Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 04:59:05.563 00:00:10.326 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-04 04:59:09.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48874 10 6452 1 2025-09-04 04:55:23.378 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:00:05.928 00:00:10.428 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:00:09.729 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-09-04 05:01:06.394 00:00:10.364 TCP 23.104.0.1:38870 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:01:09.952 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34814 10 6452 1 2025-09-04 05:02:10.172 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-09-04 05:02:06.794 00:00:10.368 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:02:56.762 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:02:56.824 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:03:07.201 00:00:10.329 TCP 23.104.0.1:52424 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:03:10.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-09-04 05:04:10.615 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-09-04 05:04:07.570 00:00:10.363 TCP 23.104.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:00:23.376 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:05:07.971 00:00:10.384 TCP 23.104.0.1:50544 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:05:10.806 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-09-04 05:01:23.379 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:06:11.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54042 10 6452 1 2025-09-04 05:06:08.397 00:00:10.365 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:07:08.802 00:00:10.364 TCP 23.104.0.1:53168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:07:11.254 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6452 1 2025-09-04 05:07:56.749 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:07:57.157 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:08:11.424 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-09-04 05:08:09.202 00:00:10.366 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:09:09.604 00:00:10.364 TCP 23.104.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:09:11.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-09-04 05:10:10.008 00:00:10.364 TCP 23.104.0.1:56114 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:10:11.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-09-04 05:06:23.378 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:11:10.414 00:00:10.365 TCP 23.104.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:07:23.381 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:11:12.044 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-09-04 05:12:10.821 00:00:10.372 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:12:12.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-09-04 05:12:57.075 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:12:57.024 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:13:11.221 00:00:10.369 TCP 23.104.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:13:12.471 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-09-04 05:14:11.626 00:00:10.325 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:14:12.677 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-09-04 05:15:11.989 00:00:10.364 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:15:12.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 10 6452 1 2025-09-04 05:12:23.381 00:05:00.675 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:16:13.109 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-09-04 05:16:12.395 00:00:10.366 TCP 23.104.0.1:46504 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:17:13.297 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-09-04 05:17:12.811 00:00:10.335 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:13:23.384 00:05:00.670 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:17:56.804 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:17:56.862 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:18:13.189 00:00:10.438 TCP 23.104.0.1:41874 -> 1.101.0.1:3000 15 1926 1 2025-09-04 05:18:14.090 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 12 10367 1 2025-09-04 05:19:14.331 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-09-04 05:19:13.671 00:00:10.330 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:20:14.052 00:00:10.378 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:20:14.540 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6452 1 2025-09-04 05:21:14.469 00:00:10.364 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:21:14.761 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 10 6452 1 2025-09-04 05:22:14.932 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-09-04 05:18:23.383 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:22:14.872 00:00:10.366 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:22:56.879 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:22:56.954 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:23:15.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-09-04 05:23:15.272 00:00:10.325 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:19:23.386 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:24:15.387 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-09-04 05:24:15.634 00:00:10.366 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:25:16.035 00:00:10.415 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:25:15.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34080 10 6452 1 2025-09-04 05:26:16.492 00:00:10.368 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:26:15.813 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 10 6452 1 2025-09-04 05:27:15.979 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-09-04 05:27:16.897 00:00:10.373 TCP 23.104.0.1:42740 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:27:57.250 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:27:57.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:24:23.385 00:05:00.675 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:28:16.217 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-09-04 05:28:17.311 00:00:10.372 TCP 23.104.0.1:41168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:29:16.431 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58730 10 6452 1 2025-09-04 05:25:23.389 00:05:00.669 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:29:17.720 00:00:10.375 TCP 23.104.0.1:40386 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:30:16.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60258 10 6452 1 2025-09-04 05:30:18.128 00:00:10.346 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:31:16.825 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58582 10 6452 1 2025-09-04 05:31:18.512 00:00:10.377 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:32:17.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-09-04 05:32:18.925 00:00:10.392 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:32:56.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:32:57.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:33:17.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-09-04 05:33:19.351 00:00:10.365 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:30:23.387 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:34:19.755 00:00:10.437 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:34:17.503 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60816 10 6452 1 2025-09-04 05:31:23.388 00:05:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:35:17.677 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-09-04 05:35:20.231 00:00:10.361 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:36:17.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-09-04 05:36:20.630 00:00:10.328 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:37:18.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-09-04 05:37:20.997 00:00:10.366 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:37:57.605 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:37:57.424 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:38:21.404 00:00:10.375 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:38:18.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6452 1 2025-09-04 05:39:18.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55092 10 6452 1 2025-09-04 05:39:21.817 00:00:10.361 TCP 23.104.0.1:49822 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:36:23.389 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:40:18.749 00:00:11.454 TCP 1.101.0.1:3000 -> 22.102.0.1:49216 10 6452 1 2025-09-04 05:40:22.219 00:00:10.364 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:37:23.393 00:05:00.670 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:41:20.244 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48582 10 6452 1 2025-09-04 05:41:22.628 00:00:10.363 TCP 23.104.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:42:20.449 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43800 10 6452 1 2025-09-04 05:42:23.026 00:00:10.358 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:42:57.360 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:42:57.483 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:43:20.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-09-04 05:43:23.425 00:00:10.362 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:44:20.880 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-09-04 05:44:23.824 00:00:10.326 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:45:21.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-09-04 05:45:24.187 00:00:10.318 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:42:23.390 00:05:00.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:46:21.326 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:55704 10 6452 1 2025-09-04 05:46:24.546 00:00:10.361 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:43:23.393 00:05:00.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:47:21.492 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-09-04 05:47:24.950 00:00:10.369 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:47:57.574 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:47:57.410 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:48:21.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-09-04 05:48:25.358 00:00:10.366 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:49:21.875 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-09-04 05:49:25.757 00:00:10.338 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:50:26.132 00:00:10.375 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:50:22.102 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-09-04 05:51:22.310 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-09-04 05:51:26.542 00:00:10.361 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:48:23.394 00:05:00.673 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:52:23.074 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59734 10 6452 1 2025-09-04 05:52:26.943 00:00:10.373 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:52:57.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:52:57.732 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:49:23.395 00:05:00.670 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 05:53:23.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-09-04 05:53:27.351 00:00:10.364 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:54:23.503 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-09-04 05:54:27.755 00:00:10.388 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:55:23.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-09-04 05:55:28.184 00:00:10.377 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:56:23.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-09-04 05:56:28.590 00:00:10.369 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:57:24.165 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-09-04 05:57:28.995 00:00:10.360 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-04 05:57:57.621 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 05:57:57.884 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 05:54:23.394 00:05:00.676 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 05:58:24.374 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-09-04 05:58:29.400 00:00:10.363 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1047, avg pps: 0, avg bpp: 318 Time window: 2025-09-04 04:55:23 - 2025-09-04 05:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0019s Wall: 0.0029s flows/second: 56069.9 Runtime: 0.0029s