Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 09:59:09.386 00:00:10.335 TCP 23.104.0.1:57188 -> 1.101.0.1:3000 11 1507 1 2025-09-08 09:59:26.546 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-09-08 09:59:58.116 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 09:59:57.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:00:09.757 00:00:10.387 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:00:26.771 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-09-08 10:01:10.185 00:00:10.361 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:01:26.981 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 2025-09-08 10:02:10.587 00:00:10.376 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:02:27.241 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6452 1 2025-09-08 10:03:11.001 00:00:10.444 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 15 1926 1 2025-09-08 09:59:25.347 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:03:27.466 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:40512 12 10365 1 2025-09-08 10:04:11.479 00:00:10.368 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:00:25.344 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:04:27.724 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6452 1 2025-09-08 10:04:58.417 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:04:57.992 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:05:11.883 00:00:10.365 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:05:27.951 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59206 10 6452 1 2025-09-08 10:06:12.289 00:00:10.364 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:06:28.176 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-09-08 10:07:12.689 00:00:10.372 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:07:28.351 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-09-08 10:08:13.103 00:00:10.438 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 15 1926 1 2025-09-08 10:08:28.560 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57760 12 10367 1 2025-09-08 10:09:13.582 00:00:10.358 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:05:25.352 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:09:28.795 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-09-08 10:09:58.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:09:58.192 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:10:13.983 00:00:10.337 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:06:25.349 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:10:29.009 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55424 10 6452 1 2025-09-08 10:11:14.357 00:00:10.327 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:11:29.230 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-09-08 10:12:14.716 00:00:10.379 TCP 23.104.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:12:29.447 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44790 10 6452 1 2025-09-08 10:13:15.132 00:00:10.339 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:13:29.665 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-09-08 10:14:15.508 00:00:10.323 TCP 23.104.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:14:29.902 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-09-08 10:14:57.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:14:57.738 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:15:15.874 00:00:10.365 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:11:25.353 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:15:30.128 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-09-08 10:12:25.351 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:16:16.282 00:00:10.372 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:16:30.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-09-08 10:17:16.692 00:00:10.368 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:17:30.549 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-09-08 10:18:17.108 00:00:10.369 TCP 23.104.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:18:30.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-09-08 10:19:17.518 00:00:10.369 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:19:30.991 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-09-08 10:19:58.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:19:58.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:20:17.926 00:00:10.394 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:20:31.216 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-09-08 10:21:18.359 00:00:10.331 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:17:25.354 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:21:31.437 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49346 10 6452 1 2025-09-08 10:18:25.352 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:22:18.729 00:00:10.365 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:22:31.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59456 10 6452 1 2025-09-08 10:23:19.131 00:00:10.637 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:23:31.833 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-09-08 10:24:19.810 00:00:10.330 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:24:32.004 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-09-08 10:24:58.731 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:24:58.611 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:25:20.179 00:00:10.365 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:25:32.232 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:42712 10 6452 1 2025-09-08 10:26:20.582 00:00:10.323 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:26:32.539 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-09-08 10:23:25.355 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:27:20.946 00:00:10.370 TCP 23.104.0.1:60306 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:27:32.758 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 10 6452 1 2025-09-08 10:24:25.352 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:28:21.353 00:00:10.364 TCP 23.104.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:28:32.972 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 13 6608 1 2025-09-08 10:29:21.757 00:00:10.348 TCP 23.104.0.1:50682 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:29:33.235 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-09-08 10:29:58.436 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:29:58.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:30:22.138 00:00:10.366 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:30:33.418 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6452 1 2025-09-08 10:31:22.545 00:00:10.373 TCP 23.104.0.1:44000 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:31:33.609 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58066 10 6452 1 2025-09-08 10:32:22.959 00:00:10.366 TCP 23.104.0.1:41490 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:32:33.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47868 10 6452 1 2025-09-08 10:29:25.357 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:33:23.363 00:00:10.321 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:33:34.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-09-08 10:30:25.355 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:34:23.722 00:00:10.370 TCP 23.104.0.1:47666 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:34:34.283 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-09-08 10:34:58.683 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:34:58.601 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:35:24.128 00:00:10.359 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:35:34.495 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-09-08 10:36:24.526 00:00:10.365 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:36:34.666 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-09-08 10:37:24.932 00:00:10.380 TCP 23.104.0.1:45352 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:37:34.878 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55204 10 6452 1 2025-09-08 10:38:25.388 00:00:10.439 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 15 1926 1 2025-09-08 10:38:35.085 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46842 12 10367 1 2025-09-08 10:35:25.358 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:39:25.865 00:00:10.367 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:39:35.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-09-08 10:40:06.003 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:40:06.165 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:36:25.362 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:40:26.272 00:00:10.366 TCP 23.104.0.1:44508 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:40:35.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-09-08 10:41:26.682 00:00:10.363 TCP 23.104.0.1:53868 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:41:35.760 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-09-08 10:42:27.108 00:00:10.368 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:42:35.926 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-09-08 10:43:27.524 00:00:10.325 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:43:36.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-09-08 10:44:27.887 00:00:10.368 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:44:36.327 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50280 10 6452 1 2025-09-08 10:45:06.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:45:06.078 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:41:25.366 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:45:28.294 00:00:10.367 TCP 23.104.0.1:47726 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:45:36.511 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-09-08 10:42:25.363 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:46:28.697 00:00:10.327 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:46:36.690 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-09-08 10:47:29.089 00:00:10.372 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:47:36.912 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-09-08 10:48:29.498 00:00:10.323 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:48:37.126 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-09-08 10:49:29.870 00:00:10.387 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:49:37.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-09-08 10:50:06.344 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:50:06.294 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:50:30.292 00:00:10.322 TCP 23.104.0.1:36652 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:50:37.519 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-09-08 10:47:25.366 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:51:30.655 00:00:10.330 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:51:37.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-09-08 10:48:25.365 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:52:31.032 00:00:10.369 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:52:37.908 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-09-08 10:53:31.446 00:00:10.368 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:53:38.121 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-09-08 10:54:31.859 00:00:10.371 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:54:38.341 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-09-08 10:55:06.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 10:55:06.523 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 10:55:32.274 00:00:10.367 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:55:38.557 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:54896 10 6452 1 2025-09-08 10:56:32.678 00:00:10.326 TCP 23.104.0.1:40248 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:56:39.091 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-09-08 10:53:25.370 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 10:57:33.040 00:00:10.364 TCP 23.104.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:57:39.303 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-09-08 10:54:25.366 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 10:58:33.446 00:00:10.365 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 11 1507 1 2025-09-08 10:58:39.511 00:00:10.782 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 11 6504 1 Summary: total flows: 164, total bytes: 511556, total packets: 1594, avg bps: 1131, avg pps: 0, avg bpp: 320 Time window: 2025-09-08 09:59:09 - 2025-09-08 10:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 74307.6 Runtime: 0.0022s