Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 13:58:44.627 00:00:10.428 TCP 23.104.0.1:41816 -> 1.101.0.1:3000 11 1507 1 2025-09-03 13:58:52.758 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52606 10 6452 1 2025-09-03 13:59:45.116 00:00:10.387 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-09-03 13:59:52.972 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-09-03 14:00:45.553 00:00:10.326 TCP 23.104.0.1:42438 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:00:53.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-09-03 14:01:45.918 00:00:10.375 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:01:53.444 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-09-03 14:02:38.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:02:38.564 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:02:46.332 00:00:10.376 TCP 23.104.0.1:55442 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:02:53.657 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-09-03 13:59:22.938 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:03:46.746 00:00:10.322 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:03:53.868 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46432 10 6452 1 2025-09-03 14:00:22.936 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:04:47.109 00:00:10.409 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:04:54.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-09-03 14:05:47.558 00:00:10.361 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:05:54.323 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 10 6452 1 2025-09-03 14:06:47.960 00:00:10.360 TCP 23.104.0.1:55698 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:06:54.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6452 1 2025-09-03 14:07:38.797 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:07:38.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:07:48.360 00:00:10.368 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:07:54.761 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-03 14:08:48.772 00:00:10.372 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:08:54.978 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45244 10 6452 1 2025-09-03 14:05:22.941 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:09:49.184 00:00:10.337 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:09:55.206 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56026 10 6452 1 2025-09-03 14:06:22.938 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:10:49.560 00:00:10.368 TCP 23.104.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:10:55.421 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-09-03 14:11:49.967 00:00:10.888 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:11:55.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-09-03 14:12:38.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:12:38.954 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:12:50.891 00:00:10.372 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:12:55.859 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-09-03 14:13:51.298 00:00:10.325 TCP 23.104.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:13:56.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49204 10 6452 1 2025-09-03 14:14:51.665 00:00:10.364 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:14:56.296 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-09-03 14:11:22.943 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:15:52.078 00:00:10.364 TCP 23.104.0.1:36264 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:15:56.483 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39748 10 6452 1 2025-09-03 14:12:22.940 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:16:56.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-09-03 14:16:52.478 00:00:10.365 TCP 23.104.0.1:52614 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:17:38.699 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:17:38.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:17:52.875 00:00:10.364 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:17:56.909 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-09-03 14:18:53.278 00:00:10.496 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:18:57.126 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-09-03 14:19:53.813 00:00:10.365 TCP 23.104.0.1:36086 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:19:57.334 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-09-03 14:20:54.219 00:00:10.367 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:20:57.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 10 6452 1 2025-09-03 14:17:22.946 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:21:54.624 00:00:10.368 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:21:57.753 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 10 6452 1 2025-09-03 14:18:22.944 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:22:38.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:22:38.716 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:22:55.028 00:00:10.363 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:22:57.968 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50850 12 6556 1 2025-09-03 14:23:55.429 00:00:10.325 TCP 23.104.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:23:58.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-09-03 14:24:55.800 00:00:10.364 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:24:58.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-09-03 14:25:56.205 00:00:10.364 TCP 23.104.0.1:45198 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:25:58.626 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42038 10 6452 1 2025-09-03 14:26:56.603 00:00:10.331 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:26:58.833 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45284 10 6452 1 2025-09-03 14:23:22.947 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:27:38.867 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:27:38.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:27:56.970 00:00:10.331 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:27:59.056 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-09-03 14:24:22.946 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:28:59.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-09-03 14:28:57.337 00:00:10.364 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:29:57.749 00:00:10.349 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:29:59.440 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-09-03 14:30:59.659 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35898 10 6452 1 2025-09-03 14:30:58.137 00:00:10.321 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:31:58.496 00:00:10.368 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:31:59.882 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-09-03 14:32:39.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:32:39.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:33:00.104 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-09-03 14:32:58.901 00:00:10.340 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:29:22.948 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:33:59.276 00:00:10.380 TCP 23.104.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:34:00.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-09-03 14:30:22.948 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:35:00.489 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:42278 10 6452 1 2025-09-03 14:34:59.697 00:00:10.367 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:36:00.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-09-03 14:36:00.111 00:00:10.371 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:37:00.971 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-09-03 14:37:00.513 00:00:10.366 TCP 23.104.0.1:51586 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:37:39.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:37:39.685 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:38:00.914 00:00:10.329 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:38:01.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6452 1 2025-09-03 14:39:01.285 00:00:10.365 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:39:01.389 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-09-03 14:35:22.951 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:40:01.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52408 10 6452 1 2025-09-03 14:40:01.690 00:00:10.368 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:36:22.948 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:41:01.820 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-09-03 14:41:02.107 00:00:10.324 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:42:02.002 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-09-03 14:42:02.478 00:00:10.371 TCP 23.104.0.1:55178 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:42:39.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:42:39.015 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:43:02.223 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6452 1 2025-09-03 14:43:02.887 00:00:10.368 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:44:02.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-09-03 14:44:03.295 00:00:10.373 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:45:03.706 00:00:10.324 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:45:02.648 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-09-03 14:41:22.954 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:46:02.861 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-09-03 14:46:04.102 00:00:10.365 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:42:22.951 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:47:03.097 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 11 6504 1 2025-09-03 14:47:04.509 00:00:10.364 TCP 23.104.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:47:39.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:47:39.395 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:48:03.365 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-09-03 14:48:04.913 00:00:10.367 TCP 23.104.0.1:36710 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:49:05.321 00:00:10.328 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:49:03.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2025-09-03 14:50:03.788 00:00:10.653 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-09-03 14:50:05.687 00:00:10.322 TCP 23.104.0.1:51784 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:51:06.055 00:00:10.325 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:51:04.482 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42612 10 6452 1 2025-09-03 14:47:22.957 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:52:04.689 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-09-03 14:52:06.418 00:00:10.365 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:48:22.955 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:52:39.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:52:39.559 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:53:04.861 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-09-03 14:53:06.824 00:00:10.375 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:54:05.091 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-09-03 14:54:07.238 00:00:10.328 TCP 23.104.0.1:42218 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:55:05.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 6452 1 2025-09-03 14:55:07.611 00:00:10.389 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:56:05.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6452 1 2025-09-03 14:56:08.021 00:00:10.359 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:57:05.756 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-09-03 14:57:08.419 00:00:15.557 TCP 23.104.0.1:45766 -> 1.101.0.1:3000 11 1507 1 2025-09-03 14:53:22.959 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 14:57:39.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 14:57:39.621 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 14:58:05.926 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:54734 10 6452 1 2025-09-03 14:54:22.954 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 14:58:14.016 00:00:10.364 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1095, avg pps: 0, avg bpp: 316 Time window: 2025-09-03 13:58:44 - 2025-09-03 14:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0030s flows/second: 54235.3 Runtime: 0.0030s