Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 07:59:13.174 00:00:10.364 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-09-05 07:55:23.912 00:05:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 07:59:20.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-09-05 08:00:13.579 00:00:10.365 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:00:20.338 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-09-05 08:01:13.982 00:00:10.365 TCP 23.104.0.1:60766 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:01:20.554 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35816 10 6452 1 2025-09-05 08:02:14.383 00:00:10.377 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:02:20.767 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43236 10 6452 1 2025-09-05 08:03:14.799 00:00:10.445 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 15 1926 1 2025-09-05 08:03:28.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:03:20.986 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55860 12 10367 1 2025-09-05 08:03:29.059 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:00:23.910 00:05:00.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:04:15.280 00:00:10.388 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:04:21.202 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-09-05 08:05:15.690 00:00:10.374 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:01:23.913 00:05:00.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:05:21.427 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-09-05 08:06:16.108 00:00:10.328 TCP 23.104.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:06:21.598 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45982 10 6452 1 2025-09-05 08:07:16.472 00:00:10.447 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:07:21.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6452 1 2025-09-05 08:08:29.198 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:08:29.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:08:16.975 00:00:10.367 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:08:22.068 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-09-05 08:09:17.377 00:00:10.363 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:09:22.289 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 12 6556 1 2025-09-05 08:06:23.911 00:05:00.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:10:17.777 00:00:10.447 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:10:22.503 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-09-05 08:07:23.914 00:05:00.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:11:18.261 00:00:10.324 TCP 23.104.0.1:36944 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:11:22.728 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45216 10 6452 1 2025-09-05 08:12:18.626 00:00:10.365 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:12:22.955 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 12 6556 1 2025-09-05 08:13:29.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:13:19.029 00:00:10.367 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:13:29.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:13:23.193 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-09-05 08:14:19.432 00:00:10.334 TCP 23.104.0.1:49616 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:14:23.406 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-09-05 08:15:19.802 00:00:10.367 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:15:23.621 00:00:10.291 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-09-05 08:12:23.911 00:05:00.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:16:20.205 00:00:10.364 TCP 23.104.0.1:35434 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:16:23.951 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 12 6556 1 2025-09-05 08:13:23.914 00:05:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:17:20.609 00:00:10.372 TCP 23.104.0.1:60076 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:17:24.181 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-09-05 08:18:29.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:18:21.019 00:00:10.438 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 15 1926 1 2025-09-05 08:18:29.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:18:24.400 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 12 10367 1 2025-09-05 08:19:21.499 00:00:10.367 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:19:24.659 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-09-05 08:20:21.903 00:00:10.377 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:20:24.883 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-09-05 08:21:25.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-09-05 08:21:22.312 00:00:10.371 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:18:23.914 00:05:00.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:22:25.255 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 10 6452 1 2025-09-05 08:22:22.722 00:00:10.392 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:19:23.917 00:05:00.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:23:29.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:23:29.681 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:23:23.146 00:00:10.363 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:23:25.476 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-09-05 08:24:23.548 00:00:10.811 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:24:25.695 00:00:10.785 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-09-05 08:25:26.521 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56636 10 6452 1 2025-09-05 08:25:24.402 00:00:10.368 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:26:24.806 00:00:10.330 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:26:26.707 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-09-05 08:27:25.167 00:00:10.370 TCP 23.104.0.1:42072 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:27:26.926 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-09-05 08:24:23.916 00:05:00.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:28:29.535 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:28:29.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:28:25.570 00:00:10.370 TCP 23.104.0.1:59344 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:28:27.187 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-09-05 08:25:23.918 00:05:00.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:29:25.977 00:00:10.368 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:29:27.410 00:00:10.409 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-09-05 08:30:26.380 00:00:10.324 TCP 23.104.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:30:27.856 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-09-05 08:31:28.099 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-09-05 08:31:26.738 00:00:10.368 TCP 23.104.0.1:51968 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:32:27.139 00:00:10.362 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:32:28.321 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41090 10 6452 1 2025-09-05 08:33:29.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:33:29.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:33:28.496 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-09-05 08:33:27.544 00:00:10.327 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:30:23.918 00:05:00.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:34:27.905 00:00:10.366 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:34:28.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48128 10 6452 1 2025-09-05 08:31:23.921 00:05:00.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:35:28.929 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41674 10 6452 1 2025-09-05 08:35:28.305 00:00:10.334 TCP 23.104.0.1:36870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:36:29.168 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-09-05 08:36:28.689 00:00:10.419 TCP 23.104.0.1:43212 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:37:29.386 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-09-05 08:37:29.143 00:00:10.327 TCP 23.104.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:38:29.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:38:29.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:38:29.602 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48482 10 6452 1 2025-09-05 08:38:29.507 00:00:10.329 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:39:29.874 00:00:10.366 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:39:29.820 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-09-05 08:36:23.920 00:05:00.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:40:30.283 00:00:10.328 TCP 23.104.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:40:30.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34828 10 6452 1 2025-09-05 08:37:23.922 00:05:00.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:41:30.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-09-05 08:41:30.649 00:00:10.364 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:42:31.085 00:00:10.365 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:42:30.471 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-09-05 08:43:29.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:43:30.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:43:30.682 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-09-05 08:43:31.484 00:00:10.372 TCP 23.104.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:44:30.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59448 10 6452 1 2025-09-05 08:44:31.891 00:00:10.373 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:45:31.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-09-05 08:45:32.302 00:00:10.365 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:42:23.921 00:05:00.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:46:31.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-09-05 08:46:32.710 00:00:10.385 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:43:23.924 00:05:00.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:47:31.544 00:00:10.311 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-09-05 08:47:33.142 00:00:10.369 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:48:29.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:48:30.189 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:48:33.548 00:00:10.325 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:48:31.907 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-09-05 08:49:33.908 00:00:10.366 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:49:32.122 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-09-05 08:50:34.308 00:00:10.363 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:50:32.341 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-09-05 08:51:34.708 00:00:10.366 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:51:32.552 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-09-05 08:48:23.922 00:05:00.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:52:32.728 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-09-05 08:52:35.115 00:00:10.362 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:49:23.925 00:05:00.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 08:53:30.046 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:53:30.057 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:53:35.518 00:00:10.361 TCP 23.104.0.1:52962 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:53:32.942 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-09-05 08:54:35.920 00:00:10.392 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:54:33.192 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-09-05 08:55:33.402 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-09-05 08:55:36.349 00:00:10.357 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:56:33.612 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-09-05 08:56:36.751 00:00:10.330 TCP 23.104.0.1:50360 -> 1.101.0.1:3000 12 1559 1 2025-09-05 08:57:33.831 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39384 10 6452 1 2025-09-05 08:57:37.117 00:00:10.367 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-09-05 08:54:23.923 00:05:00.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 08:58:30.219 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 08:58:30.453 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 08:58:34.074 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-09-05 08:58:37.525 00:00:10.357 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507380, total packets: 1591, avg bps: 1056, avg pps: 0, avg bpp: 318 Time window: 2025-09-05 07:55:23 - 2025-09-05 08:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0017s User: 0.0034s Wall: 0.0031s flows/second: 53630.6 Runtime: 0.0031s