Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-05 01:58:45.122 00:00:10.329 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:58:58.448 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41152 10 6452 1 2025-09-05 01:55:23.798 00:05:00.676 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 01:59:45.514 00:00:10.324 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-09-05 01:59:58.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 10 6452 1 2025-09-05 02:00:45.876 00:00:10.400 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:00:58.872 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-09-05 02:01:46.320 00:00:10.375 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:01:59.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-09-05 02:02:46.737 00:00:10.367 TCP 23.104.0.1:47578 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:02:59.294 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-09-05 02:03:21.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:03:21.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:03:47.140 00:00:10.370 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:03:59.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-09-05 02:00:23.796 00:05:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:04:47.550 00:00:10.373 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:04:59.728 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6452 1 2025-09-05 02:01:23.800 00:05:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:05:47.960 00:00:10.371 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:05:59.942 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-09-05 02:06:48.363 00:00:10.365 TCP 23.104.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:07:00.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45816 10 6452 1 2025-09-05 02:07:48.769 00:00:10.324 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:08:00.351 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-09-05 02:08:22.184 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:08:22.057 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:08:49.129 00:00:10.369 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:09:00.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-09-05 02:09:49.529 00:00:10.665 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:10:00.784 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47886 10 6452 1 2025-09-05 02:06:23.800 00:05:00.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:10:50.229 00:00:10.363 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:11:00.959 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 12 6556 1 2025-09-05 02:07:23.800 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:11:50.632 00:00:10.366 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:12:01.200 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-09-05 02:12:51.032 00:00:10.393 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 15 1926 1 2025-09-05 02:13:01.412 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 12 10367 1 2025-09-05 02:13:22.315 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:13:22.222 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:13:51.468 00:00:10.325 TCP 23.104.0.1:38800 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:14:01.649 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 10 6452 1 2025-09-05 02:14:51.830 00:00:10.343 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:15:02.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6452 1 2025-09-05 02:15:52.213 00:00:10.360 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:16:02.251 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 10 6452 1 2025-09-05 02:12:23.801 00:05:00.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:16:52.613 00:00:10.369 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:17:02.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57108 10 6452 1 2025-09-05 02:13:23.803 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:17:53.021 00:00:10.323 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:18:02.818 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-09-05 02:18:22.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:18:22.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:18:53.391 00:00:10.366 TCP 23.104.0.1:55690 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:19:03.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47682 10 6452 1 2025-09-05 02:19:53.797 00:00:10.348 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:20:03.252 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-09-05 02:20:54.182 00:00:10.366 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:21:03.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-09-05 02:21:54.586 00:00:10.368 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:22:03.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6452 1 2025-09-05 02:18:23.802 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:22:54.986 00:00:10.327 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:23:03.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-09-05 02:23:22.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:19:23.805 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:23:22.341 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:23:55.356 00:00:10.650 TCP 23.104.0.1:41326 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:24:04.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-09-05 02:24:56.060 00:00:10.366 TCP 23.104.0.1:43206 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:25:04.320 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-09-05 02:25:56.465 00:00:10.322 TCP 23.104.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:26:04.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-09-05 02:26:56.827 00:00:10.391 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:27:04.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-09-05 02:27:57.256 00:00:10.325 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:28:04.956 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39212 10 6452 1 2025-09-05 02:28:22.449 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:28:22.494 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:24:23.805 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:28:57.618 00:00:10.370 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:29:05.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-09-05 02:25:23.807 00:05:00.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:29:58.054 00:00:10.324 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:30:05.349 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-09-05 02:30:58.419 00:00:10.369 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:31:05.931 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-09-05 02:31:58.844 00:00:10.386 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:32:06.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-09-05 02:32:59.269 00:00:10.327 TCP 23.104.0.1:33940 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:33:06.387 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 10 6452 1 2025-09-05 02:33:22.414 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:33:22.614 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:33:59.639 00:00:10.366 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:34:06.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45516 10 6452 1 2025-09-05 02:30:23.804 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:35:00.051 00:00:10.366 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:35:06.821 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-09-05 02:31:23.807 00:05:00.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:36:00.454 00:00:10.367 TCP 23.104.0.1:59384 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:36:07.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-09-05 02:37:00.885 00:00:10.398 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:37:07.255 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-09-05 02:38:01.320 00:00:10.332 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:38:07.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-09-05 02:38:22.805 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:38:22.621 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:39:01.691 00:00:10.326 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:39:07.684 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-09-05 02:40:02.062 00:00:10.320 TCP 23.104.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:40:07.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-09-05 02:36:23.807 00:05:00.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:41:02.417 00:00:10.328 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:41:08.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-09-05 02:37:23.810 00:05:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:42:02.780 00:00:10.324 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:42:08.326 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-09-05 02:43:03.135 00:00:10.369 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:43:08.535 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-09-05 02:43:22.821 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:43:22.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:44:03.539 00:00:10.324 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:44:08.710 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-09-05 02:45:03.906 00:00:10.371 TCP 23.104.0.1:47560 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:45:08.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-09-05 02:46:04.310 00:00:10.324 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:46:09.175 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-09-05 02:42:23.807 00:05:00.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:47:04.670 00:00:10.367 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:47:09.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-09-05 02:43:23.811 00:05:00.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:48:05.105 00:00:10.363 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:48:09.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46254 10 6452 1 2025-09-05 02:48:22.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:48:23.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:49:05.505 00:00:10.369 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:49:09.812 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54956 10 6452 1 2025-09-05 02:50:05.917 00:00:10.389 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:50:09.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-09-05 02:51:06.342 00:00:10.359 TCP 23.104.0.1:38132 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:51:10.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-09-05 02:52:10.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-09-05 02:52:06.743 00:00:10.368 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:48:23.809 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-05 02:53:07.149 00:00:10.362 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:53:10.639 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46678 10 6452 1 2025-09-05 02:53:22.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:49:23.813 00:05:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-05 02:53:22.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:54:07.551 00:00:10.377 TCP 23.104.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:54:10.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51732 10 6452 1 2025-09-05 02:55:07.973 00:00:10.378 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:55:11.090 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-09-05 02:56:11.265 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47858 10 6452 1 2025-09-05 02:56:08.389 00:00:10.367 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:57:11.441 00:00:10.490 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-09-05 02:57:08.794 00:00:10.344 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:58:09.177 00:00:10.368 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-09-05 02:58:23.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-05 02:58:11.971 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-09-05 02:58:23.093 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-05 02:54:23.812 00:05:00.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1047, avg pps: 0, avg bpp: 318 Time window: 2025-09-05 01:55:23 - 2025-09-05 02:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0020s Wall: 0.0021s flows/second: 77874.5 Runtime: 0.0021s