Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 10:59:33.851 00:00:10.384 TCP 23.104.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:59:40.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60780 10 6452 1 2025-09-08 11:00:06.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:00:06.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:00:34.273 00:00:10.368 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:00:40.549 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-09-08 11:01:34.677 00:00:10.381 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:01:40.766 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56784 10 6452 1 2025-09-08 11:02:35.101 00:00:10.359 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:02:40.979 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-09-08 10:59:25.371 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:03:35.500 00:00:10.367 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:03:41.223 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 2025-09-08 11:00:25.368 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:04:35.906 00:00:10.563 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:04:41.444 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6452 1 2025-09-08 11:05:06.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:05:06.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:05:36.508 00:00:10.364 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:05:41.666 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6452 1 2025-09-08 11:06:36.909 00:00:10.365 TCP 23.104.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:06:41.886 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-09-08 11:07:37.313 00:00:10.372 TCP 23.104.0.1:52634 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:07:42.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33494 10 6452 1 2025-09-08 11:08:37.723 00:00:10.371 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:08:42.324 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36362 10 6452 1 2025-09-08 11:05:25.374 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:09:38.150 00:00:10.364 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:09:42.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-09-08 11:10:06.929 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:10:07.051 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:06:25.370 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:10:38.562 00:00:10.383 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:10:42.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-09-08 11:11:39.002 00:00:10.331 TCP 23.104.0.1:54024 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:11:42.955 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-09-08 11:12:39.377 00:00:10.376 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:12:43.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-09-08 11:13:39.791 00:00:10.367 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:13:43.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34736 10 6452 1 2025-09-08 11:14:40.198 00:00:10.365 TCP 23.104.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:14:43.621 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59576 10 6452 1 2025-09-08 11:15:06.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:15:06.991 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:11:25.374 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:15:40.601 00:00:10.367 TCP 23.104.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:15:43.844 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-09-08 11:12:25.373 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:16:41.004 00:00:10.366 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:16:44.080 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-09-08 11:17:41.408 00:00:10.358 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:17:44.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-09-08 11:18:41.808 00:00:10.440 TCP 23.104.0.1:33852 -> 1.101.0.1:3000 15 1926 1 2025-09-08 11:18:44.509 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 12 10365 1 2025-09-08 11:19:42.293 00:00:10.364 TCP 23.104.0.1:49434 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:19:44.752 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47210 10 6452 1 2025-09-08 11:20:06.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:20:07.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:20:42.699 00:00:10.320 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:20:44.966 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-09-08 11:17:25.376 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:21:45.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 10 6452 1 2025-09-08 11:21:43.084 00:00:10.361 TCP 23.104.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:18:25.374 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:22:45.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-09-08 11:22:43.482 00:00:10.378 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:23:43.890 00:00:10.455 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 15 1926 1 2025-09-08 11:23:45.617 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 12 10367 1 2025-09-08 11:24:44.389 00:00:10.327 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:24:45.816 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6452 1 2025-09-08 11:25:07.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:25:07.102 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:25:44.761 00:00:10.382 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:25:46.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-09-08 11:26:46.251 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-09-08 11:26:45.180 00:00:10.371 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:23:25.379 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:27:45.585 00:00:10.371 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:27:46.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-09-08 11:24:25.376 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:28:46.683 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 12 10365 1 2025-09-08 11:28:46.001 00:00:10.432 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 15 1926 1 2025-09-08 11:29:46.475 00:00:10.361 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:29:46.920 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50078 10 6452 1 2025-09-08 11:30:07.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:30:07.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:30:46.874 00:00:10.374 TCP 23.104.0.1:35894 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:30:47.099 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-09-08 11:31:47.284 00:00:10.324 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:31:47.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-09-08 11:32:47.527 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-09-08 11:32:47.647 00:00:10.370 TCP 23.104.0.1:39904 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:29:25.380 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:33:47.743 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-09-08 11:33:48.065 00:00:10.367 TCP 23.104.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:30:25.378 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:34:48.471 00:00:10.370 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:34:47.981 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-09-08 11:35:07.233 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:35:07.262 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:35:48.876 00:00:10.329 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:35:48.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-09-08 11:36:48.387 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-09-08 11:36:49.242 00:00:10.368 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:37:48.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-09-08 11:37:49.648 00:00:10.369 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:38:48.815 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-09-08 11:38:50.059 00:00:10.373 TCP 23.104.0.1:52852 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:35:25.381 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:39:49.030 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 10 6452 1 2025-09-08 11:39:50.473 00:00:10.364 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:40:07.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:40:07.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:36:25.380 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:40:49.256 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-09-08 11:40:50.886 00:00:10.351 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:41:49.478 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37554 10 6452 1 2025-09-08 11:41:51.270 00:00:10.366 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:42:49.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-09-08 11:42:51.676 00:00:10.372 TCP 23.104.0.1:38478 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:43:49.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-09-08 11:43:52.113 00:00:10.375 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:44:50.125 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-09-08 11:44:52.531 00:00:10.359 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:45:07.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:45:07.470 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:41:25.384 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:45:50.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-09-08 11:45:52.929 00:00:10.398 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:42:25.381 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:46:50.570 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-09-08 11:46:53.369 00:00:10.394 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:47:50.781 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-09-08 11:47:53.777 00:00:10.367 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:48:50.993 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 10 6452 1 2025-09-08 11:48:54.187 00:00:10.329 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:49:51.209 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-09-08 11:49:54.555 00:00:10.364 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:50:07.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:50:07.416 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:50:51.418 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-09-08 11:50:54.962 00:00:10.324 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:47:25.384 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:51:51.589 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35856 10 6452 1 2025-09-08 11:51:55.324 00:00:10.365 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:48:25.382 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 11:52:51.806 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-09-08 11:52:55.728 00:00:10.406 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:53:52.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-09-08 11:53:56.174 00:00:10.368 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:54:52.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 2025-09-08 11:54:56.581 00:00:10.324 TCP 23.104.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:55:07.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 11:55:08.066 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 11:55:52.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-09-08 11:55:56.943 00:00:10.374 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:56:52.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37164 10 6452 1 2025-09-08 11:56:57.356 00:00:10.360 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:53:25.387 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 11:57:52.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-09-08 11:57:57.764 00:00:10.372 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-09-08 11:54:25.385 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 503387, total packets: 1569, avg bps: 1118, avg pps: 0, avg bpp: 320 Time window: 2025-09-08 10:59:25 - 2025-09-08 11:59:26 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0025s User: 0.0025s Wall: 0.0024s flows/second: 68905.5 Runtime: 0.0024s