Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 00:58:46.121 00:00:10.363 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:59:04.540 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 12 6556 1 2025-09-14 00:59:46.521 00:00:10.367 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:00:04.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-09-14 01:00:46.929 00:00:10.345 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:01:04.985 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-09-14 01:01:47.316 00:00:10.359 TCP 23.104.0.1:34778 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:02:05.218 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-09-14 01:02:47.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:02:47.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:02:47.715 00:00:10.368 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:03:05.429 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-09-14 00:58:28.120 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:03:48.131 00:00:10.369 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:04:05.644 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49360 10 6452 1 2025-09-14 00:59:28.122 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:04:48.536 00:00:10.368 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:05:05.855 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48198 10 6452 1 2025-09-14 01:05:48.944 00:00:10.367 TCP 23.104.0.1:44860 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:06:06.092 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-09-14 01:06:49.349 00:00:10.392 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:07:06.260 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-09-14 01:07:48.255 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:07:47.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:07:49.777 00:00:10.370 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:08:06.474 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-09-14 01:08:50.184 00:00:10.375 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:09:06.686 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 6452 1 2025-09-14 01:09:50.595 00:00:10.364 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:10:06.856 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37264 10 6452 1 2025-09-14 01:05:28.121 00:06:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:10:50.993 00:00:10.371 TCP 23.104.0.1:45790 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:11:07.079 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49184 10 6452 1 2025-09-14 01:06:28.124 00:06:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:11:51.406 00:00:10.365 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:12:07.249 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51156 10 6452 1 2025-09-14 01:12:47.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:12:47.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:12:51.807 00:00:10.367 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:13:07.456 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 10 6452 1 2025-09-14 01:13:52.218 00:00:10.377 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:14:07.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-09-14 01:14:52.635 00:00:10.357 TCP 23.104.0.1:37926 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:15:07.884 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34740 10 6452 1 2025-09-14 01:15:53.036 00:00:10.365 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:16:08.089 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-09-14 01:16:53.439 00:00:10.324 TCP 23.104.0.1:50648 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:17:08.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2025-09-14 01:12:28.124 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:17:48.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:17:48.239 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:17:53.804 00:00:10.358 TCP 23.104.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:18:08.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42530 10 6452 1 2025-09-14 01:13:28.126 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:18:54.201 00:00:10.365 TCP 23.104.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:19:08.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39620 10 6452 1 2025-09-14 01:19:54.605 00:00:10.426 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:20:08.952 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57728 10 6452 1 2025-09-14 01:20:55.104 00:00:10.365 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:21:09.194 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-09-14 01:21:55.509 00:00:10.369 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:22:09.403 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49232 10 6452 1 2025-09-14 01:22:48.409 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:22:48.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:22:55.920 00:00:10.390 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:23:09.619 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59934 10 6452 1 2025-09-14 01:23:56.347 00:00:11.182 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:24:09.830 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50376 10 6452 1 2025-09-14 01:19:28.125 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:24:57.571 00:00:10.362 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:25:10.069 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-09-14 01:20:28.127 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:25:57.969 00:00:10.370 TCP 23.104.0.1:49842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:26:10.247 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-09-14 01:26:58.376 00:00:10.363 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:27:10.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35500 10 6452 1 2025-09-14 01:27:48.232 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:27:48.279 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:27:58.782 00:00:10.367 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:28:10.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53410 10 6452 1 2025-09-14 01:28:59.185 00:00:10.375 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:29:10.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-09-14 01:29:59.605 00:00:10.360 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:30:11.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-09-14 01:31:00.003 00:00:10.371 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:31:11.320 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45018 10 6452 1 2025-09-14 01:26:28.127 00:06:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:32:00.413 00:00:10.368 TCP 23.104.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:32:11.492 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36962 10 6452 1 2025-09-14 01:27:28.129 00:06:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:32:48.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:32:48.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:33:00.818 00:00:10.326 TCP 23.104.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:33:11.701 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57290 10 6452 1 2025-09-14 01:34:01.182 00:00:10.368 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:34:11.912 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60002 10 6452 1 2025-09-14 01:35:01.587 00:00:10.368 TCP 23.104.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:35:12.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-09-14 01:36:01.996 00:00:10.363 TCP 23.104.0.1:43206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:36:12.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-09-14 01:37:02.403 00:00:10.374 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:37:12.532 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57352 10 6452 1 2025-09-14 01:37:48.590 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:37:48.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:38:02.826 00:00:10.368 TCP 23.104.0.1:58268 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:38:12.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-09-14 01:33:28.128 00:06:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:39:03.240 00:00:10.366 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:39:12.960 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-09-14 01:34:28.131 00:06:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:40:03.663 00:00:10.366 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:40:13.146 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58854 10 6452 1 2025-09-14 01:41:04.105 00:00:10.365 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:41:13.361 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38184 10 6452 1 2025-09-14 01:42:04.509 00:00:10.366 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:42:13.531 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-09-14 01:42:48.786 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:42:48.359 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:43:04.912 00:00:10.363 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:43:13.746 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-09-14 01:44:05.312 00:00:10.365 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:44:13.963 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-09-14 01:45:05.718 00:00:10.375 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:45:14.170 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-09-14 01:40:28.132 00:06:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:46:06.133 00:00:10.367 TCP 23.104.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:46:14.378 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 10 6452 1 2025-09-14 01:41:28.134 00:06:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:47:06.537 00:00:10.322 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:47:14.550 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53636 10 6452 1 2025-09-14 01:47:48.553 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:47:48.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:48:06.893 00:00:10.335 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:48:14.765 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-09-14 01:49:07.266 00:00:10.329 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:49:14.979 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:37090 10 6452 1 2025-09-14 01:50:07.627 00:00:10.365 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:50:15.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-09-14 01:51:08.030 00:00:10.365 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:51:15.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-09-14 01:52:08.430 00:00:10.325 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:52:15.606 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-09-14 01:47:28.133 00:06:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:52:48.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:52:48.713 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:53:08.794 00:00:10.348 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:53:15.825 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49662 10 6452 1 2025-09-14 01:48:28.135 00:06:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 01:54:09.175 00:00:10.366 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:54:16.060 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-09-14 01:55:09.580 00:00:10.374 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:55:16.273 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55108 10 6452 1 2025-09-14 01:56:09.996 00:00:10.364 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:56:16.486 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33948 10 6452 1 2025-09-14 01:57:10.395 00:00:10.370 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:57:16.697 00:00:15.557 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 10 6452 1 2025-09-14 01:57:48.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 01:57:48.839 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 01:58:10.804 00:00:10.323 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:58:22.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 Summary: total flows: 160, total bytes: 497468, total packets: 1558, avg bps: 1104, avg pps: 0, avg bpp: 319 Time window: 2025-09-14 00:58:28 - 2025-09-14 01:58:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0031s User: 0.0010s Wall: 0.0015s flows/second: 106302.7 Runtime: 0.0015s