Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 16:59:04.518 00:00:10.366 TCP 23.104.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:59:31.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6452 1 2025-09-03 17:00:04.934 00:00:10.340 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:55:23.037 00:06:00.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:00:32.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-09-03 17:01:05.310 00:00:10.361 TCP 23.104.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-09-03 16:56:23.035 00:06:00.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:01:32.384 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-09-03 17:02:05.711 00:00:10.383 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:02:32.550 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-09-03 17:02:42.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:02:42.464 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:03:06.134 00:00:10.907 TCP 23.104.0.1:48784 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:03:32.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-09-03 17:04:07.118 00:00:10.367 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:04:32.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-09-03 17:05:07.523 00:00:10.367 TCP 23.104.0.1:50630 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:05:33.175 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-09-03 17:06:07.926 00:00:10.391 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:06:33.403 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-09-03 17:07:08.361 00:00:10.968 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:02:23.042 00:06:00.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:07:42.278 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:07:42.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:07:33.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35192 10 6452 1 2025-09-03 17:08:09.367 00:00:10.371 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:03:23.042 00:06:00.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:08:33.785 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-09-03 17:09:09.771 00:00:10.329 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:09:33.991 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-09-03 17:10:10.132 00:00:10.365 TCP 23.104.0.1:40380 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:10:34.218 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-09-03 17:11:10.536 00:00:10.431 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:11:34.425 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-09-03 17:12:11.015 00:00:10.362 TCP 23.104.0.1:38982 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:12:34.638 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-09-03 17:12:42.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:12:42.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:13:11.414 00:00:10.363 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:13:34.849 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 11 6492 1 2025-09-03 17:14:11.816 00:00:10.327 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:09:23.044 00:06:00.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:14:35.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-09-03 17:10:23.042 00:06:00.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:15:12.182 00:00:10.322 TCP 23.104.0.1:37704 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:15:35.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48316 10 6452 1 2025-09-03 17:16:12.542 00:00:10.372 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:16:35.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34114 10 6452 1 2025-09-03 17:17:12.955 00:00:10.367 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:17:42.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:17:35.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43558 10 6452 1 2025-09-03 17:17:42.244 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:18:13.357 00:00:10.329 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:18:35.895 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-09-03 17:19:13.720 00:00:10.382 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:19:36.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52356 10 6452 1 2025-09-03 17:20:14.139 00:00:10.371 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:20:36.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-09-03 17:21:14.548 00:00:10.361 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:16:23.047 00:06:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:21:36.547 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-09-03 17:17:23.045 00:06:00.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:22:14.948 00:00:10.367 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:22:36.720 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37732 10 6452 1 2025-09-03 17:22:42.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:22:42.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:23:15.357 00:00:10.490 TCP 23.104.0.1:55428 -> 1.101.0.1:3000 15 1926 1 2025-09-03 17:23:36.895 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 12 10367 1 2025-09-03 17:24:15.887 00:00:10.380 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:24:37.138 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 10 6452 1 2025-09-03 17:25:16.304 00:00:10.790 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:25:37.359 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-09-03 17:26:17.134 00:00:10.367 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:26:37.529 00:00:10.400 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-09-03 17:27:17.535 00:00:10.366 TCP 23.104.0.1:36268 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:27:42.791 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:27:42.572 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:27:37.965 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-09-03 17:23:23.049 00:06:00.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:28:17.938 00:00:10.405 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:28:38.194 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-09-03 17:24:23.048 00:06:00.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:29:18.384 00:00:10.323 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:29:38.364 00:00:10.420 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-09-03 17:30:18.746 00:00:10.392 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:30:38.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-09-03 17:31:19.169 00:00:10.369 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:31:39.035 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-09-03 17:32:19.582 00:00:10.324 TCP 23.104.0.1:60518 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:32:42.930 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:32:43.260 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:32:39.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-09-03 17:33:19.944 00:00:10.374 TCP 23.104.0.1:37684 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:33:39.475 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-09-03 17:34:20.356 00:00:10.370 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:34:39.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-09-03 17:30:23.052 00:06:00.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:35:20.762 00:00:10.382 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:35:39.899 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42432 10 6452 1 2025-09-03 17:31:23.049 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:36:21.179 00:00:10.366 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:36:40.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-09-03 17:37:21.584 00:00:10.365 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:37:43.117 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:37:42.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:37:40.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 12 6556 1 2025-09-03 17:38:21.989 00:00:10.365 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:38:40.534 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-09-03 17:39:22.399 00:00:10.370 TCP 23.104.0.1:37390 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:39:40.743 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-09-03 17:40:22.804 00:00:10.329 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:40:40.963 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41258 12 6556 1 2025-09-03 17:41:23.173 00:00:10.384 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:41:41.196 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-09-03 17:37:23.055 00:06:00.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:42:23.602 00:00:10.401 TCP 23.104.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:42:43.148 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:42:43.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:42:41.409 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-09-03 17:38:23.052 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:43:24.065 00:00:10.382 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:43:41.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-09-03 17:44:24.485 00:00:10.378 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:44:41.836 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6452 1 2025-09-03 17:45:24.894 00:00:10.329 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:45:42.069 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6452 1 2025-09-03 17:46:25.259 00:00:10.422 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:46:42.279 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-09-03 17:47:25.723 00:00:10.369 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:47:43.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:47:43.155 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:47:42.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55930 10 6452 1 2025-09-03 17:48:26.134 00:00:10.370 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:48:42.663 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6452 1 2025-09-03 17:44:23.069 00:06:00.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:49:26.543 00:00:10.365 TCP 23.104.0.1:45726 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:49:42.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-09-03 17:45:23.066 00:06:00.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:50:26.948 00:00:10.380 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:50:43.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-09-03 17:51:27.367 00:00:10.322 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:51:43.321 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-09-03 17:52:27.730 00:00:10.320 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:52:43.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:52:43.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:52:43.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55072 10 6452 1 2025-09-03 17:53:28.106 00:00:10.367 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:53:43.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36302 10 6452 1 2025-09-03 17:54:28.521 00:00:10.322 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:54:43.967 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-09-03 17:55:28.873 00:00:10.365 TCP 23.104.0.1:58456 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:55:44.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57774 10 6452 1 2025-09-03 17:51:23.070 00:06:00.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 17:56:29.276 00:00:10.360 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:56:44.426 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-09-03 17:52:23.067 00:06:00.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 17:57:29.683 00:00:10.364 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-09-03 17:57:43.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 17:57:43.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 17:57:44.596 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-09-03 17:58:30.097 00:00:10.325 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 497216, total packets: 1585, avg bps: 1047, avg pps: 0, avg bpp: 313 Time window: 2025-09-03 16:55:23 - 2025-09-03 17:58:40 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0039s User: 0.0008s Wall: 0.0028s flows/second: 58209.0 Runtime: 0.0028s