Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 07:58:58.949 00:00:10.330 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:59:32.028 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6452 1 2025-09-11 07:59:59.321 00:00:11.074 TCP 23.104.0.1:51456 -> 1.101.0.1:3000 11 1507 1 2025-09-11 07:56:26.712 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:00:32.262 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-09-11 08:01:00.436 00:00:10.368 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:01:29.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:01:29.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:01:32.471 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-09-11 08:02:00.840 00:00:10.385 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:02:32.690 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-09-11 08:03:01.262 00:00:10.366 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:03:32.906 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6452 1 2025-09-11 08:04:01.666 00:00:10.368 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:00:26.717 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:04:33.118 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-09-11 08:05:02.098 00:00:10.325 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:05:33.339 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59940 10 6452 1 2025-09-11 08:06:02.458 00:00:10.323 TCP 23.104.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:06:29.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:06:29.629 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:02:26.715 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:06:33.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44600 10 6452 1 2025-09-11 08:07:02.821 00:00:10.366 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:07:33.729 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-09-11 08:08:03.226 00:00:10.360 TCP 23.104.0.1:50644 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:08:34.600 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 10 6452 1 2025-09-11 08:09:03.625 00:00:10.364 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:09:34.816 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36472 10 6452 1 2025-09-11 08:10:04.055 00:00:10.366 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:06:26.718 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:10:35.034 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-09-11 08:11:04.460 00:00:10.331 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:11:30.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:11:29.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:11:35.253 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-09-11 08:12:04.832 00:00:10.349 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:08:26.715 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:12:35.466 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-09-11 08:13:05.221 00:00:10.369 TCP 23.104.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:13:35.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-09-11 08:14:05.627 00:00:10.362 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:14:35.902 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-09-11 08:15:06.035 00:00:10.368 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:15:36.122 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-09-11 08:16:06.435 00:00:10.367 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:16:30.048 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:16:30.105 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:12:26.718 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:16:36.327 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-09-11 08:17:06.841 00:00:10.390 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:17:36.539 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-09-11 08:18:07.269 00:00:10.374 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:14:26.715 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:18:36.760 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:32870 10 6452 1 2025-09-11 08:19:07.680 00:00:10.375 TCP 23.104.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:19:36.952 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56002 10 6452 1 2025-09-11 08:20:08.108 00:00:10.807 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:20:37.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-09-11 08:21:08.953 00:00:10.363 TCP 23.104.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:21:29.909 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:21:29.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:21:37.392 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-09-11 08:22:09.356 00:00:10.324 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:18:26.723 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:22:37.606 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51778 10 6452 1 2025-09-11 08:23:09.716 00:00:10.386 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:23:37.841 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-09-11 08:24:10.138 00:00:10.371 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:20:26.720 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:24:38.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-09-11 08:25:10.549 00:00:10.328 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:25:38.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35082 10 6452 1 2025-09-11 08:26:10.914 00:00:10.369 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:26:30.105 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:26:30.271 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:26:38.520 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6452 1 2025-09-11 08:27:11.317 00:00:10.365 TCP 23.104.0.1:39044 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:27:38.742 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34460 10 6452 1 2025-09-11 08:28:11.724 00:00:10.371 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:24:26.723 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:28:38.963 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-09-11 08:29:12.133 00:00:10.327 TCP 23.104.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:29:39.197 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45394 10 6452 1 2025-09-11 08:30:12.497 00:00:10.363 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:26:26.721 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:30:39.413 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-11 08:31:12.903 00:00:10.325 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:31:30.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:31:30.615 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:31:39.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33886 10 6452 1 2025-09-11 08:32:13.270 00:00:10.365 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:32:39.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-09-11 08:33:13.670 00:00:10.366 TCP 23.104.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:33:40.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-09-11 08:34:14.099 00:00:10.366 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:30:26.725 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:34:40.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-09-11 08:35:14.513 00:00:10.366 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:35:40.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42232 10 6452 1 2025-09-11 08:36:14.930 00:00:10.373 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:36:30.270 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:32:26.722 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:36:30.476 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:36:40.718 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-09-11 08:37:15.344 00:00:10.370 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:37:40.934 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-09-11 08:38:15.755 00:00:10.374 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:38:41.134 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58358 10 6452 1 2025-09-11 08:39:16.170 00:00:10.330 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:39:41.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-09-11 08:40:16.539 00:00:10.646 TCP 23.104.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:36:26.726 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:40:41.559 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-09-11 08:41:30.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:41:30.356 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:41:17.220 00:00:10.365 TCP 23.104.0.1:59112 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:41:41.742 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58524 10 6452 1 2025-09-11 08:42:17.621 00:00:10.378 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:38:26.724 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:42:41.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-09-11 08:43:18.046 00:00:10.330 TCP 23.104.0.1:40854 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:43:42.202 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-09-11 08:44:18.414 00:00:10.363 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:44:42.427 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-09-11 08:45:18.814 00:00:10.370 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:45:42.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-09-11 08:46:30.609 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:46:30.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:42:26.727 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:46:19.219 00:00:10.368 TCP 23.104.0.1:46376 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:46:42.866 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6452 1 2025-09-11 08:47:19.625 00:00:10.325 TCP 23.104.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:47:43.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-09-11 08:44:26.727 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:48:19.995 00:00:10.334 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:48:43.319 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-09-11 08:49:20.368 00:00:10.366 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:49:43.512 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-09-11 08:50:20.779 00:00:10.368 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:50:43.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-09-11 08:51:21.187 00:00:10.360 TCP 23.104.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:51:30.558 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:51:30.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:51:43.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60482 10 6452 1 2025-09-11 08:52:21.586 00:00:10.368 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:48:26.730 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:52:44.182 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-09-11 08:53:21.990 00:00:10.368 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:53:44.404 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52554 10 6452 1 2025-09-11 08:50:26.730 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 08:54:22.396 00:00:10.364 TCP 23.104.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:54:44.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-09-11 08:55:22.797 00:00:10.365 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:55:44.843 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-11 08:56:31.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 08:56:30.608 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 08:56:23.204 00:00:10.366 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:56:45.031 00:00:10.701 TCP 1.101.0.1:3000 -> 22.102.0.1:55100 10 6452 1 2025-09-11 08:57:23.611 00:00:10.366 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-09-11 08:57:45.768 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-09-11 08:54:26.731 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 08:58:24.035 00:00:10.362 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1040, avg pps: 0, avg bpp: 314 Time window: 2025-09-11 07:56:26 - 2025-09-11 08:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0028s flows/second: 58608.8 Runtime: 0.0028s