Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 02:59:09.581 00:00:10.366 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:59:12.215 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-09-05 02:55:23.814 00:05:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:00:09.986 00:00:10.330 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:00:12.429 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45062 10 6452 1 2025-09-05 03:01:10.354 00:00:10.367 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:01:12.640 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-09-05 03:02:10.764 00:00:10.943 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:02:12.857 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59522 10 6452 1 2025-09-05 03:03:13.091 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:52000 12 10367 1 2025-09-05 03:03:23.128 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:03:23.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:03:11.766 00:00:10.406 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 15 1926 1 2025-09-05 03:04:12.211 00:00:10.376 TCP 23.104.0.1:43312 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:04:13.347 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59398 10 6452 1 2025-09-05 03:00:23.811 00:05:00.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:05:12.635 00:00:10.359 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:01:23.814 00:05:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:05:13.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-09-05 03:06:13.034 00:00:10.323 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:06:13.770 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-09-05 03:07:13.387 00:00:10.361 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:07:13.978 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36584 10 6452 1 2025-09-05 03:08:23.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:08:14.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-09-05 03:08:23.079 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:08:13.785 00:00:10.367 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:09:14.196 00:00:10.364 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:09:14.384 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-09-05 03:10:14.598 00:00:10.326 TCP 23.104.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:10:14.593 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-09-05 03:06:23.811 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:11:14.965 00:00:10.325 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:07:23.815 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:11:14.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36706 10 6452 1 2025-09-05 03:12:15.328 00:00:10.363 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:12:15.037 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41430 10 6452 1 2025-09-05 03:13:23.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:13:15.731 00:00:10.370 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:13:15.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-09-05 03:13:23.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:14:16.142 00:00:10.366 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:14:15.462 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-09-05 03:15:15.671 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-09-05 03:15:16.549 00:00:10.327 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:16:15.843 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:52672 10 6452 1 2025-09-05 03:12:23.814 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:16:16.914 00:00:10.320 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:17:16.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-09-05 03:13:23.817 00:05:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:17:17.273 00:00:10.364 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:18:23.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:18:16.560 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-09-05 03:18:23.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:18:17.676 00:00:10.367 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:19:16.730 00:00:10.402 TCP 1.101.0.1:3000 -> 22.102.0.1:47154 10 6452 1 2025-09-05 03:19:18.105 00:00:10.322 TCP 23.104.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:20:17.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-09-05 03:20:18.464 00:00:10.362 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:21:18.867 00:00:10.325 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:21:17.385 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51992 10 6452 1 2025-09-05 03:18:23.818 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:22:19.232 00:00:10.364 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:22:17.593 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 10 6452 1 2025-09-05 03:23:23.734 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:19:23.820 00:05:00.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:23:23.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:23:19.636 00:00:10.370 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:23:18.036 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-09-05 03:24:18.244 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-09-05 03:24:20.054 00:00:10.321 TCP 23.104.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:25:20.411 00:00:10.367 TCP 23.104.0.1:51402 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:25:18.450 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6452 1 2025-09-05 03:26:20.817 00:00:10.326 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:26:18.664 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-09-05 03:27:21.181 00:00:10.365 TCP 23.104.0.1:37442 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:27:18.899 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59936 10 6452 1 2025-09-05 03:28:23.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:28:23.829 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:24:23.817 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:28:19.118 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 12 10367 1 2025-09-05 03:28:21.593 00:00:10.413 TCP 23.104.0.1:44576 -> 1.101.0.1:3000 15 1926 1 2025-09-05 03:25:23.820 00:05:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:29:19.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52262 10 6452 1 2025-09-05 03:29:22.063 00:00:10.370 TCP 23.104.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:30:19.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-09-05 03:30:22.475 00:00:10.329 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:31:19.793 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-09-05 03:31:22.849 00:00:10.383 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:32:20.016 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-09-05 03:32:23.273 00:00:10.873 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:33:23.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:33:23.691 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:33:20.315 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-09-05 03:33:24.185 00:00:10.365 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:30:23.820 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:34:20.531 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2025-09-05 03:34:24.586 00:00:10.371 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:31:23.820 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:35:20.710 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38870 10 6452 1 2025-09-05 03:35:24.988 00:00:10.327 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:36:20.939 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-09-05 03:36:25.355 00:00:10.364 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:37:21.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53412 10 6452 1 2025-09-05 03:37:25.757 00:00:10.377 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:38:23.853 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:38:23.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:38:21.394 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46188 10 6452 1 2025-09-05 03:38:26.175 00:00:10.359 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:39:21.573 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-09-05 03:39:26.576 00:00:10.362 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:36:23.820 00:05:00.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:40:21.785 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-09-05 03:40:26.977 00:00:10.363 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:37:23.822 00:05:00.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:41:21.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36722 10 6452 1 2025-09-05 03:41:27.381 00:00:10.367 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:42:22.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-09-05 03:42:27.784 00:00:10.366 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:43:23.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:43:23.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:43:22.432 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 10 6452 1 2025-09-05 03:43:28.190 00:00:10.359 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:44:22.642 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-09-05 03:44:28.586 00:00:10.323 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:45:22.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38490 10 6452 1 2025-09-05 03:45:28.946 00:00:10.372 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:42:23.822 00:05:00.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:46:23.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-09-05 03:46:29.359 00:00:10.367 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:43:23.825 00:05:00.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:47:23.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6452 1 2025-09-05 03:47:29.764 00:00:10.376 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:48:23.915 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:48:23.824 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:48:23.509 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-09-05 03:48:30.179 00:00:10.325 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:49:23.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-09-05 03:49:30.547 00:00:10.335 TCP 23.104.0.1:41020 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:50:23.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-09-05 03:50:30.919 00:00:10.375 TCP 23.104.0.1:58692 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:51:24.117 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34918 10 6452 1 2025-09-05 03:51:31.335 00:00:10.362 TCP 23.104.0.1:44680 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:48:23.822 00:05:00.701 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:52:24.291 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-09-05 03:52:31.735 00:00:10.333 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:53:24.102 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:49:23.825 00:05:00.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 03:53:24.333 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:53:24.497 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 12 10367 1 2025-09-05 03:53:32.102 00:00:10.446 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 15 1926 1 2025-09-05 03:54:24.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-09-05 03:54:32.583 00:00:10.321 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:55:24.970 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37968 10 6452 1 2025-09-05 03:55:32.945 00:00:10.513 TCP 23.104.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:56:25.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56140 10 6452 1 2025-09-05 03:56:33.499 00:00:10.364 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:57:25.434 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-09-05 03:57:33.902 00:00:10.330 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-09-05 03:58:24.052 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 03:54:23.823 00:05:00.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 03:58:24.182 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 03:58:25.621 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54606 10 6452 1 2025-09-05 03:58:34.282 00:00:10.359 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511350, total packets: 1590, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-09-05 02:55:23 - 2025-09-05 03:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0011s User: 0.0033s Wall: 0.0020s flows/second: 82616.6 Runtime: 0.0020s