Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 06:59:10.133 00:00:10.362 TCP 23.104.0.1:55678 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:59:15.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-09-25 07:00:10.533 00:00:10.363 TCP 23.104.0.1:58610 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:00:15.833 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-09-25 06:56:33.256 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:01:10.933 00:00:10.386 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:01:16.012 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-09-25 06:57:33.258 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:02:11.358 00:00:10.369 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:02:16.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-09-25 07:03:12.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:03:12.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:03:11.769 00:00:10.375 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:03:16.403 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58518 10 6452 1 2025-09-25 07:04:12.186 00:00:10.364 TCP 23.104.0.1:44564 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:04:16.615 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-09-25 07:05:16.793 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-09-25 07:05:12.587 00:00:10.370 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:06:12.990 00:00:10.370 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:06:17.031 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-09-25 07:02:33.257 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:07:13.394 00:00:10.368 TCP 23.104.0.1:49456 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:07:17.274 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59340 10 6452 1 2025-09-25 07:03:33.259 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:08:12.811 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:08:12.784 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:08:13.801 00:00:10.365 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:08:17.484 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-09-25 07:09:14.210 00:00:10.361 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:09:17.653 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54896 10 6452 1 2025-09-25 07:10:14.607 00:00:10.363 TCP 23.104.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:10:17.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-09-25 07:11:15.007 00:00:10.366 TCP 23.104.0.1:60974 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:11:18.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-09-25 07:12:15.412 00:00:10.323 TCP 23.104.0.1:44976 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:12:18.254 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-09-25 07:08:33.259 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:13:13.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:13:13.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:13:15.777 00:00:10.324 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:13:18.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-09-25 07:09:33.261 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:14:16.140 00:00:10.368 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:14:18.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-09-25 07:15:16.548 00:00:10.322 TCP 23.104.0.1:36646 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:15:18.897 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-09-25 07:16:16.908 00:00:10.366 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:16:19.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-09-25 07:17:17.315 00:00:10.361 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:17:19.325 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-09-25 07:18:13.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:18:12.857 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:18:19.555 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-09-25 07:18:17.719 00:00:10.376 TCP 23.104.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:14:33.259 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:19:18.139 00:00:10.369 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:19:19.738 00:00:10.570 TCP 1.101.0.1:3000 -> 22.102.0.1:54118 10 6452 1 2025-09-25 07:15:33.263 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:20:18.542 00:00:10.332 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:20:20.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-09-25 07:21:20.564 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-09-25 07:21:18.910 00:00:10.363 TCP 23.104.0.1:38104 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:22:20.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6452 1 2025-09-25 07:22:19.316 00:00:10.368 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:23:13.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:23:13.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:23:20.956 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-09-25 07:23:19.722 00:00:10.373 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:24:21.199 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-09-25 07:24:20.132 00:00:10.364 TCP 23.104.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:20:33.259 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:25:21.419 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-09-25 07:25:20.536 00:00:10.375 TCP 23.104.0.1:50724 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:21:33.263 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:26:20.941 00:00:10.373 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:26:21.638 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-09-25 07:27:21.805 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-09-25 07:27:21.359 00:00:10.324 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:28:13.115 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:28:13.128 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:28:22.029 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-09-25 07:28:21.726 00:00:10.371 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:29:22.139 00:00:10.361 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:29:22.248 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-09-25 07:30:22.465 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-09-25 07:26:33.263 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:30:22.540 00:00:10.370 TCP 23.104.0.1:36484 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:31:22.671 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6452 1 2025-09-25 07:27:33.266 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:31:22.947 00:00:10.366 TCP 23.104.0.1:40134 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:32:23.346 00:00:10.365 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:32:22.888 00:00:10.279 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 10 6452 1 2025-09-25 07:33:13.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:33:13.600 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:33:23.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-09-25 07:33:23.752 00:00:10.327 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 12 1559 1 2025-09-25 07:34:23.416 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-09-25 07:34:24.121 00:00:10.367 TCP 23.104.0.1:49924 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:35:24.528 00:00:10.369 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:35:23.592 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-09-25 07:36:23.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49410 10 6452 1 2025-09-25 07:32:33.264 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:36:24.933 00:00:10.339 TCP 23.104.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:37:25.304 00:00:10.320 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:33:33.266 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:37:23.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42116 10 6452 1 2025-09-25 07:38:13.515 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:38:13.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:38:25.659 00:00:10.365 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:38:24.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-09-25 07:39:24.438 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56798 10 6452 1 2025-09-25 07:39:26.086 00:00:10.365 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:40:26.494 00:00:10.317 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:40:24.656 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46362 10 6452 1 2025-09-25 07:41:24.874 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-09-25 07:41:26.854 00:00:10.332 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:42:25.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-09-25 07:38:33.265 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:42:27.229 00:00:10.331 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:43:13.684 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:43:13.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:43:25.318 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-09-25 07:39:33.267 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:43:27.599 00:00:10.323 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:44:25.531 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-09-25 07:44:27.963 00:00:10.333 TCP 23.104.0.1:55180 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:45:25.748 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-09-25 07:45:28.335 00:00:10.363 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:46:25.963 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-09-25 07:46:28.737 00:00:10.325 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:47:26.192 00:00:10.848 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-25 07:47:29.105 00:00:10.432 TCP 23.104.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:48:13.366 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:48:13.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:44:33.266 00:05:01.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:48:29.581 00:00:10.331 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:48:27.083 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-09-25 07:45:33.269 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:49:29.951 00:00:10.370 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:49:27.258 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-09-25 07:50:30.359 00:00:10.371 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:50:27.430 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-09-25 07:51:27.648 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56666 10 6452 1 2025-09-25 07:51:30.765 00:00:10.373 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:52:31.172 00:00:10.366 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:52:27.858 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-09-25 07:53:13.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:53:13.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:53:28.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-09-25 07:53:31.578 00:00:10.372 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:50:33.269 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 07:54:28.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44028 10 6452 1 2025-09-25 07:54:31.986 00:00:10.367 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:51:33.272 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 07:55:28.465 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 11 6504 1 2025-09-25 07:55:32.394 00:00:10.361 TCP 23.104.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:56:28.692 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-09-25 07:56:32.791 00:00:10.374 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:57:28.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-09-25 07:57:33.203 00:00:10.371 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-09-25 07:58:13.898 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 07:58:13.816 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 07:58:29.121 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:40870 10 6452 1 2025-09-25 07:58:33.611 00:00:10.360 TCP 23.104.0.1:51936 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1068, avg pps: 0, avg bpp: 316 Time window: 2025-09-25 06:56:33 - 2025-09-25 07:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0024s Wall: 0.0026s flows/second: 62408.4 Runtime: 0.0026s