Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 14:59:15.898 00:00:10.335 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:59:22.309 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 12 6556 1 2025-09-18 14:59:59.988 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:00:00.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:00:16.268 00:00:10.378 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:56:30.178 00:05:01.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:00:22.545 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54248 10 6452 1 2025-09-18 15:01:16.680 00:00:10.366 TCP 23.104.0.1:36472 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:57:30.181 00:05:01.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:01:22.803 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37992 10 6452 1 2025-09-18 15:02:17.102 00:00:10.328 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:02:23.034 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-09-18 15:03:17.468 00:00:10.358 TCP 23.104.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:03:23.256 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-09-18 15:04:17.866 00:00:10.375 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:04:23.469 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-09-18 15:05:00.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:05:00.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:05:18.280 00:00:10.363 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:05:23.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34618 10 6452 1 2025-09-18 15:06:18.677 00:00:10.372 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:02:30.181 00:05:01.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:06:23.909 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-09-18 15:03:30.183 00:05:01.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:07:19.101 00:00:10.367 TCP 23.104.0.1:42780 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:07:24.128 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-09-18 15:08:19.504 00:00:10.367 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:08:24.350 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59190 10 6452 1 2025-09-18 15:09:19.917 00:00:10.329 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:09:24.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-09-18 15:10:00.423 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:10:00.358 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:10:20.285 00:00:10.365 TCP 23.104.0.1:38294 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:10:24.786 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 10 6452 1 2025-09-18 15:11:20.687 00:00:10.372 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:11:24.964 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 12 6556 1 2025-09-18 15:08:30.183 00:05:01.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:12:21.113 00:00:10.368 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:12:25.188 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-09-18 15:13:21.519 00:00:10.326 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:09:30.185 00:05:01.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:13:25.400 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-09-18 15:14:21.884 00:00:10.480 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:14:25.624 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-09-18 15:15:00.208 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:15:00.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:15:22.403 00:00:10.370 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:15:25.833 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-09-18 15:16:22.809 00:00:10.364 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:16:26.070 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-09-18 15:17:26.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-09-18 15:17:23.213 00:00:10.365 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:18:23.612 00:00:10.365 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:18:26.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-09-18 15:14:30.183 00:05:01.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:15:30.186 00:05:01.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:19:24.014 00:00:10.361 TCP 23.104.0.1:43892 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:19:26.665 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-09-18 15:20:00.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:20:00.646 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:20:24.424 00:00:10.379 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:20:26.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46240 10 6452 1 2025-09-18 15:21:24.836 00:00:10.388 TCP 23.104.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:21:27.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-09-18 15:22:25.265 00:00:10.331 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:22:27.284 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52320 10 6452 1 2025-09-18 15:23:25.637 00:00:10.358 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:23:27.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-09-18 15:20:30.185 00:05:01.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:24:26.054 00:00:10.375 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:24:27.732 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-09-18 15:25:01.039 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:25:00.694 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:21:30.187 00:05:01.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:25:26.483 00:00:10.328 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:25:27.929 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:34688 10 6452 1 2025-09-18 15:26:26.853 00:00:10.378 TCP 23.104.0.1:45556 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:26:28.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42408 10 6452 1 2025-09-18 15:27:27.262 00:00:10.369 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:27:28.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-09-18 15:28:28.661 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44434 10 6452 1 2025-09-18 15:28:27.669 00:00:10.324 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:29:28.034 00:00:10.319 TCP 23.104.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:29:28.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46140 10 6452 1 2025-09-18 15:30:00.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:30:00.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:26:30.187 00:05:01.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:30:29.097 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-09-18 15:30:28.397 00:00:10.362 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:27:30.192 00:05:01.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:31:29.311 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38380 10 6452 1 2025-09-18 15:31:28.799 00:00:10.362 TCP 23.104.0.1:54942 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:32:29.481 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:53990 10 6452 1 2025-09-18 15:32:29.198 00:00:10.365 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:33:29.603 00:00:10.365 TCP 23.104.0.1:40080 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:33:29.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42244 10 6452 1 2025-09-18 15:34:29.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-09-18 15:34:30.006 00:00:10.362 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:35:00.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:35:00.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:35:30.107 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-09-18 15:35:30.404 00:00:10.324 TCP 23.104.0.1:46606 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:32:30.190 00:05:01.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:36:30.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57754 10 6452 1 2025-09-18 15:36:30.766 00:00:10.370 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:33:30.192 00:05:01.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:37:30.545 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34146 10 6452 1 2025-09-18 15:37:31.172 00:00:10.365 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:38:30.756 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40582 10 6452 1 2025-09-18 15:38:31.576 00:00:10.361 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:39:30.979 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-09-18 15:39:31.976 00:00:10.369 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:40:00.876 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:40:01.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:40:31.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36134 10 6452 1 2025-09-18 15:40:32.384 00:00:10.370 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:41:31.425 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-09-18 15:41:32.791 00:00:10.369 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:38:30.189 00:05:01.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:42:31.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-09-18 15:42:33.204 00:00:10.327 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:39:30.193 00:05:01.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:43:33.566 00:00:10.359 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:43:31.856 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47740 10 6452 1 2025-09-18 15:44:33.958 00:00:10.364 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:44:32.082 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-09-18 15:45:01.027 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:45:01.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:45:32.259 00:00:14.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-18 15:45:34.370 00:00:12.185 TCP 23.104.0.1:52120 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:46:36.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-09-18 15:46:36.599 00:00:10.366 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:47:36.685 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-09-18 15:47:37.000 00:00:10.372 TCP 23.104.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:44:30.192 00:05:01.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:48:36.904 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-09-18 15:48:37.409 00:00:10.364 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:45:30.194 00:05:01.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:49:37.811 00:00:10.369 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:49:37.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-09-18 15:50:01.371 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:50:01.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:50:38.223 00:00:10.365 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:50:37.342 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50738 10 6452 1 2025-09-18 15:51:38.627 00:00:10.364 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:51:37.524 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6452 1 2025-09-18 15:52:39.027 00:00:10.359 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:52:37.883 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-09-18 15:53:39.421 00:00:10.367 TCP 23.104.0.1:47666 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:53:38.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-09-18 15:50:30.192 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 15:54:38.319 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-09-18 15:54:39.828 00:00:10.347 TCP 23.104.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:55:01.556 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 15:55:01.397 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 15:51:30.195 00:05:01.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 15:55:40.210 00:00:10.364 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:55:38.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-09-18 15:56:40.613 00:00:10.364 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:56:38.753 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-09-18 15:57:41.017 00:00:10.367 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-09-18 15:57:38.943 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-09-18 15:58:39.140 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-09-18 15:58:41.426 00:00:10.370 TCP 23.104.0.1:50718 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1065, avg pps: 0, avg bpp: 316 Time window: 2025-09-18 14:56:30 - 2025-09-18 15:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0029s Wall: 0.0028s flows/second: 59013.9 Runtime: 0.0028s