Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 15:59:40.339 00:00:10.336 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-09-20 15:59:39.786 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-09-20 15:56:31.180 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:00:40.711 00:00:10.364 TCP 23.104.0.1:60024 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:00:40.014 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-09-20 16:00:59.107 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:00:58.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 15:57:31.183 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:01:40.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-09-20 16:01:41.114 00:00:10.363 TCP 23.104.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:02:40.430 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37618 10 6452 1 2025-09-20 16:02:41.518 00:00:10.326 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:03:40.655 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-09-20 16:03:41.884 00:00:10.393 TCP 23.104.0.1:38052 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:04:40.886 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-09-20 16:04:42.315 00:00:10.367 TCP 23.104.0.1:54078 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:05:41.080 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-09-20 16:05:42.718 00:00:10.375 TCP 23.104.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:05:59.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:05:59.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:02:31.180 00:05:01.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:06:41.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-09-20 16:06:43.131 00:00:10.368 TCP 23.104.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:03:31.183 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:07:41.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-09-20 16:07:43.530 00:00:10.319 TCP 23.104.0.1:53578 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:08:41.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-09-20 16:08:43.886 00:00:10.385 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:09:41.946 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35308 10 6452 1 2025-09-20 16:09:44.305 00:00:10.369 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:10:44.706 00:00:10.364 TCP 23.104.0.1:60822 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:10:42.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-09-20 16:10:59.568 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:10:59.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:11:45.113 00:00:10.366 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:11:42.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-09-20 16:08:31.182 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:12:42.569 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6452 1 2025-09-20 16:12:45.517 00:00:10.365 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:09:31.187 00:05:01.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:13:42.783 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-09-20 16:13:45.920 00:00:10.387 TCP 23.104.0.1:46142 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:14:46.354 00:00:10.368 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:14:42.991 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-09-20 16:15:43.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56060 10 6452 1 2025-09-20 16:15:59.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:15:59.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:15:46.761 00:00:10.378 TCP 23.104.0.1:33790 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:16:43.388 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-09-20 16:16:47.174 00:00:10.368 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:17:43.567 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-09-20 16:17:47.577 00:00:10.369 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:14:31.186 00:05:01.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:18:43.787 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53306 10 6452 1 2025-09-20 16:18:47.978 00:00:10.364 TCP 23.104.0.1:49672 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:15:31.188 00:05:01.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:19:44.013 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-20 16:19:48.383 00:00:10.365 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:20:44.231 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 10 6452 1 2025-09-20 16:20:59.674 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:20:48.786 00:00:10.327 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:20:59.647 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:21:44.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-09-20 16:21:49.149 00:00:10.370 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:22:44.999 00:00:23.779 TCP 1.101.0.1:3000 -> 22.102.0.1:48112 10 6452 1 2025-09-20 16:22:49.555 00:00:19.307 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:23:58.825 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-09-20 16:23:58.915 00:00:10.366 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:20:31.186 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:24:59.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48852 10 6452 1 2025-09-20 16:24:59.316 00:00:10.319 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:21:31.189 00:05:01.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:25:59.688 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:25:59.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:25:59.675 00:00:10.363 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:25:59.297 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-09-20 16:26:59.472 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 10 6452 1 2025-09-20 16:27:00.108 00:00:10.363 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:27:59.685 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-09-20 16:28:00.513 00:00:10.367 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:28:59.892 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-09-20 16:29:00.918 00:00:10.362 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:30:01.321 00:00:10.320 TCP 23.104.0.1:60868 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:30:00.115 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-09-20 16:26:31.187 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:30:59.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:30:59.729 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:31:00.286 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-09-20 16:31:01.680 00:00:10.362 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:27:31.190 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:32:00.452 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-09-20 16:32:02.101 00:00:10.363 TCP 23.104.0.1:35378 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:33:00.667 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6452 1 2025-09-20 16:33:02.501 00:00:10.370 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:34:00.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-09-20 16:34:02.910 00:00:10.368 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:35:01.097 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-09-20 16:35:03.310 00:00:10.368 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:35:59.723 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:35:59.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:36:01.267 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-09-20 16:36:03.714 00:00:10.384 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:32:31.192 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:37:01.478 00:00:21.596 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-09-20 16:37:04.128 00:00:19.040 TCP 23.104.0.1:39392 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:33:31.193 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:38:13.209 00:00:10.362 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:38:13.115 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-09-20 16:39:13.340 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-09-20 16:39:13.610 00:00:10.320 TCP 23.104.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:40:13.967 00:00:10.362 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:40:13.563 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49484 10 6452 1 2025-09-20 16:40:59.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:40:59.953 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:41:13.785 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-09-20 16:41:14.370 00:00:10.321 TCP 23.104.0.1:48036 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:42:13.963 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 12 6556 1 2025-09-20 16:42:14.730 00:00:10.377 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:38:31.192 00:05:01.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:43:15.138 00:00:10.367 TCP 23.104.0.1:41836 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:43:14.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-09-20 16:39:31.196 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:44:15.543 00:00:10.373 TCP 23.104.0.1:39948 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:44:14.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6452 1 2025-09-20 16:45:15.948 00:00:10.335 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:45:14.645 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43822 10 6452 1 2025-09-20 16:46:00.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:46:00.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:46:14.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49012 10 6452 1 2025-09-20 16:46:16.319 00:00:10.324 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:47:15.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-09-20 16:47:16.687 00:00:10.366 TCP 23.104.0.1:54692 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:48:15.307 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46776 10 6452 1 2025-09-20 16:48:17.100 00:00:10.325 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:44:31.193 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:49:15.521 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32870 10 6452 1 2025-09-20 16:49:17.463 00:00:10.371 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:45:31.196 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:50:15.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-09-20 16:50:17.876 00:00:10.370 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:51:00.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:51:00.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:51:15.954 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 2025-09-20 16:51:18.283 00:00:10.363 TCP 23.104.0.1:48582 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:52:16.188 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-09-20 16:52:18.688 00:00:10.365 TCP 23.104.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:53:16.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-09-20 16:53:19.110 00:00:10.366 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:54:16.623 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-09-20 16:54:19.512 00:00:10.381 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:50:31.194 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 16:55:16.842 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-09-20 16:55:19.921 00:00:10.392 TCP 23.104.0.1:47594 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:51:31.197 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 16:56:00.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 16:55:59.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 16:56:17.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-09-20 16:56:20.355 00:00:10.330 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:57:17.288 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-09-20 16:57:20.722 00:00:10.336 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-09-20 16:58:17.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57024 10 6452 1 2025-09-20 16:58:21.111 00:00:10.374 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490493, total packets: 1553, avg bps: 1054, avg pps: 0, avg bpp: 315 Time window: 2025-09-20 15:56:31 - 2025-09-20 16:58:31 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0020s Wall: 0.0031s flows/second: 52734.0 Runtime: 0.0031s