Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 17:59:18.649 00:00:10.363 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-09-07 17:59:38.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 17:59:29.272 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58214 10 6452 1 2025-09-07 17:59:38.978 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 17:55:25.057 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:00:19.056 00:00:10.475 TCP 23.104.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:00:29.497 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-09-07 18:01:19.573 00:00:10.364 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:01:29.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-09-07 18:02:19.981 00:00:10.327 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:02:29.883 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-09-07 18:03:20.347 00:00:10.367 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:03:30.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34648 10 6452 1 2025-09-07 17:59:25.060 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:04:20.768 00:00:10.377 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:04:38.560 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:04:38.804 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:04:30.315 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-09-07 18:05:21.186 00:00:10.366 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:05:30.520 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-09-07 18:06:21.593 00:00:10.327 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:06:30.696 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-09-07 18:02:25.059 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:07:21.958 00:00:10.390 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:07:30.914 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-09-07 18:08:22.384 00:00:10.370 TCP 23.104.0.1:38276 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:08:31.122 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-09-07 18:09:22.799 00:00:10.374 TCP 23.104.0.1:36878 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:09:31.343 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6452 1 2025-09-07 18:09:39.052 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:09:39.035 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:10:23.226 00:00:10.362 TCP 23.104.0.1:59724 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:10:31.557 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-09-07 18:06:25.062 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:11:23.630 00:00:10.368 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:11:31.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60434 10 6452 1 2025-09-07 18:12:24.042 00:00:10.364 TCP 23.104.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:12:32.025 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-09-07 18:13:24.447 00:00:10.364 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:13:32.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-09-07 18:09:25.061 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:14:24.839 00:00:10.391 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:14:39.280 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:14:39.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:14:32.450 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-09-07 18:15:25.272 00:00:10.366 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:15:32.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35508 10 6452 1 2025-09-07 18:16:25.688 00:00:10.362 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:16:32.843 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-09-07 18:17:26.109 00:00:10.362 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:17:33.092 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52464 10 6452 1 2025-09-07 18:13:25.064 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:18:26.512 00:00:10.371 TCP 23.104.0.1:37004 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:18:33.309 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35368 10 6452 1 2025-09-07 18:19:39.097 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:19:26.917 00:00:10.371 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:19:39.047 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:19:33.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-09-07 18:20:27.326 00:00:10.368 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:20:33.739 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42302 10 6452 1 2025-09-07 18:16:25.067 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:21:27.725 00:00:10.730 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:21:33.966 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:37822 10 6452 1 2025-09-07 18:22:28.495 00:00:10.324 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:22:34.153 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-09-07 18:23:28.861 00:00:10.371 TCP 23.104.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:23:34.365 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-09-07 18:24:29.269 00:00:11.142 TCP 23.104.0.1:46088 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:24:39.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:24:39.509 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:24:34.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-09-07 18:20:25.070 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:25:30.452 00:00:10.322 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:25:34.742 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 10 6452 1 2025-09-07 18:26:30.810 00:00:10.364 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:26:34.952 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55302 10 6452 1 2025-09-07 18:27:31.210 00:00:10.365 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:27:35.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-09-07 18:23:25.077 00:06:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:28:31.615 00:00:10.364 TCP 23.104.0.1:48434 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:28:35.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6452 1 2025-09-07 18:29:39.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:29:39.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:29:35.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44842 10 6452 1 2025-09-07 18:29:32.018 00:00:10.322 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:30:35.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39968 10 6452 1 2025-09-07 18:30:32.383 00:00:10.361 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:31:32.784 00:00:10.321 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:31:36.040 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-09-07 18:27:25.082 00:06:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:32:36.257 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36340 10 6452 1 2025-09-07 18:32:33.142 00:00:10.359 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:33:33.540 00:00:10.369 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:33:36.468 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57370 10 6452 1 2025-09-07 18:34:39.615 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:34:39.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:34:33.949 00:00:10.363 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:34:36.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37362 10 6452 1 2025-09-07 18:30:25.079 00:06:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:35:34.353 00:00:10.370 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:35:36.893 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-09-07 18:36:34.759 00:00:10.336 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:36:37.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 10 6452 1 2025-09-07 18:37:35.128 00:00:10.365 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:37:37.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6452 1 2025-09-07 18:38:35.532 00:00:10.364 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:38:37.540 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-09-07 18:34:25.083 00:06:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:39:39.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:39:39.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:39:35.938 00:00:10.369 TCP 23.104.0.1:37500 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:39:37.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-09-07 18:40:36.348 00:00:10.367 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:40:37.940 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59676 10 6452 1 2025-09-07 18:41:38.176 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-09-07 18:41:36.762 00:00:10.379 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:37:25.083 00:06:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:42:37.165 00:00:10.327 TCP 23.104.0.1:55706 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:42:38.412 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56026 10 6452 1 2025-09-07 18:43:37.538 00:00:10.452 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 15 1926 1 2025-09-07 18:43:38.629 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 12 10365 1 2025-09-07 18:44:39.844 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:44:39.903 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:44:38.030 00:00:10.364 TCP 23.104.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:44:38.874 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54368 10 6452 1 2025-09-07 18:45:39.115 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59298 10 6452 1 2025-09-07 18:45:38.429 00:00:10.368 TCP 23.104.0.1:59156 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:41:25.084 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:46:39.281 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-09-07 18:46:38.834 00:00:10.391 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:47:39.452 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-09-07 18:47:39.269 00:00:10.369 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:48:39.678 00:00:10.458 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 15 1926 1 2025-09-07 18:48:39.677 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56040 12 10574 1 2025-09-07 18:44:25.085 00:06:00.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:49:39.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:49:39.916 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:49:40.173 00:00:10.325 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:49:39.916 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6661 1 2025-09-07 18:50:40.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6661 1 2025-09-07 18:50:40.533 00:00:10.329 TCP 23.104.0.1:45356 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:51:40.898 00:00:10.322 TCP 23.104.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:51:40.316 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6661 1 2025-09-07 18:52:41.263 00:00:10.368 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:52:40.484 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6661 1 2025-09-07 18:48:25.088 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 18:53:40.654 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6661 1 2025-09-07 18:53:41.669 00:00:10.363 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:54:40.019 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:54:40.027 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:54:40.864 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44792 10 6661 1 2025-09-07 18:54:42.092 00:00:10.322 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:55:41.084 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6661 1 2025-09-07 18:55:42.452 00:00:10.367 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:51:25.086 00:06:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 18:56:41.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52898 10 6661 1 2025-09-07 18:56:42.858 00:00:10.394 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:57:41.466 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41144 10 6661 1 2025-09-07 18:57:43.289 00:00:10.366 TCP 23.104.0.1:60482 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:58:41.685 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6661 1 Summary: total flows: 160, total bytes: 507681, total packets: 1571, avg bps: 1066, avg pps: 0, avg bpp: 323 Time window: 2025-09-07 17:55:25 - 2025-09-07 18:58:51 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0036s User: 0.0009s Wall: 0.0030s flows/second: 53138.7 Runtime: 0.0030s