Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 08:58:43.916 00:00:10.368 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-09-04 08:59:08.337 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-09-04 08:55:23.459 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 08:59:44.321 00:00:10.327 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:00:08.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-09-04 09:00:44.687 00:00:10.368 TCP 23.104.0.1:51268 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:01:08.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-04 09:01:45.113 00:00:10.366 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:02:08.986 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-09-04 09:02:45.518 00:00:10.366 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:03:01.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:03:01.423 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:03:09.221 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-09-04 09:03:45.926 00:00:10.391 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:04:09.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34056 10 6452 1 2025-09-04 09:00:23.457 00:05:00.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:04:46.354 00:00:10.375 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:05:09.611 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-09-04 09:01:23.460 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:05:46.754 00:00:10.331 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:06:09.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6452 1 2025-09-04 09:06:47.131 00:00:10.317 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:07:10.005 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-09-04 09:08:01.507 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:07:47.489 00:00:10.370 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:08:01.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:08:10.182 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-09-04 09:08:47.893 00:00:10.435 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:09:10.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 13 6891 1 2025-09-04 09:09:48.367 00:00:10.370 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:10:10.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 10 6452 1 2025-09-04 09:06:23.456 00:05:00.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:10:48.775 00:00:10.368 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:11:10.840 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6452 1 2025-09-04 09:07:23.460 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:11:49.184 00:00:10.324 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:12:11.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-09-04 09:13:01.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:13:01.635 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:12:49.547 00:00:10.366 TCP 23.104.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:13:11.297 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-09-04 09:13:49.950 00:00:10.380 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:14:11.481 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-09-04 09:14:50.366 00:00:10.325 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:15:11.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-09-04 09:15:50.741 00:00:10.368 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:16:11.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-09-04 09:12:23.459 00:05:00.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:16:51.147 00:00:10.326 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:13:23.461 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:17:12.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-09-04 09:18:01.735 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:18:01.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:17:51.519 00:00:10.670 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:18:12.340 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 2025-09-04 09:18:52.231 00:00:10.325 TCP 23.104.0.1:33794 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:19:12.564 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-09-04 09:19:52.587 00:00:10.336 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:20:12.784 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60780 10 6452 1 2025-09-04 09:20:52.963 00:00:10.341 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:21:13.001 00:00:10.870 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-09-04 09:21:53.345 00:00:10.364 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:22:13.908 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-09-04 09:18:23.460 00:05:00.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:23:01.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:23:01.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:22:53.748 00:00:10.353 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:23:14.120 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-09-04 09:19:23.464 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:23:54.140 00:00:10.369 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:24:14.300 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6452 1 2025-09-04 09:24:54.547 00:00:10.365 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:25:14.533 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-09-04 09:25:54.952 00:00:10.379 TCP 23.104.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:26:14.755 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-09-04 09:26:55.377 00:00:10.388 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:27:14.975 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6452 1 2025-09-04 09:28:01.806 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:28:01.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:27:55.805 00:00:10.332 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:24:23.463 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:28:15.222 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-09-04 09:28:56.178 00:00:10.361 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:25:23.464 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:29:15.444 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-09-04 09:29:56.579 00:00:10.364 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:30:15.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-09-04 09:30:56.986 00:00:10.367 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:31:15.878 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-09-04 09:31:57.394 00:00:10.372 TCP 23.104.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:32:16.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6452 1 2025-09-04 09:33:01.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:33:01.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:32:57.800 00:00:10.371 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:33:16.313 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-09-04 09:33:58.213 00:00:10.361 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:34:16.524 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51934 10 6452 1 2025-09-04 09:30:23.462 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:34:58.614 00:00:10.362 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:35:16.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-09-04 09:31:23.466 00:05:00.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:35:59.017 00:00:10.364 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:36:16.942 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-09-04 09:36:59.419 00:00:10.364 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:37:17.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60538 10 6452 1 2025-09-04 09:38:02.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:38:02.262 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:37:59.834 00:00:10.387 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:38:17.399 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46678 10 6452 1 2025-09-04 09:39:00.263 00:00:10.364 TCP 23.104.0.1:59584 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:39:17.617 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43636 10 6452 1 2025-09-04 09:40:00.665 00:00:10.367 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:36:23.467 00:05:00.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:40:17.799 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6452 1 2025-09-04 09:41:01.089 00:00:10.363 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:37:23.467 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:41:18.031 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-09-04 09:42:01.491 00:00:10.325 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:42:18.246 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54236 10 6452 1 2025-09-04 09:43:02.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:43:02.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:43:01.851 00:00:10.374 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:43:18.458 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-09-04 09:44:02.260 00:00:10.364 TCP 23.104.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:44:18.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55998 10 6452 1 2025-09-04 09:45:02.662 00:00:10.367 TCP 23.104.0.1:47222 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:45:18.889 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34820 10 6452 1 2025-09-04 09:46:03.101 00:00:10.362 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:42:23.464 00:05:00.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:46:19.090 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:53784 10 6452 1 2025-09-04 09:47:03.498 00:00:10.330 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:43:23.467 00:05:00.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:47:19.795 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-09-04 09:48:02.468 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:48:02.400 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:48:03.877 00:00:10.394 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:48:20.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-09-04 09:49:04.317 00:00:10.363 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:49:20.241 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-09-04 09:50:04.716 00:00:10.381 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:50:20.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-09-04 09:51:05.128 00:00:10.366 TCP 23.104.0.1:40454 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:51:20.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-09-04 09:52:05.531 00:00:10.327 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:48:23.465 00:05:00.672 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:52:20.884 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35176 10 6452 1 2025-09-04 09:53:02.399 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:53:02.130 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:53:05.897 00:00:10.370 TCP 23.104.0.1:53258 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:49:23.469 00:05:00.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:53:21.077 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50972 10 6452 1 2025-09-04 09:54:06.312 00:00:10.370 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:54:21.288 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-09-04 09:55:06.723 00:00:10.370 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:55:21.495 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33250 10 6452 1 2025-09-04 09:56:07.134 00:00:10.373 TCP 23.104.0.1:35042 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:56:21.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39950 12 6556 1 2025-09-04 09:57:07.568 00:00:10.322 TCP 23.104.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:57:21.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-09-04 09:58:02.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 09:58:02.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 09:58:07.928 00:00:10.394 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:54:23.468 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 09:58:22.102 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 Summary: total flows: 164, total bytes: 498891, total packets: 1577, avg bps: 1039, avg pps: 0, avg bpp: 316 Time window: 2025-09-04 08:55:23 - 2025-09-04 09:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 78166.6 Runtime: 0.0021s