Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 04:58:50.561 00:00:10.374 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:59:12.814 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-09-02 04:59:50.973 00:00:10.375 TCP 23.104.0.1:57704 -> 1.101.0.1:3000 11 1507 1 2025-09-02 04:55:22.296 00:06:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:00:13.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 10 6452 1 2025-09-02 05:00:51.390 00:00:10.324 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:01:13.252 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43914 10 6452 1 2025-09-02 05:01:58.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:01:59.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:01:51.759 00:00:10.390 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:02:13.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-09-02 05:02:52.186 00:00:10.368 TCP 23.104.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:03:13.677 00:00:10.740 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6452 1 2025-09-02 04:58:22.294 00:06:00.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:03:52.603 00:00:10.373 TCP 23.104.0.1:35890 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:04:14.459 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:58732 10 6452 1 2025-09-02 05:04:53.014 00:00:10.356 TCP 23.104.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:05:14.871 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-09-02 05:05:53.411 00:00:10.365 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:06:15.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-09-02 05:06:59.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:06:59.066 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:06:53.814 00:00:10.332 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:02:22.299 00:06:00.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:07:15.286 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50044 10 6452 1 2025-09-02 05:07:54.187 00:00:10.364 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:08:15.454 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-09-02 05:08:54.589 00:00:10.370 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:09:15.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-09-02 05:09:55.001 00:00:10.370 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:10:15.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 10 6452 1 2025-09-02 05:05:22.297 00:06:00.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:10:55.410 00:00:10.338 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:11:16.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-09-02 05:11:59.264 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:11:59.101 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:11:55.788 00:00:10.325 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:12:16.315 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6452 1 2025-09-02 05:12:56.148 00:00:10.367 TCP 23.104.0.1:54994 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:13:16.490 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-09-02 05:13:56.552 00:00:10.379 TCP 23.104.0.1:51298 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:09:22.299 00:06:00.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:14:16.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6452 1 2025-09-02 05:14:56.968 00:00:10.379 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:15:16.920 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38754 10 6452 1 2025-09-02 05:15:57.383 00:00:10.327 TCP 23.104.0.1:47982 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:16:17.131 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-09-02 05:16:59.350 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:16:59.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:16:57.742 00:00:10.366 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:12:22.298 00:06:00.624 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:17:17.352 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-09-02 05:17:58.147 00:00:10.946 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:18:17.575 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-09-02 05:18:59.137 00:00:10.369 TCP 23.104.0.1:42846 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:19:17.789 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40272 10 6452 1 2025-09-02 05:19:59.542 00:00:10.904 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:20:18.012 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-09-02 05:21:00.494 00:00:10.323 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:16:22.300 00:06:00.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:21:18.266 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-09-02 05:21:59.308 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:21:59.403 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:22:00.854 00:00:10.379 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:22:18.438 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-09-02 05:23:01.284 00:00:10.441 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 15 1926 1 2025-09-02 05:23:18.618 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42026 12 10367 1 2025-09-02 05:24:01.764 00:00:10.383 TCP 23.104.0.1:38050 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:19:22.299 00:06:00.626 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:24:18.818 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-09-02 05:25:02.185 00:00:10.363 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:25:18.991 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38268 10 6452 1 2025-09-02 05:26:02.589 00:00:10.739 TCP 23.104.0.1:53182 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:26:19.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-09-02 05:26:59.510 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:26:59.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:27:03.371 00:00:10.325 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:27:19.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41726 10 6452 1 2025-09-02 05:28:03.738 00:00:10.366 TCP 23.104.0.1:58430 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:23:22.304 00:06:00.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:28:19.606 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-09-02 05:29:04.142 00:00:10.372 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:29:19.815 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-09-02 05:30:04.559 00:00:10.377 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:30:20.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40808 10 6452 1 2025-09-02 05:31:04.979 00:00:10.367 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:26:22.302 00:06:00.626 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:31:20.252 00:00:10.263 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-09-02 05:31:59.611 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:31:59.640 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:32:05.383 00:00:10.368 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:32:20.548 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-09-02 05:33:05.787 00:00:10.371 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:33:20.720 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-09-02 05:34:06.200 00:00:10.367 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:34:20.936 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:56040 10 6452 1 2025-09-02 05:35:06.601 00:00:10.320 TCP 23.104.0.1:49200 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:30:22.304 00:06:00.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:35:21.182 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-09-02 05:36:06.959 00:00:10.370 TCP 23.104.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:36:21.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35698 10 6452 1 2025-09-02 05:36:59.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:36:59.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:37:07.368 00:00:10.326 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:37:21.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-09-02 05:38:07.730 00:00:10.375 TCP 23.104.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:33:22.303 00:06:00.627 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:38:21.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6452 1 2025-09-02 05:39:08.143 00:00:10.326 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:39:22.065 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48416 10 6452 1 2025-09-02 05:40:08.509 00:00:10.371 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:40:22.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-09-02 05:41:08.919 00:00:10.383 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:41:22.496 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58796 10 6452 1 2025-09-02 05:41:59.542 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:41:59.672 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:42:09.342 00:00:10.366 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:37:22.306 00:06:00.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:42:22.667 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45836 10 6452 1 2025-09-02 05:43:09.751 00:00:10.458 TCP 23.104.0.1:58892 -> 1.101.0.1:3000 15 1926 1 2025-09-02 05:43:22.841 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 12 10367 1 2025-09-02 05:44:10.243 00:00:10.366 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:44:23.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-09-02 05:45:10.649 00:00:10.370 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:40:22.303 00:06:00.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:45:23.326 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-09-02 05:46:11.059 00:00:10.369 TCP 23.104.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:46:23.506 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45860 10 6452 1 2025-09-02 05:46:59.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:47:00.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:47:11.468 00:00:10.360 TCP 23.104.0.1:41824 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:47:23.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-09-02 05:48:11.867 00:00:10.491 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:48:23.943 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 10 6452 1 2025-09-02 05:44:22.308 00:06:00.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:49:12.395 00:00:10.364 TCP 23.104.0.1:50660 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:49:24.136 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-09-02 05:50:12.795 00:00:10.347 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:50:24.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-09-02 05:51:13.180 00:00:10.367 TCP 23.104.0.1:56026 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:51:24.564 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48630 10 6452 1 2025-09-02 05:51:59.755 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:51:59.978 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:52:13.581 00:00:10.368 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:47:22.305 00:06:00.628 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 05:52:24.771 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-09-02 05:53:13.985 00:00:10.384 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:53:24.989 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-09-02 05:54:14.407 00:00:10.358 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:54:25.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-09-02 05:55:14.805 00:00:10.379 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:55:25.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-09-02 05:56:15.230 00:00:10.368 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:51:22.308 00:06:00.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 05:56:25.650 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-09-02 05:56:59.688 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 05:57:00.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 05:57:15.633 00:00:10.382 TCP 23.104.0.1:39950 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:57:25.819 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43178 10 6452 1 2025-09-02 05:58:16.060 00:00:10.363 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-09-02 05:58:26.068 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59268 10 6452 1 Summary: total flows: 161, total bytes: 506893, total packets: 1582, avg bps: 1068, avg pps: 0, avg bpp: 320 Time window: 2025-09-02 04:55:22 - 2025-09-02 05:58:36 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0048s User: 0.0008s Wall: 0.0028s flows/second: 57010.0 Runtime: 0.0028s