Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 08:58:43.940 00:00:10.381 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-09-13 08:59:07.751 00:00:10.273 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-09-13 08:59:44.355 00:00:10.366 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:00:08.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-09-13 09:00:44.757 00:00:10.883 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:01:08.305 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-09-13 08:57:27.755 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 08:57:27.757 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:01:45.675 00:00:10.373 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:02:08.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-09-13 09:02:28.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:02:28.611 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:02:46.102 00:00:10.358 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:03:08.738 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-09-13 09:03:46.499 00:00:10.367 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:04:08.955 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:33178 10 6452 1 2025-09-13 09:04:46.901 00:00:10.362 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:05:09.588 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60896 10 6452 1 2025-09-13 09:05:47.301 00:00:10.847 TCP 23.104.0.1:52412 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:06:09.810 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-09-13 09:06:48.189 00:00:10.364 TCP 23.104.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:07:09.993 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:47302 10 6452 1 2025-09-13 09:07:28.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:03:27.758 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:07:28.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:03:27.755 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:07:48.590 00:00:10.364 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:08:10.413 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-09-13 09:08:48.992 00:00:10.371 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:09:10.631 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34946 10 6452 1 2025-09-13 09:09:49.398 00:00:11.100 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:10:10.801 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-09-13 09:10:50.548 00:00:10.365 TCP 23.104.0.1:32768 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:11:11.022 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2025-09-13 09:11:50.954 00:00:10.385 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:12:11.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52418 10 6452 1 2025-09-13 09:12:28.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:12:28.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:12:51.380 00:00:10.361 TCP 23.104.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:13:11.531 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-09-13 09:09:27.760 00:05:00.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:09:27.763 00:05:00.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:13:51.782 00:00:10.371 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:14:11.743 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-09-13 09:14:52.193 00:00:10.369 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:15:11.918 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-09-13 09:15:52.600 00:00:10.362 TCP 23.104.0.1:44104 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:16:12.169 00:00:10.781 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-09-13 09:16:53.003 00:00:10.363 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:17:12.989 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-09-13 09:17:28.751 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:17:28.857 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:17:53.408 00:00:10.368 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:18:13.172 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-09-13 09:18:53.812 00:00:10.368 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:19:13.391 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45822 10 6452 1 2025-09-13 09:15:27.763 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:15:27.762 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:19:54.221 00:00:10.365 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:20:13.610 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-13 09:20:54.623 00:00:10.520 TCP 23.104.0.1:42642 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:21:13.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 10 6452 1 2025-09-13 09:21:55.180 00:00:10.357 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:22:14.015 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-09-13 09:22:29.001 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:22:29.056 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:22:55.580 00:00:10.363 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:23:14.237 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6452 1 2025-09-13 09:23:55.983 00:00:10.336 TCP 23.104.0.1:38828 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:24:14.452 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38294 10 6452 1 2025-09-13 09:24:56.365 00:00:10.366 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:25:14.656 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6452 1 2025-09-13 09:21:27.761 00:05:00.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:21:27.765 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:25:56.763 00:00:10.373 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:26:14.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-09-13 09:26:57.182 00:00:10.323 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:27:15.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-09-13 09:27:28.999 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:27:29.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:27:57.545 00:00:10.368 TCP 23.104.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:28:15.316 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-09-13 09:28:57.954 00:00:10.371 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:29:15.491 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 10 6452 1 2025-09-13 09:29:58.360 00:00:10.376 TCP 23.104.0.1:43042 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:30:15.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-09-13 09:30:58.770 00:00:10.372 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:31:16.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34786 10 6452 1 2025-09-13 09:27:27.766 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:27:27.764 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:31:59.182 00:00:10.327 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:32:16.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-09-13 09:32:29.358 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:32:29.217 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:32:59.548 00:00:10.366 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:33:16.527 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6452 1 2025-09-13 09:33:59.951 00:00:10.370 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:34:16.745 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6452 1 2025-09-13 09:35:00.356 00:00:10.367 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:35:16.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-09-13 09:36:00.755 00:00:10.383 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:36:17.138 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-09-13 09:37:01.176 00:00:10.364 TCP 23.104.0.1:54870 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:37:29.396 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:33:27.765 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:37:17.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-09-13 09:37:29.223 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:33:27.767 00:05:00.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:38:01.580 00:00:10.403 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:38:17.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-09-13 09:39:02.024 00:00:10.365 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:39:17.786 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-09-13 09:40:02.427 00:00:10.364 TCP 23.104.0.1:46748 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:40:18.000 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-09-13 09:41:02.827 00:00:10.392 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:41:18.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-09-13 09:42:03.260 00:00:10.367 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:42:29.534 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:42:18.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40410 10 6452 1 2025-09-13 09:42:29.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:43:03.665 00:00:10.365 TCP 23.104.0.1:55134 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:43:18.643 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-09-13 09:39:27.767 00:05:00.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:39:27.770 00:05:00.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:44:04.092 00:00:10.413 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:44:18.867 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-09-13 09:45:04.550 00:00:10.367 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:45:19.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-09-13 09:46:04.959 00:00:10.325 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:46:19.305 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44594 10 6452 1 2025-09-13 09:47:05.321 00:00:10.364 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:47:29.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:47:19.477 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-09-13 09:47:29.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:48:05.723 00:00:10.369 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:48:19.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-09-13 09:49:06.136 00:00:10.359 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:45:27.775 00:05:00.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:49:19.906 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50976 10 6452 1 2025-09-13 09:45:27.772 00:05:00.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:50:06.531 00:00:10.372 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:50:20.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-09-13 09:51:06.944 00:00:10.374 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:51:20.336 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-09-13 09:52:07.356 00:00:10.356 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:52:29.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:52:20.560 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-09-13 09:52:30.144 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:53:07.753 00:00:10.377 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:53:20.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-09-13 09:54:08.169 00:00:10.367 TCP 23.104.0.1:46344 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:54:20.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55600 10 6452 1 2025-09-13 09:55:08.574 00:00:10.341 TCP 23.104.0.1:60204 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:51:27.777 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-13 09:51:27.774 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-13 09:55:21.211 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48734 10 6452 1 2025-09-13 09:56:08.955 00:00:10.364 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:56:21.422 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-09-13 09:57:09.359 00:00:10.366 TCP 23.104.0.1:47774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:57:21.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2025-09-13 09:57:29.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 09:57:29.499 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 09:58:09.763 00:00:10.365 TCP 23.104.0.1:37866 -> 1.101.0.1:3000 11 1507 1 2025-09-13 09:58:21.863 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1088, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 08:57:27 - 2025-09-13 09:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0008s Wall: 0.0026s flows/second: 62194.0 Runtime: 0.0027s