Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 07:59:17.766 00:00:10.336 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:59:31.500 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-09-03 08:00:18.140 00:00:10.365 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:00:31.676 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44388 10 6452 1 2025-09-03 08:01:18.539 00:00:10.326 TCP 23.104.0.1:34252 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:01:31.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-09-03 08:02:31.760 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:02:18.902 00:00:10.367 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:02:31.515 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:02:32.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-09-03 07:59:22.801 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:03:19.307 00:00:10.321 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:03:32.342 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-09-03 08:00:22.800 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:04:19.666 00:00:10.366 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:04:32.557 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-09-03 08:05:20.097 00:00:10.365 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:05:33.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-09-03 08:06:20.500 00:00:10.326 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:06:33.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-09-03 08:07:31.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:07:20.864 00:00:10.368 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:07:31.571 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:07:33.604 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-09-03 08:08:21.268 00:00:10.362 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:08:33.783 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-09-03 08:05:22.804 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:09:21.669 00:00:10.363 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:09:34.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42586 10 6452 1 2025-09-03 08:06:22.801 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:10:22.099 00:00:10.360 TCP 23.104.0.1:57998 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:10:34.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-09-03 08:11:22.499 00:00:10.367 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:11:34.431 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42936 10 6452 1 2025-09-03 08:12:31.534 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:12:31.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:12:22.907 00:00:10.369 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:12:34.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-09-03 08:13:23.310 00:00:10.360 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:13:34.877 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6452 1 2025-09-03 08:14:23.709 00:00:10.375 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:14:35.076 00:00:10.388 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6452 1 2025-09-03 08:11:22.806 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:15:24.125 00:00:10.363 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:15:35.504 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40856 10 6452 1 2025-09-03 08:12:22.805 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:16:24.533 00:00:10.363 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:16:35.674 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-09-03 08:17:31.630 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:17:31.627 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:17:24.945 00:00:10.325 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:17:35.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58838 10 6452 1 2025-09-03 08:18:25.312 00:00:10.369 TCP 23.104.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:18:36.107 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58934 10 6452 1 2025-09-03 08:19:25.716 00:00:10.375 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:19:36.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-09-03 08:20:26.130 00:00:10.364 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:20:36.492 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-09-03 08:17:22.810 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:21:26.534 00:00:10.379 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:21:36.697 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59280 10 6452 1 2025-09-03 08:18:22.805 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:22:31.589 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:22:32.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:22:26.977 00:00:10.377 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:22:36.866 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-09-03 08:23:27.387 00:00:10.366 TCP 23.104.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:23:37.086 00:00:10.405 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 11 6504 1 2025-09-03 08:24:27.825 00:00:10.366 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:24:37.540 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-09-03 08:25:28.227 00:00:10.368 TCP 23.104.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:25:37.713 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60640 10 6452 1 2025-09-03 08:26:28.632 00:00:10.361 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:26:37.925 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 10 6452 1 2025-09-03 08:23:22.811 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:27:31.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:27:31.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:27:29.031 00:00:10.364 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:27:38.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34814 10 6452 1 2025-09-03 08:24:22.810 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:28:29.439 00:00:10.365 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:28:38.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-09-03 08:29:29.845 00:00:10.408 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:29:38.560 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37036 10 6452 1 2025-09-03 08:30:30.299 00:00:10.367 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:30:38.785 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-09-03 08:31:30.700 00:00:10.325 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:31:39.012 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2025-09-03 08:32:32.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:32:32.092 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:32:31.078 00:00:10.375 TCP 23.104.0.1:46058 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:32:39.246 00:00:10.284 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-09-03 08:29:22.813 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:33:31.494 00:00:10.366 TCP 23.104.0.1:49502 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:33:39.569 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-09-03 08:30:22.810 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:34:31.899 00:00:10.329 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:34:39.792 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42460 10 6452 1 2025-09-03 08:35:32.270 00:00:10.327 TCP 23.104.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:35:40.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 10 6452 1 2025-09-03 08:36:32.631 00:00:10.365 TCP 23.104.0.1:42710 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:36:40.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-09-03 08:37:32.180 00:00:00.016 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:37:32.179 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:37:33.034 00:00:10.330 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:37:40.454 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-09-03 08:38:33.402 00:00:10.373 TCP 23.104.0.1:33214 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:38:40.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-09-03 08:35:22.815 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:39:33.809 00:00:10.368 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:39:40.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53542 10 6452 1 2025-09-03 08:36:22.813 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:40:34.224 00:00:10.363 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:40:41.096 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43340 10 6452 1 2025-09-03 08:41:34.626 00:00:10.324 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:41:41.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-09-03 08:42:31.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:42:32.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:42:34.988 00:00:10.370 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:42:41.519 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-09-03 08:43:35.399 00:00:10.365 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:43:41.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-09-03 08:44:35.811 00:00:10.365 TCP 23.104.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:44:41.952 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-09-03 08:41:22.817 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:45:36.216 00:00:10.363 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:45:42.201 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48684 10 6452 1 2025-09-03 08:42:22.814 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:46:36.618 00:00:10.365 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:46:42.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50814 10 6452 1 2025-09-03 08:47:32.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:47:32.214 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:47:37.024 00:00:10.357 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:47:42.633 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-09-03 08:48:37.438 00:00:10.339 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:48:42.844 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6452 1 2025-09-03 08:49:37.812 00:00:10.355 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:49:43.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-09-03 08:50:38.208 00:00:10.366 TCP 23.104.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:50:43.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53764 10 6452 1 2025-09-03 08:47:22.820 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:51:38.622 00:00:10.362 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:51:43.510 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-09-03 08:48:22.817 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:52:32.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:52:32.536 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:52:39.030 00:00:10.374 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:52:43.675 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-09-03 08:53:39.461 00:00:10.369 TCP 23.104.0.1:44482 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:53:43.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46634 10 6452 1 2025-09-03 08:54:39.865 00:00:10.371 TCP 23.104.0.1:42546 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:54:44.112 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-09-03 08:55:40.269 00:00:10.339 TCP 23.104.0.1:45632 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:55:44.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6452 1 2025-09-03 08:56:40.634 00:00:10.369 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:56:44.563 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-09-03 08:53:22.821 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 08:57:32.406 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 08:57:32.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 08:57:41.062 00:00:10.323 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-09-03 08:57:44.775 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55316 10 6452 1 2025-09-03 08:54:22.820 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 08:58:41.426 00:00:10.448 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491948, total packets: 1563, avg bps: 1091, avg pps: 0, avg bpp: 314 Time window: 2025-09-03 07:59:17 - 2025-09-03 08:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0009s Wall: 0.0024s flows/second: 68807.5 Runtime: 0.0024s