Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 16:58:46.179 00:00:10.369 TCP 23.104.0.1:54452 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:59:14.936 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40880 10 6452 1 2025-09-07 16:59:37.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 16:59:37.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 16:59:46.589 00:00:10.367 TCP 23.104.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:00:15.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44448 10 6452 1 2025-09-07 17:00:46.991 00:00:10.367 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-09-07 16:56:25.040 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:01:15.398 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-09-07 17:01:47.394 00:00:10.323 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:02:16.023 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45246 10 6452 1 2025-09-07 17:02:47.758 00:00:10.368 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:03:16.240 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46868 12 10365 1 2025-09-07 17:03:48.165 00:00:10.453 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 15 1926 1 2025-09-07 16:59:25.042 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:04:16.477 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-09-07 17:04:37.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:04:37.588 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:04:48.660 00:00:10.373 TCP 23.104.0.1:57768 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:05:16.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49522 10 6452 1 2025-09-07 17:05:49.095 00:00:10.361 TCP 23.104.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:06:16.893 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-09-07 17:06:49.490 00:00:10.365 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:07:17.132 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-09-07 17:07:49.893 00:00:10.340 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:03:25.043 00:06:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:08:17.352 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-09-07 17:08:50.269 00:00:10.326 TCP 23.104.0.1:53570 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:09:17.561 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6452 1 2025-09-07 17:09:37.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:09:37.908 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:09:50.649 00:00:10.367 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:10:17.730 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6452 1 2025-09-07 17:10:51.060 00:00:10.367 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:06:25.042 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:11:17.947 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2025-09-07 17:11:51.466 00:00:10.360 TCP 23.104.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:12:18.188 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-09-07 17:12:51.865 00:00:10.381 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:13:18.370 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51912 12 10365 1 2025-09-07 17:13:52.283 00:00:10.436 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 15 1926 1 2025-09-07 17:14:18.616 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-09-07 17:14:37.974 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:14:37.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:14:52.760 00:00:10.376 TCP 23.104.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:10:25.047 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:15:18.830 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50044 10 6452 1 2025-09-07 17:15:53.177 00:00:10.361 TCP 23.104.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:16:19.069 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-09-07 17:16:53.578 00:00:10.914 TCP 23.104.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:17:19.238 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-09-07 17:17:54.544 00:00:17.586 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:13:25.044 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:18:19.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52298 10 6452 1 2025-09-07 17:19:02.183 00:00:10.363 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:19:19.666 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-09-07 17:19:38.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:19:38.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:20:02.587 00:00:10.365 TCP 23.104.0.1:33428 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:20:19.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-09-07 17:21:02.994 00:00:10.636 TCP 23.104.0.1:51734 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:21:20.111 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-09-07 17:22:03.675 00:00:10.328 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:17:25.049 00:06:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:22:20.333 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-09-07 17:23:04.056 00:00:10.317 TCP 23.104.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:23:20.501 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-09-07 17:24:04.415 00:00:10.364 TCP 23.104.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:24:20.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 10 6452 1 2025-09-07 17:24:38.074 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:24:38.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:25:04.815 00:00:10.373 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:20:25.048 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:25:20.885 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-09-07 17:26:05.216 00:00:10.362 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:26:21.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54568 10 6452 1 2025-09-07 17:27:05.617 00:00:10.363 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:27:21.332 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42952 10 6452 1 2025-09-07 17:28:06.023 00:00:10.433 TCP 23.104.0.1:46376 -> 1.101.0.1:3000 15 1926 1 2025-09-07 17:28:21.546 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 12 10367 1 2025-09-07 17:29:06.496 00:00:10.364 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:24:25.050 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:29:21.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-09-07 17:29:38.096 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:29:38.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:30:06.896 00:00:10.330 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:30:22.000 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-09-07 17:31:07.263 00:00:10.364 TCP 23.104.0.1:37354 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:31:22.220 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-09-07 17:32:07.667 00:00:10.366 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:27:25.049 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:32:22.455 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52184 10 6452 1 2025-09-07 17:33:08.102 00:00:10.364 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:33:22.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33608 10 6452 1 2025-09-07 17:34:08.506 00:00:10.369 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:34:22.885 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60896 10 6452 1 2025-09-07 17:34:38.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:34:38.287 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:35:08.913 00:00:10.363 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:35:23.101 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-09-07 17:36:09.315 00:00:10.324 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:31:25.054 00:06:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:36:23.271 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-07 17:37:09.674 00:00:10.362 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:37:23.486 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52770 10 6452 1 2025-09-07 17:38:10.104 00:00:10.438 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 15 1926 1 2025-09-07 17:38:23.698 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 12 10365 1 2025-09-07 17:39:10.581 00:00:10.367 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:34:25.051 00:06:00.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:39:23.949 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6452 1 2025-09-07 17:39:38.503 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:39:38.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:40:10.992 00:00:10.368 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:40:24.179 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55662 10 6452 1 2025-09-07 17:41:11.397 00:00:10.378 TCP 23.104.0.1:50796 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:41:24.397 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-09-07 17:42:11.825 00:00:10.389 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:42:24.568 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-09-07 17:43:12.249 00:00:10.373 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:38:25.055 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:43:24.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50838 10 6452 1 2025-09-07 17:44:12.658 00:00:10.372 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:44:25.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-09-07 17:44:38.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:44:38.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:45:13.094 00:00:10.331 TCP 23.104.0.1:46918 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:45:25.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37496 10 6452 1 2025-09-07 17:41:25.054 00:06:00.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:46:13.468 00:00:10.365 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:46:25.429 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2025-09-07 17:47:13.871 00:00:10.368 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:47:25.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50840 10 6452 1 2025-09-07 17:48:14.276 00:00:10.367 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:48:25.818 00:00:10.679 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-09-07 17:49:14.684 00:00:10.325 TCP 23.104.0.1:50022 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:49:26.529 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37232 10 6452 1 2025-09-07 17:49:38.845 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:49:38.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:50:15.062 00:00:10.367 TCP 23.104.0.1:52126 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:45:25.057 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:50:26.755 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52280 10 6452 1 2025-09-07 17:51:15.468 00:00:10.363 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:51:26.930 00:00:10.820 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-09-07 17:52:15.870 00:00:10.323 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:52:27.787 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-09-07 17:53:16.227 00:00:10.433 TCP 23.104.0.1:45578 -> 1.101.0.1:3000 15 1926 1 2025-09-07 17:48:25.054 00:06:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 17:53:28.006 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 12 10367 1 2025-09-07 17:54:16.701 00:00:10.365 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:54:38.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:54:28.211 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-09-07 17:54:38.864 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:55:17.107 00:00:10.364 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:55:28.420 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40820 10 6452 1 2025-09-07 17:56:17.509 00:00:10.321 TCP 23.104.0.1:42820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:56:28.670 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44818 10 6452 1 2025-09-07 17:52:25.058 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 17:57:17.877 00:00:10.368 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:57:28.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-09-07 17:58:18.285 00:00:10.325 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:58:29.104 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6452 1 Summary: total flows: 161, total bytes: 519889, total packets: 1600, avg bps: 1113, avg pps: 0, avg bpp: 324 Time window: 2025-09-07 16:56:25 - 2025-09-07 17:58:39 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0042s User: 0.0011s Wall: 0.0029s flows/second: 55652.1 Runtime: 0.0029s