Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 12:59:07.390 00:00:10.366 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-09-07 12:59:18.492 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32976 10 6452 1 2025-09-07 12:59:33.212 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 12:59:33.127 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:00:07.795 00:00:10.349 TCP 23.104.0.1:54380 -> 1.101.0.1:3000 11 1507 1 2025-09-07 12:56:24.920 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:00:18.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44686 10 6452 1 2025-09-07 13:01:08.182 00:00:10.662 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:01:18.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-09-07 13:02:08.883 00:00:10.374 TCP 23.104.0.1:40504 -> 1.101.0.1:3000 11 1507 1 2025-09-07 12:58:24.922 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:02:19.128 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-09-07 13:03:09.298 00:00:10.721 TCP 23.104.0.1:42018 -> 1.101.0.1:3000 15 1926 1 2025-09-07 13:03:19.343 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 12 10367 1 2025-09-07 13:04:10.101 00:00:10.327 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:04:19.541 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-09-07 13:04:32.734 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:04:32.909 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:05:10.462 00:00:10.367 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:05:19.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-09-07 13:06:10.866 00:00:10.376 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:02:24.921 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:06:19.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-09-07 13:07:11.287 00:00:10.370 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:07:20.136 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35964 10 6452 1 2025-09-07 13:04:24.924 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:08:11.695 00:00:10.365 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:08:20.351 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-09-07 13:09:12.103 00:00:10.365 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:09:20.562 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42416 10 6452 1 2025-09-07 13:09:33.040 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:09:32.890 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:10:12.509 00:00:10.372 TCP 23.104.0.1:48442 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:10:20.777 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-09-07 13:11:12.916 00:00:10.384 TCP 23.104.0.1:49890 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:11:20.987 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-09-07 13:08:24.922 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:12:13.340 00:00:10.363 TCP 23.104.0.1:59886 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:12:21.181 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40136 10 6452 1 2025-09-07 13:13:13.740 00:00:10.325 TCP 23.104.0.1:47266 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:13:21.361 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-09-07 13:14:14.109 00:00:10.363 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:10:24.926 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:14:21.571 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-09-07 13:14:32.989 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:14:32.932 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:15:14.508 00:00:10.368 TCP 23.104.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:15:21.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 10 6452 1 2025-09-07 13:16:14.911 00:00:10.369 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:16:21.957 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50972 10 6452 1 2025-09-07 13:17:15.321 00:00:10.361 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:17:22.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-09-07 13:14:24.924 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:18:15.720 00:00:10.376 TCP 23.104.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:18:22.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 10 6452 1 2025-09-07 13:19:16.131 00:00:10.367 TCP 23.104.0.1:50924 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:19:33.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:19:22.638 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52946 10 6452 1 2025-09-07 13:19:33.096 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:16:24.928 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:20:16.536 00:00:10.378 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:20:22.852 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-09-07 13:21:16.946 00:00:10.369 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:21:23.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-09-07 13:22:17.352 00:00:10.371 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:22:23.301 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-09-07 13:23:17.763 00:00:10.335 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:23:23.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-09-07 13:20:24.926 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:24:18.134 00:00:10.364 TCP 23.104.0.1:41922 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:24:33.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:24:23.925 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47826 10 6452 1 2025-09-07 13:24:33.282 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:25:18.535 00:00:10.328 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:25:24.133 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-09-07 13:22:24.929 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:26:18.903 00:00:10.366 TCP 23.104.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:26:24.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34602 10 6452 1 2025-09-07 13:27:19.304 00:00:10.367 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:27:24.525 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53486 10 6452 1 2025-09-07 13:28:19.706 00:00:10.369 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:28:24.737 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58312 10 6452 1 2025-09-07 13:29:33.698 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:29:24.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-09-07 13:29:20.108 00:00:10.368 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:29:33.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:26:24.929 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:30:20.512 00:00:10.369 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:30:25.171 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51560 10 6452 1 2025-09-07 13:31:20.914 00:00:10.370 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:31:25.383 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-09-07 13:28:24.931 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:32:21.321 00:00:10.362 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:32:25.618 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35662 10 6452 1 2025-09-07 13:33:25.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58532 10 6452 1 2025-09-07 13:33:21.724 00:00:10.378 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:34:33.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:34:22.142 00:00:10.323 TCP 23.104.0.1:57978 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:34:26.065 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-09-07 13:34:33.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:35:22.503 00:00:10.367 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:35:26.280 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52564 10 6452 1 2025-09-07 13:32:24.930 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:36:26.502 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56266 10 6452 1 2025-09-07 13:36:22.913 00:00:10.368 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:37:26.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-09-07 13:37:23.316 00:00:10.325 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:34:24.933 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:38:23.678 00:00:10.332 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:38:26.939 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-09-07 13:39:33.596 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:39:24.059 00:00:10.368 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:39:33.674 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:39:27.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-09-07 13:40:24.466 00:00:10.364 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:40:27.418 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-09-07 13:41:24.869 00:00:10.324 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:41:27.594 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49420 10 6452 1 2025-09-07 13:38:24.930 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:42:25.234 00:00:10.362 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:42:27.804 00:00:10.621 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-09-07 13:43:25.648 00:00:10.361 TCP 23.104.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:43:28.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-09-07 13:40:24.934 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:44:33.706 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:44:33.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:44:26.066 00:00:10.318 TCP 23.104.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:44:28.669 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-09-07 13:45:26.424 00:00:10.327 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:45:28.904 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-09-07 13:46:26.793 00:00:10.365 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:46:29.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45744 10 6452 1 2025-09-07 13:47:27.203 00:00:10.415 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:47:29.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49370 10 6452 1 2025-09-07 13:44:24.931 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:48:27.658 00:00:10.362 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:48:29.552 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-09-07 13:49:33.795 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:49:33.640 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:49:28.089 00:00:10.361 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:49:29.726 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-09-07 13:46:24.934 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:50:28.485 00:00:10.324 TCP 23.104.0.1:35266 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:50:29.939 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-09-07 13:51:28.847 00:00:10.340 TCP 23.104.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:51:30.147 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-09-07 13:52:29.222 00:00:10.363 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:52:30.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60516 10 6452 1 2025-09-07 13:53:29.620 00:00:10.322 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:53:30.572 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-09-07 13:50:24.932 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 13:54:33.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 13:54:33.856 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 13:54:29.980 00:00:10.367 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:54:30.797 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6452 1 2025-09-07 13:55:30.974 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-09-07 13:55:30.387 00:00:10.368 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:52:24.936 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 13:56:30.795 00:00:10.366 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:56:31.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59282 10 6452 1 2025-09-07 13:57:31.423 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-09-07 13:57:31.206 00:00:10.366 TCP 23.104.0.1:60918 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:58:31.618 00:00:10.369 TCP 23.104.0.1:36656 -> 1.101.0.1:3000 11 1507 1 2025-09-07 13:58:31.608 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-07 12:56:24 - 2025-09-07 13:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0016s Wall: 0.0016s flows/second: 101921.2 Runtime: 0.0016s