Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 04:59:06.050 00:00:10.365 TCP 23.104.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:59:22.994 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48390 10 6452 1 2025-09-16 05:00:06.450 00:00:10.361 TCP 23.104.0.1:54564 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:56:29.056 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:00:23.227 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-09-16 05:01:06.853 00:00:10.382 TCP 23.104.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:57:29.061 00:05:01.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:01:23.453 00:00:11.123 TCP 1.101.0.1:3000 -> 22.102.0.1:46570 10 6452 1 2025-09-16 05:02:07.272 00:00:10.324 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:02:24.626 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-09-16 05:03:07.629 00:00:10.324 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:03:24.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-09-16 05:03:50.334 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:03:50.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:04:07.988 00:00:10.367 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:04:25.037 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-09-16 05:05:08.388 00:00:10.374 TCP 23.104.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:05:25.625 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6452 1 2025-09-16 05:06:08.796 00:00:10.365 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:02:29.057 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:06:25.848 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-09-16 05:07:09.199 00:00:10.335 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:03:29.059 00:05:01.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:07:26.029 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-09-16 05:08:09.571 00:00:10.322 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:08:26.253 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-09-16 05:08:50.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:08:50.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:09:09.935 00:00:10.384 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:09:26.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-09-16 05:10:10.365 00:00:10.365 TCP 23.104.0.1:48010 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:10:26.696 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-09-16 05:11:10.774 00:00:10.382 TCP 23.104.0.1:58514 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:11:26.917 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-09-16 05:12:11.196 00:00:10.363 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:08:29.059 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:12:27.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36020 10 6452 1 2025-09-16 05:13:11.599 00:00:10.365 TCP 23.104.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:09:29.062 00:05:01.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:13:27.309 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-09-16 05:13:50.864 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:13:50.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:14:12.001 00:00:10.366 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:14:27.491 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-09-16 05:15:12.404 00:00:10.358 TCP 23.104.0.1:58588 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:15:27.704 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-09-16 05:16:12.804 00:00:10.365 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:16:27.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 10 6452 1 2025-09-16 05:17:13.207 00:00:12.059 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:17:28.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-09-16 05:18:15.309 00:00:10.369 TCP 23.104.0.1:49734 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:14:29.058 00:05:01.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:18:28.333 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-09-16 05:18:50.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:18:50.905 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:19:15.716 00:00:10.387 TCP 23.104.0.1:43234 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:15:29.062 00:05:01.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:19:28.506 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52192 10 6452 1 2025-09-16 05:20:16.138 00:00:10.362 TCP 23.104.0.1:42928 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:20:28.735 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-09-16 05:21:16.534 00:00:10.371 TCP 23.104.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:21:28.903 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-09-16 05:22:16.945 00:00:10.369 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:22:29.151 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51542 10 6452 1 2025-09-16 05:23:17.352 00:00:10.360 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:23:29.371 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-09-16 05:23:50.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:23:50.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:24:17.754 00:00:10.438 TCP 23.104.0.1:52538 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:20:29.062 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:24:29.635 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-09-16 05:25:18.231 00:00:10.404 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:21:29.066 00:05:01.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:25:29.809 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-09-16 05:26:18.668 00:00:10.361 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:26:30.023 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-09-16 05:27:19.088 00:00:10.362 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:27:30.255 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48946 10 6452 1 2025-09-16 05:28:19.490 00:00:10.365 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:28:30.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-09-16 05:28:50.895 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:28:51.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:29:19.896 00:00:10.375 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:29:30.693 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-09-16 05:26:29.073 00:05:01.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:30:20.309 00:00:10.364 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:30:30.917 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55472 10 6452 1 2025-09-16 05:31:20.713 00:00:10.320 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:27:29.076 00:05:01.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:31:31.130 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49934 10 6452 1 2025-09-16 05:32:21.096 00:00:10.358 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:32:31.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-09-16 05:33:21.494 00:00:10.366 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:33:31.578 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 11 6504 1 2025-09-16 05:33:51.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:33:51.171 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:34:21.899 00:00:10.367 TCP 23.104.0.1:38254 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:34:31.835 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-09-16 05:35:22.303 00:00:10.323 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:35:32.074 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-09-16 05:32:29.074 00:05:01.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:36:22.661 00:00:10.362 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:36:32.294 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-09-16 05:33:29.078 00:05:01.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:37:23.093 00:00:10.359 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:37:32.509 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-09-16 05:38:23.493 00:00:10.325 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:38:32.686 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-09-16 05:38:50.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:38:51.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:39:23.859 00:00:10.368 TCP 23.104.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:39:32.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-09-16 05:40:24.270 00:00:10.695 TCP 23.104.0.1:48282 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:40:33.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60756 10 6452 1 2025-09-16 05:41:25.018 00:00:10.357 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:41:33.318 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-09-16 05:38:29.076 00:05:01.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:42:25.414 00:00:10.323 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:42:33.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-09-16 05:39:29.080 00:05:01.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:43:25.786 00:00:10.374 TCP 23.104.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:43:33.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-09-16 05:43:51.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:43:51.054 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:44:26.206 00:00:10.324 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:44:33.951 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41888 10 6452 1 2025-09-16 05:45:26.569 00:00:10.363 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:45:34.178 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 10 6452 1 2025-09-16 05:46:26.972 00:00:10.365 TCP 23.104.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:46:34.354 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-09-16 05:47:27.379 00:00:10.364 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:47:34.584 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-09-16 05:44:29.079 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:48:27.785 00:00:10.391 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:48:34.853 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51250 10 6452 1 2025-09-16 05:48:51.483 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:48:51.114 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:45:29.082 00:05:01.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:49:28.205 00:00:10.361 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:49:35.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-09-16 05:50:28.607 00:00:10.368 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:50:35.298 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-09-16 05:51:29.015 00:00:10.319 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:51:35.523 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 10 6452 1 2025-09-16 05:52:29.371 00:00:10.358 TCP 23.104.0.1:40426 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:52:35.751 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-09-16 05:53:29.768 00:00:10.370 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:53:35.972 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-09-16 05:53:51.583 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 05:53:51.621 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 05:50:29.082 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 05:54:30.174 00:00:10.365 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:54:36.213 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-09-16 05:51:29.083 00:05:01.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 05:55:30.580 00:00:10.367 TCP 23.104.0.1:56906 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:55:36.429 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-09-16 05:56:30.983 00:00:10.324 TCP 23.104.0.1:36064 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:56:36.654 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-09-16 05:57:31.348 00:00:10.321 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:57:36.871 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58750 10 6452 1 2025-09-16 05:58:31.707 00:00:10.365 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-09-16 05:58:51.681 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 162, total bytes: 491696, total packets: 1560, avg bps: 1051, avg pps: 0, avg bpp: 315 Time window: 2025-09-16 04:56:29 - 2025-09-16 05:58:51 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0016s Wall: 0.0024s flows/second: 67415.1 Runtime: 0.0024s