Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 09:58:48.976 00:00:10.375 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:59:29.537 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-09-20 09:59:49.391 00:00:10.365 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:56:31.054 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:00:29.754 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-09-20 10:00:51.778 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:00:52.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:00:49.795 00:00:10.365 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-09-20 09:57:31.057 00:05:01.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:01:29.958 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-09-20 10:01:50.199 00:00:10.368 TCP 23.104.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:02:30.192 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-09-20 10:02:50.603 00:00:10.362 TCP 23.104.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:03:30.376 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 2025-09-20 10:03:51.005 00:00:10.370 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:04:30.593 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-09-20 10:04:51.411 00:00:10.365 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:05:30.767 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-09-20 10:05:51.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:05:52.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:05:51.814 00:00:10.361 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:02:31.055 00:05:01.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:06:30.973 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56840 10 6452 1 2025-09-20 10:06:52.217 00:00:10.372 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:03:31.058 00:05:01.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:07:31.196 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56542 10 6452 1 2025-09-20 10:07:52.629 00:00:10.367 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:08:31.369 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-09-20 10:08:53.032 00:00:10.365 TCP 23.104.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:09:31.581 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-09-20 10:09:53.434 00:00:10.357 TCP 23.104.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:10:31.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-09-20 10:10:51.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:10:52.104 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:10:53.833 00:00:10.539 TCP 23.104.0.1:42546 -> 1.101.0.1:3000 17 2241 1 2025-09-20 10:11:32.029 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 14 14280 1 2025-09-20 10:11:54.412 00:00:10.363 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:08:31.056 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:12:32.308 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-09-20 10:12:54.819 00:00:10.361 TCP 23.104.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:09:31.060 00:05:01.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:13:32.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-09-20 10:13:55.219 00:00:10.786 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:14:32.730 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-09-20 10:14:56.061 00:00:10.363 TCP 23.104.0.1:58778 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:15:32.940 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34170 10 6452 1 2025-09-20 10:15:52.523 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:15:52.503 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:15:56.463 00:00:10.361 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:16:33.181 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-09-20 10:16:56.865 00:00:10.368 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:17:33.397 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47550 10 6452 1 2025-09-20 10:17:57.273 00:00:10.368 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:14:31.058 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:18:33.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-09-20 10:18:57.679 00:00:10.391 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:15:31.059 00:05:01.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:19:33.846 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60392 10 6452 1 2025-09-20 10:19:58.108 00:00:10.325 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:20:34.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-09-20 10:20:52.096 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:20:52.392 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:20:58.471 00:00:10.363 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:21:34.290 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:36976 10 6452 1 2025-09-20 10:21:58.875 00:00:10.926 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:22:34.483 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33222 10 6452 1 2025-09-20 10:22:59.855 00:00:10.389 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:23:34.704 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-09-20 10:24:00.279 00:00:10.432 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:20:31.058 00:05:01.303 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:24:34.967 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-09-20 10:25:00.750 00:00:10.381 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:21:31.061 00:05:01.298 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:25:35.179 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 10 6452 1 2025-09-20 10:25:52.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:25:52.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:26:01.171 00:00:10.329 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:26:35.355 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59218 10 6452 1 2025-09-20 10:27:01.543 00:00:10.366 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:27:35.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 12 6556 1 2025-09-20 10:28:01.950 00:00:10.369 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:28:35.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43468 10 6452 1 2025-09-20 10:29:02.355 00:00:10.362 TCP 23.104.0.1:59620 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:29:35.956 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 12 6556 1 2025-09-20 10:30:02.755 00:00:10.377 TCP 23.104.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:26:31.070 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:30:36.181 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-09-20 10:30:52.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:30:52.621 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:31:03.165 00:00:10.331 TCP 23.104.0.1:53878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:27:31.074 00:05:01.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:31:36.399 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-09-20 10:32:03.533 00:00:10.367 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:32:36.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-09-20 10:33:03.939 00:00:10.371 TCP 23.104.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:33:36.823 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-09-20 10:34:04.346 00:00:10.370 TCP 23.104.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:34:37.067 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-09-20 10:35:04.758 00:00:10.381 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:35:37.279 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-09-20 10:35:52.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:35:52.804 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:36:05.172 00:00:10.365 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:32:31.073 00:05:01.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:36:37.457 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-09-20 10:37:05.576 00:00:10.367 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:33:31.076 00:05:01.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:37:37.677 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-09-20 10:38:05.978 00:00:10.366 TCP 23.104.0.1:40338 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:38:37.895 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59938 10 6452 1 2025-09-20 10:39:06.378 00:00:10.367 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:39:38.083 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-09-20 10:40:06.779 00:00:10.367 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:40:38.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51140 10 6452 1 2025-09-20 10:40:52.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:40:52.529 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:41:07.183 00:00:10.327 TCP 23.104.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:41:38.531 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 10 6452 1 2025-09-20 10:42:07.550 00:00:10.366 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:38:31.075 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:42:38.755 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 10 6452 1 2025-09-20 10:43:07.953 00:00:10.369 TCP 23.104.0.1:47624 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:39:31.078 00:05:01.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:43:38.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-09-20 10:44:08.355 00:00:10.362 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:44:39.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46958 12 6556 1 2025-09-20 10:45:08.758 00:00:10.855 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:45:39.386 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-09-20 10:45:52.921 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:45:52.816 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:46:09.651 00:00:10.364 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:46:39.612 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-09-20 10:47:10.067 00:00:10.342 TCP 23.104.0.1:39966 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:47:39.861 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 10 6452 1 2025-09-20 10:48:10.462 00:00:10.510 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:44:31.075 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:48:40.089 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47012 10 6452 1 2025-09-20 10:49:11.022 00:00:10.369 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:45:31.077 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:49:40.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-09-20 10:50:11.432 00:00:10.323 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:50:52.941 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:50:40.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-09-20 10:50:52.970 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:51:11.793 00:00:10.405 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 15 1926 1 2025-09-20 10:51:40.722 00:00:10.842 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 12 10367 1 2025-09-20 10:52:12.238 00:00:10.365 TCP 23.104.0.1:38232 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:52:41.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-09-20 10:53:12.636 00:00:10.366 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:53:41.814 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33598 10 6452 1 2025-09-20 10:54:13.067 00:00:10.366 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:50:31.078 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 10:54:41.996 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 11 6492 1 2025-09-20 10:55:13.470 00:00:10.365 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:51:31.080 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 10:55:42.233 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6452 1 2025-09-20 10:55:53.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 10:55:53.074 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 10:56:13.884 00:00:10.350 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:56:42.422 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-09-20 10:57:14.277 00:00:10.322 TCP 23.104.0.1:46158 -> 1.101.0.1:3000 11 1507 1 2025-09-20 10:57:42.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-09-20 10:58:14.641 00:00:10.367 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505144, total packets: 1585, avg bps: 1088, avg pps: 0, avg bpp: 318 Time window: 2025-09-20 09:56:31 - 2025-09-20 10:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0000s Wall: 0.0019s flows/second: 84633.8 Runtime: 0.0019s