Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 01:58:56.989 00:00:10.367 TCP 23.104.0.1:48432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 01:59:06.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-09-12 01:54:27.134 00:06:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 01:59:57.398 00:00:10.367 TCP 23.104.0.1:35858 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:00:06.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-09-12 01:55:27.130 00:06:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:00:57.801 00:00:10.334 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:01:06.953 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 12 6556 1 2025-09-12 02:01:51.315 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:01:51.414 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:01:58.169 00:00:10.324 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:02:07.196 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58840 10 6452 1 2025-09-12 02:02:58.534 00:00:10.364 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:03:07.368 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37630 10 6452 1 2025-09-12 02:03:58.943 00:00:10.368 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:04:07.583 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-09-12 02:04:59.351 00:00:10.367 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:05:07.793 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-09-12 02:05:59.758 00:00:10.389 TCP 23.104.0.1:49146 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:06:08.010 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-09-12 02:01:27.135 00:06:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:06:51.217 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:06:51.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:07:00.184 00:00:10.368 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:07:08.218 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54568 10 6452 1 2025-09-12 02:02:27.133 00:06:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:08:00.591 00:00:10.373 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:08:08.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-09-12 02:09:01.007 00:00:10.318 TCP 23.104.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:09:08.642 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-09-12 02:10:01.362 00:00:10.368 TCP 23.104.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:10:08.857 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-09-12 02:11:01.774 00:00:10.372 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:11:09.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32916 10 6452 1 2025-09-12 02:11:51.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:11:51.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:12:02.185 00:00:10.368 TCP 23.104.0.1:58024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:12:09.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6452 1 2025-09-12 02:13:02.591 00:00:10.368 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:13:09.524 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-09-12 02:08:27.137 00:06:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:14:02.997 00:00:10.326 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:14:09.725 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-09-12 02:09:27.135 00:06:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:15:03.361 00:00:11.050 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:15:09.938 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-09-12 02:16:04.450 00:00:10.326 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:16:10.184 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-09-12 02:16:51.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:16:51.654 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:17:04.814 00:00:10.346 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:17:10.364 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-09-12 02:18:05.206 00:00:10.368 TCP 23.104.0.1:53296 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:18:10.578 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-09-12 02:19:05.610 00:00:10.364 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:19:10.799 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42858 10 6452 1 2025-09-12 02:20:06.017 00:00:10.372 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:20:11.024 00:00:10.333 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 11 6504 1 2025-09-12 02:15:27.138 00:06:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:21:06.422 00:00:10.363 TCP 23.104.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:21:11.429 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38668 10 6452 1 2025-09-12 02:16:27.137 00:06:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:21:51.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:21:51.707 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:22:11.648 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52622 10 6452 1 2025-09-12 02:22:06.829 00:00:10.366 TCP 23.104.0.1:43892 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:23:07.233 00:00:10.362 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:23:11.865 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38916 10 6452 1 2025-09-12 02:24:07.637 00:00:10.325 TCP 23.104.0.1:35696 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:24:12.093 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-09-12 02:25:07.998 00:00:10.365 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:25:12.305 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 10 6452 1 2025-09-12 02:26:08.394 00:00:10.366 TCP 23.104.0.1:42586 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:26:12.529 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 12 6556 1 2025-09-12 02:26:51.932 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:26:52.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:27:08.795 00:00:10.373 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:27:12.751 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-09-12 02:22:27.141 00:06:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:28:09.206 00:00:10.364 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:28:12.928 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-09-12 02:23:27.137 00:06:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:29:09.605 00:00:10.369 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:29:13.169 00:00:10.751 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-09-12 02:30:10.010 00:00:10.361 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:30:13.960 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-09-12 02:31:10.412 00:00:10.369 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:31:14.179 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35764 10 6452 1 2025-09-12 02:31:51.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:31:51.882 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:32:10.822 00:00:10.368 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:32:14.405 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-09-12 02:33:11.226 00:00:10.374 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:33:14.618 00:00:10.395 TCP 1.101.0.1:3000 -> 22.102.0.1:52526 10 6452 1 2025-09-12 02:34:15.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-09-12 02:34:11.640 00:00:10.667 TCP 23.104.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:29:27.141 00:06:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:35:15.282 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-09-12 02:35:12.348 00:00:10.365 TCP 23.104.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:30:27.142 00:06:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:36:15.495 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58840 10 6452 1 2025-09-12 02:36:12.747 00:00:10.584 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:36:51.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:36:51.993 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:37:13.371 00:00:10.359 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:37:15.708 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-09-12 02:38:15.932 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:58784 10 6452 1 2025-09-12 02:38:13.771 00:00:10.378 TCP 23.104.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:39:14.185 00:00:10.367 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:39:16.219 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41812 10 6452 1 2025-09-12 02:40:16.451 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-09-12 02:40:14.589 00:00:10.366 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:41:16.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39530 10 6452 1 2025-09-12 02:41:14.990 00:00:10.370 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:36:27.143 00:06:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:41:52.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:41:52.107 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:42:15.396 00:00:10.367 TCP 23.104.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:42:16.886 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-09-12 02:37:27.141 00:06:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:43:15.798 00:00:10.364 TCP 23.104.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:43:17.112 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44986 12 10367 1 2025-09-12 02:44:16.204 00:00:10.446 TCP 23.104.0.1:48838 -> 1.101.0.1:3000 15 1926 1 2025-09-12 02:44:17.349 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41704 10 6452 1 2025-09-12 02:45:17.525 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37536 10 6452 1 2025-09-12 02:45:16.686 00:00:10.368 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:46:17.107 00:00:10.368 TCP 23.104.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:46:17.736 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 10 6452 1 2025-09-12 02:46:52.134 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:46:52.480 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:47:17.513 00:00:10.365 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:47:17.947 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-09-12 02:48:18.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-09-12 02:43:27.147 00:06:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:48:17.918 00:00:10.369 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:49:18.325 00:00:10.660 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:49:18.403 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:38910 10 6452 1 2025-09-12 02:44:27.143 00:06:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:50:18.923 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2025-09-12 02:50:19.029 00:00:10.376 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:51:19.440 00:00:10.329 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:51:19.189 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54184 10 6452 1 2025-09-12 02:51:52.346 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:51:52.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:52:19.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45530 10 6452 1 2025-09-12 02:52:19.801 00:00:10.367 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:53:20.204 00:00:10.366 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:53:19.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-09-12 02:54:19.838 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-09-12 02:54:20.603 00:00:10.367 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:55:20.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-09-12 02:50:27.148 00:06:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 02:55:21.015 00:00:10.373 TCP 23.104.0.1:37374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:56:21.422 00:00:10.368 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:56:20.282 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-09-12 02:51:27.146 00:06:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 02:56:52.426 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 02:56:52.573 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 02:57:20.454 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-09-12 02:57:21.825 00:00:10.370 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-09-12 02:58:20.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-09-12 02:58:22.231 00:00:10.365 TCP 23.104.0.1:54578 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503680, total packets: 1595, avg bps: 1047, avg pps: 0, avg bpp: 315 Time window: 2025-09-12 01:54:27 - 2025-09-12 02:58:32 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0010s Wall: 0.0021s flows/second: 77583.6 Runtime: 0.0021s