Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 11:58:49.915 00:00:10.386 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2025-09-05 11:55:23.972 00:05:00.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 11:59:14.502 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 10 6452 1 2025-09-05 11:59:50.335 00:00:10.361 TCP 23.104.0.1:58708 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:00:14.715 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-09-05 12:00:50.738 00:00:10.366 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:01:14.928 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:50100 10 6452 1 2025-09-05 12:01:51.142 00:00:10.365 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:02:15.142 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-09-05 12:02:51.543 00:00:10.362 TCP 23.104.0.1:47440 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:03:15.357 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-09-05 12:03:34.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:03:34.126 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:03:51.948 00:00:10.329 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:04:15.570 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40598 10 6452 1 2025-09-05 12:00:23.970 00:05:00.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:04:52.315 00:00:10.876 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:05:15.782 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60332 10 6452 1 2025-09-05 12:01:23.972 00:05:00.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:05:53.235 00:00:10.361 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:06:16.003 00:00:10.525 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-09-05 12:06:53.635 00:00:10.379 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:07:16.572 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6452 1 2025-09-05 12:07:54.063 00:00:10.318 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:08:16.755 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49676 10 6452 1 2025-09-05 12:08:34.097 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:08:34.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:08:54.416 00:00:10.366 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:09:16.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44556 10 6452 1 2025-09-05 12:09:54.827 00:00:10.394 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:06:23.972 00:05:00.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:10:17.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-09-05 12:10:55.261 00:00:10.329 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:07:23.974 00:05:00.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:11:17.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51538 10 6452 1 2025-09-05 12:11:55.627 00:00:10.369 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:12:17.599 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-09-05 12:12:56.034 00:00:10.361 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:13:34.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:13:17.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-09-05 12:13:34.254 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:13:56.431 00:00:10.368 TCP 23.104.0.1:40902 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:14:17.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-09-05 12:14:56.835 00:00:10.399 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:15:18.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-09-05 12:15:57.263 00:00:10.368 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:12:23.973 00:05:00.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:16:18.440 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53470 10 6452 1 2025-09-05 12:16:57.675 00:00:10.580 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:13:23.975 00:05:00.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:17:18.652 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-09-05 12:17:58.295 00:00:10.438 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 15 1926 1 2025-09-05 12:18:18.858 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 12 10365 1 2025-09-05 12:18:34.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:18:34.215 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:18:58.770 00:00:10.337 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:19:19.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-09-05 12:19:59.147 00:00:10.362 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:20:19.330 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-09-05 12:20:59.549 00:00:10.369 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:21:19.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-09-05 12:21:59.959 00:00:10.364 TCP 23.104.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:18:23.975 00:05:00.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:22:19.717 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-09-05 12:23:00.359 00:00:10.399 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 15 1926 1 2025-09-05 12:19:23.978 00:05:00.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:23:19.934 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 12 10365 1 2025-09-05 12:23:34.403 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:23:34.347 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:24:00.798 00:00:10.372 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:24:20.199 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38386 10 6452 1 2025-09-05 12:25:01.213 00:00:10.363 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:25:20.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-09-05 12:26:01.614 00:00:10.362 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:26:20.640 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-09-05 12:27:02.018 00:00:10.364 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:27:20.862 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2025-09-05 12:28:02.424 00:00:10.376 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:24:23.975 00:05:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:28:21.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-09-05 12:28:34.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:28:34.377 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:29:02.840 00:00:10.392 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:25:23.978 00:05:00.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:29:21.307 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-09-05 12:30:03.269 00:00:10.365 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:30:21.518 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-09-05 12:31:03.671 00:00:10.368 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:31:21.733 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 10 6452 1 2025-09-05 12:32:04.101 00:00:10.369 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:32:22.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54762 10 6452 1 2025-09-05 12:33:04.508 00:00:10.439 TCP 23.104.0.1:41056 -> 1.101.0.1:3000 15 1926 1 2025-09-05 12:33:34.407 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:33:22.222 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 12 10365 1 2025-09-05 12:33:34.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:34:04.987 00:00:10.369 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:30:23.976 00:05:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:34:22.457 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45004 10 6452 1 2025-09-05 12:35:05.396 00:00:10.366 TCP 23.104.0.1:57362 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:31:23.980 00:05:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:35:22.677 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54968 10 6452 1 2025-09-05 12:36:05.800 00:00:10.368 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:36:22.890 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58794 10 6452 1 2025-09-05 12:37:06.206 00:00:10.476 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:37:23.085 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36440 10 6452 1 2025-09-05 12:38:06.724 00:00:10.379 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:38:34.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:38:23.290 00:00:10.305 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6452 1 2025-09-05 12:38:34.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:39:07.132 00:00:10.369 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:39:23.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-09-05 12:40:07.537 00:00:10.375 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:36:23.983 00:05:00.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:40:23.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-09-05 12:41:07.948 00:00:10.381 TCP 23.104.0.1:40680 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:37:23.987 00:05:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:41:24.087 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-09-05 12:42:08.371 00:00:10.335 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:42:24.258 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-09-05 12:43:08.744 00:00:10.371 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:43:24.434 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-09-05 12:43:34.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:43:34.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:44:09.151 00:00:10.364 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:44:24.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-09-05 12:45:09.557 00:00:10.370 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:45:24.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-09-05 12:46:09.967 00:00:10.329 TCP 23.104.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:42:23.986 00:05:00.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:46:25.054 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-09-05 12:47:10.333 00:00:10.362 TCP 23.104.0.1:56362 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:43:23.989 00:05:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:47:25.619 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51390 10 6452 1 2025-09-05 12:48:10.739 00:00:10.326 TCP 23.104.0.1:33846 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:48:25.833 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-09-05 12:48:34.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:48:34.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:49:11.103 00:00:10.365 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:49:26.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-09-05 12:50:11.512 00:00:10.362 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:50:26.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-09-05 12:51:11.914 00:00:10.360 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:51:26.509 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34736 10 6452 1 2025-09-05 12:48:23.988 00:05:00.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:52:12.313 00:00:10.324 TCP 23.104.0.1:55272 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:52:26.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35902 10 6452 1 2025-09-05 12:53:12.686 00:00:10.376 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:49:23.990 00:05:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 12:53:34.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:53:34.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:53:26.903 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-09-05 12:54:13.105 00:00:10.325 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:54:27.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-09-05 12:55:13.472 00:00:10.359 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:55:27.300 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-09-05 12:56:13.869 00:00:10.496 TCP 23.104.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:56:27.477 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-09-05 12:57:14.404 00:00:10.360 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:57:27.702 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-09-05 12:54:23.988 00:05:00.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 12:58:14.805 00:00:10.883 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-09-05 12:58:34.789 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 12:58:35.064 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 12:58:27.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 Summary: total flows: 164, total bytes: 511344, total packets: 1590, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-09-05 11:55:23 - 2025-09-05 12:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0032s flows/second: 51188.1 Runtime: 0.0032s