Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 08:59:12.686 00:00:10.328 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-09-19 08:59:21.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-09-19 09:00:21.975 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:00:21.838 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:00:13.057 00:00:10.324 TCP 23.104.0.1:36786 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:00:21.298 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-09-19 08:56:30.538 00:05:01.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:01:13.418 00:00:10.363 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:01:21.515 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-09-19 08:57:30.541 00:05:01.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:02:13.820 00:00:10.325 TCP 23.104.0.1:59760 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:02:21.683 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-09-19 09:03:14.180 00:00:10.361 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:03:21.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-09-19 09:04:14.579 00:00:10.364 TCP 23.104.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:04:22.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6452 1 2025-09-19 09:05:21.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:05:22.093 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:05:14.986 00:00:10.331 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:05:22.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56306 10 6452 1 2025-09-19 09:06:15.359 00:00:10.367 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:06:22.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-09-19 09:02:30.539 00:05:01.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:07:15.763 00:00:10.380 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:03:30.541 00:05:01.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:07:22.747 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-09-19 09:08:16.183 00:00:10.366 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:08:22.920 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-09-19 09:09:16.587 00:00:10.364 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:09:23.138 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34904 10 6452 1 2025-09-19 09:10:21.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:10:22.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:10:16.985 00:00:10.371 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:10:23.308 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52446 10 6452 1 2025-09-19 09:11:17.392 00:00:10.318 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:11:23.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-09-19 09:12:17.751 00:00:10.377 TCP 23.104.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:08:30.540 00:05:01.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:12:23.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51074 10 6452 1 2025-09-19 09:13:18.174 00:00:10.367 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:13:23.949 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 10 6452 1 2025-09-19 09:09:30.542 00:05:01.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:14:18.575 00:00:10.365 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:14:24.170 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-09-19 09:15:22.050 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:15:22.197 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:15:18.981 00:00:10.749 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:15:24.739 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-09-19 09:16:19.776 00:00:10.371 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:16:24.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-09-19 09:17:20.189 00:00:10.370 TCP 23.104.0.1:38286 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:17:25.187 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-09-19 09:18:20.596 00:00:10.363 TCP 23.104.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:18:25.404 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33618 10 6452 1 2025-09-19 09:14:30.540 00:05:01.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:19:20.994 00:00:10.364 TCP 23.104.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:15:30.543 00:05:01.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:19:25.625 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-09-19 09:20:22.311 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:20:22.317 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:20:21.394 00:00:10.362 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:20:25.859 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-09-19 09:21:21.793 00:00:10.368 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:21:26.070 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-09-19 09:22:26.280 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48034 10 6452 1 2025-09-19 09:22:22.200 00:00:10.367 TCP 23.104.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:23:26.495 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49422 10 6452 1 2025-09-19 09:23:22.603 00:00:10.372 TCP 23.104.0.1:36334 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:24:23.023 00:00:10.362 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:24:26.718 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 10 6452 1 2025-09-19 09:20:30.542 00:05:01.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:25:22.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:25:22.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:21:30.546 00:05:01.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:25:23.423 00:00:10.364 TCP 23.104.0.1:47176 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:25:26.888 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6452 1 2025-09-19 09:26:23.825 00:00:10.440 TCP 23.104.0.1:43314 -> 1.101.0.1:3000 15 1926 1 2025-09-19 09:26:27.078 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52472 12 10365 1 2025-09-19 09:27:24.308 00:00:10.379 TCP 23.104.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:27:27.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-09-19 09:28:24.723 00:00:10.323 TCP 23.104.0.1:58140 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:28:27.526 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-09-19 09:29:25.098 00:00:10.325 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:29:27.697 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40026 10 6452 1 2025-09-19 09:30:22.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:30:22.538 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:26:30.543 00:05:01.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:30:25.457 00:00:10.406 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:30:27.914 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-09-19 09:27:30.546 00:05:01.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:31:25.901 00:00:24.650 TCP 23.104.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:31:28.134 00:00:22.325 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-09-19 09:32:40.621 00:00:14.126 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:32:40.522 00:00:14.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47668 10 6452 1 2025-09-19 09:33:44.727 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56106 10 6452 1 2025-09-19 09:33:44.799 00:00:10.365 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:34:44.945 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-09-19 09:34:45.207 00:00:10.326 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:35:22.722 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:35:22.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:35:45.146 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-09-19 09:35:45.572 00:00:10.362 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:32:30.551 00:05:01.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:36:45.973 00:00:10.366 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:36:45.358 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57002 10 6452 1 2025-09-19 09:33:30.555 00:05:01.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:37:46.374 00:00:10.361 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:37:45.570 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-09-19 09:38:45.780 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6452 1 2025-09-19 09:38:46.774 00:00:10.326 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:39:45.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-09-19 09:39:47.137 00:00:10.365 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:40:22.612 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:40:22.455 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:40:46.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-09-19 09:40:47.543 00:00:10.379 TCP 23.104.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:41:46.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 10 6452 1 2025-09-19 09:41:47.957 00:00:10.369 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:38:30.554 00:05:01.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:42:46.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34750 10 6452 1 2025-09-19 09:42:48.363 00:00:10.362 TCP 23.104.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:39:30.558 00:05:01.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:43:48.764 00:00:10.374 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:43:46.851 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-09-19 09:44:47.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45404 10 6452 1 2025-09-19 09:44:49.176 00:00:10.368 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:45:22.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:45:23.004 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:45:49.582 00:00:10.378 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:45:47.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-09-19 09:46:47.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47300 10 6452 1 2025-09-19 09:46:49.987 00:00:10.371 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:47:50.395 00:00:10.373 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:47:47.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50358 10 6452 1 2025-09-19 09:44:30.555 00:05:01.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:48:50.809 00:00:10.367 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:48:47.951 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-09-19 09:45:30.560 00:05:01.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:49:48.222 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-09-19 09:49:51.216 00:00:10.345 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:50:23.151 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:50:22.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:50:48.439 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-09-19 09:50:51.603 00:00:10.367 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:51:48.654 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6452 1 2025-09-19 09:51:52.009 00:00:10.366 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:52:48.829 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34738 10 6452 1 2025-09-19 09:52:52.411 00:00:10.363 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:53:49.091 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-09-19 09:53:52.811 00:00:10.364 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:50:30.557 00:05:01.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 09:54:49.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36558 10 6452 1 2025-09-19 09:54:53.213 00:00:10.367 TCP 23.104.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:55:23.186 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 09:55:23.043 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 09:51:30.563 00:05:01.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 09:55:49.509 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-09-19 09:55:53.618 00:00:10.336 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:56:49.730 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-09-19 09:56:53.991 00:00:10.361 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-09-19 09:57:49.901 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50728 10 6452 1 2025-09-19 09:57:54.393 00:00:10.364 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494721, total packets: 1557, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-09-19 08:56:30 - 2025-09-19 09:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0018s Wall: 0.0019s flows/second: 83371.4 Runtime: 0.0020s