Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 09:59:05.545 00:00:10.325 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-02 09:59:27.282 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-09-02 10:00:05.908 00:00:10.328 TCP 23.104.0.1:54670 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:00:27.448 00:00:10.712 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-09-02 10:01:06.273 00:00:10.326 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:01:28.203 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56840 10 6452 1 2025-09-02 10:02:04.680 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:02:04.734 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:02:06.638 00:00:10.376 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:02:28.375 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-09-02 10:03:07.056 00:00:10.329 TCP 23.104.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-09-02 09:59:22.366 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:03:28.591 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42756 10 6452 1 2025-09-02 10:04:07.424 00:00:10.321 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:00:22.363 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:04:28.813 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50118 10 6452 1 2025-09-02 10:05:07.784 00:00:10.358 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:05:29.062 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-09-02 10:06:08.177 00:00:10.334 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:06:29.279 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-09-02 10:07:04.702 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:07:05.253 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:07:08.548 00:00:10.371 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:07:29.494 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57936 10 6452 1 2025-09-02 10:08:08.952 00:00:10.370 TCP 23.104.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:08:29.711 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-09-02 10:09:09.355 00:00:10.370 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:05:22.367 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:09:29.921 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:50828 10 6452 1 2025-09-02 10:10:09.780 00:00:10.367 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:06:22.365 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:10:30.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-09-02 10:11:10.191 00:00:10.332 TCP 23.104.0.1:40792 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:11:30.385 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51464 10 6452 1 2025-09-02 10:12:05.063 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:12:05.049 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:12:10.569 00:00:10.374 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:12:30.611 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6452 1 2025-09-02 10:13:10.988 00:00:10.362 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:13:30.784 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44138 12 6556 1 2025-09-02 10:14:11.392 00:00:10.365 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:14:30.993 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-09-02 10:11:22.370 00:05:00.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:15:11.800 00:00:10.343 TCP 23.104.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:15:31.211 00:00:10.603 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-09-02 10:12:22.368 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:16:12.182 00:00:10.358 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:16:31.851 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6452 1 2025-09-02 10:17:05.064 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:17:05.212 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:17:12.574 00:00:10.325 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:17:32.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42256 10 6452 1 2025-09-02 10:18:12.940 00:00:10.439 TCP 23.104.0.1:56738 -> 1.101.0.1:3000 15 1926 1 2025-09-02 10:18:32.250 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 12 10367 1 2025-09-02 10:19:13.418 00:00:10.370 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:19:32.497 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-09-02 10:20:13.826 00:00:10.349 TCP 23.104.0.1:48700 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:20:32.723 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-09-02 10:21:14.213 00:00:10.368 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:17:22.372 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:21:32.935 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-09-02 10:22:05.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:22:05.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:22:14.619 00:00:10.549 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:18:22.369 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:22:33.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39186 10 6452 1 2025-09-02 10:23:15.210 00:00:10.374 TCP 23.104.0.1:43904 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:23:33.370 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45708 10 6452 1 2025-09-02 10:24:15.611 00:00:10.362 TCP 23.104.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:24:33.577 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-09-02 10:25:16.011 00:00:10.367 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:25:33.795 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-09-02 10:26:16.413 00:00:10.368 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:26:34.038 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-09-02 10:27:05.502 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:27:05.574 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:23:22.375 00:05:00.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:27:16.817 00:00:10.370 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:27:34.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-09-02 10:24:22.373 00:05:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:28:17.223 00:00:10.653 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:28:34.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-09-02 10:29:17.916 00:00:10.384 TCP 23.104.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:29:34.643 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-09-02 10:30:18.340 00:00:10.344 TCP 23.104.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:30:34.854 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 11 6504 1 2025-09-02 10:31:18.741 00:00:10.368 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:31:35.142 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-09-02 10:32:05.325 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:32:05.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:32:19.145 00:00:10.364 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:32:35.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-09-02 10:29:22.377 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:33:19.551 00:00:10.364 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:33:35.569 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-09-02 10:30:22.374 00:05:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:34:19.958 00:00:10.381 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:34:35.798 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56978 10 6452 1 2025-09-02 10:35:20.374 00:00:10.367 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:35:36.041 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-09-02 10:36:20.786 00:00:10.366 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:36:36.261 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-09-02 10:37:05.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:37:05.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:37:21.191 00:00:10.363 TCP 23.104.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:37:36.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-09-02 10:38:21.592 00:00:10.367 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:38:36.679 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-09-02 10:35:22.378 00:05:00.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:39:22.007 00:00:10.365 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:39:36.884 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 10 6452 1 2025-09-02 10:36:22.376 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:40:22.410 00:00:10.373 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:40:37.102 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-09-02 10:41:22.828 00:00:10.401 TCP 23.104.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:41:37.315 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-09-02 10:42:05.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:42:05.617 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:42:23.270 00:00:10.364 TCP 23.104.0.1:36318 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:42:37.525 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-09-02 10:43:23.680 00:00:10.325 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:43:37.747 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-09-02 10:44:24.049 00:00:10.362 TCP 23.104.0.1:46730 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:44:37.960 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-09-02 10:41:22.379 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:45:24.446 00:00:10.328 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:45:38.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-09-02 10:42:22.378 00:05:00.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:46:24.810 00:00:10.363 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:46:38.363 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58084 10 6452 1 2025-09-02 10:47:05.522 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:47:05.486 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:47:25.213 00:00:10.324 TCP 23.104.0.1:36998 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:47:38.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45976 10 6452 1 2025-09-02 10:48:25.576 00:00:10.374 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:48:38.790 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43790 10 6452 1 2025-09-02 10:49:25.988 00:00:10.362 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:49:39.029 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53246 10 6452 1 2025-09-02 10:50:26.387 00:00:10.368 TCP 23.104.0.1:58914 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:50:39.240 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-09-02 10:47:22.381 00:05:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:51:26.794 00:00:10.344 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:51:39.410 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-09-02 10:52:05.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:52:05.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:48:22.378 00:05:00.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:52:27.175 00:00:10.327 TCP 23.104.0.1:47630 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:52:39.638 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60506 10 6452 1 2025-09-02 10:53:27.538 00:00:10.364 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:53:39.852 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-09-02 10:54:27.946 00:00:10.332 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:54:40.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-09-02 10:55:28.312 00:00:10.327 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:55:40.306 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-09-02 10:56:28.677 00:00:10.373 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:56:40.528 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-09-02 10:57:05.948 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 10:57:05.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 10:53:22.382 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 10:57:29.108 00:00:10.361 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:57:40.744 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-09-02 10:54:22.381 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 10:58:29.510 00:00:10.363 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-09-02 10:58:40.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6452 1 Summary: total flows: 164, total bytes: 502838, total packets: 1581, avg bps: 1112, avg pps: 0, avg bpp: 318 Time window: 2025-09-02 09:59:05 - 2025-09-02 10:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0012s Wall: 0.0022s flows/second: 73576.4 Runtime: 0.0022s