Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 09:59:06.176 00:00:10.366 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:59:07.126 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6452 1 2025-09-24 10:00:06.581 00:00:10.366 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:00:07.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-09-24 09:56:32.829 00:05:01.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:01:07.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-09-24 10:01:06.986 00:00:10.326 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:57:32.832 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:02:07.781 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36274 10 6452 1 2025-09-24 10:02:07.353 00:00:10.360 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:02:47.878 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:02:48.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:03:07.762 00:00:10.333 TCP 23.104.0.1:52662 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:03:07.953 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 12 6556 1 2025-09-24 10:04:08.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-09-24 10:04:08.139 00:00:10.373 TCP 23.104.0.1:36770 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:05:08.406 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-09-24 10:05:08.551 00:00:10.430 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:06:09.019 00:00:10.365 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:06:08.858 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-09-24 10:02:32.830 00:05:01.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:07:09.422 00:00:10.673 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:07:09.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-09-24 10:03:32.833 00:05:01.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:07:47.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:07:47.357 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:08:09.298 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-09-24 10:08:10.133 00:00:10.364 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:09:09.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48416 10 6452 1 2025-09-24 10:09:10.540 00:00:10.366 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:10:09.730 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-09-24 10:10:10.942 00:00:10.346 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:11:09.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-09-24 10:11:11.312 00:00:10.374 TCP 23.104.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:12:10.172 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-09-24 10:12:11.723 00:00:10.432 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:08:32.832 00:05:01.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:12:47.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:12:47.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:13:10.381 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-09-24 10:13:12.198 00:00:10.366 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:09:32.834 00:05:01.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:14:10.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-09-24 10:14:12.602 00:00:10.360 TCP 23.104.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:15:10.777 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60514 10 6452 1 2025-09-24 10:15:13.005 00:00:10.367 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:16:10.949 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 12 10367 1 2025-09-24 10:16:13.419 00:00:10.445 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 15 1926 1 2025-09-24 10:17:11.205 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-09-24 10:17:13.905 00:00:10.329 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:17:47.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:17:47.786 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:18:11.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-09-24 10:18:14.267 00:00:10.365 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:14:32.835 00:05:01.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:19:11.622 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58492 10 6452 1 2025-09-24 10:19:14.670 00:00:10.374 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:15:32.838 00:05:01.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:20:11.839 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-09-24 10:20:15.111 00:00:10.373 TCP 23.104.0.1:60434 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:21:15.527 00:00:11.307 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:21:12.076 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-09-24 10:22:12.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-09-24 10:22:16.873 00:00:10.397 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:22:47.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:22:47.965 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:23:12.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-09-24 10:23:17.281 00:00:10.325 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:24:12.730 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:58724 10 6452 1 2025-09-24 10:24:17.646 00:00:10.367 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:20:32.836 00:05:01.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:25:12.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6452 1 2025-09-24 10:25:18.056 00:00:10.366 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:21:32.839 00:05:01.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:26:13.110 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-09-24 10:26:18.457 00:00:10.365 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:27:13.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-09-24 10:27:18.865 00:00:10.376 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:27:47.945 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:27:48.154 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:28:13.496 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60210 10 6452 1 2025-09-24 10:28:19.273 00:00:10.376 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:29:13.664 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-09-24 10:29:19.688 00:00:10.372 TCP 23.104.0.1:43526 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:30:13.876 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37284 10 6452 1 2025-09-24 10:30:20.102 00:00:10.363 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:26:32.839 00:05:01.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:31:14.094 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 12 10367 1 2025-09-24 10:31:20.502 00:00:10.398 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 15 1926 1 2025-09-24 10:27:32.841 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:32:14.291 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-09-24 10:32:20.941 00:00:10.333 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:32:48.112 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:32:47.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:33:14.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-09-24 10:33:21.313 00:00:10.364 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:34:14.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-09-24 10:34:21.717 00:00:10.376 TCP 23.104.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:35:14.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 12 6556 1 2025-09-24 10:35:22.133 00:00:10.328 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:36:15.139 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-09-24 10:32:32.840 00:05:01.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:36:22.497 00:00:10.327 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:37:15.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43426 10 6452 1 2025-09-24 10:33:32.844 00:05:01.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:37:22.860 00:00:10.372 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:37:48.110 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:37:48.284 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:38:15.563 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 10 6452 1 2025-09-24 10:38:23.268 00:00:10.326 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:39:15.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-09-24 10:39:23.634 00:00:10.369 TCP 23.104.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:40:15.998 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-09-24 10:40:24.045 00:00:10.363 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:41:16.287 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-09-24 10:41:24.443 00:00:10.364 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:42:16.498 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-09-24 10:38:32.847 00:05:01.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:42:24.845 00:00:10.380 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:42:48.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:42:48.418 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:43:16.712 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-09-24 10:43:25.264 00:00:10.372 TCP 23.104.0.1:40598 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:39:32.845 00:05:01.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:44:16.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-09-24 10:44:25.674 00:00:10.326 TCP 23.104.0.1:34760 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:45:17.166 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44398 10 6452 1 2025-09-24 10:45:26.048 00:00:10.370 TCP 23.104.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:46:17.378 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 12 10365 1 2025-09-24 10:46:26.454 00:00:10.440 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 15 1926 1 2025-09-24 10:47:17.619 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-09-24 10:47:26.932 00:00:10.380 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:47:48.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:47:48.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:48:17.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-09-24 10:44:32.844 00:05:01.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:48:27.358 00:00:10.365 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:49:18.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-09-24 10:45:32.846 00:05:01.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:49:27.760 00:00:10.337 TCP 23.104.0.1:51402 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:50:18.290 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-09-24 10:50:28.138 00:00:10.365 TCP 23.104.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:51:18.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-09-24 10:51:28.537 00:00:10.368 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:52:18.729 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-09-24 10:52:28.940 00:00:10.372 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:52:49.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:52:49.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:53:18.940 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:56670 10 6452 1 2025-09-24 10:53:29.354 00:00:10.324 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:54:19.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-09-24 10:50:32.844 00:05:01.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 10:54:29.719 00:00:10.329 TCP 23.104.0.1:37906 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:55:19.422 00:00:11.214 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-09-24 10:51:32.847 00:05:01.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 10:55:30.110 00:00:10.371 TCP 23.104.0.1:38086 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:56:20.672 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:60424 12 10367 1 2025-09-24 10:56:30.517 00:00:10.404 TCP 23.104.0.1:56044 -> 1.101.0.1:3000 15 1926 1 2025-09-24 10:57:20.927 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-09-24 10:57:30.962 00:00:10.373 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-09-24 10:57:48.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 10:57:48.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 10:58:21.170 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-09-24 10:58:31.374 00:00:10.363 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 515890, total packets: 1600, avg bps: 1106, avg pps: 0, avg bpp: 322 Time window: 2025-09-24 09:56:32 - 2025-09-24 10:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0015s Wall: 0.0015s flows/second: 112249.7 Runtime: 0.0015s