Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 11:59:17.987 00:00:10.368 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-09-30 11:59:29.702 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-09-30 12:00:18.394 00:00:10.451 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:00:29.917 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53784 10 6452 1 2025-09-30 11:56:35.676 00:05:01.707 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:00:43.212 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:00:43.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:01:18.887 00:00:10.381 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-09-30 11:57:35.679 00:05:01.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:01:30.161 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48184 10 6452 1 2025-09-30 12:02:19.306 00:00:10.372 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 12 1559 1 2025-09-30 12:02:30.337 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-09-30 12:03:19.720 00:00:10.317 TCP 23.104.0.1:55578 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:03:30.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49132 10 6452 1 2025-09-30 12:04:20.106 00:00:10.326 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:04:30.767 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-09-30 12:05:20.467 00:00:10.369 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:05:30.977 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47884 10 6452 1 2025-09-30 12:05:43.286 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:05:43.171 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:06:20.880 00:00:10.374 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:06:31.222 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43584 10 6452 1 2025-09-30 12:02:35.677 00:05:01.707 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:07:21.294 00:00:10.362 TCP 23.104.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:03:35.679 00:05:01.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:07:31.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34844 10 6452 1 2025-09-30 12:08:21.694 00:00:10.375 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:08:31.613 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39158 10 6452 1 2025-09-30 12:09:22.119 00:00:10.320 TCP 23.104.0.1:43968 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:09:31.833 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-09-30 12:10:22.482 00:00:10.370 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:10:43.525 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:10:32.082 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-09-30 12:10:43.458 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:11:22.885 00:00:10.387 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:11:32.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-09-30 12:12:23.309 00:00:10.368 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:08:35.678 00:05:01.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:12:32.528 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-09-30 12:13:23.714 00:00:10.377 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:09:35.681 00:05:01.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:13:32.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 2025-09-30 12:14:24.129 00:00:10.367 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:14:32.963 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-09-30 12:15:24.534 00:00:10.372 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:15:33.183 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:59678 10 6452 1 2025-09-30 12:15:43.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:15:43.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:16:24.947 00:00:10.406 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:16:34.012 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40238 10 6452 1 2025-09-30 12:17:25.372 00:00:10.373 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:17:34.229 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51756 10 6452 1 2025-09-30 12:18:26.022 00:00:10.329 TCP 23.104.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:14:35.680 00:05:01.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:18:34.440 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40752 10 6452 1 2025-09-30 12:19:26.398 00:00:10.328 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:15:35.683 00:05:01.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:19:34.666 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-09-30 12:20:26.764 00:00:10.374 TCP 23.104.0.1:44686 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:20:43.610 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:20:43.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:20:35.081 00:00:20.509 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-09-30 12:21:27.173 00:00:10.331 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:21:45.630 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-09-30 12:22:27.550 00:00:10.365 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:22:45.846 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51190 10 6452 1 2025-09-30 12:23:27.955 00:00:10.370 TCP 23.104.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:23:46.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-09-30 12:24:28.364 00:00:10.362 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:20:35.684 00:05:01.704 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:24:46.302 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-09-30 12:25:43.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:21:35.687 00:05:01.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:25:28.769 00:00:10.370 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:25:43.569 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:25:46.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-09-30 12:26:29.177 00:00:10.367 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:26:46.729 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-09-30 12:27:29.578 00:00:10.325 TCP 23.104.0.1:48174 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:27:46.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-09-30 12:28:29.940 00:00:10.333 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:28:47.176 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54982 10 6452 1 2025-09-30 12:29:30.312 00:00:10.335 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:29:47.355 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-09-30 12:30:30.684 00:00:10.382 TCP 23.104.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:30:43.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:26:35.684 00:05:01.707 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:30:43.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:30:47.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55414 10 6452 1 2025-09-30 12:27:35.691 00:05:01.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:31:31.114 00:00:10.547 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:31:47.781 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-09-30 12:32:31.696 00:00:10.366 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:32:47.949 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-09-30 12:33:32.109 00:00:10.363 TCP 23.104.0.1:54176 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:33:48.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-09-30 12:34:32.520 00:00:10.365 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:34:48.396 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6452 1 2025-09-30 12:35:43.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:35:43.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:35:32.920 00:00:10.332 TCP 23.104.0.1:48638 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:35:48.600 00:00:10.429 TCP 1.101.0.1:3000 -> 22.102.0.1:48660 10 6452 1 2025-09-30 12:32:35.689 00:05:01.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:36:33.291 00:00:10.365 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:36:49.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38816 10 6452 1 2025-09-30 12:33:35.691 00:05:01.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:37:33.697 00:00:10.453 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 15 1926 1 2025-09-30 12:37:49.306 00:00:10.492 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 12 10375 1 2025-09-30 12:38:34.185 00:00:10.331 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:38:49.837 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-09-30 12:39:34.549 00:00:10.364 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:39:50.072 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:59404 10 6452 1 2025-09-30 12:40:44.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:40:34.952 00:00:10.364 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:40:43.781 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:40:50.713 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-09-30 12:41:35.354 00:00:10.368 TCP 23.104.0.1:40342 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:41:50.921 00:00:11.019 TCP 1.101.0.1:3000 -> 22.102.0.1:40604 10 6452 1 2025-09-30 12:38:35.692 00:05:01.702 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:42:35.761 00:00:10.376 TCP 23.104.0.1:55258 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:42:51.979 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-09-30 12:39:35.694 00:05:01.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:43:36.175 00:00:10.364 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:43:52.217 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-09-30 12:44:36.580 00:00:10.365 TCP 23.104.0.1:48746 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:44:52.438 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-09-30 12:45:43.963 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:45:43.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:45:36.986 00:00:10.338 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:45:52.652 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:34320 10 6452 1 2025-09-30 12:46:37.355 00:00:10.365 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:46:52.911 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:55636 10 6452 1 2025-09-30 12:47:37.763 00:00:10.339 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:47:53.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-09-30 12:44:35.694 00:05:01.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:48:38.148 00:00:11.184 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:48:53.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-09-30 12:45:35.695 00:05:01.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:49:39.387 00:00:10.359 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:49:53.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-09-30 12:50:44.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:50:44.822 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:50:39.783 00:00:10.364 TCP 23.104.0.1:41388 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:50:54.008 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-09-30 12:51:40.187 00:00:10.360 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:51:54.223 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-09-30 12:52:40.587 00:00:10.370 TCP 23.104.0.1:50920 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:52:54.447 00:00:10.713 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6452 1 2025-09-30 12:53:40.993 00:00:10.368 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:53:55.200 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-09-30 12:50:35.693 00:05:01.706 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 12:54:41.396 00:00:10.366 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:54:55.427 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55222 10 6452 1 2025-09-30 12:55:44.135 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 12:51:35.697 00:05:01.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 12:55:44.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 12:55:41.800 00:00:10.336 TCP 23.104.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:55:55.644 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-09-30 12:56:42.178 00:00:10.366 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:56:55.867 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57690 10 6452 1 2025-09-30 12:57:42.583 00:00:10.361 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-09-30 12:57:56.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 Summary: total flows: 162, total bytes: 494783, total packets: 1558, avg bps: 1072, avg pps: 0, avg bpp: 317 Time window: 2025-09-30 11:56:35 - 2025-09-30 12:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0044s User: 0.0018s Wall: 0.0023s flows/second: 71336.2 Runtime: 0.0023s