Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 19:59:01.673 00:00:10.358 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:59:18.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-09-14 20:00:02.096 00:00:10.324 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:00:18.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45994 10 6452 1 2025-09-14 19:56:28.447 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:01:02.454 00:00:10.371 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-09-14 19:57:28.449 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:01:18.984 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-09-14 20:02:02.858 00:00:10.369 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:02:19.672 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:40430 10 6452 1 2025-09-14 20:03:10.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:03:10.826 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:03:03.268 00:00:10.411 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:03:19.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-09-14 20:04:03.716 00:00:10.378 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:04:20.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37924 10 6452 1 2025-09-14 20:05:04.132 00:00:10.365 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:05:20.392 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56750 10 6452 1 2025-09-14 20:06:04.534 00:00:10.366 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:02:28.448 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:06:20.629 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48864 10 6452 1 2025-09-14 20:07:04.934 00:00:10.373 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:03:28.449 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:07:20.849 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-09-14 20:08:10.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:08:10.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:08:05.345 00:00:10.366 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:08:21.444 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-09-14 20:09:05.750 00:00:10.373 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:09:21.669 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6452 1 2025-09-14 20:10:06.155 00:00:10.369 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:10:21.890 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 10 6452 1 2025-09-14 20:11:06.562 00:00:10.372 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:11:22.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40770 10 6452 1 2025-09-14 20:12:06.973 00:00:10.368 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:08:28.448 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:12:22.329 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-09-14 20:13:10.905 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:13:10.826 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:13:07.388 00:00:10.371 TCP 23.104.0.1:45978 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:09:28.453 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:13:22.545 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-09-14 20:14:07.799 00:00:10.366 TCP 23.104.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:14:22.766 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53196 10 6452 1 2025-09-14 20:15:08.202 00:00:10.371 TCP 23.104.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:15:22.994 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6452 1 2025-09-14 20:16:08.609 00:00:10.370 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:16:23.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34332 10 6452 1 2025-09-14 20:17:09.030 00:00:10.416 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:17:23.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-09-14 20:18:11.293 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:18:11.061 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:18:09.488 00:00:10.363 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:14:28.453 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:18:23.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52826 10 6452 1 2025-09-14 20:19:09.889 00:00:10.387 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:15:28.455 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:19:23.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37642 10 6452 1 2025-09-14 20:20:10.311 00:00:10.369 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:20:24.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-09-14 20:21:10.716 00:00:10.376 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:21:24.255 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47344 10 6452 1 2025-09-14 20:22:11.130 00:00:10.367 TCP 23.104.0.1:50768 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:22:24.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-09-14 20:23:11.135 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:23:10.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:23:11.550 00:00:10.364 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:23:24.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6452 1 2025-09-14 20:24:11.953 00:00:10.368 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:20:28.454 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:24:24.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-09-14 20:25:12.364 00:00:10.365 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:21:28.457 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:25:25.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-09-14 20:26:12.769 00:00:10.372 TCP 23.104.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:26:25.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-09-14 20:27:13.180 00:00:10.367 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:27:25.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6452 1 2025-09-14 20:28:11.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:28:11.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:28:13.586 00:00:10.333 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:28:25.721 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 10 6452 1 2025-09-14 20:29:13.954 00:00:10.366 TCP 23.104.0.1:58162 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:29:25.934 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-09-14 20:30:14.355 00:00:10.363 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:26:28.455 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:30:26.170 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2025-09-14 20:31:14.758 00:00:10.343 TCP 23.104.0.1:49464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:27:28.457 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:31:26.414 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-09-14 20:32:15.134 00:00:10.367 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:32:26.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-09-14 20:33:11.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:33:11.422 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:33:15.538 00:00:10.368 TCP 23.104.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:33:26.839 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-09-14 20:34:15.944 00:00:10.460 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 15 1926 1 2025-09-14 20:34:27.081 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60476 12 10367 1 2025-09-14 20:35:16.442 00:00:10.374 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:35:27.284 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-09-14 20:32:28.458 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:36:16.848 00:00:10.383 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:36:27.493 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-09-14 20:37:17.267 00:00:10.692 TCP 23.104.0.1:45352 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:33:28.461 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:37:27.706 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-09-14 20:38:11.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:38:11.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:38:17.999 00:00:10.361 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:38:27.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45814 10 6452 1 2025-09-14 20:39:18.396 00:00:10.325 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:39:28.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-09-14 20:40:18.757 00:00:10.375 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:40:28.333 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 10 6452 1 2025-09-14 20:41:19.173 00:00:10.368 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:41:28.548 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-09-14 20:38:28.461 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:42:19.576 00:00:10.362 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:42:28.764 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-09-14 20:43:11.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:43:11.819 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:43:19.981 00:00:10.363 TCP 23.104.0.1:40940 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:39:28.464 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:43:28.974 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-09-14 20:44:20.383 00:00:10.366 TCP 23.104.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:44:29.259 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54470 10 6452 1 2025-09-14 20:45:20.785 00:00:10.368 TCP 23.104.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:45:29.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-14 20:46:21.193 00:00:10.367 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:46:29.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-09-14 20:47:21.592 00:00:10.367 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:47:29.905 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-09-14 20:48:11.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:48:11.634 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:44:28.461 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:48:22.002 00:00:10.363 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:48:30.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-09-14 20:45:28.463 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:49:22.404 00:00:10.325 TCP 23.104.0.1:50454 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:49:30.305 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56200 10 6452 1 2025-09-14 20:50:22.764 00:00:10.377 TCP 23.104.0.1:55220 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:50:30.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-09-14 20:51:23.178 00:00:10.368 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:51:30.728 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-09-14 20:52:23.579 00:00:10.369 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:52:30.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6452 1 2025-09-14 20:53:11.522 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:53:11.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:53:23.984 00:00:10.370 TCP 23.104.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:53:31.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-09-14 20:50:28.462 00:05:00.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 20:54:24.389 00:00:10.442 TCP 23.104.0.1:49184 -> 1.101.0.1:3000 15 1926 1 2025-09-14 20:54:31.386 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 12 10365 1 2025-09-14 20:51:28.465 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 20:55:24.869 00:00:10.341 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:55:31.628 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59672 10 6452 1 2025-09-14 20:56:25.248 00:00:10.365 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:56:31.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6452 1 2025-09-14 20:57:25.651 00:00:10.366 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:57:32.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-09-14 20:58:11.714 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 20:58:11.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 20:58:26.063 00:00:10.373 TCP 23.104.0.1:54646 -> 1.101.0.1:3000 11 1507 1 2025-09-14 20:58:32.293 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-09-14 19:56:28 - 2025-09-14 20:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0010s Wall: 0.0021s flows/second: 79494.5 Runtime: 0.0021s