Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 01:58:44.139 00:00:10.365 TCP 23.104.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:59:22.892 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52830 10 6452 1 2025-09-08 01:59:48.594 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 01:59:48.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 01:59:44.539 00:00:10.325 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:55:25.202 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:00:23.081 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 10 6452 1 2025-09-08 02:00:44.900 00:00:10.365 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:01:23.255 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-09-08 02:01:45.304 00:00:10.362 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:02:23.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-09-08 02:02:45.706 00:00:10.365 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-09-08 01:58:25.202 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:03:23.680 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-09-08 02:03:46.113 00:00:10.365 TCP 23.104.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:04:23.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60622 10 6452 1 2025-09-08 02:04:48.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:04:48.487 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:04:46.519 00:00:10.364 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:05:24.109 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-09-08 02:05:46.922 00:00:10.337 TCP 23.104.0.1:44622 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:06:24.317 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45354 10 6452 1 2025-09-08 02:06:47.298 00:00:10.370 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:02:25.204 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:07:24.488 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-09-08 02:07:47.707 00:00:10.378 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:08:24.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-09-08 02:08:48.126 00:00:10.362 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:09:24.917 00:00:10.975 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-09-08 02:09:48.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:09:48.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:09:48.526 00:00:10.361 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:05:25.201 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:10:25.930 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-09-08 02:10:48.927 00:00:10.381 TCP 23.104.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:11:26.167 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-09-08 02:11:49.348 00:00:10.361 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:12:26.384 00:00:10.846 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-09-08 02:12:49.750 00:00:10.331 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:13:27.271 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57346 10 6452 1 2025-09-08 02:13:50.118 00:00:10.372 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:09:25.205 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:14:27.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-09-08 02:14:48.967 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:14:48.772 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:14:50.539 00:00:10.370 TCP 23.104.0.1:41810 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:15:27.660 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48660 10 6452 1 2025-09-08 02:15:50.955 00:00:10.368 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:16:27.882 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-09-08 02:16:51.361 00:00:10.363 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:12:25.204 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:17:28.107 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-09-08 02:17:51.763 00:00:10.380 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:18:28.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-09-08 02:18:52.180 00:00:10.324 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:19:28.533 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35080 10 6452 1 2025-09-08 02:19:48.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:19:48.795 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:19:52.553 00:00:10.363 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:20:28.746 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-09-08 02:20:52.952 00:00:10.373 TCP 23.104.0.1:48378 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:16:25.207 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:21:28.968 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-09-08 02:21:53.363 00:00:10.370 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:22:29.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-09-08 02:22:53.765 00:00:10.333 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:23:29.447 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-09-08 02:23:54.137 00:00:10.364 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:19:25.205 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:24:29.629 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-09-08 02:24:48.964 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:24:48.942 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:24:54.538 00:00:10.359 TCP 23.104.0.1:42734 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:25:29.849 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38966 10 6452 1 2025-09-08 02:25:54.937 00:00:10.376 TCP 23.104.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:26:30.087 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-09-08 02:26:55.353 00:00:10.320 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:27:30.306 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-09-08 02:27:55.713 00:00:10.721 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:23:25.209 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:28:30.536 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57598 10 6452 1 2025-09-08 02:28:56.478 00:00:10.360 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:29:30.744 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-09-08 02:29:49.006 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:29:49.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:29:56.878 00:00:10.388 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:30:30.919 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-09-08 02:30:57.308 00:00:10.368 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:26:25.208 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:31:31.163 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-09-08 02:31:57.718 00:00:10.370 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:32:31.375 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-09-08 02:32:58.125 00:00:10.326 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:33:31.590 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-08 02:33:58.488 00:00:10.362 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:34:31.803 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-09-08 02:34:49.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:34:49.584 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:34:58.891 00:00:10.380 TCP 23.104.0.1:42984 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:30:25.211 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:35:32.022 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 10 6452 1 2025-09-08 02:35:59.312 00:00:10.363 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:36:32.200 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-09-08 02:36:59.713 00:00:10.387 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:37:32.410 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50894 10 6452 1 2025-09-08 02:38:00.138 00:00:10.364 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:33:25.209 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:38:32.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 10 6452 1 2025-09-08 02:39:00.541 00:00:10.413 TCP 23.104.0.1:43430 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:39:32.840 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34580 10 6452 1 2025-09-08 02:39:49.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:39:49.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:40:00.994 00:00:10.365 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:40:33.036 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-09-08 02:41:01.397 00:00:10.363 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:41:33.259 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-09-08 02:42:01.798 00:00:10.363 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:37:25.213 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:42:33.430 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 10 6452 1 2025-09-08 02:43:02.202 00:00:10.366 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:43:33.608 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-09-08 02:44:02.609 00:00:10.366 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:44:33.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-09-08 02:44:49.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:44:49.168 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:45:03.014 00:00:10.365 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:40:25.212 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:45:34.000 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 10 6452 1 2025-09-08 02:46:03.418 00:00:10.369 TCP 23.104.0.1:33312 -> 1.101.0.1:3000 12 1559 1 2025-09-08 02:46:34.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-09-08 02:47:03.830 00:00:10.353 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:47:34.432 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37170 10 6452 1 2025-09-08 02:48:04.219 00:00:10.370 TCP 23.104.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:48:34.653 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-09-08 02:49:04.630 00:00:10.366 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:44:25.214 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:49:34.825 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-09-08 02:49:49.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:49:49.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:50:05.035 00:00:10.363 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:50:35.054 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6452 1 2025-09-08 02:51:05.439 00:00:10.367 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:51:35.265 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55936 10 6452 1 2025-09-08 02:52:05.850 00:00:10.383 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:47:25.212 00:06:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 02:52:35.482 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-09-08 02:53:06.274 00:00:10.370 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:53:35.661 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46420 12 10367 1 2025-09-08 02:54:06.684 00:00:10.440 TCP 23.104.0.1:45122 -> 1.101.0.1:3000 15 1926 1 2025-09-08 02:54:35.900 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-09-08 02:54:49.248 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 02:54:49.621 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 02:55:07.164 00:00:10.367 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:55:36.086 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-08 02:56:07.570 00:00:10.367 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:51:25.215 00:06:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 02:56:36.263 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-09-08 02:57:07.966 00:00:10.329 TCP 23.104.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:57:36.434 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-09-08 02:58:08.330 00:00:10.373 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-09-08 02:58:36.643 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 Summary: total flows: 161, total bytes: 502611, total packets: 1577, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-09-08 01:55:25 - 2025-09-08 02:58:46 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0030s User: 0.0015s Wall: 0.0025s flows/second: 64657.5 Runtime: 0.0025s