Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 05:59:03.108 00:00:10.381 TCP 23.104.0.1:57188 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:59:01.995 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53744 10 6452 1 2025-09-20 06:00:02.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51292 10 6452 1 2025-09-20 06:00:03.523 00:00:10.323 TCP 23.104.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:56:30.936 00:05:01.341 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:00:47.255 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:00:47.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:01:02.431 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44572 10 6452 1 2025-09-20 06:01:03.884 00:00:10.371 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-09-20 05:57:30.938 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:02:04.289 00:00:10.361 TCP 23.104.0.1:53448 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:02:02.645 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48950 10 6452 1 2025-09-20 06:03:04.688 00:00:10.366 TCP 23.104.0.1:36168 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:03:02.853 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-09-20 06:04:05.106 00:00:10.363 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:04:03.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39638 10 6452 1 2025-09-20 06:05:05.505 00:00:10.325 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:05:03.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-09-20 06:05:47.321 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:05:47.355 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:06:03.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59974 10 6452 1 2025-09-20 06:06:05.870 00:00:10.366 TCP 23.104.0.1:45714 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:02:30.938 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:07:03.732 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-09-20 06:07:06.274 00:00:11.118 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:03:30.941 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:08:03.908 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39970 10 6452 1 2025-09-20 06:08:07.433 00:00:10.367 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:09:04.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-09-20 06:09:07.837 00:00:10.345 TCP 23.104.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:10:04.332 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-09-20 06:10:08.220 00:00:10.377 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:10:46.980 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:10:47.388 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:11:04.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59900 10 6452 1 2025-09-20 06:11:08.634 00:00:10.367 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 12 1559 1 2025-09-20 06:12:04.762 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-09-20 06:12:09.035 00:00:10.366 TCP 23.104.0.1:60070 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:08:30.940 00:05:01.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:13:04.975 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-09-20 06:13:09.437 00:00:10.325 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:09:30.942 00:05:01.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:14:05.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-09-20 06:14:09.803 00:00:10.336 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:15:05.421 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-09-20 06:15:10.174 00:00:10.360 TCP 23.104.0.1:56000 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:15:47.418 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:15:47.379 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:16:05.600 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-09-20 06:16:10.574 00:00:10.365 TCP 23.104.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:17:05.805 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55216 12 6556 1 2025-09-20 06:17:10.992 00:00:10.367 TCP 23.104.0.1:49300 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:18:06.044 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-09-20 06:18:11.397 00:00:10.366 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:14:30.939 00:05:01.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:19:06.257 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35478 10 6452 1 2025-09-20 06:19:11.822 00:00:12.969 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:15:30.942 00:05:01.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:20:06.477 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-09-20 06:20:14.846 00:00:10.374 TCP 23.104.0.1:60298 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:20:47.827 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:20:47.574 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:21:07.075 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-09-20 06:21:15.260 00:00:10.364 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:22:07.243 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52362 10 6452 1 2025-09-20 06:22:15.661 00:00:10.323 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:23:07.413 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6452 1 2025-09-20 06:23:16.027 00:00:10.364 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:24:07.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57464 10 6452 1 2025-09-20 06:24:16.435 00:00:10.385 TCP 23.104.0.1:33370 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:20:30.941 00:05:01.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:25:07.833 00:00:17.237 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-09-20 06:25:16.871 00:00:10.373 TCP 23.104.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:21:30.943 00:05:01.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:25:47.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:25:47.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:26:15.111 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 14 14280 1 2025-09-20 06:26:17.278 00:00:10.517 TCP 23.104.0.1:40554 -> 1.101.0.1:3000 17 2241 1 2025-09-20 06:27:15.379 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-09-20 06:27:17.833 00:00:10.405 TCP 23.104.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:28:15.617 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2025-09-20 06:28:18.275 00:00:10.379 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:29:15.833 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-09-20 06:29:18.697 00:00:10.368 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:30:16.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-09-20 06:30:19.111 00:00:10.343 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:26:30.947 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:30:47.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:30:47.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:31:16.286 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-09-20 06:31:19.500 00:00:10.367 TCP 23.104.0.1:34000 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:27:30.947 00:05:01.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:32:16.495 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-09-20 06:32:19.907 00:00:10.390 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:33:16.707 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6452 1 2025-09-20 06:33:20.333 00:00:10.356 TCP 23.104.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:34:20.725 00:00:10.377 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:34:16.883 00:00:10.614 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-09-20 06:35:17.534 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-09-20 06:35:21.141 00:00:10.322 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:35:48.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:35:47.956 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:36:21.501 00:00:10.359 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:36:17.745 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53380 10 6452 1 2025-09-20 06:32:30.946 00:05:01.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:37:17.962 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-09-20 06:37:21.900 00:00:10.370 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:33:30.949 00:05:01.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:38:18.150 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34022 10 6452 1 2025-09-20 06:38:22.309 00:00:10.364 TCP 23.104.0.1:41086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:39:18.370 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-09-20 06:39:22.723 00:00:10.373 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:40:18.549 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-09-20 06:40:23.134 00:00:10.365 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:40:47.626 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:40:47.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:41:18.766 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:35352 12 10367 1 2025-09-20 06:41:23.536 00:00:10.442 TCP 23.104.0.1:55058 -> 1.101.0.1:3000 15 1926 1 2025-09-20 06:42:19.018 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-09-20 06:42:24.015 00:00:10.365 TCP 23.104.0.1:55628 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:38:30.946 00:05:01.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:43:19.261 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 13 6608 1 2025-09-20 06:39:30.949 00:05:01.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:43:24.422 00:00:10.361 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:44:19.578 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-09-20 06:44:24.824 00:00:10.362 TCP 23.104.0.1:55810 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:45:19.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48338 10 6452 1 2025-09-20 06:45:25.225 00:00:10.363 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:45:47.956 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:45:47.965 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:46:20.011 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 14 14282 1 2025-09-20 06:46:25.627 00:00:10.521 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 17 2241 1 2025-09-20 06:47:20.279 00:00:10.335 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 6452 1 2025-09-20 06:47:26.195 00:00:10.372 TCP 23.104.0.1:47798 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:48:20.650 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-09-20 06:44:30.949 00:05:01.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:48:26.606 00:00:10.364 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:49:20.840 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-09-20 06:45:30.950 00:05:01.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:49:27.011 00:00:10.328 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:50:21.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-09-20 06:50:27.385 00:00:10.364 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:50:47.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:50:48.038 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:51:21.291 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52376 10 6452 1 2025-09-20 06:51:27.788 00:00:10.335 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:52:21.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-09-20 06:52:28.162 00:00:10.369 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:53:21.719 00:00:11.267 TCP 1.101.0.1:3000 -> 22.102.0.1:42132 10 6452 1 2025-09-20 06:53:28.566 00:00:10.364 TCP 23.104.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:50:30.953 00:05:01.343 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 06:54:23.038 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-09-20 06:54:28.964 00:00:10.376 TCP 23.104.0.1:51552 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:55:23.256 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-09-20 06:51:30.955 00:05:01.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 06:55:29.381 00:00:10.359 TCP 23.104.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:55:48.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 06:55:48.178 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 06:56:29.778 00:00:11.576 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:56:23.477 00:00:17.783 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-09-20 06:57:31.305 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35068 10 6452 1 2025-09-20 06:57:31.397 00:00:10.366 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-09-20 06:58:31.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42226 10 6452 1 2025-09-20 06:58:31.801 00:00:10.363 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 520120, total packets: 1604, avg bps: 1115, avg pps: 0, avg bpp: 324 Time window: 2025-09-20 05:56:30 - 2025-09-20 06:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 84754.3 Runtime: 0.0020s