Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 14:59:08.679 00:00:10.585 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-09-02 14:59:38.883 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-09-02 15:00:09.307 00:00:10.367 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:00:39.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-09-02 15:01:09.716 00:00:10.380 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:01:39.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51338 10 6452 1 2025-09-02 15:02:10.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:02:10.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:02:10.134 00:00:10.365 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:02:39.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-09-02 15:03:10.544 00:00:10.368 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-09-02 14:59:22.448 00:05:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:03:39.720 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-09-02 15:04:10.950 00:00:10.334 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:00:22.445 00:05:00.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:04:39.888 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40086 10 6452 1 2025-09-02 15:05:11.323 00:00:10.364 TCP 23.104.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:05:40.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-09-02 15:06:11.729 00:00:10.344 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:06:40.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-09-02 15:07:11.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:07:11.258 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:07:12.122 00:00:10.911 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:07:40.567 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-09-02 15:08:13.113 00:00:10.361 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:08:40.745 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-09-02 15:05:22.456 00:05:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:09:13.512 00:00:10.364 TCP 23.104.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:09:40.958 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-09-02 15:10:13.916 00:00:10.363 TCP 23.104.0.1:46844 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:06:22.455 00:05:00.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:10:41.148 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-09-02 15:11:14.318 00:00:10.365 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:11:41.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42942 10 6452 1 2025-09-02 15:12:11.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:12:11.104 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:12:14.721 00:00:10.371 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:12:41.572 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-09-02 15:13:15.129 00:00:10.334 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:13:41.744 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41974 10 6452 1 2025-09-02 15:14:15.504 00:00:10.368 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:14:41.954 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-09-02 15:15:15.913 00:00:10.379 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:11:22.458 00:05:00.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:15:42.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-09-02 15:12:22.456 00:05:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:16:16.331 00:00:10.369 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:16:42.393 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46438 10 6452 1 2025-09-02 15:17:11.357 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:17:11.347 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:17:16.738 00:00:10.354 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:17:42.567 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-09-02 15:18:17.128 00:00:10.556 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:18:42.780 00:00:10.439 TCP 1.101.0.1:3000 -> 22.102.0.1:55536 10 6452 1 2025-09-02 15:19:17.722 00:00:10.332 TCP 23.104.0.1:39780 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:19:43.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-09-02 15:20:18.109 00:00:10.366 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:20:43.466 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-09-02 15:17:22.466 00:05:00.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:21:18.521 00:00:10.366 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:21:44.004 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-09-02 15:22:11.355 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:22:11.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:18:22.458 00:05:00.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:22:18.924 00:00:10.382 TCP 23.104.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:22:44.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34264 10 6452 1 2025-09-02 15:23:19.342 00:00:10.366 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:23:44.436 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-09-02 15:24:19.755 00:00:10.334 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:24:44.659 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-09-02 15:25:20.134 00:00:10.370 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:25:44.833 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57852 10 6452 1 2025-09-02 15:26:20.542 00:00:10.326 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:26:45.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-09-02 15:27:11.485 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:27:11.441 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:23:22.463 00:05:00.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:27:20.912 00:00:10.362 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:27:45.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 12 6556 1 2025-09-02 15:24:22.460 00:05:00.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:28:21.320 00:00:10.367 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:28:45.512 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-09-02 15:29:21.724 00:00:10.331 TCP 23.104.0.1:45714 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:29:45.682 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-09-02 15:30:22.108 00:00:10.322 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:30:45.897 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51296 10 6452 1 2025-09-02 15:31:22.467 00:00:10.365 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:31:46.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-09-02 15:32:11.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:32:11.496 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:32:22.870 00:00:10.371 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:32:46.338 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-09-02 15:29:22.464 00:05:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:33:23.280 00:00:10.367 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:33:46.549 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-09-02 15:30:22.461 00:05:00.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:34:23.686 00:00:10.324 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:34:46.768 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6452 1 2025-09-02 15:35:24.048 00:00:10.369 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:35:46.986 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 2025-09-02 15:36:24.455 00:00:10.366 TCP 23.104.0.1:38142 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:36:47.217 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-02 15:37:11.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:37:11.516 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:37:24.870 00:00:10.373 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:37:47.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-09-02 15:38:25.280 00:00:10.364 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:38:47.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-09-02 15:35:22.465 00:05:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:39:25.683 00:00:10.329 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:39:47.814 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6452 1 2025-09-02 15:36:22.461 00:05:00.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:40:26.061 00:00:10.366 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:40:47.988 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-09-02 15:41:26.464 00:00:10.364 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:41:48.174 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-09-02 15:42:11.589 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:42:11.717 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:42:26.866 00:00:10.365 TCP 23.104.0.1:42972 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:42:48.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-09-02 15:43:27.266 00:00:10.369 TCP 23.104.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:43:48.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-09-02 15:44:27.674 00:00:10.376 TCP 23.104.0.1:50760 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:44:48.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-09-02 15:41:22.465 00:05:00.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:45:28.108 00:00:10.360 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:45:48.984 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-09-02 15:42:22.463 00:05:00.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:46:28.507 00:00:10.363 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:46:49.216 00:00:10.470 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-09-02 15:47:11.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:47:11.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:47:28.916 00:00:10.352 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:47:49.724 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57050 10 6452 1 2025-09-02 15:48:29.337 00:00:10.369 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:48:49.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-09-02 15:49:29.745 00:00:10.368 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:49:50.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34424 10 6452 1 2025-09-02 15:50:30.151 00:00:10.360 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:50:50.394 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-09-02 15:47:22.466 00:05:00.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:51:30.550 00:00:10.328 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:51:50.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6452 1 2025-09-02 15:52:11.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:52:11.798 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:48:22.463 00:05:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:52:30.916 00:00:10.359 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:52:50.825 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-09-02 15:53:31.317 00:00:10.366 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:53:51.035 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-09-02 15:54:31.721 00:00:10.371 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:54:51.210 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-09-02 15:55:32.129 00:00:10.372 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:55:51.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59462 10 6452 1 2025-09-02 15:56:32.537 00:00:10.362 TCP 23.104.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:56:51.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-09-02 15:57:12.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 15:57:12.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 15:53:22.468 00:05:00.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 15:57:32.935 00:00:10.370 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-09-02 15:57:51.860 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-09-02 15:54:22.466 00:05:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 15:58:33.347 00:00:10.368 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1088, avg pps: 0, avg bpp: 314 Time window: 2025-09-02 14:59:08 - 2025-09-02 15:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0031s Wall: 0.0021s flows/second: 77364.7 Runtime: 0.0021s