Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 03:58:48.529 00:00:10.563 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-09-20 03:59:31.083 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53666 10 6452 1 2025-09-20 03:59:49.145 00:00:10.364 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:00:45.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 03:56:30.887 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:00:31.255 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6452 1 2025-09-20 04:00:45.022 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:00:49.547 00:00:10.370 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 2025-09-20 03:57:30.888 00:05:01.336 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:01:31.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 10 6452 1 2025-09-20 04:01:49.965 00:00:10.367 TCP 23.104.0.1:55350 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:02:31.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53296 10 6452 1 2025-09-20 04:02:50.369 00:00:10.360 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:03:31.890 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58730 10 6452 1 2025-09-20 04:03:50.766 00:00:10.376 TCP 23.104.0.1:45490 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:04:32.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33156 11 6813 1 2025-09-20 04:04:51.176 00:00:10.362 TCP 23.104.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:05:44.810 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:05:32.362 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 10 6452 1 2025-09-20 04:05:44.894 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:05:51.580 00:00:10.378 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:02:30.887 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:06:32.573 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-09-20 04:06:51.997 00:00:10.375 TCP 23.104.0.1:58236 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:03:30.890 00:05:01.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:07:32.790 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-09-20 04:07:52.413 00:00:10.323 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:08:33.037 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-09-20 04:08:52.769 00:00:10.852 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:09:33.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-09-20 04:09:53.667 00:00:10.374 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:10:44.935 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:10:33.420 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-09-20 04:10:44.584 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:10:54.107 00:00:10.364 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:11:33.589 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-09-20 04:11:54.512 00:00:10.359 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:08:30.889 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:12:33.807 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54880 10 6452 1 2025-09-20 04:12:54.916 00:00:10.329 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:09:30.891 00:05:01.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:13:33.971 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-09-20 04:13:55.281 00:00:10.331 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:14:34.170 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-09-20 04:14:55.647 00:00:10.363 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:15:46.411 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:15:34.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-09-20 04:15:46.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:15:56.062 00:00:10.363 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:16:34.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6452 1 2025-09-20 04:16:56.470 00:00:10.370 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:17:34.821 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6452 1 2025-09-20 04:17:56.877 00:00:10.365 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:14:30.891 00:05:01.343 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:18:35.042 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-09-20 04:18:57.278 00:00:10.321 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:15:30.894 00:05:01.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:19:35.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-09-20 04:19:57.640 00:00:10.363 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:20:35.467 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6452 1 2025-09-20 04:20:45.148 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:20:45.210 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:20:58.051 00:00:10.643 TCP 23.104.0.1:43276 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:21:35.680 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44690 11 6492 1 2025-09-20 04:21:58.734 00:00:10.366 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:22:35.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-09-20 04:22:59.138 00:00:21.315 TCP 23.104.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:23:36.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-09-20 04:24:10.525 00:00:10.366 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:20:30.894 00:05:01.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:24:36.295 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40596 10 6452 1 2025-09-20 04:25:10.927 00:00:10.345 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:21:30.897 00:05:01.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:25:36.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-09-20 04:25:45.378 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:25:45.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:26:11.314 00:00:10.318 TCP 23.104.0.1:38470 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:26:36.679 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-09-20 04:27:11.684 00:00:10.359 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:27:36.908 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-09-20 04:28:12.111 00:00:10.367 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:28:37.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-09-20 04:29:12.514 00:00:10.362 TCP 23.104.0.1:60844 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:29:37.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-09-20 04:30:12.917 00:00:10.372 TCP 23.104.0.1:58100 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:26:30.896 00:05:01.348 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:30:45.376 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:30:45.254 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:30:37.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44182 10 6452 1 2025-09-20 04:31:13.334 00:00:10.363 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:27:30.900 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:31:37.772 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-09-20 04:32:13.735 00:00:10.367 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:32:37.986 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50976 10 6452 1 2025-09-20 04:33:14.141 00:00:10.375 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:33:38.219 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56364 10 6452 1 2025-09-20 04:34:14.551 00:00:10.362 TCP 23.104.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:34:38.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-09-20 04:35:14.951 00:00:10.374 TCP 23.104.0.1:38886 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:35:45.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:35:45.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:35:38.603 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6452 1 2025-09-20 04:36:15.364 00:00:10.371 TCP 23.104.0.1:33196 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:32:30.904 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:36:38.817 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 10 6452 1 2025-09-20 04:37:15.764 00:00:10.376 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:33:30.907 00:05:01.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:37:38.985 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41780 10 6452 1 2025-09-20 04:38:16.177 00:00:10.368 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:38:39.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-09-20 04:39:16.581 00:00:10.367 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:39:39.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 2025-09-20 04:40:16.985 00:00:10.327 TCP 23.104.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:40:45.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:40:45.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:40:39.642 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 12 10365 1 2025-09-20 04:41:17.348 00:00:10.446 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 15 1926 1 2025-09-20 04:41:39.880 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-09-20 04:42:17.831 00:00:10.386 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:38:30.908 00:05:01.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:42:40.107 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43856 10 6452 1 2025-09-20 04:43:18.249 00:00:10.372 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:39:30.910 00:05:01.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:43:40.332 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-09-20 04:44:18.656 00:00:10.321 TCP 23.104.0.1:37518 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:44:40.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40518 10 6452 1 2025-09-20 04:45:19.019 00:00:10.361 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:45:45.533 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:45:45.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:45:40.715 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6452 1 2025-09-20 04:46:19.419 00:00:10.360 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:46:40.928 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-09-20 04:47:19.819 00:00:10.366 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:47:41.167 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-09-20 04:48:20.220 00:00:10.322 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:44:30.909 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:48:41.379 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-09-20 04:49:20.580 00:00:10.362 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:45:30.911 00:05:01.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:49:41.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37400 10 6452 1 2025-09-20 04:50:20.983 00:00:10.376 TCP 23.104.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:50:45.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:50:45.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:50:41.798 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57076 10 6452 1 2025-09-20 04:51:21.400 00:00:10.371 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:51:42.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50296 10 6452 1 2025-09-20 04:52:21.808 00:00:10.367 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:52:42.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52424 10 6452 1 2025-09-20 04:53:22.214 00:00:10.360 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:53:42.459 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-09-20 04:54:22.611 00:00:10.335 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:50:30.909 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 04:54:42.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-09-20 04:51:30.912 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 04:55:22.982 00:00:10.380 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:55:45.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 04:55:45.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 04:55:42.856 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-09-20 04:56:23.400 00:00:10.366 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:56:43.085 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6452 1 2025-09-20 04:57:23.807 00:00:10.365 TCP 23.104.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-09-20 04:57:43.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-09-20 04:58:24.217 00:00:10.603 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496629, total packets: 1570, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-09-20 03:56:30 - 2025-09-20 04:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0009s Wall: 0.0020s flows/second: 81622.7 Runtime: 0.0020s