Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 13:59:41.319 00:00:10.971 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-09-05 13:59:41.499 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-09-05 13:55:24.057 00:06:00.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:00:42.326 00:00:10.329 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:00:42.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 10 6452 1 2025-09-05 14:01:42.689 00:00:10.324 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:01:42.504 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-09-05 14:02:42.726 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-09-05 14:02:43.054 00:00:10.366 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:03:36.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:03:36.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:03:42.941 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51426 10 6452 1 2025-09-05 14:03:43.456 00:00:10.365 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:04:43.167 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-09-05 14:04:43.857 00:00:10.375 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:00:24.058 00:06:00.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:05:43.339 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-09-05 14:05:44.268 00:00:10.324 TCP 23.104.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:06:43.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59740 10 6452 1 2025-09-05 14:06:44.638 00:00:10.332 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:02:24.063 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:07:43.773 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-09-05 14:07:45.015 00:00:10.366 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:08:36.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:08:36.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:08:43.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2025-09-05 14:08:45.413 00:00:10.366 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:09:44.170 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-09-05 14:09:45.822 00:00:10.367 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:10:46.227 00:00:10.370 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:10:44.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51332 10 6452 1 2025-09-05 14:11:46.633 00:00:10.321 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:11:44.559 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-09-05 14:07:24.061 00:06:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:12:44.778 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-09-05 14:12:46.994 00:00:10.326 TCP 23.104.0.1:36904 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:13:36.551 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:13:36.580 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:13:44.942 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-09-05 14:13:47.365 00:00:10.366 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:09:24.063 00:06:00.683 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:14:45.169 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-09-05 14:14:47.767 00:00:10.376 TCP 23.104.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:15:45.347 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-09-05 14:15:48.179 00:00:10.362 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:16:45.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-09-05 14:16:48.579 00:00:10.368 TCP 23.104.0.1:35632 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:17:45.747 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51966 10 6452 1 2025-09-05 14:17:48.980 00:00:10.374 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:18:36.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:18:36.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:18:45.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-09-05 14:18:49.390 00:00:10.376 TCP 23.104.0.1:59070 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:14:24.064 00:06:00.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:19:46.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-09-05 14:19:49.813 00:00:10.361 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:20:46.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-09-05 14:20:50.210 00:00:10.363 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:16:24.069 00:06:00.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:21:46.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59744 10 6452 1 2025-09-05 14:21:50.622 00:00:10.365 TCP 23.104.0.1:53540 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:22:51.054 00:00:10.369 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:22:46.825 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-09-05 14:23:36.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:23:36.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:23:51.461 00:00:10.362 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:23:47.068 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-09-05 14:24:47.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46712 10 6452 1 2025-09-05 14:24:51.864 00:00:10.379 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:25:47.508 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43356 10 6452 1 2025-09-05 14:25:52.281 00:00:10.364 TCP 23.104.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:21:24.066 00:06:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:26:47.729 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-09-05 14:26:52.684 00:00:10.368 TCP 23.104.0.1:34996 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:27:47.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-09-05 14:27:53.105 00:00:10.366 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:23:24.072 00:06:00.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:28:36.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:28:36.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:28:48.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-09-05 14:28:53.511 00:00:10.374 TCP 23.104.0.1:38980 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:29:48.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-09-05 14:29:53.929 00:00:10.343 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:30:48.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-09-05 14:30:54.313 00:00:10.363 TCP 23.104.0.1:37152 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:31:48.816 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-09-05 14:31:54.714 00:00:10.376 TCP 23.104.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:32:49.000 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6452 1 2025-09-05 14:32:55.133 00:00:10.367 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:28:24.070 00:06:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:33:36.977 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:33:37.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:33:49.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52968 10 6452 1 2025-09-05 14:33:55.537 00:00:10.367 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:34:49.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37016 10 6452 1 2025-09-05 14:34:55.939 00:00:10.379 TCP 23.104.0.1:49748 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:30:24.073 00:06:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:35:49.639 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-09-05 14:35:56.364 00:00:10.367 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:36:49.809 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-09-05 14:36:56.770 00:00:10.362 TCP 23.104.0.1:58702 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:37:50.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56556 10 6452 1 2025-09-05 14:37:57.169 00:00:10.371 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:38:36.958 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:38:36.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:38:50.255 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-09-05 14:38:57.580 00:00:10.364 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:39:50.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53606 10 6452 1 2025-09-05 14:39:57.985 00:00:10.687 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:35:24.072 00:06:00.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:40:50.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-09-05 14:40:58.702 00:00:10.364 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:41:50.869 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40188 10 6452 1 2025-09-05 14:41:59.106 00:00:10.363 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:37:24.076 00:06:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:42:51.041 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43560 10 6452 1 2025-09-05 14:42:59.507 00:00:10.365 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:43:37.222 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:43:37.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:43:51.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57772 10 6452 1 2025-09-05 14:43:59.909 00:00:10.325 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:44:51.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-09-05 14:45:00.272 00:00:10.366 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:45:51.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-09-05 14:46:00.679 00:00:10.361 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:46:51.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39424 10 6452 1 2025-09-05 14:47:01.104 00:00:10.370 TCP 23.104.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:42:24.073 00:06:00.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:47:52.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-09-05 14:48:01.511 00:00:10.374 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:48:37.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:48:37.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:48:52.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-09-05 14:49:01.921 00:00:10.376 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:44:24.083 00:06:00.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:49:52.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6452 1 2025-09-05 14:50:02.334 00:00:10.331 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:50:52.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-09-05 14:51:02.699 00:00:10.365 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:51:52.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49908 10 6452 1 2025-09-05 14:52:03.105 00:00:10.362 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:52:53.179 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 12 10367 1 2025-09-05 14:53:03.506 00:00:10.442 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 15 1926 1 2025-09-05 14:53:37.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 14:53:37.348 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:53:53.424 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-09-05 14:54:03.984 00:00:10.369 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 12 1559 1 2025-09-05 14:49:24.075 00:06:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-05 14:54:53.635 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 10 6452 1 2025-09-05 14:55:04.394 00:00:10.363 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:55:53.805 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-09-05 14:56:04.795 00:00:10.365 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:51:24.077 00:06:00.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-05 14:56:54.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-09-05 14:57:05.200 00:00:10.363 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:57:54.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-09-05 14:58:05.599 00:00:10.363 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-09-05 14:58:37.452 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 14:58:37.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 159, total bytes: 494652, total packets: 1556, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-09-05 13:55:24 - 2025-09-05 14:58:37 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0026s User: 0.0013s Wall: 0.0016s flows/second: 97842.5 Runtime: 0.0016s