Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 18:58:52.978 00:00:10.361 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:59:26.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-09-08 18:59:53.375 00:00:10.368 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:00:16.298 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:00:16.112 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:00:26.512 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54774 10 6452 1 2025-09-08 19:00:53.779 00:00:10.381 TCP 23.104.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:01:26.724 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-09-08 19:01:54.185 00:00:10.367 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:02:26.944 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6452 1 2025-09-08 19:02:54.591 00:00:10.331 TCP 23.104.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-09-08 18:59:25.512 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:03:27.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-09-08 19:03:54.953 00:00:10.370 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:00:25.509 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:04:27.399 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-09-08 19:04:55.357 00:00:10.365 TCP 23.104.0.1:52962 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:05:16.409 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:05:16.342 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:05:27.581 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-09-08 19:05:55.763 00:00:10.337 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:06:27.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58958 10 6452 1 2025-09-08 19:06:56.137 00:00:10.360 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:07:28.024 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-09-08 19:07:56.536 00:00:10.400 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:08:28.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55844 10 6452 1 2025-09-08 19:08:56.973 00:00:10.369 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:05:25.513 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:09:28.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-09-08 19:09:57.378 00:00:10.369 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:10:16.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:10:17.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:06:25.511 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:10:28.688 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55686 10 6452 1 2025-09-08 19:10:57.780 00:00:10.328 TCP 23.104.0.1:50560 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:11:28.862 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-09-08 19:11:58.143 00:00:10.359 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:12:29.091 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47272 10 6452 1 2025-09-08 19:12:58.543 00:00:10.365 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:13:29.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-09-08 19:13:58.949 00:00:10.370 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:14:29.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-09-08 19:14:59.358 00:00:10.361 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:15:16.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:15:16.519 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:11:25.513 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:15:29.723 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-09-08 19:15:59.760 00:00:10.386 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:12:25.512 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:16:29.945 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-09-08 19:17:00.188 00:00:10.366 TCP 23.104.0.1:40810 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:17:30.194 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50532 10 6452 1 2025-09-08 19:18:00.594 00:00:10.366 TCP 23.104.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:18:30.407 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49442 10 6452 1 2025-09-08 19:19:00.997 00:00:10.372 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:19:30.634 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-09-08 19:20:01.411 00:00:10.374 TCP 23.104.0.1:54784 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:20:16.650 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:20:16.488 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:20:30.875 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-09-08 19:21:01.818 00:00:10.332 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:17:25.520 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:21:31.103 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-09-08 19:22:02.183 00:00:10.869 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:18:25.520 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:22:31.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-09-08 19:23:03.105 00:00:10.360 TCP 23.104.0.1:41128 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:23:31.521 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34002 10 6452 1 2025-09-08 19:24:03.507 00:00:10.367 TCP 23.104.0.1:43628 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:24:31.732 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-09-08 19:25:16.840 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:25:16.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:25:03.914 00:00:10.371 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:25:31.898 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-09-08 19:26:04.323 00:00:10.617 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:26:32.118 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35652 10 6452 1 2025-09-08 19:27:04.976 00:00:10.371 TCP 23.104.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:23:25.523 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:27:32.287 00:00:11.301 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-09-08 19:28:05.387 00:00:10.372 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:24:25.521 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:28:33.625 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39026 10 6452 1 2025-09-08 19:29:05.797 00:00:10.367 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:29:33.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6452 1 2025-09-08 19:30:16.831 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:30:06.200 00:00:10.368 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:30:16.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:30:34.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-09-08 19:31:06.603 00:00:10.329 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:31:34.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36638 10 6452 1 2025-09-08 19:32:06.969 00:00:10.377 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:32:34.518 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41044 10 6452 1 2025-09-08 19:33:07.385 00:00:10.368 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:29:25.524 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:33:34.728 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-09-08 19:34:07.793 00:00:10.365 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:30:25.522 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:34:34.954 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39986 10 6452 1 2025-09-08 19:35:16.749 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:35:16.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:35:08.198 00:00:10.366 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:35:35.195 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-09-08 19:36:08.602 00:00:10.368 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:36:35.415 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-09-08 19:37:09.005 00:00:10.364 TCP 23.104.0.1:33680 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:37:35.690 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49284 10 6452 1 2025-09-08 19:38:09.411 00:00:10.367 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:38:35.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53704 10 6452 1 2025-09-08 19:39:09.814 00:00:10.370 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:35:25.526 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:39:36.127 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-09-08 19:40:17.040 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:40:17.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:40:10.222 00:00:10.375 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:36:25.524 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:40:36.296 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51934 10 6452 1 2025-09-08 19:41:10.638 00:00:10.366 TCP 23.104.0.1:33476 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:41:36.522 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54816 10 6452 1 2025-09-08 19:42:11.060 00:00:10.320 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:42:36.745 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-09-08 19:43:11.418 00:00:10.367 TCP 23.104.0.1:59034 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:43:36.973 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-09-08 19:44:11.826 00:00:10.321 TCP 23.104.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:44:37.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-09-08 19:45:16.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:45:17.275 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:45:12.188 00:00:10.332 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:41:25.525 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:45:37.433 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-09-08 19:46:12.559 00:00:10.365 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:42:25.525 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:46:37.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-09-08 19:47:12.963 00:00:10.365 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:47:37.863 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-09-08 19:48:13.369 00:00:10.387 TCP 23.104.0.1:58218 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:48:38.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42118 10 6452 1 2025-09-08 19:49:13.822 00:00:10.328 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:49:38.276 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-09-08 19:50:17.302 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:50:17.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:50:14.184 00:00:10.361 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:50:38.489 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-09-08 19:47:25.529 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:51:14.587 00:00:10.370 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:51:38.673 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-09-08 19:48:25.526 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:52:14.996 00:00:10.358 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:52:38.895 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-09-08 19:53:15.394 00:00:10.363 TCP 23.104.0.1:38794 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:53:39.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39782 10 6452 1 2025-09-08 19:54:15.798 00:00:10.379 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:54:39.321 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-09-08 19:55:17.314 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 19:55:17.308 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 19:55:16.213 00:00:10.366 TCP 23.104.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:55:39.532 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-09-08 19:56:16.620 00:00:10.858 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:56:39.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-08 19:53:25.529 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 19:57:17.509 00:00:10.368 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:57:39.954 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 12 6556 1 2025-09-08 19:54:25.527 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 19:58:17.914 00:00:10.360 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-09-08 19:58:40.195 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1097, avg pps: 0, avg bpp: 316 Time window: 2025-09-08 18:58:52 - 2025-09-08 19:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 77357.8 Runtime: 0.0021s