Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 14:59:16.312 00:00:10.332 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-09-11 14:59:24.125 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46658 10 6452 1 2025-09-11 14:56:26.853 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:00:16.677 00:00:10.369 TCP 23.104.0.1:43430 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:00:24.305 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-09-11 15:01:17.103 00:00:10.367 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:01:24.484 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35110 10 6452 1 2025-09-11 15:01:38.356 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:01:37.973 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:02:17.505 00:00:10.324 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:02:24.699 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-09-11 15:03:17.868 00:00:10.415 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:03:24.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-09-11 15:04:18.325 00:00:10.370 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:00:26.856 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:04:25.126 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-09-11 15:05:18.727 00:00:10.326 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:05:25.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-09-11 15:06:19.104 00:00:10.366 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:02:26.853 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:06:25.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-09-11 15:06:38.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:06:38.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:07:19.509 00:00:10.363 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:07:25.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 10 6452 1 2025-09-11 15:08:19.909 00:00:10.366 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:08:26.002 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:32824 10 6452 1 2025-09-11 15:09:20.310 00:00:10.330 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:09:26.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-09-11 15:10:20.689 00:00:10.378 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:06:26.856 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:10:26.676 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-09-11 15:11:21.109 00:00:10.372 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:11:38.251 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:11:27.120 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-09-11 15:11:38.560 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:08:26.854 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:12:21.526 00:00:10.582 TCP 23.104.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:12:27.301 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-09-11 15:13:22.148 00:00:10.398 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 15 1926 1 2025-09-11 15:13:27.515 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54240 12 10365 1 2025-09-11 15:14:22.584 00:00:10.320 TCP 23.104.0.1:44448 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:14:27.755 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52534 10 6452 1 2025-09-11 15:15:22.946 00:00:10.371 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:15:27.989 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40236 10 6452 1 2025-09-11 15:12:26.858 00:05:00.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:16:23.354 00:00:10.366 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:16:28.242 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45526 10 6452 1 2025-09-11 15:16:38.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:16:38.151 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:17:23.755 00:00:10.337 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:17:28.475 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-09-11 15:14:26.855 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:18:24.137 00:00:10.371 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:18:28.684 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35802 10 6452 1 2025-09-11 15:19:24.548 00:00:10.368 TCP 23.104.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:19:28.893 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-09-11 15:20:24.954 00:00:10.371 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:20:29.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 2025-09-11 15:21:25.364 00:00:10.329 TCP 23.104.0.1:39318 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:21:29.302 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-09-11 15:21:38.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:21:38.806 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:18:26.861 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:22:25.720 00:00:10.372 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:22:29.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-09-11 15:23:26.135 00:00:10.367 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:23:29.728 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6452 1 2025-09-11 15:20:26.858 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:24:26.543 00:00:10.367 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:24:29.938 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6452 1 2025-09-11 15:25:26.949 00:00:10.374 TCP 23.104.0.1:42070 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:25:30.180 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-09-11 15:26:38.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:26:27.360 00:00:10.669 TCP 23.104.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:26:30.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-09-11 15:26:38.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:27:28.093 00:00:10.319 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:27:30.559 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-09-11 15:24:26.863 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:28:28.453 00:00:10.320 TCP 23.104.0.1:45540 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:28:30.779 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-09-11 15:29:28.815 00:00:10.370 TCP 23.104.0.1:45694 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:29:30.951 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-09-11 15:26:26.861 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:30:29.217 00:00:10.371 TCP 23.104.0.1:50314 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:30:31.192 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50982 10 6452 1 2025-09-11 15:31:29.627 00:00:10.374 TCP 23.104.0.1:42740 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:31:38.807 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:31:31.364 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38780 10 6452 1 2025-09-11 15:31:38.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:32:30.038 00:00:10.361 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:32:31.571 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-09-11 15:33:31.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34842 10 6452 1 2025-09-11 15:33:30.441 00:00:10.366 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:30:26.863 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:34:30.844 00:00:10.428 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:34:31.956 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-09-11 15:35:31.312 00:00:10.368 TCP 23.104.0.1:49734 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:35:32.194 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-09-11 15:32:26.890 00:05:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:36:38.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:36:38.900 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:36:32.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-09-11 15:36:31.720 00:00:10.370 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:37:32.620 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-09-11 15:37:32.129 00:00:10.363 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:38:32.534 00:00:10.361 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:38:32.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-09-11 15:39:33.064 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52662 10 6452 1 2025-09-11 15:39:32.939 00:00:10.391 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:36:26.891 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:40:33.374 00:00:10.366 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:40:33.280 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 10 6452 1 2025-09-11 15:41:38.703 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:41:38.926 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:41:33.783 00:00:10.365 TCP 23.104.0.1:58964 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:41:33.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-09-11 15:38:26.890 00:05:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:42:34.188 00:00:10.369 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:42:33.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-09-11 15:43:33.941 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-09-11 15:43:34.595 00:00:10.366 TCP 23.104.0.1:57812 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:44:35.002 00:00:10.366 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:44:34.178 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-09-11 15:45:34.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-09-11 15:45:35.405 00:00:10.371 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:42:26.893 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:46:39.055 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:46:34.604 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33280 10 6452 1 2025-09-11 15:46:39.180 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:46:35.818 00:00:10.338 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:47:36.180 00:00:10.319 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:47:34.773 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-09-11 15:44:26.891 00:05:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:48:36.538 00:00:10.365 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:48:34.946 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-09-11 15:49:35.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-09-11 15:49:36.944 00:00:10.370 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:50:35.352 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-09-11 15:50:37.349 00:00:10.363 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:51:39.276 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:51:39.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:51:35.531 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-09-11 15:51:37.752 00:00:10.382 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:48:26.893 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:52:35.772 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:43912 10 6452 1 2025-09-11 15:52:38.171 00:00:10.369 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:53:36.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 10 6452 1 2025-09-11 15:53:38.579 00:00:10.361 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:50:26.893 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 15:54:36.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 12 6556 1 2025-09-11 15:54:38.980 00:00:10.373 TCP 23.104.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:55:36.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-09-11 15:55:39.391 00:00:10.361 TCP 23.104.0.1:33930 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:56:39.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 15:56:39.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 15:56:39.790 00:00:10.348 TCP 23.104.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:56:37.024 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6452 1 2025-09-11 15:57:40.180 00:00:10.365 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-09-11 15:57:37.239 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-09-11 15:54:26.895 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 15:58:37.463 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-09-11 15:58:40.583 00:00:10.366 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502784, total packets: 1580, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-11 14:56:26 - 2025-09-11 15:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0031s Wall: 0.0022s flows/second: 76243.2 Runtime: 0.0022s