Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 04:58:59.719 00:00:10.372 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-09-08 04:59:06.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-09-08 04:59:51.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 04:59:52.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:00:00.128 00:00:10.320 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:00:06.860 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-09-08 05:01:00.487 00:00:10.360 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:01:07.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-09-08 05:02:00.886 00:00:10.376 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:02:07.308 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-09-08 05:03:01.300 00:00:10.367 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:03:07.539 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-09-08 04:59:25.256 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:04:01.704 00:00:10.335 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:04:07.764 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-09-08 05:00:25.254 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:04:52.260 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:04:52.051 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:05:02.103 00:00:10.362 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:05:07.995 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-09-08 05:06:02.503 00:00:10.390 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:06:08.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-09-08 05:07:02.927 00:00:10.333 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:07:08.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-09-08 05:08:03.305 00:00:10.364 TCP 23.104.0.1:58048 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:08:08.657 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 12 10365 1 2025-09-08 05:09:03.709 00:00:10.441 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 15 1926 1 2025-09-08 05:09:08.916 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-09-08 05:05:25.258 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:09:52.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:09:52.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:10:04.184 00:00:10.324 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:10:09.170 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-09-08 05:06:25.256 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:11:04.543 00:00:10.322 TCP 23.104.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:11:09.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-09-08 05:12:04.902 00:00:10.875 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:12:09.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 10 6452 1 2025-09-08 05:13:05.816 00:00:10.363 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:13:09.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-09-08 05:14:06.218 00:00:10.327 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:14:10.033 00:00:11.352 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-09-08 05:14:52.266 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:14:52.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:15:06.582 00:00:10.363 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:15:11.423 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39116 10 6452 1 2025-09-08 05:11:25.259 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:16:11.594 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-09-08 05:16:06.987 00:00:10.324 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:12:25.257 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:17:07.345 00:00:10.327 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:17:11.811 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-09-08 05:18:07.710 00:00:10.363 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:18:11.983 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-09-08 05:19:08.114 00:00:10.365 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:19:12.220 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-09-08 05:19:52.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:19:52.496 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:20:08.514 00:00:10.366 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:20:12.451 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-09-08 05:21:08.919 00:00:10.394 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:17:25.260 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:21:12.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-09-08 05:22:09.350 00:00:10.341 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:22:12.850 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-09-08 05:18:25.258 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:23:09.729 00:00:10.369 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:23:13.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2025-09-08 05:24:10.134 00:00:10.324 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:24:13.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6452 1 2025-09-08 05:24:52.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:24:52.521 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:25:10.499 00:00:10.379 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:25:13.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 10 6452 1 2025-09-08 05:26:10.913 00:00:10.363 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:26:13.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-09-08 05:27:11.317 00:00:10.336 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:23:25.261 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:27:13.926 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-09-08 05:28:11.694 00:00:10.946 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:24:25.258 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:28:14.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-09-08 05:29:14.322 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-09-08 05:29:12.682 00:00:10.331 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:29:52.569 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:29:52.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:30:13.061 00:00:10.804 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:30:14.518 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56590 10 6452 1 2025-09-08 05:31:13.908 00:00:10.367 TCP 23.104.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:31:14.692 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55204 10 6452 1 2025-09-08 05:32:14.901 00:00:10.571 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-09-08 05:32:14.304 00:00:10.362 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:33:15.512 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50988 10 6452 1 2025-09-08 05:33:14.702 00:00:10.369 TCP 23.104.0.1:45366 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:29:25.261 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:34:15.732 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52928 10 6452 1 2025-09-08 05:30:25.260 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:34:15.108 00:00:10.363 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:34:52.787 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:34:52.630 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:35:15.958 00:00:10.325 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-09-08 05:35:15.513 00:00:10.785 TCP 23.104.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:36:16.352 00:00:10.364 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:36:16.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-09-08 05:37:16.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-09-08 05:37:16.757 00:00:10.375 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:38:16.753 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57672 10 6452 1 2025-09-08 05:38:17.173 00:00:10.328 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:35:25.263 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:39:16.928 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:48098 10 6452 1 2025-09-08 05:39:17.543 00:00:10.367 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:39:52.807 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:39:52.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:36:25.261 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:40:17.949 00:00:10.378 TCP 23.104.0.1:60166 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:40:17.178 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59250 10 6452 1 2025-09-08 05:41:17.404 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-09-08 05:41:18.359 00:00:10.366 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:42:17.620 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40654 10 6452 1 2025-09-08 05:42:18.764 00:00:10.364 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:43:19.165 00:00:10.371 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:43:17.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56552 10 6452 1 2025-09-08 05:44:18.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-09-08 05:44:19.571 00:00:10.364 TCP 23.104.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:44:52.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:44:52.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:41:25.264 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:45:19.973 00:00:10.367 TCP 23.104.0.1:56092 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:45:18.306 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-09-08 05:42:25.262 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:46:20.380 00:00:10.370 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:46:18.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-09-08 05:47:18.747 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6452 1 2025-09-08 05:47:20.780 00:00:10.370 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:48:18.965 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 12 10367 1 2025-09-08 05:48:21.189 00:00:10.512 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 15 1926 1 2025-09-08 05:49:19.174 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-09-08 05:49:21.740 00:00:10.321 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:49:52.937 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:49:53.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:50:19.349 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-09-08 05:50:22.110 00:00:10.369 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:47:25.265 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:51:19.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34010 10 6452 1 2025-09-08 05:51:22.516 00:00:10.362 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:48:25.262 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:52:19.776 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-09-08 05:52:22.918 00:00:10.391 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:53:19.991 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-09-08 05:53:23.347 00:00:10.363 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:54:20.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-09-08 05:54:23.748 00:00:10.365 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:54:53.086 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 05:54:53.211 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 05:55:20.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-09-08 05:55:24.149 00:00:10.368 TCP 23.104.0.1:55348 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:56:20.653 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-09-08 05:56:24.550 00:00:10.325 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:53:25.266 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 05:57:20.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-09-08 05:57:24.915 00:00:10.382 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-09-08 05:54:25.263 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 05:58:21.090 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-09-08 05:58:25.333 00:00:10.372 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1118, avg pps: 0, avg bpp: 320 Time window: 2025-09-08 04:58:59 - 2025-09-08 05:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0012s Wall: 0.0026s flows/second: 62267.2 Runtime: 0.0027s