Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 13:58:48.226 00:00:10.322 TCP 23.104.0.1:59068 -> 1.101.0.1:3000 11 1507 1 2025-09-08 13:59:18.997 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44406 10 6452 1 2025-09-08 13:59:48.587 00:00:10.368 TCP 23.104.0.1:41506 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:00:10.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:00:10.311 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:00:19.220 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-09-08 14:00:48.993 00:00:10.366 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:01:19.399 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-09-08 14:01:49.396 00:00:10.360 TCP 23.104.0.1:51380 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:02:19.621 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49716 10 6452 1 2025-09-08 14:02:49.795 00:00:10.370 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-09-08 13:59:25.434 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:03:19.797 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-09-08 14:03:50.199 00:00:10.359 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:04:19.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-09-08 14:00:25.430 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:04:50.597 00:00:10.367 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:05:10.375 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:05:10.538 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:05:20.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6452 1 2025-09-08 14:05:51.000 00:00:10.370 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:06:20.418 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-09-08 14:06:51.404 00:00:10.363 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:07:20.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-09-08 14:07:51.806 00:00:10.366 TCP 23.104.0.1:43706 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:08:20.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56712 10 6452 1 2025-09-08 14:08:52.221 00:00:10.366 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:05:25.433 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:09:21.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-09-08 14:09:52.624 00:00:10.318 TCP 23.104.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:10:10.649 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:10:10.332 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:06:25.431 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:10:21.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-09-08 14:10:52.988 00:00:10.930 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:11:21.503 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-09-08 14:11:53.955 00:00:10.327 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:12:21.681 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-09-08 14:12:54.323 00:00:10.367 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:13:21.885 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57936 10 6452 1 2025-09-08 14:13:54.732 00:00:10.377 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:14:22.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49098 10 6452 1 2025-09-08 14:14:55.149 00:00:10.371 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:15:10.311 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:15:10.262 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:11:25.434 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:15:22.329 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-09-08 14:15:55.565 00:00:10.366 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:12:25.431 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:16:22.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6452 1 2025-09-08 14:16:55.967 00:00:10.341 TCP 23.104.0.1:47586 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:17:22.759 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32930 10 6452 1 2025-09-08 14:17:56.348 00:00:10.364 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:18:22.975 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-09-08 14:18:56.750 00:00:10.361 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:19:23.228 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-09-08 14:20:10.657 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:19:57.152 00:00:10.366 TCP 23.104.0.1:49420 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:20:10.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:20:23.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-09-08 14:20:57.565 00:00:10.375 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:17:25.433 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:21:23.613 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-09-08 14:21:57.986 00:00:10.367 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:18:25.432 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:22:23.821 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-09-08 14:22:58.392 00:00:10.365 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:23:23.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6452 1 2025-09-08 14:23:58.801 00:00:10.365 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:24:24.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-09-08 14:25:10.870 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:25:10.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:24:59.202 00:00:10.369 TCP 23.104.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:25:24.439 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6452 1 2025-09-08 14:25:59.605 00:00:10.335 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:26:24.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51466 10 6452 1 2025-09-08 14:26:59.977 00:00:10.542 TCP 23.104.0.1:49342 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:23:25.435 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:27:24.865 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-09-08 14:28:00.576 00:00:10.364 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:24:25.432 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:28:25.095 00:00:10.499 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6452 1 2025-09-08 14:29:00.980 00:00:10.366 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:29:25.631 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6452 1 2025-09-08 14:30:10.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:30:10.953 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:30:01.387 00:00:10.366 TCP 23.104.0.1:50412 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:30:25.837 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34408 10 6452 1 2025-09-08 14:31:01.791 00:00:10.364 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:31:26.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55228 10 6452 1 2025-09-08 14:32:02.200 00:00:10.322 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:32:26.258 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-09-08 14:33:02.558 00:00:10.363 TCP 23.104.0.1:44322 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:29:25.436 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:33:26.435 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-09-08 14:34:02.962 00:00:10.366 TCP 23.104.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:30:25.433 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:34:26.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-09-08 14:35:10.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:35:10.891 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:35:03.369 00:00:10.367 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:35:26.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58786 10 6452 1 2025-09-08 14:36:03.775 00:00:10.375 TCP 23.104.0.1:38554 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:36:27.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-09-08 14:37:04.185 00:00:10.362 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:37:27.245 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-09-08 14:38:04.585 00:00:10.367 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:38:27.481 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 10 6452 1 2025-09-08 14:39:04.994 00:00:10.365 TCP 23.104.0.1:38524 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:35:25.438 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:39:27.696 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6452 1 2025-09-08 14:40:10.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:40:10.989 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:40:05.403 00:00:10.363 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:36:25.435 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:40:27.914 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-09-08 14:41:05.804 00:00:10.382 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:41:28.103 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41970 10 6452 1 2025-09-08 14:42:06.213 00:00:10.320 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:42:28.331 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-09-08 14:43:06.573 00:00:10.363 TCP 23.104.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:43:28.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-09-08 14:44:06.972 00:00:10.367 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:44:28.763 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-09-08 14:45:10.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:45:11.021 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:45:07.379 00:00:10.321 TCP 23.104.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:41:25.438 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:45:28.937 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6452 1 2025-09-08 14:46:07.737 00:00:10.372 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:42:25.437 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:46:29.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 10 6452 1 2025-09-08 14:47:08.156 00:00:10.327 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:47:29.348 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6452 1 2025-09-08 14:48:08.525 00:00:10.368 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:48:29.555 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60832 10 6452 1 2025-09-08 14:49:08.940 00:00:10.339 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:49:29.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-09-08 14:50:11.310 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:50:11.470 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:50:09.324 00:00:10.365 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:50:29.987 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6452 1 2025-09-08 14:51:09.728 00:00:10.368 TCP 23.104.0.1:49348 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:47:25.440 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:51:30.215 00:00:10.496 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-09-08 14:52:10.134 00:00:10.323 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:48:25.437 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:52:30.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 10 6452 1 2025-09-08 14:53:10.496 00:00:10.363 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:53:30.970 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-09-08 14:54:10.899 00:00:10.363 TCP 23.104.0.1:60020 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:54:31.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-09-08 14:55:11.104 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 14:55:11.374 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 14:55:11.304 00:00:10.366 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:55:31.416 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57002 10 6452 1 2025-09-08 14:56:11.708 00:00:10.363 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:56:31.627 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40614 10 6452 1 2025-09-08 14:57:12.112 00:00:10.367 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:53:25.441 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 14:57:31.834 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-09-08 14:58:12.516 00:00:10.361 TCP 23.104.0.1:44856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 14:54:25.438 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 14:58:32.003 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38272 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1095, avg pps: 0, avg bpp: 317 Time window: 2025-09-08 13:58:48 - 2025-09-08 14:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0011s Wall: 0.0020s flows/second: 81918.0 Runtime: 0.0020s