Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 11:59:12.163 00:00:10.378 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-09-25 11:59:23.388 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-09-25 12:00:12.579 00:00:10.367 TCP 23.104.0.1:50838 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:00:23.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-25 11:56:33.336 00:05:01.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:01:12.987 00:00:10.337 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:01:23.815 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56448 10 6452 1 2025-09-25 11:57:33.340 00:05:01.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:02:13.371 00:00:10.363 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:02:23.987 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32954 10 6452 1 2025-09-25 12:03:18.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:03:19.152 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:03:13.771 00:00:10.375 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:03:24.204 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-09-25 12:04:14.186 00:00:10.367 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:04:24.423 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59346 10 6452 1 2025-09-25 12:05:14.587 00:00:10.362 TCP 23.104.0.1:42728 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:05:24.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2025-09-25 12:06:14.992 00:00:10.363 TCP 23.104.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:06:24.851 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-25 12:02:33.338 00:05:01.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:07:15.395 00:00:10.372 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:03:33.341 00:05:01.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:07:25.096 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 10 6452 1 2025-09-25 12:08:19.104 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:08:19.043 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:08:15.804 00:00:10.361 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:08:25.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-09-25 12:09:16.205 00:00:10.367 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:09:25.531 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 10 6452 1 2025-09-25 12:10:16.612 00:00:10.366 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:10:25.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-09-25 12:11:17.015 00:00:10.374 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:11:25.981 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-09-25 12:12:17.424 00:00:10.326 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:08:33.340 00:05:01.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:12:26.210 00:00:10.890 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6452 1 2025-09-25 12:13:18.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:13:18.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:13:17.787 00:00:10.462 TCP 23.104.0.1:53476 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:09:33.342 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:13:27.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-09-25 12:14:18.297 00:00:10.400 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:14:27.359 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 2025-09-25 12:15:18.763 00:00:10.336 TCP 23.104.0.1:43488 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:15:27.599 00:00:10.585 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-09-25 12:16:19.139 00:00:10.366 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:16:28.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6452 1 2025-09-25 12:17:19.545 00:00:10.363 TCP 23.104.0.1:49862 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:17:28.435 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36992 10 6452 1 2025-09-25 12:18:18.981 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:18:18.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:18:19.947 00:00:10.341 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:14:33.361 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:18:28.622 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38274 10 6452 1 2025-09-25 12:19:20.329 00:00:10.365 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:15:33.363 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:19:28.831 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-09-25 12:20:20.730 00:00:10.376 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:20:29.103 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56842 10 6452 1 2025-09-25 12:21:21.140 00:00:10.325 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:21:29.329 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-09-25 12:22:21.499 00:00:10.367 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:22:29.554 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-09-25 12:23:19.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:23:19.219 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:23:21.902 00:00:10.323 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:23:29.735 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37234 10 6452 1 2025-09-25 12:20:33.361 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:24:22.265 00:00:10.380 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:24:29.955 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-09-25 12:21:33.365 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:25:22.686 00:00:10.326 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:25:30.151 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-09-25 12:26:23.056 00:00:10.365 TCP 23.104.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:26:30.364 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-09-25 12:27:23.477 00:00:10.368 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:27:30.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-09-25 12:28:19.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:28:19.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:28:23.883 00:00:10.375 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:28:30.749 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-09-25 12:29:24.298 00:00:10.362 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:29:30.968 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-09-25 12:26:33.365 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:30:24.701 00:00:10.360 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:30:31.151 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56360 10 6452 1 2025-09-25 12:27:33.367 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:31:25.100 00:00:10.364 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:31:31.364 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-09-25 12:32:25.502 00:00:10.371 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:32:31.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-09-25 12:33:19.502 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:33:19.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:33:25.909 00:00:10.327 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:33:31.790 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-09-25 12:34:26.275 00:00:10.367 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:34:31.964 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-09-25 12:35:26.677 00:00:10.370 TCP 23.104.0.1:48036 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:35:32.209 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-09-25 12:32:33.366 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:36:27.100 00:00:10.370 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:36:32.380 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-09-25 12:33:33.369 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:37:27.503 00:00:10.366 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:37:32.600 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48096 10 6452 1 2025-09-25 12:38:19.556 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:38:19.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:38:27.904 00:00:10.365 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:38:32.810 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-09-25 12:39:28.309 00:00:10.365 TCP 23.104.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:39:33.024 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-09-25 12:40:28.712 00:00:10.324 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:40:33.239 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-09-25 12:41:29.101 00:00:10.371 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:41:33.457 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6452 1 2025-09-25 12:38:33.368 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:42:29.499 00:00:10.363 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:42:33.634 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-09-25 12:43:19.492 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:43:19.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:39:33.370 00:05:01.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:43:29.900 00:00:10.382 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:43:33.929 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-09-25 12:44:30.346 00:00:14.801 TCP 23.104.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:44:34.116 00:00:10.940 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-09-25 12:45:35.111 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6452 1 2025-09-25 12:45:35.213 00:00:10.322 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:46:35.571 00:00:10.362 TCP 23.104.0.1:50246 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:46:35.331 00:00:10.265 TCP 1.101.0.1:3000 -> 22.102.0.1:57062 10 6452 1 2025-09-25 12:47:35.635 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-09-25 12:47:35.970 00:00:10.423 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:48:19.683 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:48:19.838 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:44:33.374 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:48:35.812 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-09-25 12:48:36.431 00:00:10.371 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:45:33.377 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:49:36.036 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-09-25 12:49:36.843 00:00:10.386 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:50:36.255 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41460 10 6452 1 2025-09-25 12:50:37.267 00:00:10.367 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:51:36.478 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 11 6504 1 2025-09-25 12:51:37.670 00:00:10.363 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:52:36.752 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49858 10 6452 1 2025-09-25 12:52:38.099 00:00:10.363 TCP 23.104.0.1:46376 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:53:19.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:53:19.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:53:36.972 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 11 6504 1 2025-09-25 12:53:38.500 00:00:10.366 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:50:33.376 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 12:54:37.259 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-25 12:54:38.905 00:00:10.334 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:51:33.377 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 12:55:37.471 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-09-25 12:55:39.276 00:00:10.371 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:56:39.682 00:00:10.364 TCP 23.104.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:56:37.691 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 10 6452 1 2025-09-25 12:57:37.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-09-25 12:57:40.100 00:00:10.367 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:58:19.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 12:58:19.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 12:58:40.502 00:00:10.364 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:58:38.114 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40618 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-09-25 11:56:33 - 2025-09-25 12:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0025s flows/second: 65654.8 Runtime: 0.0025s