Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 11:58:55.436 00:00:10.323 TCP 23.104.0.1:55644 -> 1.101.0.1:3000 11 1507 1 2025-09-03 11:59:27.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52378 10 6452 1 2025-09-03 11:59:55.801 00:00:10.367 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:00:27.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-09-03 12:00:56.214 00:00:10.344 TCP 23.104.0.1:32868 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:01:28.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49302 10 6452 1 2025-09-03 12:01:56.599 00:00:10.364 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:02:35.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:02:35.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:02:28.321 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-09-03 12:02:57.005 00:00:10.364 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-09-03 11:59:22.887 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:03:28.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6452 1 2025-09-03 12:03:57.408 00:00:10.369 TCP 23.104.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:00:22.884 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:04:28.761 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-09-03 12:04:57.817 00:00:10.358 TCP 23.104.0.1:46612 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:05:28.973 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-09-03 12:05:58.216 00:00:10.363 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:06:29.167 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36084 10 6452 1 2025-09-03 12:06:58.618 00:00:10.367 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:07:36.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:07:36.400 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:07:29.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6452 1 2025-09-03 12:07:59.029 00:00:10.367 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:08:29.553 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-09-03 12:08:59.432 00:00:10.390 TCP 23.104.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:05:22.888 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:09:29.764 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37896 10 6452 1 2025-09-03 12:09:59.856 00:00:10.381 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:06:22.885 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:10:29.933 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-09-03 12:11:00.268 00:00:10.369 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:11:30.169 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-09-03 12:12:00.679 00:00:10.324 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:12:36.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:12:36.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:12:30.340 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-09-03 12:13:01.062 00:00:10.380 TCP 23.104.0.1:54930 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:13:30.558 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-09-03 12:14:01.472 00:00:10.364 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:14:30.729 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-09-03 12:15:01.872 00:00:10.333 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:11:22.888 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:15:30.904 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-09-03 12:16:02.243 00:00:10.366 TCP 23.104.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:12:22.888 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:16:31.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-09-03 12:17:02.651 00:00:10.322 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:17:36.548 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:17:36.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:17:31.296 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-09-03 12:18:03.015 00:00:10.320 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:18:31.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-09-03 12:19:03.379 00:00:10.366 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:19:31.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-09-03 12:20:03.787 00:00:10.367 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:20:31.931 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-09-03 12:21:04.199 00:00:10.365 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:17:22.893 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:21:32.158 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-09-03 12:22:04.604 00:00:10.326 TCP 23.104.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:18:22.891 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:22:36.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:22:36.369 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:22:32.373 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-09-03 12:23:04.972 00:00:10.334 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:23:32.542 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53380 10 6452 1 2025-09-03 12:24:05.344 00:00:10.368 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:24:32.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-09-03 12:25:05.749 00:00:10.590 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:25:32.974 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-09-03 12:26:06.381 00:00:10.363 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:26:33.214 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-09-03 12:27:06.788 00:00:10.371 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:23:22.894 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:27:36.815 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:27:36.805 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:27:33.441 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46628 10 6452 1 2025-09-03 12:28:07.195 00:00:10.363 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:24:22.892 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:28:33.653 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6452 1 2025-09-03 12:29:07.598 00:00:10.365 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:29:33.862 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-09-03 12:30:08.010 00:00:10.319 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:30:34.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49522 10 6452 1 2025-09-03 12:31:08.367 00:00:10.365 TCP 23.104.0.1:32924 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:31:34.317 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33092 10 6452 1 2025-09-03 12:32:08.775 00:00:10.362 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:32:36.952 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:32:36.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:32:34.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49776 10 6452 1 2025-09-03 12:33:09.177 00:00:10.402 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 15 1926 1 2025-09-03 12:29:22.895 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:33:34.742 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38866 12 10367 1 2025-09-03 12:34:09.623 00:00:10.401 TCP 23.104.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:30:22.893 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:34:34.982 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37476 10 6452 1 2025-09-03 12:35:10.101 00:00:10.330 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:35:35.182 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59994 10 6452 1 2025-09-03 12:36:10.470 00:00:10.368 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:36:35.359 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-09-03 12:37:10.879 00:00:10.395 TCP 23.104.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:37:36.799 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:37:36.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:37:35.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58696 10 6452 1 2025-09-03 12:38:11.312 00:00:10.367 TCP 23.104.0.1:36800 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:38:35.784 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-09-03 12:39:11.714 00:00:10.373 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:35:22.896 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:39:35.956 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6452 1 2025-09-03 12:36:22.893 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:40:12.126 00:00:10.367 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:40:36.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-09-03 12:41:12.531 00:00:10.362 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:41:36.394 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 12 6556 1 2025-09-03 12:42:12.936 00:00:10.377 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:42:36.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:42:37.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:42:36.607 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59178 10 6452 1 2025-09-03 12:43:13.350 00:00:10.365 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:43:36.812 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50990 10 6452 1 2025-09-03 12:44:13.755 00:00:10.349 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:44:36.984 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-09-03 12:41:22.898 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:45:14.143 00:00:10.368 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:45:37.175 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-09-03 12:46:14.549 00:00:10.366 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:42:22.896 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:46:37.349 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47260 10 6452 1 2025-09-03 12:47:14.953 00:00:10.375 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:47:37.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:47:37.293 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:47:37.561 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6452 1 2025-09-03 12:48:15.364 00:00:10.363 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:48:37.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 10 6452 1 2025-09-03 12:49:15.764 00:00:10.369 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:49:37.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-09-03 12:50:16.170 00:00:10.371 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:50:38.213 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-09-03 12:51:16.579 00:00:10.367 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:47:22.898 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:51:38.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-09-03 12:48:22.896 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:52:16.987 00:00:10.364 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:52:37.050 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:52:37.604 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:52:38.607 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-09-03 12:53:17.388 00:00:10.365 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:53:38.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-09-03 12:54:17.788 00:00:10.367 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:54:38.995 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 10 6452 1 2025-09-03 12:55:18.193 00:00:10.360 TCP 23.104.0.1:52968 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:55:39.180 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33250 10 6452 1 2025-09-03 12:56:18.589 00:00:10.366 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:56:39.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-09-03 12:53:22.899 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 12:57:19.000 00:00:10.375 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:57:37.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 12:57:37.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 12:57:39.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-09-03 12:54:22.896 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 12:58:19.416 00:00:10.457 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-09-03 12:58:39.818 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46674 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1108, avg pps: 0, avg bpp: 318 Time window: 2025-09-03 11:58:55 - 2025-09-03 12:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0017s User: 0.0025s Wall: 0.0026s flows/second: 63031.8 Runtime: 0.0026s