Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-01 03:59:00.015 00:00:10.361 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:59:26.483 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-09-01 04:00:00.413 00:00:10.362 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:00:26.695 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-09-01 04:01:00.809 00:00:10.338 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-09-01 03:57:21.810 00:05:00.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:01:28.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:01:28.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:01:26.900 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6452 1 2025-09-01 04:02:01.184 00:00:10.365 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:02:27.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-09-01 04:03:01.581 00:00:16.788 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:03:27.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-09-01 04:04:08.411 00:00:10.364 TCP 23.104.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:00:21.808 00:05:00.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:04:27.558 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-09-01 04:05:08.813 00:00:10.365 TCP 23.104.0.1:39210 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:05:27.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6452 1 2025-09-01 04:06:09.214 00:00:10.323 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:06:29.123 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:06:28.816 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:06:27.951 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6452 1 2025-09-01 04:07:09.579 00:00:10.366 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:03:21.815 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:07:28.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40738 10 6452 1 2025-09-01 04:08:09.984 00:00:10.364 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:08:28.359 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-09-01 04:09:10.386 00:00:10.365 TCP 23.104.0.1:38544 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:09:28.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52074 10 6452 1 2025-09-01 04:10:10.791 00:00:10.348 TCP 23.104.0.1:43792 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:06:21.815 00:05:00.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:10:28.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-09-01 04:11:11.180 00:00:10.366 TCP 23.104.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:11:29.050 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:11:29.103 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:11:28.997 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-09-01 04:12:11.580 00:00:10.364 TCP 23.104.0.1:37456 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:12:29.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-09-01 04:09:21.818 00:05:00.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:13:11.987 00:00:10.363 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:13:29.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-09-01 04:14:12.402 00:00:10.325 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:14:29.607 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-09-01 04:15:12.767 00:00:10.373 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:15:29.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41580 10 6452 1 2025-09-01 04:12:21.815 00:05:00.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:16:13.175 00:00:10.357 TCP 23.104.0.1:52346 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:16:28.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:16:29.034 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:16:30.040 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-09-01 04:17:13.582 00:00:10.330 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:17:30.241 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-09-01 04:18:13.951 00:00:10.377 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:18:30.453 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32802 10 6452 1 2025-09-01 04:15:21.819 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:19:14.381 00:00:10.371 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:19:30.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54348 10 6452 1 2025-09-01 04:20:14.787 00:00:10.339 TCP 23.104.0.1:44786 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:20:30.878 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53454 10 6452 1 2025-09-01 04:21:15.158 00:00:10.364 TCP 23.104.0.1:48442 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:21:29.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:21:29.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:21:31.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-09-01 04:18:21.817 00:05:00.574 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:22:15.564 00:00:10.376 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:22:31.277 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 12 10367 1 2025-09-01 04:23:15.976 00:00:10.446 TCP 23.104.0.1:39998 -> 1.101.0.1:3000 15 1926 1 2025-09-01 04:23:31.482 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39142 10 6452 1 2025-09-01 04:24:16.477 00:00:10.368 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:24:31.670 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-09-01 04:21:21.819 00:05:00.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:25:16.878 00:00:10.373 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:25:31.839 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-09-01 04:26:29.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:26:17.296 00:00:10.373 TCP 23.104.0.1:41448 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:26:29.588 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:26:32.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56864 10 6452 1 2025-09-01 04:27:17.703 00:00:10.371 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:27:32.298 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-09-01 04:24:21.818 00:05:00.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:28:18.112 00:00:10.361 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:28:32.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-09-01 04:29:18.514 00:00:10.367 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:29:32.734 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 10 6452 1 2025-09-01 04:30:18.914 00:00:10.325 TCP 23.104.0.1:48056 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:30:32.959 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46364 10 6452 1 2025-09-01 04:27:21.819 00:05:00.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:31:29.630 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:31:29.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:31:19.276 00:00:10.366 TCP 23.104.0.1:60494 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:31:33.155 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34806 10 6452 1 2025-09-01 04:32:19.680 00:00:10.365 TCP 23.104.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:32:33.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-09-01 04:33:20.103 00:00:10.365 TCP 23.104.0.1:51306 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:33:33.545 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-09-01 04:30:21.817 00:05:00.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:34:20.509 00:00:10.367 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:34:33.777 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-09-01 04:35:20.915 00:00:10.361 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:35:33.954 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 12 6556 1 2025-09-01 04:36:29.249 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:36:29.566 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:36:21.310 00:00:10.926 TCP 23.104.0.1:38644 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:36:34.216 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-09-01 04:33:21.821 00:05:00.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:37:22.275 00:00:10.364 TCP 23.104.0.1:60776 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:37:34.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-09-01 04:38:22.674 00:00:10.329 TCP 23.104.0.1:56788 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:38:34.642 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-09-01 04:39:23.054 00:00:10.371 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:39:34.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 10 6452 1 2025-09-01 04:36:21.819 00:05:00.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:40:23.467 00:00:10.361 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:40:35.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6452 1 2025-09-01 04:41:29.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:41:29.713 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:41:23.869 00:00:10.371 TCP 23.104.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:41:35.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-09-01 04:42:24.282 00:00:10.367 TCP 23.104.0.1:51538 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:42:35.506 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-09-01 04:39:21.821 00:05:00.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:43:24.688 00:00:10.362 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:43:35.691 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-09-01 04:44:25.107 00:00:10.325 TCP 23.104.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:44:35.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-09-01 04:45:25.477 00:00:10.445 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:45:36.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2025-09-01 04:42:21.821 00:05:00.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:46:29.661 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:46:29.722 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:46:25.962 00:00:10.363 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:46:36.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48140 10 6452 1 2025-09-01 04:47:26.372 00:00:10.364 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:47:36.563 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-09-01 04:48:26.779 00:00:10.365 TCP 23.104.0.1:56978 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:48:36.783 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-09-01 04:45:21.826 00:05:00.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:49:27.180 00:00:10.420 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:49:37.006 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-09-01 04:50:27.644 00:00:10.368 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:50:37.218 00:00:10.488 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-09-01 04:51:29.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:51:29.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:51:28.062 00:00:10.368 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:51:37.745 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-09-01 04:48:21.824 00:05:00.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:52:28.473 00:00:10.383 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:52:37.925 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-09-01 04:53:28.914 00:00:10.361 TCP 23.104.0.1:54996 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:53:38.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43908 10 6452 1 2025-09-01 04:54:29.315 00:00:10.370 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:54:38.387 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-09-01 04:51:21.828 00:05:00.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-01 04:55:29.720 00:00:10.383 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:55:38.594 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-09-01 04:56:29.669 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-01 04:56:29.883 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-01 04:56:30.145 00:00:10.363 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:56:38.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-09-01 04:57:30.545 00:00:10.368 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:57:39.029 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-09-01 04:54:21.826 00:05:00.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-01 04:58:30.950 00:00:10.368 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-09-01 04:58:39.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-09-01 03:57:21 - 2025-09-01 04:59:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0016s Wall: 0.0021s flows/second: 76633.9 Runtime: 0.0022s