Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 01:58:54.905 00:00:10.367 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-09-18 01:59:26.411 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6870 1 2025-09-18 01:59:44.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 01:59:44.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 01:59:55.308 00:00:10.365 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:00:26.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6870 1 2025-09-18 01:56:29.921 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:00:55.709 00:00:10.382 TCP 23.104.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-09-18 01:57:29.924 00:05:01.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:01:26.855 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51996 10 6870 1 2025-09-18 02:01:56.141 00:00:10.320 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:02:27.097 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6870 1 2025-09-18 02:02:56.506 00:00:10.367 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:03:27.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6870 1 2025-09-18 02:03:56.911 00:00:10.372 TCP 23.104.0.1:35798 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:04:27.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6870 1 2025-09-18 02:04:44.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:04:44.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:04:57.321 00:00:10.375 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:05:27.738 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 12 10367 1 2025-09-18 02:05:57.738 00:00:10.445 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 15 1926 1 2025-09-18 02:02:29.924 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:06:27.981 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-09-18 02:06:58.215 00:00:10.367 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:03:29.926 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:07:28.215 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-09-18 02:07:58.626 00:00:10.323 TCP 23.104.0.1:50752 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:08:28.434 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-09-18 02:08:58.989 00:00:10.328 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:09:28.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 10 6452 1 2025-09-18 02:09:44.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:09:45.664 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:09:59.358 00:00:10.363 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:10:28.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49534 10 6452 1 2025-09-18 02:10:59.759 00:00:10.386 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:11:29.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-09-18 02:12:00.183 00:00:10.362 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:08:29.923 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:12:29.258 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-09-18 02:13:00.580 00:00:10.369 TCP 23.104.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:09:29.926 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:13:29.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-09-18 02:14:00.984 00:00:10.328 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:14:44.705 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:14:29.646 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60916 10 6452 1 2025-09-18 02:14:44.894 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:15:01.351 00:00:10.361 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:15:29.819 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-09-18 02:16:01.755 00:00:10.392 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:16:29.992 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-09-18 02:17:02.182 00:00:10.367 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:17:30.170 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-18 02:18:02.593 00:00:10.364 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:14:29.925 00:05:01.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:18:30.383 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47272 10 6452 1 2025-09-18 02:19:02.993 00:00:10.366 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:15:29.928 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:19:30.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-09-18 02:19:45.181 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:19:44.982 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:20:03.409 00:00:10.330 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:20:30.822 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56760 10 6452 1 2025-09-18 02:21:03.779 00:00:10.366 TCP 23.104.0.1:44600 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:21:31.059 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-09-18 02:22:04.183 00:00:10.367 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:22:31.292 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41554 10 6452 1 2025-09-18 02:23:04.590 00:00:10.364 TCP 23.104.0.1:41790 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:23:31.530 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-09-18 02:24:04.990 00:00:10.373 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:20:29.927 00:05:01.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:24:44.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:24:31.748 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-09-18 02:24:45.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:25:05.402 00:00:10.366 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:21:29.931 00:05:01.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:25:31.919 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-09-18 02:26:05.813 00:00:10.371 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:26:32.130 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42986 10 6452 1 2025-09-18 02:27:06.244 00:00:10.387 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:27:32.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-09-18 02:28:06.668 00:00:10.368 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:28:32.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37696 10 6452 1 2025-09-18 02:29:07.103 00:00:10.348 TCP 23.104.0.1:49942 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:29:45.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:29:32.776 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-09-18 02:29:45.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:30:07.490 00:00:10.365 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:26:29.928 00:05:01.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:30:32.993 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-09-18 02:31:07.890 00:00:10.340 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:27:29.931 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:31:33.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46520 10 6452 1 2025-09-18 02:32:08.268 00:00:10.326 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:32:33.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-09-18 02:33:08.633 00:00:10.369 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:33:33.607 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-09-18 02:34:09.051 00:00:10.372 TCP 23.104.0.1:54748 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:34:45.363 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:34:33.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-09-18 02:34:45.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:35:09.458 00:00:10.369 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:35:34.036 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-09-18 02:36:09.855 00:00:10.378 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:32:29.931 00:05:01.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:36:34.253 00:00:12.398 TCP 1.101.0.1:3000 -> 22.102.0.1:59010 10 6452 1 2025-09-18 02:37:10.272 00:00:10.366 TCP 23.104.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:33:29.933 00:05:01.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:37:36.692 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-09-18 02:38:10.682 00:00:10.369 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:38:36.947 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:55420 10 6452 1 2025-09-18 02:39:11.102 00:00:10.369 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:39:45.379 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:39:45.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:39:37.142 00:00:12.791 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-09-18 02:40:11.519 00:00:10.388 TCP 23.104.0.1:37752 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:40:39.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-09-18 02:41:11.977 00:00:10.367 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:41:40.218 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-09-18 02:42:12.385 00:00:10.364 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:38:29.932 00:05:01.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:42:40.436 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-09-18 02:43:12.791 00:00:10.367 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:39:29.933 00:05:01.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:43:40.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-09-18 02:44:13.193 00:00:10.364 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:44:45.350 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:44:45.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:44:40.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-09-18 02:45:13.599 00:00:10.437 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 15 1926 1 2025-09-18 02:45:41.085 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 12 10367 1 2025-09-18 02:46:14.104 00:00:10.378 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:46:41.283 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-09-18 02:47:14.524 00:00:10.361 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:47:41.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6452 1 2025-09-18 02:48:14.922 00:00:10.391 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:44:29.932 00:05:01.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:48:41.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-09-18 02:49:15.352 00:00:10.375 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:45:29.935 00:05:01.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:49:45.632 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:49:45.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:49:41.940 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53634 10 6452 1 2025-09-18 02:50:15.766 00:00:10.444 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 15 1926 1 2025-09-18 02:50:42.166 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 12 10367 1 2025-09-18 02:51:16.249 00:00:10.373 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:51:42.412 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33262 10 6452 1 2025-09-18 02:52:16.662 00:00:10.366 TCP 23.104.0.1:53570 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:52:42.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52164 10 6452 1 2025-09-18 02:53:17.099 00:00:10.366 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:53:42.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-09-18 02:50:29.932 00:05:01.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 02:54:17.503 00:00:10.365 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:54:45.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:54:45.613 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:54:43.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6452 1 2025-09-18 02:51:29.937 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 02:55:17.911 00:00:10.368 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:55:43.226 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41184 10 6452 1 2025-09-18 02:56:18.314 00:00:10.368 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:56:43.445 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54256 10 6452 1 2025-09-18 02:57:18.721 00:00:10.365 TCP 23.104.0.1:36788 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:57:43.662 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-09-18 02:58:19.123 00:00:10.371 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 507406, total packets: 1580, avg bps: 1091, avg pps: 0, avg bpp: 321 Time window: 2025-09-18 01:56:29 - 2025-09-18 02:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0022s flows/second: 75219.7 Runtime: 0.0022s