Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 08:58:56.518 00:00:10.328 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-09-10 08:59:19.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6452 1 2025-09-10 08:59:56.884 00:00:10.331 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:00:19.563 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-09-10 08:56:26.283 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:01:01.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:01:01.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:00:57.251 00:00:10.369 TCP 23.104.0.1:37654 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:01:19.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 10 6452 1 2025-09-10 09:01:57.663 00:00:10.322 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:02:19.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-09-10 09:02:58.025 00:00:10.364 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:03:20.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60294 10 6452 1 2025-09-10 09:03:58.430 00:00:10.372 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:00:26.286 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:04:20.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-09-10 09:04:58.846 00:00:10.345 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:05:20.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41514 10 6452 1 2025-09-10 09:06:02.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:06:02.342 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:05:59.231 00:00:10.326 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:06:20.817 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 10 6452 1 2025-09-10 09:02:26.292 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:06:59.595 00:00:10.365 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:07:20.995 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38704 10 6452 1 2025-09-10 09:08:00.002 00:00:10.365 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:08:21.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-09-10 09:09:00.407 00:00:10.361 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:09:21.426 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2025-09-10 09:10:00.814 00:00:10.365 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:10:21.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-09-10 09:06:26.296 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:11:02.190 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:11:02.017 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:11:01.223 00:00:10.362 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:11:21.864 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44768 10 6452 1 2025-09-10 09:12:01.625 00:00:10.366 TCP 23.104.0.1:44866 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:08:26.293 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:12:22.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-09-10 09:13:02.025 00:00:10.328 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:13:22.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-09-10 09:14:02.400 00:00:10.363 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:14:22.503 00:00:10.570 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-09-10 09:15:02.796 00:00:10.394 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:15:23.109 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40126 10 6452 1 2025-09-10 09:16:02.349 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:16:02.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:16:03.204 00:00:10.387 TCP 23.104.0.1:59514 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:12:26.297 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:16:23.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59488 10 6452 1 2025-09-10 09:17:03.630 00:00:10.331 TCP 23.104.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:17:23.504 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-09-10 09:18:03.997 00:00:10.363 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:14:26.294 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:18:23.731 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38698 10 6452 1 2025-09-10 09:19:04.404 00:00:10.375 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:19:23.950 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-09-10 09:20:04.820 00:00:10.398 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:20:24.183 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-09-10 09:21:02.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:21:02.403 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:21:05.261 00:00:10.365 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:21:24.370 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-09-10 09:22:05.668 00:00:10.643 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:18:26.297 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:22:24.579 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-09-10 09:23:06.348 00:00:10.363 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:23:24.754 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-09-10 09:24:06.753 00:00:10.376 TCP 23.104.0.1:52172 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:20:26.296 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:24:24.970 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39036 10 6452 1 2025-09-10 09:25:07.163 00:00:11.358 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:25:25.206 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-09-10 09:26:02.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:26:02.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:26:08.559 00:00:10.368 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:26:25.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-09-10 09:27:08.966 00:00:10.325 TCP 23.104.0.1:50304 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:27:25.638 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-09-10 09:28:09.323 00:00:10.543 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:24:26.299 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:28:25.858 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-09-10 09:29:09.905 00:00:10.376 TCP 23.104.0.1:55616 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:29:26.094 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-09-10 09:30:10.317 00:00:10.370 TCP 23.104.0.1:58178 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:26:26.297 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:30:26.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-09-10 09:31:02.568 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:31:02.545 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:31:10.717 00:00:10.371 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:31:26.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2025-09-10 09:32:11.127 00:00:10.384 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:32:26.736 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 10 6452 1 2025-09-10 09:33:11.549 00:00:10.367 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:33:26.948 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-10 09:34:11.957 00:00:10.328 TCP 23.104.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:30:26.301 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:34:27.343 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-09-10 09:35:12.318 00:00:10.372 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:35:27.617 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43174 10 6452 1 2025-09-10 09:36:02.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:36:02.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:36:12.724 00:00:10.370 TCP 23.104.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:32:26.299 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:36:27.858 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-09-10 09:37:13.134 00:00:10.367 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:37:28.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34370 10 6452 1 2025-09-10 09:38:13.567 00:00:10.359 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:38:28.306 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-09-10 09:39:13.965 00:00:10.369 TCP 23.104.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:39:28.523 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-09-10 09:40:14.374 00:00:10.364 TCP 23.104.0.1:50768 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:36:26.302 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:40:28.727 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-09-10 09:41:02.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:41:02.554 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:41:14.777 00:00:10.363 TCP 23.104.0.1:46516 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:41:28.894 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-09-10 09:42:15.178 00:00:10.356 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:38:26.300 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:42:29.104 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-09-10 09:43:15.575 00:00:10.366 TCP 23.104.0.1:59632 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:43:29.329 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-09-10 09:44:15.983 00:00:10.371 TCP 23.104.0.1:60282 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:44:29.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53016 10 6452 1 2025-09-10 09:45:16.388 00:00:10.367 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:45:29.782 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-09-10 09:46:02.814 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:46:02.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:42:26.306 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:46:16.792 00:00:10.348 TCP 23.104.0.1:42364 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:46:30.007 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-09-10 09:47:17.177 00:00:10.369 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:47:30.229 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-09-10 09:44:26.301 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:48:17.583 00:00:10.324 TCP 23.104.0.1:37442 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:48:30.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43752 10 6452 1 2025-09-10 09:49:17.944 00:00:10.377 TCP 23.104.0.1:44392 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:49:30.670 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-09-10 09:50:18.366 00:00:10.328 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:50:30.844 00:00:10.264 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-09-10 09:51:02.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:51:02.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:51:18.732 00:00:10.372 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:51:31.145 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-09-10 09:48:26.320 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:52:19.140 00:00:10.370 TCP 23.104.0.1:59396 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:52:31.369 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-09-10 09:53:19.549 00:00:10.374 TCP 23.104.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:53:31.584 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-09-10 09:54:19.963 00:00:10.377 TCP 23.104.0.1:57356 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:50:26.316 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 09:54:31.805 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40526 10 6452 1 2025-09-10 09:55:20.382 00:00:10.322 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:55:31.977 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-09-10 09:56:03.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 09:56:02.951 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 09:56:20.740 00:00:10.378 TCP 23.104.0.1:60668 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:56:32.213 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-09-10 09:57:21.155 00:00:10.363 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:57:32.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-09-10 09:58:21.555 00:00:10.442 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 15 1926 1 2025-09-10 09:54:26.320 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 09:58:32.653 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36220 12 10367 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-10 08:56:26 - 2025-09-10 09:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0009s Wall: 0.0027s flows/second: 61653.3 Runtime: 0.0027s