Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 12:59:04.710 00:00:10.386 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-09-20 12:59:18.672 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 10 6452 1 2025-09-20 13:00:05.152 00:00:10.365 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:00:18.913 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6452 1 2025-09-20 12:56:31.119 00:05:01.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:00:55.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:00:55.664 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:01:05.557 00:00:10.367 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:01:19.154 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32862 10 6452 1 2025-09-20 12:57:31.123 00:05:01.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:02:05.962 00:00:10.330 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:02:19.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44648 10 6452 1 2025-09-20 13:03:06.330 00:00:10.815 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:03:19.570 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42196 10 6452 1 2025-09-20 13:04:07.189 00:00:10.325 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:04:19.784 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-09-20 13:05:07.553 00:00:10.367 TCP 23.104.0.1:47768 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:05:19.998 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6452 1 2025-09-20 13:05:55.624 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:05:55.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:06:07.954 00:00:10.365 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:06:20.195 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-09-20 13:02:31.120 00:05:01.303 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:07:08.358 00:00:10.357 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:07:20.402 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41116 10 6452 1 2025-09-20 13:03:31.123 00:05:01.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:08:08.761 00:00:10.376 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:08:20.616 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56692 10 6452 1 2025-09-20 13:09:09.172 00:00:10.366 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:09:20.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-09-20 13:10:09.582 00:00:10.368 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:10:20.997 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-09-20 13:10:55.792 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:10:55.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:11:09.985 00:00:10.328 TCP 23.104.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:11:21.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38358 10 6452 1 2025-09-20 13:12:10.352 00:00:10.364 TCP 23.104.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:12:21.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-09-20 13:08:31.128 00:05:01.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:13:10.750 00:00:10.390 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:13:21.658 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-09-20 13:09:31.131 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:14:11.177 00:00:10.366 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:14:21.886 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-09-20 13:15:11.579 00:00:10.364 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:15:22.131 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-20 13:15:56.346 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:15:56.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:16:11.980 00:00:10.380 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:16:22.353 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45962 10 6452 1 2025-09-20 13:17:12.397 00:00:10.366 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:17:22.528 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-09-20 13:18:12.797 00:00:11.339 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:18:22.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-09-20 13:14:31.131 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:19:14.177 00:00:10.367 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:19:22.940 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-09-20 13:15:31.134 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:20:14.580 00:00:10.364 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:20:23.182 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 10 6452 1 2025-09-20 13:20:55.649 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:20:55.970 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:21:14.980 00:00:10.328 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:21:23.370 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-09-20 13:22:15.348 00:00:10.366 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:22:23.544 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-09-20 13:23:15.753 00:00:10.333 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:23:23.756 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37370 10 6452 1 2025-09-20 13:24:16.125 00:00:10.367 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:24:23.970 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-09-20 13:20:31.131 00:05:01.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:25:16.530 00:00:10.364 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:25:24.208 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-09-20 13:21:31.135 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:25:55.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:25:56.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:26:16.930 00:00:10.382 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:26:24.412 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-09-20 13:27:17.352 00:00:10.363 TCP 23.104.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:27:24.622 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-09-20 13:28:17.758 00:00:10.378 TCP 23.104.0.1:51862 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:28:24.844 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33660 10 6452 1 2025-09-20 13:29:18.173 00:00:10.704 TCP 23.104.0.1:35434 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:29:25.030 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-09-20 13:30:18.914 00:00:10.334 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:30:25.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-09-20 13:26:31.131 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:30:56.282 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:30:56.309 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:31:19.286 00:00:10.363 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:27:31.135 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:31:25.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-09-20 13:32:19.691 00:00:10.371 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:32:25.681 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-09-20 13:33:20.112 00:00:10.367 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 12 1559 1 2025-09-20 13:33:25.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 10 6452 1 2025-09-20 13:34:20.516 00:00:10.419 TCP 23.104.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:34:26.132 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-09-20 13:35:20.983 00:00:10.328 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:35:26.347 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54798 10 6452 1 2025-09-20 13:35:56.291 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:35:56.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:36:21.349 00:00:10.362 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:36:26.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39818 10 6452 1 2025-09-20 13:32:31.132 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:37:26.732 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-09-20 13:37:21.747 00:00:10.362 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:33:31.134 00:05:01.294 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:38:22.149 00:00:10.369 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:38:26.948 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36120 10 6452 1 2025-09-20 13:39:22.552 00:00:10.364 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:39:27.180 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-09-20 13:40:22.956 00:00:10.372 TCP 23.104.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:40:27.475 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-09-20 13:40:56.244 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:40:56.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:41:23.365 00:00:10.400 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 15 1926 1 2025-09-20 13:41:27.686 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 12 10367 1 2025-09-20 13:38:31.134 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:42:23.802 00:00:10.337 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:42:27.925 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-09-20 13:43:24.178 00:00:10.325 TCP 23.104.0.1:38044 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:39:31.138 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:43:28.157 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-09-20 13:44:24.541 00:00:10.362 TCP 23.104.0.1:50348 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:44:28.328 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6452 1 2025-09-20 13:45:24.941 00:00:10.370 TCP 23.104.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:45:28.500 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58890 10 6452 1 2025-09-20 13:45:56.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:45:56.325 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:46:25.351 00:00:10.332 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:46:28.668 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-09-20 13:47:25.719 00:00:10.369 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:47:28.883 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-09-20 13:44:31.136 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:48:26.124 00:00:10.321 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:48:29.106 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-09-20 13:49:26.482 00:00:10.364 TCP 23.104.0.1:37074 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:45:31.139 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:49:29.730 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-09-20 13:50:26.887 00:00:10.385 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:50:29.942 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54252 10 6452 1 2025-09-20 13:50:56.487 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:50:56.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:51:27.306 00:00:10.443 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 15 1926 1 2025-09-20 13:51:30.140 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54366 12 10365 1 2025-09-20 13:52:27.789 00:00:10.325 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:52:30.382 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38172 10 6452 1 2025-09-20 13:53:28.157 00:00:10.355 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:53:30.599 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6452 1 2025-09-20 13:50:31.137 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 13:54:30.817 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-09-20 13:54:28.661 00:00:10.328 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:51:31.140 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 13:55:29.027 00:00:10.364 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:55:31.070 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-20 13:55:56.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 13:55:56.759 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:56:31.297 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-09-20 13:56:29.431 00:00:10.364 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:57:31.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-09-20 13:57:29.834 00:00:10.400 TCP 23.104.0.1:52870 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:58:31.733 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40394 10 6452 1 2025-09-20 13:58:30.274 00:00:10.365 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507066, total packets: 1585, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-09-20 12:56:31 - 2025-09-20 13:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0000s Wall: 0.0019s flows/second: 84754.3 Runtime: 0.0019s