Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 14:58:49.944 00:00:10.373 TCP 23.104.0.1:53566 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:58:59.497 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58098 10 6452 1 2025-09-26 14:59:50.358 00:00:10.376 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-09-26 14:59:59.710 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-26 14:56:33.883 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:00:50.781 00:00:10.363 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:00:59.898 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-09-26 14:57:33.886 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:01:51.186 00:00:10.327 TCP 23.104.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:02:00.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41346 10 6452 1 2025-09-26 15:02:51.547 00:00:10.327 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:03:00.320 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-09-26 15:03:51.270 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:03:51.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:03:51.914 00:00:10.329 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:04:00.536 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-09-26 15:04:52.284 00:00:10.323 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:05:00.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-09-26 15:05:52.646 00:00:10.367 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:06:00.924 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34778 10 6452 1 2025-09-26 15:02:33.887 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:06:53.049 00:00:10.326 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:07:01.152 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6452 1 2025-09-26 15:03:33.889 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:07:53.412 00:00:10.324 TCP 23.104.0.1:52358 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:08:01.365 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-09-26 15:08:51.252 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:08:51.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:08:53.769 00:00:10.373 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:09:01.589 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-09-26 15:09:54.175 00:00:10.320 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:10:01.808 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6452 1 2025-09-26 15:10:54.537 00:00:10.371 TCP 23.104.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:11:02.020 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 10 6452 1 2025-09-26 15:11:54.946 00:00:10.375 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:12:02.245 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56878 10 6452 1 2025-09-26 15:08:33.887 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:12:55.359 00:00:10.328 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:13:02.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-09-26 15:09:33.890 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:13:51.586 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:13:51.520 00:00:00.012 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:13:55.723 00:00:10.370 TCP 23.104.0.1:55266 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:14:02.637 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59958 10 6452 1 2025-09-26 15:14:56.133 00:00:10.323 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:15:02.845 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60358 10 6452 1 2025-09-26 15:15:56.487 00:00:10.560 TCP 23.104.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:16:03.072 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-09-26 15:16:57.100 00:00:10.367 TCP 23.104.0.1:33560 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:17:03.245 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-09-26 15:17:57.501 00:00:10.333 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:18:03.457 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-09-26 15:14:33.890 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:18:51.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:18:51.699 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:18:57.869 00:00:10.371 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:19:03.668 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-09-26 15:15:33.893 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:19:58.279 00:00:10.377 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:20:03.882 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6452 1 2025-09-26 15:20:58.691 00:00:10.378 TCP 23.104.0.1:44962 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:21:04.098 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-09-26 15:21:59.115 00:00:10.326 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:22:04.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40538 10 6452 1 2025-09-26 15:22:59.475 00:00:10.326 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:23:04.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-09-26 15:23:51.637 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:23:51.636 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:23:59.837 00:00:10.352 TCP 23.104.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:24:04.755 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:48374 10 6452 1 2025-09-26 15:20:33.893 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:25:00.226 00:00:10.364 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:25:05.009 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33876 10 6452 1 2025-09-26 15:21:33.896 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:26:00.630 00:00:10.325 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:26:05.230 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 12 6556 1 2025-09-26 15:27:00.990 00:00:10.367 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:27:05.442 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6452 1 2025-09-26 15:28:01.398 00:00:10.320 TCP 23.104.0.1:49616 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:28:05.614 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-09-26 15:28:51.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:28:51.762 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:29:05.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53402 10 6452 1 2025-09-26 15:29:01.760 00:00:10.374 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:30:06.069 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38692 10 6452 1 2025-09-26 15:30:02.170 00:00:10.366 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:26:33.897 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:31:06.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-09-26 15:31:02.581 00:00:10.370 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:27:33.900 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:32:06.460 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43818 12 10365 1 2025-09-26 15:32:02.986 00:00:10.443 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 15 1926 1 2025-09-26 15:33:06.696 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:46848 10 6452 1 2025-09-26 15:33:03.471 00:00:10.362 TCP 23.104.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:33:51.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:33:51.845 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:34:03.871 00:00:10.325 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:34:06.875 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-09-26 15:35:04.232 00:00:10.361 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:35:07.098 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-09-26 15:36:04.636 00:00:10.361 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:36:07.316 00:00:10.701 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-09-26 15:32:33.901 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:37:05.033 00:00:10.369 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:37:08.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-09-26 15:33:33.905 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:38:05.442 00:00:10.357 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:38:08.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-09-26 15:38:51.800 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:38:52.013 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:39:05.840 00:00:10.383 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:39:08.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52442 10 6452 1 2025-09-26 15:40:06.261 00:00:10.372 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:40:08.721 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6452 1 2025-09-26 15:41:06.666 00:00:10.361 TCP 23.104.0.1:43618 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:41:08.934 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-09-26 15:42:07.091 00:00:10.370 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:42:09.173 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43864 10 6452 1 2025-09-26 15:38:33.902 00:05:01.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:43:07.498 00:00:10.370 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:43:09.393 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-09-26 15:39:33.905 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:43:52.097 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:43:52.413 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:44:07.903 00:00:10.367 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:44:09.564 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-09-26 15:45:09.779 00:00:10.835 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-09-26 15:45:08.307 00:00:10.367 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:46:08.709 00:00:10.367 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:46:10.652 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33846 10 6452 1 2025-09-26 15:47:09.114 00:00:10.367 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:47:10.874 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-09-26 15:48:11.107 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-09-26 15:48:09.517 00:00:10.325 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:44:33.905 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:48:51.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:48:52.212 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:49:09.881 00:00:10.339 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:49:11.285 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-09-26 15:45:33.909 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:50:11.499 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-09-26 15:50:10.264 00:00:10.373 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:51:10.675 00:00:10.367 TCP 23.104.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:51:11.796 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-09-26 15:52:11.100 00:00:10.367 TCP 23.104.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:52:12.011 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-09-26 15:53:11.505 00:00:10.372 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:53:12.604 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-09-26 15:53:52.343 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 15:53:52.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 15:54:11.918 00:00:10.333 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:54:12.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6452 1 2025-09-26 15:50:33.907 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 15:55:13.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54014 10 6452 1 2025-09-26 15:55:12.290 00:00:10.363 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:51:33.911 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 15:56:12.692 00:00:10.367 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:56:13.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55110 10 6452 1 2025-09-26 15:57:13.464 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35126 10 6452 1 2025-09-26 15:57:13.107 00:00:10.365 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:58:13.508 00:00:10.367 TCP 23.104.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-09-26 15:58:13.640 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 Summary: total flows: 162, total bytes: 502280, total packets: 1574, avg bps: 1083, avg pps: 0, avg bpp: 319 Time window: 2025-09-26 14:56:33 - 2025-09-26 15:58:23 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 76595.3 Runtime: 0.0021s