:47.269 00:00:10.361 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:03:28.362 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:07:47.669 00:00:10.328 TCP 23.104.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:07:48.205 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46148 10 6870 1 2025-09-14 15:08:04.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:08:04.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:08:48.035 00:00:10.388 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:08:48.434 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6870 1 2025-09-14 15:09:48.658 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 12 10367 1 2025-09-14 15:09:48.456 00:00:10.448 TCP 23.104.0.1:51380 -> 1.101.0.1:3000 15 1926 1 2025-09-14 15:10:48.905 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-09-14 15:10:48.942 00:00:10.328 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:11:49.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-09-14 15:11:49.308 00:00:10.325 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:08:28.359 00:05:00.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:12:49.670 00:00:10.335 TCP 23.104.0.1:49502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:12:49.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-09-14 15:13:04.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:13:04.975 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:09:28.362 00:05:00.943 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:13:50.052 00:00:10.371 TCP 23.104.0.1:48488 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:13:49.556 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40152 10 6452 1 2025-09-14 15:14:50.454 00:00:10.323 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:14:49.773 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-09-14 15:15:49.988 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:55244 10 6452 1 2025-09-14 15:15:50.814 00:00:10.368 TCP 23.104.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:16:51.225 00:00:10.363 TCP 23.104.0.1:37756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:16:50.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34542 10 6452 1 2025-09-14 15:17:51.628 00:00:10.366 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:17:50.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-09-14 15:18:05.094 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:18:05.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:14:28.367 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:18:51.102 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-09-14 15:18:52.034 00:00:10.362 TCP 23.104.0.1:53818 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:15:28.370 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:19:51.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35850 10 6452 1 2025-09-14 15:19:52.436 00:00:10.364 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:20:51.526 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-09-14 15:20:52.840 00:00:10.386 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:21:51.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47722 10 6452 1 2025-09-14 15:21:53.269 00:00:10.368 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:23:05.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:22:53.677 00:00:10.385 TCP 23.104.0.1:37144 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:22:51.963 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-09-14 15:23:05.318 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:23:52.198 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-09-14 15:23:54.106 00:00:10.327 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:20:28.371 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:24:52.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-09-14 15:24:54.469 00:00:10.365 TCP 23.104.0.1:59090 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:21:28.375 00:05:00.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:25:52.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-09-14 15:25:54.871 00:00:10.387 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:26:52.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-09-14 15:26:55.304 00:00:10.370 TCP 23.104.0.1:49836 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:28:05.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:27:53.107 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-09-14 15:28:05.215 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:27:55.708 00:00:10.337 TCP 23.104.0.1:35110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:28:53.332 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-09-14 15:28:56.095 00:00:10.386 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:29:53.542 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-09-14 15:29:56.494 00:00:10.366 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:26:28.374 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:30:53.798 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-09-14 15:30:56.898 00:00:10.371 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:27:28.376 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:31:54.012 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-09-14 15:31:57.303 00:00:10.366 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:33:05.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:32:54.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-09-14 15:33:05.454 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:32:57.708 00:00:10.386 TCP 23.104.0.1:50764 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:33:54.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51250 10 6452 1 2025-09-14 15:33:58.131 00:00:10.363 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:34:54.654 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-09-14 15:34:58.528 00:00:10.360 TCP 23.104.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:35:54.892 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44232 10 6452 1 2025-09-14 15:35:58.931 00:00:10.383 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:32:28.374 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:36:55.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35820 10 6452 1 2025-09-14 15:36:59.354 00:00:10.364 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:33:28.376 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:38:05.316 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:37:55.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51040 10 6452 1 2025-09-14 15:38:05.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:37:59.757 00:00:10.384 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:38:55.528 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-09-14 15:39:00.181 00:00:10.376 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:39:55.699 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-09-14 15:40:00.595 00:00:10.369 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:40:55.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36302 10 6452 1 2025-09-14 15:41:01.005 00:00:10.367 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:41:56.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 6452 1 2025-09-14 15:42:01.411 00:00:10.373 TCP 23.104.0.1:47508 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:38:28.375 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:42:56.337 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-09-14 15:43:05.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:43:05.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:43:01.823 00:00:10.397 TCP 23.104.0.1:43944 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:39:28.377 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:43:56.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-09-14 15:44:02.262 00:00:10.442 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 15 1926 1 2025-09-14 15:44:56.761 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 12 10367 1 2025-09-14 15:45:02.740 00:00:10.371 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:45:56.963 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6452 1 2025-09-14 15:46:03.149 00:00:10.325 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:46:57.235 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-09-14 15:47:03.510 00:00:10.372 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:48:05.682 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:48:05.812 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:47:57.412 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44974 10 6452 1 2025-09-14 15:48:03.922 00:00:10.376 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:44:28.377 00:05:00.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:48:57.636 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 2025-09-14 15:49:04.334 00:00:10.364 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:45:28.381 00:05:00.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:49:57.809 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-09-14 15:50:04.735 00:00:10.368 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:50:57.991 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57822 10 6452 1 2025-09-14 15:51:05.141 00:00:10.368 TCP 23.104.0.1:59546 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:51:58.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-09-14 15:52:05.551 00:00:10.323 TCP 23.104.0.1:37344 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:53:06.303 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:53:06.021 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:52:58.440 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-09-14 15:53:05.911 00:00:10.368 TCP 23.104.0.1:35960 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:53:58.664 00:00:10.483 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-09-14 15:54:06.316 00:00:10.365 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:50:28.380 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 15:54:59.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48560 10 6452 1 2025-09-14 15:55:06.724 00:00:10.324 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:51:28.381 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 15:55:59.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-09-14 15:56:07.102 00:00:10.367 TCP 23.104.0.1:51530 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:56:59.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-09-14 15:57:07.506 00:00:10.368 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 15:58:05.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 15:58:05.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 15:57:59.825 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6452 1 2025-09-14 15:58:07.914 00:00:10.385 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511718, total packets: 1586, avg bps: 1103, avg pps: 0, avg bpp: 322 Time window: 2025-09-14 14:56:28 - 2025-09-14 15:58:18 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0026s flows/second: 63614.7 Runtime: 0.0026s