Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 17:58:46.566 00:00:10.369 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 11 1507 1 2025-09-25 17:58:47.464 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53548 10 6452 1 2025-09-25 17:59:46.973 00:00:10.368 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-09-25 17:59:47.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6452 1 2025-09-25 17:56:33.479 00:05:01.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:00:47.382 00:00:10.324 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:00:47.881 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-09-25 17:57:33.482 00:05:01.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:01:47.747 00:00:10.333 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:01:48.101 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41714 10 6452 1 2025-09-25 18:02:48.125 00:00:10.373 TCP 23.104.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:02:48.321 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-09-25 18:03:25.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:03:25.964 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:03:48.536 00:00:10.326 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:03:48.536 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-09-25 18:04:48.901 00:00:10.373 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:04:48.748 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49598 10 6452 1 2025-09-25 18:05:49.311 00:00:10.390 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:05:48.959 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:36624 10 6452 1 2025-09-25 18:02:33.482 00:05:01.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:06:49.738 00:00:10.330 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:06:49.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38398 10 6452 1 2025-09-25 18:03:33.484 00:05:01.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:07:49.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-09-25 18:07:50.108 00:00:10.374 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:08:26.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:08:26.140 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:08:50.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-09-25 18:08:50.518 00:00:10.374 TCP 23.104.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:09:50.344 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-09-25 18:09:50.931 00:00:10.384 TCP 23.104.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:10:50.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-09-25 18:10:51.353 00:00:10.370 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:11:50.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-09-25 18:11:51.752 00:00:10.385 TCP 23.104.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:08:33.482 00:05:01.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:12:50.957 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-09-25 18:12:52.175 00:00:10.383 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:13:26.233 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:13:26.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:09:33.485 00:05:01.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:13:51.181 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6452 1 2025-09-25 18:13:52.597 00:00:10.644 TCP 23.104.0.1:45006 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:14:51.398 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-09-25 18:14:53.281 00:00:10.366 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:15:51.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60212 10 6452 1 2025-09-25 18:15:53.684 00:00:10.322 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:16:51.825 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-09-25 18:16:54.063 00:00:10.366 TCP 23.104.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:17:54.467 00:00:10.365 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:17:52.004 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53252 10 6452 1 2025-09-25 18:18:25.967 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:18:26.124 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:14:33.485 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:18:52.175 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-25 18:18:54.870 00:00:10.364 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:15:33.486 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:19:52.342 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-09-25 18:19:55.272 00:00:10.367 TCP 23.104.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:20:55.677 00:00:15.766 TCP 23.104.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:20:52.554 00:00:18.801 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-09-25 18:22:01.401 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-09-25 18:22:01.522 00:00:10.327 TCP 23.104.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:23:01.624 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-09-25 18:23:01.892 00:00:10.333 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:23:26.332 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:23:26.469 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:24:02.271 00:00:10.369 TCP 23.104.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:24:01.844 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-09-25 18:20:33.486 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:25:02.673 00:00:10.380 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:25:02.078 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-09-25 18:21:33.489 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:26:02.303 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-09-25 18:26:03.108 00:00:10.321 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:27:02.526 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-09-25 18:27:03.468 00:00:10.318 TCP 23.104.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:28:02.748 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-09-25 18:28:03.825 00:00:10.342 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:28:26.430 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:28:26.413 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:29:02.966 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-09-25 18:29:04.207 00:00:10.327 TCP 23.104.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:30:04.571 00:00:10.365 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:30:03.203 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-09-25 18:26:33.488 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:31:04.973 00:00:10.370 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:31:03.374 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38344 10 6452 1 2025-09-25 18:27:33.490 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:32:05.383 00:00:10.365 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:32:03.587 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6452 1 2025-09-25 18:33:03.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 2025-09-25 18:33:05.783 00:00:10.326 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:33:26.677 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:33:26.556 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:34:04.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6452 1 2025-09-25 18:34:06.150 00:00:10.321 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:35:04.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-09-25 18:35:06.511 00:00:10.369 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:36:04.447 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53658 10 6452 1 2025-09-25 18:36:06.915 00:00:10.372 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:32:33.490 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:37:04.666 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-09-25 18:37:07.324 00:00:10.364 TCP 23.104.0.1:53812 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:33:33.493 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:38:04.882 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-09-25 18:38:07.722 00:00:10.372 TCP 23.104.0.1:34072 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:38:26.542 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:38:27.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:39:05.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6452 1 2025-09-25 18:39:08.131 00:00:10.328 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:40:05.317 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36280 10 6452 1 2025-09-25 18:40:08.497 00:00:10.364 TCP 23.104.0.1:49382 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:41:05.488 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-09-25 18:41:08.902 00:00:10.376 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:42:05.704 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40244 12 10365 1 2025-09-25 18:42:09.320 00:00:10.496 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 15 1926 1 2025-09-25 18:38:33.493 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:43:05.943 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6452 1 2025-09-25 18:43:09.859 00:00:10.372 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:43:26.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:43:26.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:39:33.494 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:44:06.132 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-09-25 18:44:10.264 00:00:10.367 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:45:06.316 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-09-25 18:45:10.664 00:00:10.359 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:46:06.504 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59456 10 6452 1 2025-09-25 18:46:11.090 00:00:10.364 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:47:06.680 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-09-25 18:47:11.495 00:00:10.366 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:48:06.921 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-09-25 18:48:26.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:48:11.897 00:00:10.415 TCP 23.104.0.1:60544 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:48:26.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:44:33.496 00:05:01.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:49:07.133 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-09-25 18:49:12.347 00:00:10.329 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:45:33.499 00:05:01.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:50:07.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40684 10 6452 1 2025-09-25 18:50:12.718 00:00:10.366 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:51:07.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-09-25 18:51:13.120 00:00:10.445 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 15 1926 1 2025-09-25 18:52:07.780 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:37900 12 10367 1 2025-09-25 18:52:13.620 00:00:10.324 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:53:07.980 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37600 10 6452 1 2025-09-25 18:53:26.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 18:53:26.802 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:53:13.994 00:00:10.375 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:54:08.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57454 10 6452 1 2025-09-25 18:54:14.408 00:00:10.374 TCP 23.104.0.1:59752 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:50:33.496 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 18:55:08.426 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35500 10 6452 1 2025-09-25 18:55:14.820 00:00:10.364 TCP 23.104.0.1:36068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:51:33.499 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 18:56:08.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6452 1 2025-09-25 18:56:15.218 00:00:11.056 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:57:08.867 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-09-25 18:57:16.310 00:00:10.365 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:58:09.067 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-09-25 18:58:27.326 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 18:58:16.713 00:00:10.362 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:58:27.355 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1092, avg pps: 0, avg bpp: 320 Time window: 2025-09-25 17:56:33 - 2025-09-25 18:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0073s User: 0.0016s Wall: 0.0039s flows/second: 42455.6 Runtime: 0.0039s