Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 16:58:58.776 00:00:10.365 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-09-17 16:59:03.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6452 1 2025-09-17 16:59:33.847 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 16:59:33.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 16:59:59.182 00:00:10.360 TCP 23.104.0.1:60650 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:00:03.773 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-09-17 16:56:29.755 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:00:59.581 00:00:10.349 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:01:03.953 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:50576 10 6452 1 2025-09-17 16:57:29.757 00:05:01.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:01:59.961 00:00:10.324 TCP 23.104.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:02:04.148 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-09-17 17:03:00.325 00:00:10.368 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:03:04.366 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-09-17 17:04:00.731 00:00:10.326 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:04:04.541 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49102 10 6452 1 2025-09-17 17:04:33.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:04:33.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:05:01.108 00:00:10.372 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:05:04.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41546 10 6452 1 2025-09-17 17:06:01.517 00:00:10.369 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:06:04.925 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-09-17 17:02:29.756 00:05:01.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:07:01.922 00:00:10.388 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:07:05.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-09-17 17:03:29.759 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:08:05.337 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43542 10 6452 1 2025-09-17 17:08:02.351 00:00:10.363 TCP 23.104.0.1:60282 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:09:05.512 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-09-17 17:09:02.758 00:00:10.379 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:09:33.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:09:33.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:10:05.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36180 10 6452 1 2025-09-17 17:10:03.176 00:00:10.365 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:11:03.578 00:00:10.371 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:11:05.941 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-09-17 17:12:06.141 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-09-17 17:12:03.989 00:00:10.371 TCP 23.104.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:08:29.759 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:13:06.356 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6452 1 2025-09-17 17:13:04.401 00:00:10.367 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:09:29.763 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:14:06.571 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54138 10 6452 1 2025-09-17 17:14:04.805 00:00:10.371 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:14:33.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:14:34.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:15:05.217 00:00:10.440 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 15 1926 1 2025-09-17 17:15:06.794 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57352 12 10367 1 2025-09-17 17:16:05.691 00:00:10.362 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:16:07.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-09-17 17:17:07.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44842 10 6452 1 2025-09-17 17:17:06.105 00:00:11.188 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:18:07.422 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-09-17 17:18:07.333 00:00:10.368 TCP 23.104.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:14:29.759 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:19:07.651 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6452 1 2025-09-17 17:19:07.741 00:00:10.372 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:15:29.761 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:19:34.274 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:19:34.415 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:20:08.150 00:00:10.367 TCP 23.104.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:20:07.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57358 10 6452 1 2025-09-17 17:21:08.556 00:00:10.364 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:21:08.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-09-17 17:22:08.315 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-17 17:22:08.967 00:00:10.370 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:23:09.379 00:00:10.322 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:23:08.520 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38096 10 6452 1 2025-09-17 17:24:08.690 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-09-17 17:24:09.747 00:00:10.361 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:20:29.761 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:24:34.666 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:24:34.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:25:08.872 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-09-17 17:25:10.151 00:00:10.370 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:21:29.762 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:26:09.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54956 10 6452 1 2025-09-17 17:26:10.565 00:00:10.328 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:27:10.927 00:00:10.384 TCP 23.104.0.1:57042 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:27:09.322 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-09-17 17:28:09.491 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6452 1 2025-09-17 17:28:11.351 00:00:10.383 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:29:09.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-09-17 17:29:11.776 00:00:10.337 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:29:34.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:29:34.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:30:09.904 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-09-17 17:30:12.151 00:00:10.367 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:26:29.761 00:05:01.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:31:10.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 10 6452 1 2025-09-17 17:31:12.556 00:00:10.367 TCP 23.104.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:27:29.764 00:05:01.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:32:10.298 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-09-17 17:32:12.963 00:00:10.377 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:33:10.473 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-09-17 17:33:13.377 00:00:10.363 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:34:10.689 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-09-17 17:34:13.780 00:00:10.370 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:34:34.295 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:34:34.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:35:10.901 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-09-17 17:35:14.186 00:00:10.328 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:36:11.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-09-17 17:36:14.554 00:00:10.364 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:32:29.764 00:05:01.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:37:11.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-09-17 17:37:14.953 00:00:10.366 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:33:29.767 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:38:11.549 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44622 10 6452 1 2025-09-17 17:38:15.353 00:00:10.369 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:39:11.791 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-09-17 17:39:15.756 00:00:10.333 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:39:34.572 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:39:34.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:40:12.004 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-09-17 17:40:16.129 00:00:10.327 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:41:12.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 10 6452 1 2025-09-17 17:41:16.491 00:00:10.359 TCP 23.104.0.1:48450 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:42:12.425 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-09-17 17:38:29.768 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:42:16.885 00:00:10.386 TCP 23.104.0.1:43906 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:43:12.635 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46242 10 6452 1 2025-09-17 17:43:17.306 00:00:10.370 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:39:29.770 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:44:12.848 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40548 10 6452 1 2025-09-17 17:44:17.712 00:00:10.377 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:44:34.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:44:34.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:45:13.034 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-09-17 17:45:18.132 00:00:10.360 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:46:13.243 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-09-17 17:46:18.529 00:00:10.320 TCP 23.104.0.1:34350 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:47:13.453 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-09-17 17:47:18.885 00:00:10.326 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:48:19.247 00:00:10.367 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:48:13.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-09-17 17:44:29.770 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:49:13.887 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41090 10 6452 1 2025-09-17 17:49:34.844 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:49:19.650 00:00:10.363 TCP 23.104.0.1:35930 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:45:29.773 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:49:34.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:50:14.120 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38054 10 6452 1 2025-09-17 17:50:20.055 00:00:10.367 TCP 23.104.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:51:14.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37678 10 6452 1 2025-09-17 17:51:20.457 00:00:10.359 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:52:14.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-09-17 17:52:20.860 00:00:10.371 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:53:14.722 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-09-17 17:53:21.272 00:00:10.369 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:54:14.931 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-09-17 17:50:29.770 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 17:54:34.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 17:54:34.901 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 17:54:21.684 00:00:10.374 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:55:15.186 00:00:10.882 TCP 1.101.0.1:3000 -> 22.102.0.1:37628 12 10365 1 2025-09-17 17:51:29.772 00:05:01.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 17:55:22.106 00:00:10.552 TCP 23.104.0.1:45820 -> 1.101.0.1:3000 15 1926 1 2025-09-17 17:56:16.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-09-17 17:56:22.699 00:00:10.331 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:57:16.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-09-17 17:57:23.089 00:00:10.359 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-09-17 17:58:16.539 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-09-17 17:58:23.488 00:00:10.361 TCP 23.104.0.1:36800 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1089, avg pps: 0, avg bpp: 320 Time window: 2025-09-17 16:56:29 - 2025-09-17 17:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0011s Wall: 0.0025s flows/second: 64850.2 Runtime: 0.0025s