Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 18:58:43.691 00:00:10.369 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:59:40.037 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 18:59:39.870 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 18:59:41.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6661 1 2025-09-07 18:59:44.110 00:00:10.366 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-09-07 18:55:25.090 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:00:44.513 00:00:10.364 TCP 23.104.0.1:59092 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:00:42.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34194 10 6661 1 2025-09-07 19:01:44.915 00:00:10.364 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:01:42.323 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32994 10 6661 1 2025-09-07 19:02:45.320 00:00:10.364 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:02:42.537 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6661 1 2025-09-07 18:58:25.088 00:06:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:03:42.759 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40068 10 6661 1 2025-09-07 19:03:45.724 00:00:10.334 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:04:40.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:04:40.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:04:42.987 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6661 1 2025-09-07 19:04:46.109 00:00:10.363 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:05:46.515 00:00:10.372 TCP 23.104.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:05:43.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6661 1 2025-09-07 19:06:43.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6661 1 2025-09-07 19:06:46.943 00:00:10.329 TCP 23.104.0.1:51706 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:02:25.092 00:06:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:07:43.651 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35662 10 6661 1 2025-09-07 19:07:47.311 00:00:10.425 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:08:43.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6661 1 2025-09-07 19:08:47.777 00:00:10.368 TCP 23.104.0.1:52448 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:09:40.271 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:09:40.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:09:44.047 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6661 1 2025-09-07 19:09:48.185 00:00:10.363 TCP 23.104.0.1:60174 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:05:25.091 00:06:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:10:44.260 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6661 1 2025-09-07 19:10:48.584 00:00:10.367 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:11:44.434 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6661 1 2025-09-07 19:11:49.005 00:00:10.371 TCP 23.104.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:12:44.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6661 1 2025-09-07 19:12:49.411 00:00:10.372 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:13:44.878 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6661 1 2025-09-07 19:13:49.818 00:00:10.371 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:09:25.093 00:06:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:14:40.209 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:14:40.166 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:14:45.097 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6661 1 2025-09-07 19:14:50.229 00:00:10.377 TCP 23.104.0.1:49500 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:15:45.342 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6661 1 2025-09-07 19:15:50.648 00:00:10.327 TCP 23.104.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:16:45.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6661 1 2025-09-07 19:16:51.013 00:00:10.324 TCP 23.104.0.1:45770 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:12:25.091 00:06:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:17:45.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6661 1 2025-09-07 19:17:51.376 00:00:10.325 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:18:45.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48798 10 6661 1 2025-09-07 19:18:51.742 00:00:10.364 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:19:40.499 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:19:40.530 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:19:46.217 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6661 1 2025-09-07 19:19:52.144 00:00:10.362 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:20:46.434 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55646 10 6661 1 2025-09-07 19:20:52.555 00:00:10.322 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:16:25.095 00:06:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:21:46.653 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47432 10 6661 1 2025-09-07 19:21:52.918 00:00:10.387 TCP 23.104.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:22:46.823 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6661 1 2025-09-07 19:22:53.344 00:00:10.362 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:23:47.002 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6661 1 2025-09-07 19:23:53.751 00:00:10.381 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:19:25.092 00:06:00.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:24:40.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:24:40.414 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:24:47.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6661 1 2025-09-07 19:24:54.173 00:00:10.331 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:25:47.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45014 10 6661 1 2025-09-07 19:25:54.544 00:00:10.362 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:26:47.633 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 10 6661 1 2025-09-07 19:26:54.947 00:00:10.777 TCP 23.104.0.1:56788 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:27:47.800 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6661 1 2025-09-07 19:27:55.760 00:00:10.379 TCP 23.104.0.1:49926 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:23:25.098 00:06:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:28:48.039 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57108 10 6661 1 2025-09-07 19:28:56.176 00:00:10.364 TCP 23.104.0.1:46696 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:29:40.809 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:29:40.608 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:29:48.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6661 1 2025-09-07 19:29:56.577 00:00:10.368 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:30:48.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6661 1 2025-09-07 19:30:56.983 00:00:10.366 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:26:25.094 00:06:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:31:48.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6661 1 2025-09-07 19:31:57.389 00:00:10.364 TCP 23.104.0.1:40388 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:32:48.860 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36440 10 6661 1 2025-09-07 19:32:57.791 00:00:10.345 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:33:49.093 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50732 10 6661 1 2025-09-07 19:33:58.170 00:00:10.325 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:34:40.507 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:34:40.756 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:34:49.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6661 1 2025-09-07 19:34:58.537 00:00:10.361 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:30:25.097 00:06:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:35:49.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6661 1 2025-09-07 19:35:58.938 00:00:10.334 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:36:49.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6661 1 2025-09-07 19:36:59.319 00:00:10.362 TCP 23.104.0.1:35436 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:37:49.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6661 1 2025-09-07 19:37:59.718 00:00:10.373 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:33:25.095 00:06:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:38:50.201 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6661 1 2025-09-07 19:39:00.136 00:00:10.364 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:39:40.903 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:39:40.898 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:39:50.423 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6661 1 2025-09-07 19:40:00.539 00:00:10.377 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:40:50.630 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:54184 10 6661 1 2025-09-07 19:41:00.960 00:00:10.361 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:41:51.012 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6661 1 2025-09-07 19:42:01.363 00:00:10.367 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:37:25.100 00:06:00.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:42:51.221 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45816 10 6661 1 2025-09-07 19:43:01.782 00:00:10.369 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:43:51.446 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6661 1 2025-09-07 19:44:02.189 00:00:10.371 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:44:41.103 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:44:41.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:44:51.616 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6661 1 2025-09-07 19:45:02.593 00:00:10.366 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:40:25.098 00:06:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:45:51.792 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6661 1 2025-09-07 19:46:02.999 00:00:10.367 TCP 23.104.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:46:52.012 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 10 6661 1 2025-09-07 19:47:03.408 00:00:10.374 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:47:52.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6661 1 2025-09-07 19:48:03.819 00:00:10.366 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:48:52.406 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6661 1 2025-09-07 19:49:04.224 00:00:10.367 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:44:25.102 00:06:00.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:49:41.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:49:40.914 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:49:52.624 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44296 10 6661 1 2025-09-07 19:50:04.632 00:00:10.328 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:50:52.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33420 10 6661 1 2025-09-07 19:51:05.000 00:00:10.368 TCP 23.104.0.1:56310 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:51:53.017 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6661 1 2025-09-07 19:52:05.407 00:00:10.369 TCP 23.104.0.1:59120 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:47:25.100 00:06:00.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 19:52:53.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6661 1 2025-09-07 19:53:05.817 00:00:10.367 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:53:53.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 11 6701 1 2025-09-07 19:54:06.228 00:00:10.320 TCP 23.104.0.1:50318 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:54:41.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 19:54:41.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 19:54:53.655 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52494 10 6661 1 2025-09-07 19:55:06.584 00:00:10.363 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:55:53.883 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6661 1 2025-09-07 19:56:06.988 00:00:10.661 TCP 23.104.0.1:42140 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:51:25.104 00:06:00.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 19:56:54.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6661 1 2025-09-07 19:57:07.690 00:00:10.368 TCP 23.104.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-09-07 19:57:54.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6661 1 2025-09-07 19:58:08.107 00:00:10.364 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 504144, total packets: 1561, avg bps: 1068, avg pps: 0, avg bpp: 322 Time window: 2025-09-07 18:55:25 - 2025-09-07 19:58:18 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0021s Wall: 0.0024s flows/second: 67283.8 Runtime: 0.0024s