Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 08:58:59.203 00:00:10.324 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:59:20.113 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-09-07 08:59:27.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 08:59:27.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 08:59:59.563 00:00:10.360 TCP 23.104.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:56:24.829 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:00:20.355 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-09-07 09:00:59.963 00:00:10.636 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:01:20.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-09-07 09:02:00.641 00:00:10.365 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-09-07 08:58:24.833 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:02:20.739 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-09-07 09:03:01.050 00:00:10.325 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:03:20.953 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56772 12 6556 1 2025-09-07 09:04:01.414 00:00:10.326 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:04:21.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-09-07 09:04:28.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:04:28.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:05:01.775 00:00:10.384 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:05:21.406 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-09-07 09:06:02.182 00:00:10.366 TCP 23.104.0.1:57978 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:02:24.831 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:06:21.579 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6452 1 2025-09-07 09:07:02.587 00:00:10.369 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:07:21.755 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-09-07 09:08:02.987 00:00:10.330 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:04:24.835 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:08:21.978 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-09-07 09:09:03.360 00:00:10.343 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:09:28.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:09:28.081 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:09:22.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36948 10 6452 1 2025-09-07 09:10:03.758 00:00:10.331 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:10:22.397 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54620 10 6452 1 2025-09-07 09:11:04.127 00:00:10.327 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:11:22.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-09-07 09:12:04.491 00:00:10.376 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:08:24.833 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:12:22.788 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49842 10 6452 1 2025-09-07 09:13:04.905 00:00:10.371 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:13:23.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-09-07 09:14:05.325 00:00:10.368 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:10:24.839 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:14:28.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:14:28.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:14:23.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 10 6452 1 2025-09-07 09:15:05.725 00:00:10.328 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:15:23.428 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42810 10 6452 1 2025-09-07 09:16:06.104 00:00:10.368 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:16:23.637 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-09-07 09:17:06.513 00:00:10.381 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:17:23.854 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-09-07 09:18:06.936 00:00:10.378 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:14:24.835 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:18:24.081 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-09-07 09:19:07.354 00:00:10.363 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:19:28.536 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:19:28.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:19:24.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58812 10 6452 1 2025-09-07 09:20:07.756 00:00:10.338 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:16:24.839 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:20:24.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-09-07 09:21:08.138 00:00:10.363 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:21:24.726 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57920 10 6452 1 2025-09-07 09:22:08.532 00:00:10.893 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:22:24.938 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-09-07 09:23:09.465 00:00:10.368 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:23:25.136 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-09-07 09:24:09.870 00:00:10.367 TCP 23.104.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:20:24.838 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:24:28.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:24:28.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:24:25.349 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-09-07 09:25:10.273 00:00:10.366 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:25:25.527 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-09-07 09:26:10.675 00:00:10.364 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:22:24.841 00:05:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:26:25.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-09-07 09:27:11.106 00:00:10.361 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:27:25.968 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6452 1 2025-09-07 09:28:11.505 00:00:10.993 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:28:26.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41184 10 6452 1 2025-09-07 09:29:12.533 00:00:10.365 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:29:28.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:29:28.399 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:29:26.408 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44492 10 6452 1 2025-09-07 09:30:12.937 00:00:10.342 TCP 23.104.0.1:41430 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:26:24.842 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:30:26.588 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46618 10 6452 1 2025-09-07 09:31:13.315 00:00:10.362 TCP 23.104.0.1:42738 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:31:26.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59478 10 6452 1 2025-09-07 09:28:24.843 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:32:13.716 00:00:10.375 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:32:27.028 00:00:10.808 TCP 1.101.0.1:3000 -> 22.102.0.1:38666 10 6452 1 2025-09-07 09:33:14.130 00:00:10.364 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:33:27.877 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35616 10 6452 1 2025-09-07 09:34:14.534 00:00:10.363 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:34:28.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:34:28.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:34:28.076 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 10 6452 1 2025-09-07 09:35:14.943 00:00:10.369 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:35:28.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 10 6452 1 2025-09-07 09:32:24.839 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:36:15.351 00:00:10.364 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:36:28.507 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57598 10 6452 1 2025-09-07 09:37:15.753 00:00:10.334 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:37:28.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-09-07 09:38:16.130 00:00:10.360 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:34:24.842 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:38:28.929 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 13 6584 1 2025-09-07 09:39:16.531 00:00:10.365 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:39:28.889 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:39:28.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:39:29.165 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-07 09:40:16.940 00:00:10.375 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:40:29.379 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-09-07 09:41:29.591 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-09-07 09:41:17.354 00:00:22.379 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:38:24.840 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:42:29.829 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-09-07 09:42:29.787 00:00:10.339 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:43:30.164 00:00:10.366 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:43:29.997 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-09-07 09:40:24.843 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:44:28.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:44:28.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:44:30.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55662 10 6452 1 2025-09-07 09:44:30.572 00:00:10.375 TCP 23.104.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:45:30.988 00:00:10.365 TCP 23.104.0.1:36616 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:45:30.384 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-09-07 09:46:31.394 00:00:10.360 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:46:30.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46014 10 6452 1 2025-09-07 09:47:30.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-09-07 09:47:31.799 00:00:10.328 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:44:24.840 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:48:31.034 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-09-07 09:48:32.166 00:00:10.361 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:49:28.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:49:29.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:49:31.249 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56378 10 6452 1 2025-09-07 09:49:32.570 00:00:10.366 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:46:24.843 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:50:31.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55818 10 6452 1 2025-09-07 09:50:32.976 00:00:10.366 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:51:33.379 00:00:10.934 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:51:31.636 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-09-07 09:52:32.157 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-09-07 09:52:34.352 00:00:10.323 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:53:32.369 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 12 10367 1 2025-09-07 09:53:34.718 00:00:10.440 TCP 23.104.0.1:48688 -> 1.101.0.1:3000 15 1926 1 2025-09-07 09:50:24.842 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 09:54:28.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:54:29.141 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:54:35.195 00:00:10.364 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:54:32.630 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44944 10 6452 1 2025-09-07 09:55:32.855 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-09-07 09:55:35.602 00:00:10.363 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:52:24.848 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 09:56:33.141 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6452 1 2025-09-07 09:56:36.005 00:00:10.363 TCP 23.104.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:57:36.414 00:00:10.370 TCP 23.104.0.1:45926 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:57:33.360 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53372 10 6452 1 2025-09-07 09:58:33.577 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-09-07 09:58:36.832 00:00:10.388 TCP 23.104.0.1:47968 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502918, total packets: 1583, avg bps: 1075, avg pps: 0, avg bpp: 317 Time window: 2025-09-07 08:56:24 - 2025-09-07 09:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0030s Wall: 0.0024s flows/second: 68533.0 Runtime: 0.0024s