Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 13:59:30.677 00:00:10.372 TCP 23.104.0.1:47124 -> 1.101.0.1:3000 11 1507 1 2025-09-20 13:59:31.959 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-09-20 13:56:31.140 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:00:31.105 00:00:10.370 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:00:32.199 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-09-20 14:00:56.874 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:00:56.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 13:57:31.143 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:01:32.413 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50332 10 6452 1 2025-09-20 14:01:31.515 00:00:10.669 TCP 23.104.0.1:49448 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:02:32.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-09-20 14:02:32.223 00:00:10.366 TCP 23.104.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:03:32.848 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 10 6452 1 2025-09-20 14:03:32.628 00:00:10.367 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:04:33.034 00:00:10.322 TCP 23.104.0.1:51068 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:04:33.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-20 14:05:33.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-09-20 14:05:33.396 00:00:10.367 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:05:56.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:05:56.797 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:02:31.144 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:06:33.804 00:00:10.367 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:06:33.526 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-09-20 14:03:31.149 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:07:33.736 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-09-20 14:07:34.213 00:00:10.364 TCP 23.104.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:08:33.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 10 6452 1 2025-09-20 14:08:34.612 00:00:10.329 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:09:34.976 00:00:20.905 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:09:34.121 00:00:21.670 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-09-20 14:10:45.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-09-20 14:10:56.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:10:45.923 00:00:10.387 TCP 23.104.0.1:45198 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:10:57.006 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:11:46.071 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-09-20 14:11:46.346 00:00:10.363 TCP 23.104.0.1:44502 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:08:31.146 00:05:01.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:12:46.296 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-09-20 14:12:46.756 00:00:10.385 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:09:31.148 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:13:46.505 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51160 10 6452 1 2025-09-20 14:13:47.184 00:00:10.325 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:14:46.724 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56572 10 6452 1 2025-09-20 14:14:47.549 00:00:10.363 TCP 23.104.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:15:47.956 00:00:10.327 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:15:57.054 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:15:46.950 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-09-20 14:15:57.292 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:16:48.321 00:00:10.316 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:16:47.143 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53018 10 6452 1 2025-09-20 14:17:47.371 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-09-20 14:17:48.677 00:00:10.367 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:14:31.148 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:18:49.108 00:00:10.362 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:18:47.591 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:42724 10 6452 1 2025-09-20 14:15:31.151 00:05:01.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:19:49.511 00:00:10.360 TCP 23.104.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:19:47.936 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38528 10 6452 1 2025-09-20 14:20:48.172 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51088 10 6452 1 2025-09-20 14:20:57.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:20:57.105 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:20:49.912 00:00:10.366 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:21:50.314 00:00:10.364 TCP 23.104.0.1:57542 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:21:48.391 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39680 10 6452 1 2025-09-20 14:22:50.719 00:00:10.726 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:22:48.559 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 10 6452 1 2025-09-20 14:23:48.781 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-09-20 14:23:51.486 00:00:10.367 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:20:31.151 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:24:49.000 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-09-20 14:24:51.893 00:00:10.370 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:21:31.152 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:25:57.621 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:25:49.232 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-09-20 14:25:57.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:25:52.301 00:00:10.364 TCP 23.104.0.1:42662 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:26:49.408 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 12 10367 1 2025-09-20 14:26:52.703 00:00:10.444 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 15 1926 1 2025-09-20 14:27:49.644 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-09-20 14:27:53.185 00:00:10.364 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:28:49.867 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-09-20 14:28:53.591 00:00:10.324 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:29:50.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-20 14:29:53.956 00:00:10.650 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:26:31.151 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:30:50.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47572 10 6452 1 2025-09-20 14:30:57.242 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:30:57.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:30:54.665 00:00:10.370 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:27:31.154 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:31:50.530 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 12 10367 1 2025-09-20 14:31:55.102 00:00:10.398 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 15 1926 1 2025-09-20 14:32:50.770 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-09-20 14:32:55.541 00:00:10.714 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:33:51.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-09-20 14:33:56.292 00:00:10.750 TCP 23.104.0.1:42140 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:34:51.297 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6452 1 2025-09-20 14:34:57.104 00:00:10.370 TCP 23.104.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:35:57.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:35:51.523 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-09-20 14:35:57.484 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:35:57.512 00:00:10.324 TCP 23.104.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:32:31.152 00:05:01.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:36:52.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-09-20 14:36:57.875 00:00:10.364 TCP 23.104.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:33:31.156 00:05:01.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:37:52.236 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6452 1 2025-09-20 14:37:58.274 00:00:10.325 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:38:52.478 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-09-20 14:38:58.642 00:00:10.364 TCP 23.104.0.1:35582 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:39:52.710 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34978 10 6452 1 2025-09-20 14:39:59.047 00:00:10.367 TCP 23.104.0.1:45588 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:40:57.870 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:40:57.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:40:52.929 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 10 6452 1 2025-09-20 14:40:59.454 00:00:10.401 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 15 1926 1 2025-09-20 14:41:53.145 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 12 10365 1 2025-09-20 14:41:59.891 00:00:10.379 TCP 23.104.0.1:45766 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:38:31.158 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:42:53.393 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2025-09-20 14:43:00.305 00:00:10.330 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:39:31.160 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:43:53.566 00:00:10.643 TCP 1.101.0.1:3000 -> 22.102.0.1:36050 10 6452 1 2025-09-20 14:44:00.685 00:00:10.367 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:44:54.246 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-09-20 14:45:01.102 00:00:10.368 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:45:57.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:45:57.635 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:45:54.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54936 10 6452 1 2025-09-20 14:46:01.508 00:00:10.367 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:46:54.687 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-09-20 14:47:01.921 00:00:10.347 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:47:54.894 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33206 10 6452 1 2025-09-20 14:48:02.312 00:00:11.228 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:44:31.159 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:48:55.082 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-09-20 14:49:03.578 00:00:10.369 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:45:31.163 00:05:01.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:49:55.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-09-20 14:50:03.983 00:00:10.414 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:50:57.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:50:57.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:50:55.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51622 10 6452 1 2025-09-20 14:51:04.434 00:00:10.366 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:51:55.683 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:37620 11 6504 1 2025-09-20 14:52:04.837 00:00:10.394 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:52:56.046 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-09-20 14:53:05.270 00:00:10.368 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:53:56.455 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-09-20 14:54:05.673 00:00:11.066 TCP 23.104.0.1:60688 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:50:31.162 00:05:01.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 14:54:56.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6452 1 2025-09-20 14:55:06.779 00:00:10.365 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:51:31.164 00:05:01.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 14:55:58.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 14:55:58.376 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 14:55:56.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-09-20 14:56:07.183 00:00:10.325 TCP 23.104.0.1:48616 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:56:57.107 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50230 10 6452 1 2025-09-20 14:57:07.544 00:00:10.363 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-09-20 14:57:57.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-09-20 14:58:07.947 00:00:10.372 TCP 23.104.0.1:41836 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503441, total packets: 1570, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-09-20 13:56:31 - 2025-09-20 14:58:18 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0014s Wall: 0.0026s flows/second: 62400.3 Runtime: 0.0026s