Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 01:58:46.148 00:00:10.380 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:58:47.797 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 6452 1 2025-09-15 01:59:46.575 00:00:10.399 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:59:48.011 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-09-15 01:56:28.548 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:00:47.034 00:00:10.324 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:00:48.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-09-15 01:57:28.551 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:01:48.442 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-09-15 02:01:47.399 00:00:10.366 TCP 23.104.0.1:50264 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:02:48.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-09-15 02:02:47.802 00:00:10.369 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:03:17.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:03:17.986 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:03:48.871 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-09-15 02:03:48.207 00:00:10.362 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:04:48.608 00:00:10.937 TCP 23.104.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:04:49.089 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-09-15 02:05:49.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-09-15 02:05:49.586 00:00:10.362 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:02:28.549 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:06:49.765 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-09-15 02:06:49.989 00:00:10.370 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:03:28.551 00:05:00.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:07:50.393 00:00:10.364 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:07:49.974 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-09-15 02:08:18.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:08:18.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:08:50.795 00:00:10.364 TCP 23.104.0.1:35522 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:08:50.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48204 10 6452 1 2025-09-15 02:09:50.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-09-15 02:09:51.198 00:00:10.367 TCP 23.104.0.1:42790 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:10:50.638 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-15 02:10:51.600 00:00:10.321 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:11:50.855 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-09-15 02:11:51.959 00:00:10.370 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:08:28.549 00:05:00.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:12:51.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37984 10 6452 1 2025-09-15 02:12:52.363 00:00:10.364 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:13:17.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:13:17.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:09:28.551 00:05:00.976 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:13:51.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6452 1 2025-09-15 02:13:52.761 00:00:10.381 TCP 23.104.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:14:51.512 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-09-15 02:14:53.182 00:00:10.362 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:15:51.720 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45942 10 6452 1 2025-09-15 02:15:53.583 00:00:10.368 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:16:51.930 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42890 10 6452 1 2025-09-15 02:16:53.989 00:00:10.363 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:17:52.165 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-09-15 02:17:54.386 00:00:10.371 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:18:18.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:18:17.992 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:14:28.551 00:05:00.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:18:52.373 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-09-15 02:18:54.792 00:00:10.367 TCP 23.104.0.1:44714 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:15:28.553 00:05:00.977 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:19:52.579 00:00:10.345 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2025-09-15 02:19:55.195 00:00:10.363 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:20:55.598 00:00:10.364 TCP 23.104.0.1:43326 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:20:52.959 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 12 6556 1 2025-09-15 02:21:53.199 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44734 10 6452 1 2025-09-15 02:21:56.002 00:00:10.358 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:22:56.401 00:00:10.359 TCP 23.104.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:22:53.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37036 10 6452 1 2025-09-15 02:23:18.367 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:23:18.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:23:53.587 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-09-15 02:23:56.795 00:00:10.346 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:20:28.551 00:05:00.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:24:53.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52220 10 6452 1 2025-09-15 02:24:57.181 00:00:10.362 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:21:28.555 00:05:00.976 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:25:53.989 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-09-15 02:25:57.583 00:00:10.362 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:26:54.227 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48968 10 6452 1 2025-09-15 02:26:57.985 00:00:10.368 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:27:54.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-09-15 02:27:58.397 00:00:10.337 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:28:18.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:28:18.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:28:54.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-09-15 02:28:58.785 00:00:10.324 TCP 23.104.0.1:54896 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:29:54.864 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-09-15 02:29:59.153 00:00:10.370 TCP 23.104.0.1:49300 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:26:28.553 00:05:00.982 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:30:55.090 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-09-15 02:30:59.566 00:00:10.326 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:27:28.556 00:05:00.977 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:31:55.264 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55452 10 6452 1 2025-09-15 02:31:59.932 00:00:10.388 TCP 23.104.0.1:42752 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:32:55.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-09-15 02:33:00.360 00:00:10.368 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:33:18.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:33:18.590 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:33:55.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-09-15 02:34:00.766 00:00:10.916 TCP 23.104.0.1:39650 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:34:55.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57074 10 6452 1 2025-09-15 02:35:01.716 00:00:10.380 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:35:56.121 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6452 1 2025-09-15 02:36:02.137 00:00:10.362 TCP 23.104.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:32:28.554 00:05:00.982 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:36:56.335 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6452 1 2025-09-15 02:37:02.546 00:00:10.367 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:33:28.558 00:05:00.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:37:56.546 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39700 10 6452 1 2025-09-15 02:38:02.954 00:00:10.366 TCP 23.104.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:38:18.584 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:38:18.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:38:56.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-09-15 02:39:03.360 00:00:10.383 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:39:56.974 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-09-15 02:40:03.776 00:00:10.373 TCP 23.104.0.1:40444 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:40:57.172 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-09-15 02:41:04.182 00:00:10.323 TCP 23.104.0.1:58590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:41:57.354 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-09-15 02:42:04.541 00:00:10.365 TCP 23.104.0.1:45578 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:38:28.558 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:42:57.575 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-09-15 02:43:04.944 00:00:10.332 TCP 23.104.0.1:55220 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:43:18.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:43:18.976 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:39:28.558 00:05:00.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:43:57.796 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44870 10 6452 1 2025-09-15 02:44:05.314 00:00:10.364 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:44:58.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33924 10 6452 1 2025-09-15 02:45:05.714 00:00:10.380 TCP 23.104.0.1:60030 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:45:58.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-09-15 02:46:06.131 00:00:10.365 TCP 23.104.0.1:49782 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:46:58.453 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38882 10 6452 1 2025-09-15 02:47:06.533 00:00:10.732 TCP 23.104.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:47:58.668 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 10 6452 1 2025-09-15 02:48:18.710 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:48:07.304 00:00:10.375 TCP 23.104.0.1:56784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:48:18.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:44:28.557 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:48:58.885 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2025-09-15 02:49:07.717 00:00:10.383 TCP 23.104.0.1:55324 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:45:28.561 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:49:59.106 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-09-15 02:50:08.163 00:00:10.362 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:50:59.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43566 10 6452 1 2025-09-15 02:51:08.568 00:00:10.368 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:51:59.500 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:43960 10 6452 1 2025-09-15 02:52:08.977 00:00:10.366 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:53:00.363 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-09-15 02:53:09.380 00:00:10.377 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:53:19.586 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:53:19.489 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:54:00.571 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42602 10 6452 1 2025-09-15 02:54:09.794 00:00:10.368 TCP 23.104.0.1:59684 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:50:28.560 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 02:55:00.791 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-09-15 02:55:10.199 00:00:10.366 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:51:28.563 00:05:00.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 02:56:01.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-09-15 02:56:10.603 00:00:10.327 TCP 23.104.0.1:36774 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:57:01.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-09-15 02:57:10.970 00:00:10.998 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-09-15 02:58:01.441 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43572 10 6452 1 2025-09-15 02:58:19.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 02:58:19.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 02:58:12.009 00:00:10.407 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1073, avg pps: 0, avg bpp: 316 Time window: 2025-09-15 01:56:28 - 2025-09-15 02:58:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0032s flows/second: 50821.3 Runtime: 0.0032s