Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 16:58:51.792 00:00:10.322 TCP 23.104.0.1:44276 -> 1.101.0.1:3000 11 1507 1 2025-09-28 16:59:37.696 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-09-28 16:59:51.424 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 16:59:51.104 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 16:59:52.153 00:00:10.379 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-09-28 16:56:34.851 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:00:37.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-09-28 17:00:52.566 00:00:24.897 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-09-28 16:57:34.854 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:01:38.124 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-09-28 17:02:07.521 00:00:10.322 TCP 23.104.0.1:39594 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:02:38.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58752 10 6452 1 2025-09-28 17:03:07.886 00:00:10.727 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:03:38.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33956 10 6452 1 2025-09-28 17:04:08.657 00:00:10.320 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:04:51.427 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:04:38.809 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-09-28 17:04:51.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:05:09.020 00:00:10.357 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:05:38.986 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-09-28 17:06:09.419 00:00:10.370 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:02:34.852 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:06:39.212 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34754 11 6504 1 2025-09-28 17:07:09.823 00:00:10.358 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:03:34.855 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:07:39.438 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-09-28 17:08:10.221 00:00:10.368 TCP 23.104.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:08:39.607 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-09-28 17:09:10.627 00:00:10.323 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:09:39.827 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36184 10 6452 1 2025-09-28 17:09:51.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:09:51.711 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:10:10.983 00:00:10.367 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:10:40.064 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-09-28 17:11:11.387 00:00:10.365 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:11:40.239 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35400 10 6452 1 2025-09-28 17:12:11.794 00:00:10.365 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:08:34.854 00:05:01.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:12:40.451 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-09-28 17:13:12.200 00:00:10.363 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:09:34.856 00:05:01.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:13:40.621 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:43174 10 6452 1 2025-09-28 17:14:12.601 00:00:10.367 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:14:40.787 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56888 10 6452 1 2025-09-28 17:14:51.554 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:14:51.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:15:13.004 00:00:10.367 TCP 23.104.0.1:56986 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:15:41.004 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-09-28 17:16:13.408 00:00:10.365 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:16:41.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-09-28 17:17:13.809 00:00:10.331 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:17:41.389 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-09-28 17:18:14.179 00:00:10.323 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:14:34.854 00:05:01.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:18:41.567 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-09-28 17:19:14.537 00:00:10.320 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:15:34.856 00:05:01.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:19:51.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:19:51.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:19:41.738 00:00:11.116 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-09-28 17:20:14.895 00:00:10.367 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:20:42.889 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-09-28 17:21:15.300 00:00:10.364 TCP 23.104.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:21:43.075 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-09-28 17:22:15.703 00:00:20.428 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:22:43.291 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-09-28 17:23:26.171 00:00:10.364 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:23:43.511 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-09-28 17:24:26.581 00:00:10.364 TCP 23.104.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:20:34.858 00:05:01.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:24:51.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:24:43.683 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-09-28 17:24:52.004 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:25:26.986 00:00:10.371 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:21:34.860 00:05:01.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:25:43.915 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:33346 10 6452 1 2025-09-28 17:26:27.392 00:00:10.328 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:26:44.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47024 10 6452 1 2025-09-28 17:27:27.755 00:00:10.321 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:27:44.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-09-28 17:28:28.111 00:00:10.364 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:28:44.558 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-09-28 17:29:28.515 00:00:10.365 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:29:52.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:29:44.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-09-28 17:29:52.039 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:26:34.858 00:05:01.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:30:28.917 00:00:10.332 TCP 23.104.0.1:39948 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:30:44.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6452 1 2025-09-28 17:27:34.862 00:05:01.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:31:29.287 00:00:10.366 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:31:45.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6452 1 2025-09-28 17:32:29.692 00:00:10.365 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:32:45.394 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55198 10 6452 1 2025-09-28 17:33:30.105 00:00:10.329 TCP 23.104.0.1:52910 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:33:45.608 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-09-28 17:34:30.472 00:00:10.329 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:34:52.259 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:34:52.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:34:45.819 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-09-28 17:35:30.845 00:00:10.381 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:35:45.996 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-09-28 17:36:31.260 00:00:10.326 TCP 23.104.0.1:35394 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:32:34.861 00:05:01.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:36:46.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-09-28 17:33:34.865 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:37:31.626 00:00:10.369 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:37:46.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-09-28 17:38:32.056 00:00:10.366 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:38:46.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49798 10 6452 1 2025-09-28 17:39:32.461 00:00:10.365 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:39:52.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:39:52.464 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:39:46.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-09-28 17:40:32.862 00:00:10.332 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:40:47.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-09-28 17:41:33.232 00:00:10.363 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:41:47.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-09-28 17:38:34.863 00:05:01.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:42:33.641 00:00:10.365 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:42:47.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-09-28 17:39:34.866 00:05:01.617 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:43:34.043 00:00:10.367 TCP 23.104.0.1:57276 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:43:47.731 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51726 10 6452 1 2025-09-28 17:44:34.449 00:00:10.363 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:44:52.410 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:44:52.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:44:47.949 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 12 6556 1 2025-09-28 17:45:34.850 00:00:10.387 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:45:48.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2025-09-28 17:46:35.274 00:00:10.365 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:46:48.656 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-09-28 17:47:35.678 00:00:10.455 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:47:48.865 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-09-28 17:44:34.866 00:05:01.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:48:36.164 00:00:10.325 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:48:49.107 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47104 10 6452 1 2025-09-28 17:45:34.869 00:05:01.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:49:36.533 00:00:10.881 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:49:52.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:49:52.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:49:49.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-09-28 17:50:37.452 00:00:10.371 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:50:49.537 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-09-28 17:51:37.860 00:00:10.380 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:51:49.754 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34338 10 6452 1 2025-09-28 17:52:38.296 00:00:10.364 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:52:50.002 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-09-28 17:53:38.701 00:00:10.364 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:53:50.178 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-09-28 17:50:34.866 00:05:01.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 17:54:39.107 00:00:10.324 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:54:52.542 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 17:54:52.469 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 17:54:50.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36780 10 6452 1 2025-09-28 17:51:34.868 00:05:01.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 17:55:39.473 00:00:10.364 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:55:50.558 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-09-28 17:56:39.873 00:00:10.365 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:56:50.776 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-09-28 17:57:40.281 00:00:10.369 TCP 23.104.0.1:49482 -> 1.101.0.1:3000 11 1507 1 2025-09-28 17:57:50.981 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57898 10 6452 1 2025-09-28 17:58:40.689 00:00:10.384 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492052, total packets: 1565, avg bps: 1053, avg pps: 0, avg bpp: 314 Time window: 2025-09-28 16:56:34 - 2025-09-28 17:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0000s Wall: 0.0022s flows/second: 73159.1 Runtime: 0.0022s