Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 01:58:56.349 00:00:10.360 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-09-10 01:54:26.150 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 01:59:35.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-09-10 01:59:56.748 00:00:10.323 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:00:35.656 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-09-10 02:00:53.600 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:00:53.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:00:57.111 00:00:10.331 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:01:35.863 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-09-10 02:01:57.478 00:00:10.361 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-10 01:58:26.148 00:04:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:02:36.093 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-09-10 02:02:57.874 00:00:10.371 TCP 23.104.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:03:36.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-09-10 02:03:58.285 00:00:10.371 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:04:36.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-09-10 02:04:58.713 00:00:10.339 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:00:26.952 00:05:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 686 1 2025-09-10 02:05:36.729 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-09-10 02:05:53.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:05:53.532 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:05:59.122 00:00:10.328 TCP 23.104.0.1:59032 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:06:36.938 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34512 10 6452 1 2025-09-10 02:06:59.489 00:00:10.367 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:03:26.149 00:04:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:07:37.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-09-10 02:07:59.891 00:00:10.389 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:08:37.405 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:52152 14 10471 1 2025-09-10 02:09:00.324 00:00:10.439 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:09:37.696 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44890 10 6452 1 2025-09-10 02:10:00.801 00:00:10.332 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:06:26.152 00:04:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:10:37.910 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41268 10 6452 1 2025-09-10 02:10:53.637 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:10:53.708 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:11:01.173 00:00:10.368 TCP 23.104.0.1:40358 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:11:38.088 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-09-10 02:12:01.579 00:00:10.362 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:08:26.149 00:04:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:12:38.263 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-09-10 02:13:01.981 00:00:10.372 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:13:38.451 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43642 12 10365 1 2025-09-10 02:14:02.394 00:00:10.400 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:14:38.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35014 10 6452 1 2025-09-10 02:15:02.846 00:00:10.340 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:11:26.153 00:04:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:15:38.902 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-09-10 02:15:53.947 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:15:53.944 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:16:03.227 00:00:10.344 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:16:39.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2025-09-10 02:17:03.596 00:00:10.367 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:13:26.155 00:04:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:17:39.302 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-09-10 02:18:04.002 00:00:10.324 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:18:39.477 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-10 02:19:04.365 00:00:10.369 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:19:39.659 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56980 10 6452 1 2025-09-10 02:20:04.769 00:00:10.380 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:16:26.159 00:04:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:20:39.880 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52006 10 6452 1 2025-09-10 02:20:54.093 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:20:53.670 00:00:00.010 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:21:05.191 00:00:10.365 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:21:40.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-09-10 02:22:05.593 00:00:10.362 TCP 23.104.0.1:55314 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:18:26.161 00:04:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:22:40.327 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-09-10 02:23:05.992 00:00:10.365 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:23:41.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-09-10 02:24:06.396 00:00:10.370 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:24:41.391 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-09-10 02:25:06.804 00:00:10.370 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:25:41.571 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51338 10 6452 1 2025-09-10 02:25:54.081 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:25:53.756 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:26:07.209 00:00:10.363 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:21:26.167 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 02:26:41.784 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-09-10 02:27:07.612 00:00:10.327 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:27:26.957 00:00:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 1 71 1 2025-09-10 02:27:42.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6452 1 2025-09-10 02:28:07.978 00:00:10.366 TCP 23.104.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:23:26.164 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-10 02:28:42.217 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57828 10 6452 1 2025-09-10 02:29:08.379 00:00:10.363 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:29:26.963 00:00:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 1 52 1 2025-09-10 02:29:42.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-09-10 02:30:08.784 00:00:10.375 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:30:54.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:30:53.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:30:42.603 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-09-10 02:31:09.193 00:00:10.372 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:31:42.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-09-10 02:32:09.605 00:00:10.326 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:28:26.168 00:04:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:32:43.030 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-09-10 02:33:09.969 00:00:10.373 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:33:43.250 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-09-10 02:34:10.379 00:00:10.377 TCP 23.104.0.1:42462 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:30:26.165 00:04:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:34:43.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51096 10 6452 1 2025-09-10 02:35:10.788 00:00:10.368 TCP 23.104.0.1:53858 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:35:43.673 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54886 10 6452 1 2025-09-10 02:35:53.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:35:54.089 00:00:00.055 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:36:11.190 00:00:10.361 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:36:43.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-09-10 02:37:11.589 00:00:10.366 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:33:26.174 00:04:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:37:44.114 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-09-10 02:38:11.992 00:00:10.365 TCP 23.104.0.1:56550 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:38:44.327 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-10 02:35:26.172 00:04:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:39:12.395 00:00:10.371 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:39:44.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53482 10 6452 1 2025-09-10 02:40:12.799 00:00:10.374 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:40:44.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 10 6452 1 2025-09-10 02:40:54.266 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:40:54.395 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:41:13.212 00:00:10.365 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:41:44.980 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-09-10 02:38:26.175 00:04:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:42:13.615 00:00:10.360 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:42:45.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60058 10 6452 1 2025-09-10 02:43:14.020 00:00:10.329 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:43:45.443 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-09-10 02:40:26.173 00:04:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:44:14.394 00:00:10.318 TCP 23.104.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:44:45.666 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-09-10 02:45:14.748 00:00:10.385 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:45:54.521 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:45:45.890 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-09-10 02:45:54.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:46:15.173 00:00:10.363 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:46:46.110 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-09-10 02:43:26.176 00:04:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:47:15.579 00:00:10.384 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:47:46.287 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-09-10 02:48:16.024 00:00:10.443 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 15 1926 1 2025-09-10 02:48:46.528 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 14 10471 1 2025-09-10 02:49:16.505 00:00:10.366 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:45:26.173 00:04:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:49:46.785 00:00:10.625 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-09-10 02:50:16.916 00:00:10.336 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:50:54.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:50:54.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:50:47.442 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-09-10 02:51:17.286 00:00:10.367 TCP 23.104.0.1:54540 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:51:47.655 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-09-10 02:48:26.177 00:04:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 02:52:17.690 00:00:10.369 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:52:47.825 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-09-10 02:53:18.113 00:00:10.371 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:53:48.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-09-10 02:50:26.174 00:04:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 02:54:18.526 00:00:10.364 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:54:48.283 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-09-10 02:55:18.926 00:00:10.387 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:55:54.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 02:55:54.779 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 02:55:48.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-09-10 02:56:19.347 00:00:10.363 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:56:48.666 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44296 10 6452 1 2025-09-10 02:57:19.754 00:00:10.386 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-09-10 02:57:48.880 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-09-10 02:53:26.178 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 02:58:20.186 00:00:10.367 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 168, total bytes: 505402, total packets: 1589, avg bps: 1036, avg pps: 0, avg bpp: 318 Time window: 2025-09-10 01:54:26 - 2025-09-10 02:59:26 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0033s User: 0.0022s Wall: 0.0024s flows/second: 70527.8 Runtime: 0.0024s