Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 07:58:53.913 00:00:10.361 TCP 23.104.0.1:60272 -> 1.101.0.1:3000 11 1507 1 2025-09-28 07:59:40.526 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 07:59:29.231 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 11 6504 1 2025-09-28 07:59:40.436 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 07:59:54.311 00:00:10.365 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-09-28 07:56:34.670 00:05:01.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:00:29.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45908 10 6452 1 2025-09-28 08:00:54.722 00:00:10.380 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-09-28 07:57:34.674 00:05:01.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:01:29.684 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-09-28 08:01:55.143 00:00:10.657 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:02:29.863 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-09-28 08:02:55.839 00:00:10.393 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:03:30.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-09-28 08:03:56.271 00:00:10.326 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:04:40.663 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:04:30.291 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56394 10 6452 1 2025-09-28 08:04:40.727 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:04:56.638 00:00:10.325 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:05:30.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-09-28 08:05:57.005 00:00:10.362 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:02:34.671 00:05:01.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:06:30.683 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-09-28 08:06:57.406 00:00:10.366 TCP 23.104.0.1:49188 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:03:34.674 00:05:01.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:07:30.902 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-09-28 08:07:57.813 00:00:10.366 TCP 23.104.0.1:55714 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:08:31.119 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41924 10 6452 1 2025-09-28 08:08:58.216 00:00:11.428 TCP 23.104.0.1:47290 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:09:40.909 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:09:40.591 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:09:31.292 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-09-28 08:09:59.680 00:00:10.368 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:10:31.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-09-28 08:11:00.106 00:00:10.367 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:11:31.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-09-28 08:12:00.513 00:00:10.330 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:08:34.673 00:05:01.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:12:31.933 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:39392 10 6452 1 2025-09-28 08:13:00.878 00:00:10.323 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:09:34.676 00:05:01.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:13:32.192 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-09-28 08:14:01.241 00:00:10.323 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:14:40.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:14:40.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:14:32.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-09-28 08:15:01.605 00:00:10.362 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:15:32.619 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-09-28 08:16:02.010 00:00:10.323 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:16:32.792 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56626 10 6452 1 2025-09-28 08:17:02.371 00:00:10.359 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:17:33.006 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44702 10 6452 1 2025-09-28 08:18:02.768 00:00:10.372 TCP 23.104.0.1:40860 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:14:34.675 00:05:01.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:18:33.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56908 10 6452 1 2025-09-28 08:19:03.177 00:00:10.322 TCP 23.104.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:19:40.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:15:34.678 00:05:01.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:19:41.002 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:19:33.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-09-28 08:20:03.538 00:00:10.372 TCP 23.104.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:20:33.648 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6452 1 2025-09-28 08:21:03.947 00:00:10.374 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:21:33.870 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-09-28 08:22:04.370 00:00:10.369 TCP 23.104.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:22:34.102 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34052 10 6452 1 2025-09-28 08:23:04.772 00:00:10.369 TCP 23.104.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:23:34.322 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-09-28 08:24:05.184 00:00:10.332 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:20:34.678 00:05:01.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:24:41.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:24:41.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:24:34.485 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-09-28 08:25:05.565 00:00:10.362 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:21:34.682 00:05:01.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:25:34.713 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39376 10 6452 1 2025-09-28 08:26:05.965 00:00:10.373 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:26:34.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35746 10 6452 1 2025-09-28 08:27:06.372 00:00:10.362 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:27:35.105 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54126 10 6452 1 2025-09-28 08:28:06.769 00:00:10.373 TCP 23.104.0.1:39232 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:28:35.346 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-09-28 08:29:07.185 00:00:10.338 TCP 23.104.0.1:34212 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:29:41.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:29:41.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:29:35.568 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-09-28 08:30:07.572 00:00:10.798 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:26:34.683 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:30:35.786 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-09-28 08:31:08.428 00:00:10.361 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:27:34.685 00:05:01.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:31:36.028 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-09-28 08:32:08.829 00:00:10.343 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:32:36.194 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2025-09-28 08:33:09.210 00:00:10.363 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:33:36.361 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-09-28 08:34:09.614 00:00:10.362 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:34:41.410 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:34:41.265 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:34:36.572 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-09-28 08:35:10.025 00:00:10.362 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:35:36.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-09-28 08:36:10.427 00:00:10.519 TCP 23.104.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:32:34.686 00:05:01.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:36:36.998 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-09-28 08:37:10.986 00:00:10.371 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:33:34.689 00:05:01.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:37:37.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-09-28 08:38:11.400 00:00:10.325 TCP 23.104.0.1:52786 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:38:37.452 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-09-28 08:39:11.764 00:00:10.374 TCP 23.104.0.1:53366 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:39:41.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:39:41.509 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:39:37.660 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-09-28 08:40:12.174 00:00:10.368 TCP 23.104.0.1:54454 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:40:37.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40772 10 6452 1 2025-09-28 08:41:12.578 00:00:10.918 TCP 23.104.0.1:54708 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:41:38.094 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-09-28 08:42:13.544 00:00:10.367 TCP 23.104.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:38:34.688 00:05:01.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:42:38.305 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-09-28 08:43:13.944 00:00:10.363 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:39:34.690 00:05:01.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:43:38.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43678 10 6452 1 2025-09-28 08:44:14.350 00:00:10.322 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:44:41.576 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:44:41.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:44:38.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-09-28 08:45:14.706 00:00:10.370 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:45:38.944 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-09-28 08:46:15.115 00:00:10.365 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:46:39.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-09-28 08:47:15.519 00:00:10.363 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:47:39.400 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-09-28 08:48:15.920 00:00:10.384 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:44:34.688 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:48:39.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40284 10 6452 1 2025-09-28 08:49:16.342 00:00:10.364 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:49:41.392 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:45:34.691 00:05:01.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:49:41.351 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:49:39.837 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-09-28 08:50:16.743 00:00:10.326 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:50:40.070 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52270 10 6452 1 2025-09-28 08:51:17.110 00:00:10.368 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:51:40.284 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-09-28 08:52:17.513 00:00:10.369 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:52:40.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-09-28 08:53:17.922 00:00:10.384 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:53:40.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-09-28 08:54:18.342 00:00:10.367 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:50:34.691 00:05:01.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 08:54:41.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 08:54:41.668 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 08:54:40.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-09-28 08:55:18.745 00:00:10.360 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:51:34.694 00:05:01.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 08:55:41.110 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-09-28 08:56:19.152 00:00:10.377 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:56:41.282 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:43686 10 6452 1 2025-09-28 08:57:19.569 00:00:10.365 TCP 23.104.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:57:41.475 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-09-28 08:58:19.977 00:00:10.371 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-09-28 08:58:41.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-09-28 07:56:34 - 2025-09-28 08:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0022s Wall: 0.0024s flows/second: 69671.4 Runtime: 0.0024s