Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 01:58:44.682 00:00:10.372 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-09-03 01:59:07.291 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-09-03 01:59:45.108 00:00:10.371 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:00:07.507 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60058 10 6452 1 2025-09-03 02:00:45.519 00:00:10.370 TCP 23.104.0.1:44600 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:01:07.679 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-09-03 02:01:45.926 00:00:10.402 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:02:07.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-09-03 02:02:24.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:02:24.248 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:02:46.367 00:00:11.036 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:03:08.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-09-03 01:59:22.671 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:03:47.444 00:00:10.366 TCP 23.104.0.1:56922 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:04:08.325 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57664 10 6452 1 2025-09-03 02:00:22.691 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:04:47.850 00:00:10.385 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:05:08.519 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-09-03 02:05:48.274 00:00:10.370 TCP 23.104.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:06:08.730 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-09-03 02:06:48.680 00:00:10.365 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:07:08.945 00:00:10.330 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-09-03 02:07:24.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:07:24.316 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:07:49.099 00:00:10.361 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:08:09.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33376 10 6452 1 2025-09-03 02:08:49.499 00:00:10.365 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:09:09.524 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55114 10 6452 1 2025-09-03 02:05:22.683 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:09:49.904 00:00:10.368 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:10:09.695 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2025-09-03 02:06:22.680 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:10:50.313 00:00:10.361 TCP 23.104.0.1:46678 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:11:09.916 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-09-03 02:11:50.714 00:00:10.380 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:12:10.129 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37652 10 6452 1 2025-09-03 02:12:24.162 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:12:24.366 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:12:51.129 00:00:10.332 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:13:10.349 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-09-03 02:13:51.492 00:00:10.371 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:14:10.566 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-09-03 02:14:51.909 00:00:10.362 TCP 23.104.0.1:49438 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:15:10.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-09-03 02:11:22.684 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:15:52.308 00:00:10.374 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:16:10.985 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-09-03 02:12:22.681 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:16:52.722 00:00:10.371 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:17:11.177 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39878 10 6452 1 2025-09-03 02:17:24.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:17:24.452 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:17:53.132 00:00:10.376 TCP 23.104.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:18:11.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54570 10 6452 1 2025-09-03 02:18:53.549 00:00:10.359 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:19:11.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-09-03 02:19:53.950 00:00:10.372 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:20:11.783 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-09-03 02:20:54.362 00:00:10.364 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:17:22.686 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:21:11.991 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-09-03 02:21:54.764 00:00:10.372 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:22:24.424 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:18:22.684 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:22:12.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6452 1 2025-09-03 02:22:24.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:22:55.170 00:00:10.440 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:23:12.435 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 12 10367 1 2025-09-03 02:23:55.651 00:00:10.364 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:24:12.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-09-03 02:24:56.069 00:00:10.386 TCP 23.104.0.1:34802 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:25:12.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44580 10 6452 1 2025-09-03 02:25:56.499 00:00:10.386 TCP 23.104.0.1:55246 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:26:13.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-03 02:26:56.923 00:00:10.405 TCP 23.104.0.1:55482 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:27:13.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60516 10 6452 1 2025-09-03 02:27:24.652 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:27:24.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:23:22.687 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:27:57.367 00:00:10.437 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:28:13.510 00:00:10.548 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 12 10367 1 2025-09-03 02:24:22.686 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:28:57.843 00:00:10.353 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:29:14.092 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-09-03 02:29:58.231 00:00:10.358 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:30:14.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45280 10 6452 1 2025-09-03 02:30:58.628 00:00:10.365 TCP 23.104.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:31:14.527 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-09-03 02:31:59.030 00:00:10.364 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:32:14.736 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-09-03 02:32:24.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:32:24.759 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:32:59.432 00:00:10.372 TCP 23.104.0.1:50766 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:33:14.918 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6452 1 2025-09-03 02:29:22.691 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:33:59.845 00:00:10.382 TCP 23.104.0.1:55496 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:34:15.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-09-03 02:30:22.687 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:35:00.270 00:00:10.363 TCP 23.104.0.1:58584 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:35:15.420 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-09-03 02:36:00.673 00:00:10.365 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:36:15.584 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51506 10 6452 1 2025-09-03 02:37:01.104 00:00:10.385 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:37:24.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:37:15.798 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60476 10 6452 1 2025-09-03 02:37:24.843 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:38:01.533 00:00:10.370 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:38:16.028 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38398 10 6452 1 2025-09-03 02:39:01.936 00:00:10.394 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:35:22.694 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:39:16.240 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6452 1 2025-09-03 02:40:02.369 00:00:10.327 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:40:16.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-09-03 02:36:22.692 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:41:02.742 00:00:10.370 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:41:16.633 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-09-03 02:42:03.152 00:00:10.360 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:42:16.852 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:54126 10 6452 1 2025-09-03 02:42:24.917 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:42:24.979 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:43:03.556 00:00:10.364 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:43:17.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-09-03 02:44:03.956 00:00:10.364 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:44:17.276 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53640 10 6452 1 2025-09-03 02:45:04.357 00:00:10.360 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:41:22.694 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:45:17.491 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-09-03 02:46:04.757 00:00:10.332 TCP 23.104.0.1:37618 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:42:22.692 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:46:17.709 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45550 10 6452 1 2025-09-03 02:47:05.127 00:00:10.373 TCP 23.104.0.1:53396 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:47:24.844 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:47:24.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:47:17.920 00:00:10.807 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-09-03 02:48:05.534 00:00:10.365 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:48:18.766 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6452 1 2025-09-03 02:49:05.940 00:00:10.375 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:49:18.998 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-09-03 02:50:06.352 00:00:10.368 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:50:19.226 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-09-03 02:51:06.771 00:00:10.368 TCP 23.104.0.1:51484 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:47:22.695 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:51:19.392 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 12 6556 1 2025-09-03 02:52:07.179 00:00:10.364 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:52:25.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:48:22.692 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:52:25.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:52:19.614 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-09-03 02:53:07.584 00:00:10.441 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 15 1926 1 2025-09-03 02:53:19.838 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 12 10365 1 2025-09-03 02:54:08.092 00:00:10.364 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:54:20.098 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-09-03 02:55:08.491 00:00:10.331 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:55:20.317 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-09-03 02:56:08.858 00:00:10.336 TCP 23.104.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:56:20.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45654 10 6452 1 2025-09-03 02:57:09.228 00:00:10.375 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:57:24.977 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 02:53:22.696 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 02:57:25.437 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 02:57:20.753 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-09-03 02:58:09.636 00:00:10.324 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:54:22.694 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 02:58:20.926 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 Summary: total flows: 164, total bytes: 511452, total packets: 1592, avg bps: 1124, avg pps: 0, avg bpp: 321 Time window: 2025-09-03 01:58:44 - 2025-09-03 02:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0009s Wall: 0.0022s flows/second: 75539.8 Runtime: 0.0022s