Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 06:58:51.026 00:00:10.322 TCP 23.104.0.1:60626 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:59:34.303 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-09-08 06:59:54.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 06:59:54.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 06:59:51.389 00:00:10.328 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:00:34.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-09-08 07:00:51.758 00:00:10.380 TCP 23.104.0.1:59010 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:01:34.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53006 10 6452 1 2025-09-08 07:01:52.174 00:00:10.323 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:02:34.957 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-09-08 07:02:52.536 00:00:10.367 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-09-08 06:59:25.302 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:03:35.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48414 10 6452 1 2025-09-08 07:03:52.941 00:00:10.372 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:00:25.301 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:04:35.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-09-08 07:04:54.678 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:04:54.572 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:04:53.355 00:00:10.358 TCP 23.104.0.1:44302 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:05:35.616 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-09-08 07:05:53.754 00:00:10.382 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:06:35.793 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-09-08 07:06:54.174 00:00:10.366 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:07:36.006 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38378 10 6452 1 2025-09-08 07:07:54.578 00:00:10.724 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:08:36.218 00:00:10.279 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-08 07:08:55.340 00:00:10.326 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:05:25.305 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:09:36.529 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-09-08 07:09:54.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:09:55.029 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:09:55.706 00:00:10.328 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:06:25.303 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:10:36.705 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 10 6452 1 2025-09-08 07:10:56.100 00:00:10.367 TCP 23.104.0.1:45394 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:11:36.928 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43780 10 6452 1 2025-09-08 07:11:56.501 00:00:10.360 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:12:37.165 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-09-08 07:12:56.910 00:00:10.381 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:13:37.337 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6452 1 2025-09-08 07:13:57.332 00:00:10.371 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:14:54.726 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:14:37.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58328 10 6452 1 2025-09-08 07:14:54.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:14:57.744 00:00:10.368 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:11:25.308 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:15:37.757 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-09-08 07:15:58.150 00:00:10.366 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:12:25.305 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:16:37.928 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-09-08 07:16:58.553 00:00:10.374 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:17:38.138 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51260 10 6452 1 2025-09-08 07:17:58.974 00:00:10.339 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:18:38.354 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50132 10 6452 1 2025-09-08 07:18:59.360 00:00:10.365 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:19:54.939 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:19:38.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41024 10 6452 1 2025-09-08 07:19:54.792 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:19:59.761 00:00:10.366 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:20:38.776 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-09-08 07:21:00.167 00:00:10.368 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:17:25.308 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:21:38.986 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-09-08 07:22:00.574 00:00:10.362 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:18:25.305 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:22:39.213 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:52310 10 6452 1 2025-09-08 07:23:00.974 00:00:10.372 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:23:39.795 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-09-08 07:24:01.383 00:00:10.364 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:24:40.042 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44382 10 6452 1 2025-09-08 07:24:54.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:24:54.966 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:25:01.784 00:00:10.370 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:25:40.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58590 10 6452 1 2025-09-08 07:26:02.187 00:00:10.365 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:26:40.474 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56712 10 6452 1 2025-09-08 07:27:02.588 00:00:10.366 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:23:25.308 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:27:40.685 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35796 10 6452 1 2025-09-08 07:28:02.992 00:00:10.370 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:24:25.306 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:28:40.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-09-08 07:29:03.404 00:00:10.363 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:29:41.079 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-09-08 07:29:54.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:29:55.041 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:30:03.808 00:00:10.329 TCP 23.104.0.1:59356 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:30:41.253 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-09-08 07:31:04.176 00:00:10.360 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:31:41.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-09-08 07:32:04.578 00:00:10.363 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:32:41.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52006 10 6452 1 2025-09-08 07:33:04.987 00:00:10.368 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:29:25.309 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:33:41.897 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47052 10 6452 1 2025-09-08 07:34:05.410 00:00:10.365 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:30:25.307 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:34:42.110 00:00:10.728 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-09-08 07:34:55.463 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:34:55.078 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:35:05.811 00:00:10.366 TCP 23.104.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:35:42.878 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-09-08 07:36:06.216 00:00:10.362 TCP 23.104.0.1:53990 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:36:43.111 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2025-09-08 07:37:06.617 00:00:10.357 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:37:43.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-09-08 07:38:07.013 00:00:10.363 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:38:43.703 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-09-08 07:39:07.417 00:00:10.370 TCP 23.104.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:35:25.313 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:39:55.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:39:55.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:39:43.915 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-09-08 07:40:07.827 00:00:10.324 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:36:25.310 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:40:44.112 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-09-08 07:41:08.193 00:00:10.365 TCP 23.104.0.1:48934 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:41:44.334 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-09-08 07:42:08.590 00:00:10.365 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:42:44.502 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-09-08 07:43:09.003 00:00:10.343 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:43:44.721 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-09-08 07:44:09.419 00:00:10.327 TCP 23.104.0.1:33420 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:44:55.425 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:44:55.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:44:44.940 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-09-08 07:45:09.782 00:00:10.365 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:41:25.314 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:45:45.176 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-09-08 07:46:10.190 00:00:10.366 TCP 23.104.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:42:25.311 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:46:45.388 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35830 10 6452 1 2025-09-08 07:47:10.594 00:00:10.366 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:47:45.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-09-08 07:48:11.003 00:00:10.363 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:48:45.841 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-09-08 07:49:11.408 00:00:10.369 TCP 23.104.0.1:47386 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:49:46.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40528 10 6452 1 2025-09-08 07:49:55.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:49:55.518 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:50:11.814 00:00:10.365 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:50:46.258 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-09-08 07:51:12.231 00:00:10.364 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:47:25.314 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:51:46.435 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40916 10 6452 1 2025-09-08 07:52:12.634 00:00:10.366 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:48:25.312 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 07:52:46.649 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-09-08 07:53:13.048 00:00:10.370 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:53:46.870 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-09-08 07:54:13.455 00:00:10.365 TCP 23.104.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:54:55.601 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 07:54:55.784 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 07:54:47.097 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 10 6452 1 2025-09-08 07:55:13.856 00:00:10.332 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:55:47.320 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-09-08 07:56:14.228 00:00:10.367 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:56:47.543 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-09-08 07:53:25.316 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 07:57:14.635 00:00:10.361 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:57:47.722 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-09-08 07:58:15.055 00:00:10.361 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-09-08 07:54:25.313 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1082, avg pps: 0, avg bpp: 314 Time window: 2025-09-08 06:58:51 - 2025-09-08 07:59:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0012s Wall: 0.0024s flows/second: 68033.8 Runtime: 0.0024s