Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 15:58:49.683 00:00:10.370 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:59:07.531 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 15:59:07.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 15:59:14.589 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6452 1 2025-09-06 15:59:50.119 00:00:10.363 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:00:14.807 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-09-06 15:56:24.517 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:00:50.520 00:00:10.364 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:01:15.038 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-09-06 16:01:50.923 00:00:10.389 TCP 23.104.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-09-06 15:58:24.523 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:02:15.264 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-09-06 16:02:51.349 00:00:10.364 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:03:15.477 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 10 6452 1 2025-09-06 16:03:51.753 00:00:10.342 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:04:07.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:04:07.737 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:04:15.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-09-06 16:04:52.124 00:00:10.326 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:05:15.872 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48798 10 6452 1 2025-09-06 16:05:52.488 00:00:10.325 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:02:24.521 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:06:16.107 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40708 10 6452 1 2025-09-06 16:06:52.856 00:00:10.333 TCP 23.104.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:07:16.278 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-09-06 16:07:53.227 00:00:10.365 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:08:16.451 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-09-06 16:04:24.524 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:08:53.631 00:00:10.371 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:09:07.748 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:09:07.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:09:16.666 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-09-06 16:09:54.054 00:00:10.417 TCP 23.104.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:10:16.843 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 10 6452 1 2025-09-06 16:10:54.512 00:00:10.378 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:11:17.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6452 1 2025-09-06 16:11:54.926 00:00:10.349 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:08:24.523 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:12:17.301 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-09-06 16:12:55.307 00:00:10.321 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:13:17.530 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-09-06 16:13:55.667 00:00:10.367 TCP 23.104.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:14:07.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:14:08.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:10:24.525 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:14:17.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34860 10 6452 1 2025-09-06 16:14:56.099 00:00:10.364 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:15:17.972 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-09-06 16:15:56.506 00:00:10.364 TCP 23.104.0.1:44964 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:16:18.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-09-06 16:16:56.904 00:00:10.370 TCP 23.104.0.1:46658 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:17:18.456 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-09-06 16:17:57.312 00:00:10.364 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:14:24.525 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:18:18.665 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-09-06 16:19:07.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:18:57.715 00:00:10.379 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:19:07.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:19:18.835 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57852 10 6452 1 2025-09-06 16:19:58.131 00:00:10.320 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:16:24.525 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:20:19.068 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-09-06 16:20:58.487 00:00:10.373 TCP 23.104.0.1:55354 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:21:19.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-09-06 16:21:58.902 00:00:10.375 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:22:19.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-09-06 16:22:59.316 00:00:10.365 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:23:19.673 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41504 10 6452 1 2025-09-06 16:24:07.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:24:07.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:23:59.719 00:00:10.369 TCP 23.104.0.1:57954 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:20:24.528 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:24:19.895 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-09-06 16:25:00.133 00:00:10.339 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:25:20.084 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-09-06 16:26:00.514 00:00:10.360 TCP 23.104.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:22:24.532 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:26:20.300 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-09-06 16:27:00.917 00:00:10.378 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:27:20.519 00:00:10.446 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-09-06 16:28:01.327 00:00:10.368 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:28:21.019 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-09-06 16:29:07.943 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:29:08.225 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:29:01.734 00:00:10.380 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:29:21.239 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-09-06 16:30:02.154 00:00:10.372 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:26:24.532 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:30:21.458 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-09-06 16:31:02.565 00:00:10.366 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:31:21.627 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6452 1 2025-09-06 16:32:02.963 00:00:10.383 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:28:24.533 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:32:21.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49162 10 6452 1 2025-09-06 16:33:03.385 00:00:10.365 TCP 23.104.0.1:44354 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:33:22.024 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-09-06 16:34:08.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:34:08.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:34:03.788 00:00:10.783 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:34:22.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-09-06 16:35:04.604 00:00:10.365 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:35:22.420 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43132 10 6452 1 2025-09-06 16:36:05.019 00:00:10.363 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:32:24.532 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:36:22.630 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-09-06 16:37:05.423 00:00:10.366 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:37:22.842 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36992 10 6452 1 2025-09-06 16:38:05.829 00:00:10.361 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:34:24.535 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:38:23.080 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50766 10 6452 1 2025-09-06 16:39:08.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:39:08.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:39:06.229 00:00:10.365 TCP 23.104.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:39:23.319 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-09-06 16:40:06.629 00:00:10.325 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:40:23.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-09-06 16:41:07.000 00:00:10.324 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:41:23.752 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-09-06 16:42:07.361 00:00:10.454 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:38:24.532 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:42:23.921 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-09-06 16:43:07.857 00:00:10.459 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 15 1926 1 2025-09-06 16:43:24.129 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 12 10365 1 2025-09-06 16:44:08.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:44:08.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:44:08.354 00:00:10.799 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:40:24.538 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:44:24.374 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-09-06 16:45:09.193 00:00:10.362 TCP 23.104.0.1:38080 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:45:24.587 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 10 6452 1 2025-09-06 16:46:09.592 00:00:10.330 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:46:24.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-09-06 16:47:09.956 00:00:10.360 TCP 23.104.0.1:49484 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:47:25.034 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-09-06 16:48:10.356 00:00:10.368 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:44:24.536 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:48:25.262 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35908 10 6452 1 2025-09-06 16:49:08.661 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:49:08.559 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:49:10.773 00:00:10.368 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:49:25.485 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-09-06 16:50:11.178 00:00:10.327 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:46:24.541 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:50:25.669 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6452 1 2025-09-06 16:51:11.543 00:00:10.378 TCP 23.104.0.1:33562 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:51:25.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44206 10 6452 1 2025-09-06 16:52:11.966 00:00:10.546 TCP 23.104.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:52:26.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48314 10 6452 1 2025-09-06 16:53:12.550 00:00:10.360 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:53:26.335 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46834 10 6452 1 2025-09-06 16:54:08.634 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 16:54:08.559 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 16:54:12.948 00:00:10.368 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:50:24.539 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 16:54:26.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58138 10 6452 1 2025-09-06 16:55:13.351 00:00:10.365 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:55:26.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57192 10 6452 1 2025-09-06 16:56:13.753 00:00:10.388 TCP 23.104.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:52:24.541 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 16:56:26.973 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-09-06 16:57:14.180 00:00:10.360 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:57:27.218 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-09-06 16:58:14.581 00:00:10.333 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-09-06 16:58:27.390 00:00:11.212 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-06 15:56:24 - 2025-09-06 16:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0028s flows/second: 58867.4 Runtime: 0.0028s