Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 03:59:12.353 00:00:10.363 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:59:34.657 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-09-11 04:00:12.755 00:00:10.379 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:56:26.633 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:00:34.833 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-09-11 04:01:24.710 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:01:13.174 00:00:10.366 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:01:24.900 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:01:35.023 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-09-11 04:02:13.581 00:00:10.363 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:02:35.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-09-11 04:03:13.985 00:00:10.321 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:03:35.457 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51488 10 6452 1 2025-09-11 04:04:14.344 00:00:10.365 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:00:26.636 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:04:35.674 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-09-11 04:05:14.744 00:00:10.387 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:05:35.849 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-09-11 04:06:25.004 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:06:24.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:06:15.168 00:00:10.331 TCP 23.104.0.1:40224 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:02:26.634 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:06:36.168 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49086 10 6452 1 2025-09-11 04:07:15.548 00:00:10.383 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:07:36.379 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-09-11 04:08:15.973 00:00:10.366 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:08:36.591 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-09-11 04:09:16.381 00:00:10.374 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:09:36.768 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-09-11 04:10:16.794 00:00:10.379 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:06:26.637 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:10:36.978 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 14 6660 1 2025-09-11 04:11:25.218 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:11:25.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:11:17.212 00:00:10.378 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:11:37.223 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-09-11 04:12:17.627 00:00:10.323 TCP 23.104.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:08:26.636 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:12:37.399 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-09-11 04:13:17.984 00:00:10.374 TCP 23.104.0.1:33968 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:13:37.613 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2025-09-11 04:14:18.393 00:00:10.366 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:14:37.839 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-09-11 04:15:18.799 00:00:10.363 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:15:38.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45782 10 6452 1 2025-09-11 04:16:25.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:16:25.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:16:19.201 00:00:10.362 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:12:26.641 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:16:38.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-09-11 04:17:19.606 00:00:10.365 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:17:38.520 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-09-11 04:14:26.639 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:18:20.013 00:00:10.375 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:18:38.690 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-09-11 04:19:20.426 00:00:10.369 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:19:38.929 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6452 1 2025-09-11 04:20:20.829 00:00:10.348 TCP 23.104.0.1:47214 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:20:39.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-09-11 04:21:25.340 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:21:25.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:21:21.217 00:00:10.364 TCP 23.104.0.1:41484 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:21:39.394 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-09-11 04:18:26.642 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:22:21.616 00:00:10.363 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:22:39.618 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39288 10 6452 1 2025-09-11 04:23:22.015 00:00:10.365 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:23:39.836 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-09-11 04:20:26.639 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:24:22.418 00:00:11.025 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:24:40.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41818 10 6452 1 2025-09-11 04:25:23.480 00:00:10.327 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:25:40.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-09-11 04:26:25.464 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:26:25.386 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:26:23.844 00:00:10.393 TCP 23.104.0.1:51308 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:26:40.517 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43016 10 6452 1 2025-09-11 04:27:24.273 00:00:10.367 TCP 23.104.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:27:40.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-09-11 04:24:26.644 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:28:24.678 00:00:10.326 TCP 23.104.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:28:40.961 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:33798 10 6452 1 2025-09-11 04:29:25.049 00:00:10.326 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:29:41.159 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6452 1 2025-09-11 04:26:26.642 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:30:25.416 00:00:10.325 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:30:41.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-09-11 04:31:25.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:31:25.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:31:25.777 00:00:10.330 TCP 23.104.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:31:41.540 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59810 10 6452 1 2025-09-11 04:32:26.144 00:00:10.369 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:32:41.719 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55052 10 6452 1 2025-09-11 04:33:26.546 00:00:10.389 TCP 23.104.0.1:38142 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:33:41.892 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-09-11 04:30:26.644 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:34:26.988 00:00:10.362 TCP 23.104.0.1:58296 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:34:42.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 6452 1 2025-09-11 04:35:27.395 00:00:10.380 TCP 23.104.0.1:37104 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:35:42.320 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44156 10 6452 1 2025-09-11 04:36:25.633 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:36:25.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:32:26.644 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:36:27.819 00:00:10.375 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:36:42.535 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 10 6452 1 2025-09-11 04:37:28.243 00:00:10.360 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:37:42.754 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-09-11 04:38:28.641 00:00:10.324 TCP 23.104.0.1:58840 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:38:42.976 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-09-11 04:39:29.002 00:00:10.327 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:39:43.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33732 10 6452 1 2025-09-11 04:36:26.650 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:40:29.363 00:00:10.364 TCP 23.104.0.1:48098 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:40:43.424 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-09-11 04:41:25.372 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:41:25.617 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:41:29.762 00:00:10.376 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:41:43.646 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58016 10 6452 1 2025-09-11 04:38:26.648 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:42:30.174 00:00:10.832 TCP 23.104.0.1:58982 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:42:43.857 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-09-11 04:43:31.051 00:00:10.433 TCP 23.104.0.1:60588 -> 1.101.0.1:3000 15 1926 1 2025-09-11 04:43:44.090 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 12 10367 1 2025-09-11 04:44:31.523 00:00:10.367 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:44:44.287 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-11 04:45:31.928 00:00:10.662 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:45:44.510 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6452 1 2025-09-11 04:46:25.951 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:46:25.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:42:26.649 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:46:32.626 00:00:10.356 TCP 23.104.0.1:53166 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:46:44.732 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6452 1 2025-09-11 04:47:33.025 00:00:10.362 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:47:44.972 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-09-11 04:44:26.647 00:05:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:48:33.424 00:00:10.363 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:48:45.202 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-09-11 04:49:33.824 00:00:10.328 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:49:45.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53698 10 6452 1 2025-09-11 04:50:34.188 00:00:10.365 TCP 23.104.0.1:55850 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:50:46.008 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-09-11 04:51:25.877 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:51:26.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:51:34.591 00:00:10.366 TCP 23.104.0.1:53506 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:51:46.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2025-09-11 04:48:26.652 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:52:34.993 00:00:10.325 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:52:46.390 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-09-11 04:53:35.359 00:00:10.324 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:53:46.618 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-09-11 04:50:26.650 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 04:54:35.727 00:00:10.372 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:54:46.840 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44588 10 6452 1 2025-09-11 04:55:36.138 00:00:10.361 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:55:47.022 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-09-11 04:56:25.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 04:56:26.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 04:56:36.539 00:00:10.322 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:56:47.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-09-11 04:57:36.899 00:00:10.363 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:57:47.454 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-09-11 04:54:26.661 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 04:58:37.303 00:00:10.363 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496438, total packets: 1572, avg bps: 1050, avg pps: 0, avg bpp: 315 Time window: 2025-09-11 03:56:26 - 2025-09-11 04:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0000s Wall: 0.0019s flows/second: 86333.1 Runtime: 0.0019s