Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 09:58:48.769 00:00:10.371 TCP 23.104.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-09-11 09:59:06.774 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-09-11 09:59:49.187 00:00:10.367 TCP 23.104.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:00:07.005 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 11 6504 1 2025-09-11 09:56:26.748 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:00:49.588 00:00:10.366 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:01:07.269 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50264 10 6452 1 2025-09-11 10:01:32.375 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:01:32.411 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:01:49.992 00:00:10.367 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:02:07.490 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6452 1 2025-09-11 10:02:50.394 00:00:10.369 TCP 23.104.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:03:07.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60140 10 6452 1 2025-09-11 10:03:50.801 00:00:10.330 TCP 23.104.0.1:33252 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:04:07.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55378 10 6452 1 2025-09-11 10:00:26.752 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:04:51.173 00:00:10.845 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:05:08.130 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51728 10 6452 1 2025-09-11 10:05:52.055 00:00:10.366 TCP 23.104.0.1:35658 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:06:08.355 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-09-11 10:02:26.753 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:06:32.195 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:06:32.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:06:52.456 00:00:10.361 TCP 23.104.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:07:08.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-09-11 10:07:52.860 00:00:10.372 TCP 23.104.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:08:08.785 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-09-11 10:08:53.270 00:00:10.555 TCP 23.104.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:09:08.998 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-09-11 10:09:53.863 00:00:10.368 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:10:09.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-09-11 10:06:26.758 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:10:54.269 00:00:10.367 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:11:09.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-09-11 10:11:32.107 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:11:32.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:11:54.675 00:00:10.369 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:12:09.656 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-09-11 10:08:26.756 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:12:55.101 00:00:10.364 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:13:09.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51286 10 6452 1 2025-09-11 10:13:55.502 00:00:10.366 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:14:10.101 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44950 10 6452 1 2025-09-11 10:14:55.908 00:00:10.323 TCP 23.104.0.1:46700 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:15:10.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38390 10 6452 1 2025-09-11 10:15:56.274 00:00:10.364 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:16:10.526 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-09-11 10:12:26.758 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:16:32.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:16:32.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:16:56.678 00:00:10.425 TCP 23.104.0.1:44042 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:17:10.689 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-09-11 10:17:57.145 00:00:10.367 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:18:10.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-09-11 10:14:26.760 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:18:57.548 00:00:10.328 TCP 23.104.0.1:46948 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:19:11.134 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53032 10 6452 1 2025-09-11 10:19:57.921 00:00:10.385 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:20:11.347 00:00:15.249 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-09-11 10:20:58.349 00:00:10.368 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:21:16.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-09-11 10:21:32.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:21:32.615 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:21:58.769 00:00:10.370 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:18:26.761 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:22:16.854 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-09-11 10:22:59.182 00:00:10.371 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:23:17.278 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33654 12 10365 1 2025-09-11 10:23:59.589 00:00:10.441 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 15 1926 1 2025-09-11 10:24:17.528 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-09-11 10:20:26.760 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:25:00.099 00:00:10.367 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:25:17.743 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 10 6452 1 2025-09-11 10:26:00.501 00:00:10.368 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:26:17.966 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 12 6556 1 2025-09-11 10:26:32.476 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:26:32.439 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:27:00.907 00:00:10.368 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:27:18.208 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-09-11 10:28:01.311 00:00:10.362 TCP 23.104.0.1:58518 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:28:18.427 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37526 12 10367 1 2025-09-11 10:24:26.765 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:29:01.713 00:00:10.451 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 15 1926 1 2025-09-11 10:29:18.669 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-09-11 10:30:02.206 00:00:10.323 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:26:26.763 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:30:18.882 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-09-11 10:31:02.571 00:00:10.363 TCP 23.104.0.1:57438 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:31:19.102 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35088 10 6452 1 2025-09-11 10:31:32.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:31:32.700 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:32:02.969 00:00:10.369 TCP 23.104.0.1:51276 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:32:19.315 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6452 1 2025-09-11 10:33:03.377 00:00:10.323 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:33:19.482 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-09-11 10:34:03.745 00:00:10.328 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:34:19.701 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-09-11 10:30:26.765 00:05:00.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:35:04.110 00:00:10.358 TCP 23.104.0.1:57886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:35:19.915 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45900 10 6452 1 2025-09-11 10:36:04.507 00:00:10.364 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:32:26.765 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:36:20.162 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-09-11 10:36:32.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:36:32.844 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:37:04.915 00:00:10.363 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:37:20.380 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-11 10:38:05.312 00:00:10.364 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:38:20.607 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-09-11 10:39:05.713 00:00:10.504 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:39:20.814 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34646 10 6452 1 2025-09-11 10:40:06.253 00:00:10.364 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:40:20.986 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-09-11 10:36:26.769 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:41:06.656 00:00:10.330 TCP 23.104.0.1:38088 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:41:33.014 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:41:21.225 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-09-11 10:41:32.785 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:42:07.021 00:00:10.360 TCP 23.104.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:42:21.438 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-11 10:38:26.765 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:43:07.419 00:00:10.369 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:43:21.618 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-09-11 10:44:07.825 00:00:10.402 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:44:21.830 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-09-11 10:45:08.267 00:00:10.330 TCP 23.104.0.1:39922 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:45:22.076 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-09-11 10:46:08.634 00:00:10.372 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:42:26.769 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:46:33.027 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:46:22.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-09-11 10:46:33.006 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:47:09.053 00:00:10.364 TCP 23.104.0.1:55778 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:47:22.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-09-11 10:48:09.457 00:00:10.366 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:44:26.767 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:48:22.723 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-09-11 10:49:09.859 00:00:10.375 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:49:22.949 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57852 10 6452 1 2025-09-11 10:50:10.271 00:00:10.365 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:50:23.189 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-09-11 10:51:10.676 00:00:10.374 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:51:23.408 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2025-09-11 10:51:32.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:51:33.213 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:48:26.770 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:52:23.640 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-11 10:52:11.095 00:00:22.560 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:53:23.742 00:00:10.397 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 15 1926 1 2025-09-11 10:53:23.951 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 12 10576 1 2025-09-11 10:50:26.769 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 10:54:24.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6661 1 2025-09-11 10:54:24.176 00:00:10.318 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:55:24.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6661 1 2025-09-11 10:55:24.533 00:00:10.368 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:56:33.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 10:56:24.640 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6661 1 2025-09-11 10:56:24.938 00:00:10.378 TCP 23.104.0.1:59166 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:56:33.246 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 10:57:25.355 00:00:10.359 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:57:24.816 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52314 10 6661 1 2025-09-11 10:54:26.773 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 10:58:25.755 00:00:10.390 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-09-11 10:58:25.045 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6661 1 Summary: total flows: 164, total bytes: 512758, total packets: 1593, avg bps: 1084, avg pps: 0, avg bpp: 321 Time window: 2025-09-11 09:56:26 - 2025-09-11 10:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0029s Wall: 0.0028s flows/second: 59504.0 Runtime: 0.0028s