Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 09:59:22.036 00:00:10.368 TCP 23.104.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-09-10 09:59:32.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-09-10 09:56:26.320 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:00:22.439 00:00:10.369 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:00:33.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-09-10 10:01:03.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:01:03.193 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:01:22.842 00:00:10.389 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:01:33.324 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-09-10 10:02:23.269 00:00:10.366 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:02:33.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-09-10 10:03:23.672 00:00:10.370 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:03:33.757 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45414 10 6452 1 2025-09-10 10:00:26.324 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:04:24.109 00:00:10.321 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:04:33.980 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-09-10 10:05:24.470 00:00:10.366 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:05:34.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-09-10 10:06:03.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:06:03.457 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:02:26.320 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:06:24.872 00:00:10.327 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:06:34.440 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-09-10 10:07:25.237 00:00:10.370 TCP 23.104.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:07:35.064 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-09-10 10:08:25.648 00:00:10.366 TCP 23.104.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:08:35.276 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-09-10 10:09:26.059 00:00:10.363 TCP 23.104.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:09:35.488 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 10 6452 1 2025-09-10 10:06:26.325 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:10:26.459 00:00:10.370 TCP 23.104.0.1:47196 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:10:35.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42124 10 6452 1 2025-09-10 10:11:03.138 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:11:03.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:11:26.869 00:00:10.368 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:11:35.874 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-09-10 10:08:26.324 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:12:27.279 00:00:10.360 TCP 23.104.0.1:59520 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:12:36.100 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 6452 1 2025-09-10 10:13:27.680 00:00:10.364 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:13:36.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-09-10 10:14:28.113 00:00:10.363 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:14:36.504 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38652 10 6452 1 2025-09-10 10:15:28.515 00:00:10.368 TCP 23.104.0.1:57362 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:15:36.712 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-09-10 10:16:03.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:16:03.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:12:26.326 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:16:28.921 00:00:10.339 TCP 23.104.0.1:57866 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:16:36.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44552 10 6452 1 2025-09-10 10:17:29.304 00:00:10.324 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:17:37.132 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-09-10 10:14:26.324 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:18:29.666 00:00:10.366 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:18:37.347 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-09-10 10:19:30.104 00:00:10.365 TCP 23.104.0.1:42398 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:19:37.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-09-10 10:20:30.505 00:00:10.323 TCP 23.104.0.1:43592 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:20:37.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-09-10 10:21:03.599 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:21:03.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:21:30.868 00:00:10.326 TCP 23.104.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:21:37.936 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-09-10 10:18:26.326 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:22:31.236 00:00:10.367 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:22:38.139 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 10 6452 1 2025-09-10 10:23:31.643 00:00:10.366 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:23:38.312 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-09-10 10:20:26.324 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:24:32.046 00:00:10.363 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:24:38.529 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-09-10 10:25:32.448 00:00:10.368 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:25:38.755 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 10 6452 1 2025-09-10 10:26:03.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:26:03.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:26:32.850 00:00:10.548 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:26:38.964 00:00:10.742 TCP 1.101.0.1:3000 -> 22.102.0.1:60178 10 6452 1 2025-09-10 10:27:33.440 00:00:10.365 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:27:39.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58208 10 6452 1 2025-09-10 10:24:26.327 00:05:00.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:28:33.848 00:00:10.380 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:28:39.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 12 6556 1 2025-09-10 10:29:34.269 00:00:10.371 TCP 23.104.0.1:44538 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:29:40.191 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-09-10 10:26:26.325 00:05:00.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:30:34.682 00:00:10.372 TCP 23.104.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:30:40.398 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-09-10 10:31:03.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:31:03.895 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:31:35.113 00:00:10.375 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:31:40.579 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6452 1 2025-09-10 10:32:35.527 00:00:10.321 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:32:40.788 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-09-10 10:33:35.884 00:00:10.344 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:33:41.017 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 12 6556 1 2025-09-10 10:30:26.327 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:34:36.268 00:00:10.367 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:34:41.229 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-09-10 10:35:36.673 00:00:10.322 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:35:41.450 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6452 1 2025-09-10 10:36:03.789 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:36:03.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:32:26.325 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:36:37.032 00:00:10.363 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:36:41.668 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-09-10 10:37:37.434 00:00:10.376 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:37:41.893 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52370 10 6452 1 2025-09-10 10:38:37.836 00:00:10.435 TCP 23.104.0.1:38850 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:38:42.120 00:00:10.598 TCP 1.101.0.1:3000 -> 22.102.0.1:53880 10 6452 1 2025-09-10 10:39:38.313 00:00:10.367 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:39:42.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-09-10 10:36:26.329 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:40:38.715 00:00:10.413 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:40:42.971 00:00:10.820 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-09-10 10:41:04.064 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:41:03.872 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:41:39.168 00:00:10.365 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:41:43.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-09-10 10:38:26.326 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:42:39.572 00:00:10.325 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:42:44.074 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6452 1 2025-09-10 10:43:39.936 00:00:10.333 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:43:44.248 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-09-10 10:44:40.304 00:00:10.369 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:44:44.472 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-09-10 10:45:40.714 00:00:10.334 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:45:44.694 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-09-10 10:46:04.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:46:04.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:42:26.331 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:46:41.101 00:00:10.319 TCP 23.104.0.1:35796 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:46:44.915 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40670 10 6452 1 2025-09-10 10:47:41.461 00:00:10.364 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:47:45.139 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48996 10 6452 1 2025-09-10 10:44:26.328 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:48:45.316 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-09-10 10:48:41.862 00:00:10.369 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:49:45.487 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53636 10 6452 1 2025-09-10 10:49:42.271 00:00:10.365 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:50:45.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39902 10 6452 1 2025-09-10 10:50:42.678 00:00:10.381 TCP 23.104.0.1:58404 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:51:04.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:51:04.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:51:45.945 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-09-10 10:51:43.114 00:00:10.325 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:48:26.332 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 10:52:43.476 00:00:10.324 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:52:46.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-09-10 10:53:43.837 00:00:10.391 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:53:46.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-09-10 10:50:26.329 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 10:54:46.594 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-09-10 10:54:44.267 00:00:10.371 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:55:44.691 00:00:10.365 TCP 23.104.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:55:46.803 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-09-10 10:56:04.212 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 10:56:04.289 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 10:56:45.103 00:00:10.362 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:56:46.982 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-09-10 10:57:45.509 00:00:10.370 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-09-10 10:57:47.214 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-10 10:54:26.332 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 162, total bytes: 490597, total packets: 1555, avg bps: 1038, avg pps: 0, avg bpp: 315 Time window: 2025-09-10 09:56:26 - 2025-09-10 10:59:27 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0017s User: 0.0017s Wall: 0.0014s flows/second: 115478.8 Runtime: 0.0014s