Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 03:58:54.414 00:00:10.364 TCP 23.104.0.1:59310 -> 1.101.0.1:3000 11 1507 1 2025-09-07 03:59:09.281 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49182 10 6452 1 2025-09-07 03:59:21.868 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 03:59:22.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 03:59:54.816 00:00:10.365 TCP 23.104.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:00:09.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-09-07 03:56:24.744 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:00:55.220 00:00:10.369 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:01:09.710 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-09-07 04:01:55.628 00:00:10.364 TCP 23.104.0.1:45084 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:02:09.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6452 1 2025-09-07 03:58:24.747 00:05:00.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:02:56.030 00:00:10.323 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:03:10.132 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-09-07 04:03:56.391 00:00:10.359 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:04:21.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:04:10.333 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-09-07 04:04:22.220 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:04:56.789 00:00:10.363 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:05:10.506 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-09-07 04:05:57.207 00:00:10.528 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:06:10.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6452 1 2025-09-07 04:02:24.745 00:05:00.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:06:57.774 00:00:10.374 TCP 23.104.0.1:52956 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:07:10.929 00:00:10.944 TCP 1.101.0.1:3000 -> 22.102.0.1:58938 10 6452 1 2025-09-07 04:07:58.183 00:00:10.364 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:04:24.748 00:05:00.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:08:11.911 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-09-07 04:08:58.585 00:00:10.366 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:09:22.457 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:09:12.085 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 10 6452 1 2025-09-07 04:09:22.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:09:58.997 00:00:10.367 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:10:12.273 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36422 10 6452 1 2025-09-07 04:10:59.401 00:00:10.365 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:11:12.487 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44362 10 6452 1 2025-09-07 04:11:59.805 00:00:10.366 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:12:12.702 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51088 10 6452 1 2025-09-07 04:08:24.747 00:05:00.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:13:00.208 00:00:10.367 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:13:12.911 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-09-07 04:14:00.611 00:00:10.376 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:14:13.126 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 10 6452 1 2025-09-07 04:14:22.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:14:22.235 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:10:24.750 00:05:00.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:15:01.030 00:00:10.366 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:15:13.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-09-07 04:16:01.429 00:00:10.360 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:16:13.576 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-09-07 04:17:01.831 00:00:10.392 TCP 23.104.0.1:36644 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:17:13.819 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-09-07 04:18:02.266 00:00:10.362 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:14:24.747 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:18:14.064 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-09-07 04:19:02.671 00:00:10.374 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:19:14.378 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-09-07 04:19:22.258 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:19:22.411 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:20:03.097 00:00:10.366 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:16:24.750 00:05:00.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:20:14.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-09-07 04:21:03.498 00:00:10.366 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:21:14.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-09-07 04:22:03.901 00:00:10.367 TCP 23.104.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:22:15.029 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-09-07 04:23:04.309 00:00:10.365 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:23:15.247 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44396 10 6452 1 2025-09-07 04:24:04.715 00:00:10.387 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:24:22.349 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:24:15.474 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43214 10 6452 1 2025-09-07 04:24:22.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:20:24.750 00:05:00.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:25:05.140 00:00:10.323 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:25:15.703 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45962 10 6452 1 2025-09-07 04:26:05.506 00:00:10.336 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:22:24.751 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:26:15.874 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49556 10 6452 1 2025-09-07 04:27:05.881 00:00:10.381 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:27:16.099 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6452 1 2025-09-07 04:28:06.300 00:00:10.364 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:28:16.316 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46540 10 6452 1 2025-09-07 04:29:06.705 00:00:10.390 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:29:16.539 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33852 10 6452 1 2025-09-07 04:29:22.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:29:22.544 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:30:07.134 00:00:10.365 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:30:16.767 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-09-07 04:26:24.749 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:31:07.536 00:00:10.365 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:31:16.951 00:00:10.322 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 12 6556 1 2025-09-07 04:32:07.943 00:00:10.370 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:28:24.752 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:32:17.313 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-09-07 04:33:08.354 00:00:10.330 TCP 23.104.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:33:17.539 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-09-07 04:34:08.727 00:00:10.695 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:34:22.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:34:22.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:34:17.766 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-09-07 04:35:09.459 00:00:10.368 TCP 23.104.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:35:17.987 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-09-07 04:36:09.859 00:00:10.373 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:32:24.750 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:36:18.184 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42216 10 6452 1 2025-09-07 04:37:10.266 00:00:10.371 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:37:18.393 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-09-07 04:38:10.682 00:00:10.380 TCP 23.104.0.1:34810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:34:24.754 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:38:18.618 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6452 1 2025-09-07 04:39:11.110 00:00:10.856 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:39:22.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:39:22.621 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:39:18.840 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-09-07 04:40:12.003 00:00:10.362 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:40:19.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-09-07 04:41:12.408 00:00:10.325 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:41:19.283 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-09-07 04:42:12.772 00:00:10.815 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:38:24.753 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:42:19.457 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:37348 10 6452 1 2025-09-07 04:43:13.629 00:00:10.363 TCP 23.104.0.1:51732 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:43:19.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33040 10 6452 1 2025-09-07 04:44:14.032 00:00:10.367 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:44:22.636 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:40:24.755 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:44:22.997 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:44:19.857 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-09-07 04:45:14.431 00:00:10.363 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:45:20.038 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-07 04:46:14.839 00:00:10.391 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:46:20.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-09-07 04:47:15.270 00:00:10.365 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:47:20.430 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-09-07 04:48:15.672 00:00:10.326 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:44:24.754 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:48:20.655 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-09-07 04:49:23.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:49:23.067 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:49:16.033 00:00:10.366 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:49:20.867 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-09-07 04:50:16.440 00:00:10.359 TCP 23.104.0.1:40516 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:46:24.756 00:05:00.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:50:21.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36864 10 6452 1 2025-09-07 04:51:16.840 00:00:10.390 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:51:21.335 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-09-07 04:52:17.272 00:00:10.367 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:52:21.571 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:33708 10 6452 1 2025-09-07 04:53:17.677 00:00:10.329 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:53:21.879 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-09-07 04:54:23.044 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 04:50:24.754 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 04:54:22.997 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 04:54:18.053 00:00:10.363 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:54:22.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-09-07 04:55:18.456 00:00:10.369 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:55:22.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2025-09-07 04:52:24.759 00:05:00.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 04:56:18.865 00:00:10.368 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:56:22.540 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43224 10 6452 1 2025-09-07 04:57:19.286 00:00:10.371 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:57:22.715 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-09-07 04:58:19.692 00:00:10.369 TCP 23.104.0.1:57042 -> 1.101.0.1:3000 11 1507 1 2025-09-07 04:58:22.932 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 12 6556 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-09-07 03:56:24 - 2025-09-07 04:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0000s Wall: 0.0024s flows/second: 68910.6 Runtime: 0.0024s