Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 06:59:14.631 00:00:10.362 TCP 23.104.0.1:50756 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:59:28.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52450 10 6452 1 2025-09-14 07:00:15.034 00:00:10.367 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:56:28.208 00:05:00.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:00:29.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-09-14 07:01:15.440 00:00:10.365 TCP 23.104.0.1:44722 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:57:28.212 00:05:00.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:01:29.427 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-09-14 07:02:15.843 00:00:10.387 TCP 23.104.0.1:45714 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:02:29.653 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-09-14 07:02:54.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:02:55.066 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:03:16.283 00:00:10.366 TCP 23.104.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:03:29.877 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-09-14 07:04:16.691 00:00:10.325 TCP 23.104.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:04:30.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53612 10 6452 1 2025-09-14 07:05:17.056 00:00:10.377 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:05:30.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-09-14 07:02:28.211 00:05:00.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:06:17.470 00:00:10.364 TCP 23.104.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:06:30.513 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-09-14 07:03:28.214 00:05:00.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:07:17.872 00:00:10.362 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:07:30.691 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34796 10 6452 1 2025-09-14 07:07:55.198 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:07:55.597 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:08:18.272 00:00:10.369 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:08:30.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36600 10 6452 1 2025-09-14 07:09:18.678 00:00:10.365 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:09:31.115 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-09-14 07:10:19.100 00:00:10.363 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:10:31.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-09-14 07:11:19.503 00:00:10.366 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:11:31.546 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-09-14 07:12:19.905 00:00:10.368 TCP 23.104.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:08:28.212 00:05:00.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:12:31.760 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42828 10 6452 1 2025-09-14 07:12:55.406 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:12:55.272 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:09:28.214 00:05:00.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:13:20.311 00:00:10.364 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:13:32.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-09-14 07:14:20.712 00:00:10.375 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:14:32.226 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-09-14 07:15:21.126 00:00:10.363 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:15:32.456 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-09-14 07:16:21.528 00:00:10.366 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:16:32.675 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36016 10 6452 1 2025-09-14 07:17:21.939 00:00:10.336 TCP 23.104.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:17:32.898 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 10 6452 1 2025-09-14 07:17:55.531 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:17:55.458 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:14:28.213 00:05:00.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:18:22.315 00:00:10.368 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:18:33.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-09-14 07:15:28.215 00:05:00.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:19:22.714 00:00:10.325 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:19:33.385 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36554 10 6452 1 2025-09-14 07:20:23.104 00:00:10.374 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:20:33.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-09-14 07:21:23.505 00:00:10.361 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:21:33.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-09-14 07:22:23.905 00:00:10.363 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:22:34.048 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39736 10 6452 1 2025-09-14 07:22:55.285 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:22:55.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:23:24.306 00:00:10.364 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:23:34.266 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-09-14 07:20:28.219 00:05:00.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:24:24.705 00:00:10.390 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 15 1926 1 2025-09-14 07:24:34.486 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 12 10365 1 2025-09-14 07:21:28.222 00:05:00.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:25:25.137 00:00:10.366 TCP 23.104.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:25:34.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-09-14 07:26:25.543 00:00:10.358 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:26:34.940 00:00:10.434 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-09-14 07:27:25.937 00:00:10.375 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:27:35.413 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-09-14 07:27:56.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:27:56.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:28:26.349 00:00:10.368 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:28:35.631 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54498 10 6452 1 2025-09-14 07:29:26.756 00:00:10.375 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:29:35.847 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57648 10 6452 1 2025-09-14 07:26:28.222 00:05:00.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:30:27.173 00:00:10.372 TCP 23.104.0.1:44344 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:30:36.027 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33768 10 6452 1 2025-09-14 07:27:28.224 00:05:00.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:31:27.589 00:00:10.324 TCP 23.104.0.1:56858 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:31:36.200 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-09-14 07:32:27.955 00:00:10.388 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:32:36.410 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-09-14 07:32:55.746 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:32:55.434 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:33:28.379 00:00:11.031 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:33:36.626 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-09-14 07:34:29.453 00:00:10.367 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:34:36.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-09-14 07:35:29.857 00:00:10.381 TCP 23.104.0.1:41664 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:35:37.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39790 10 6452 1 2025-09-14 07:32:28.221 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:36:30.272 00:00:10.366 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:36:37.298 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-09-14 07:33:28.224 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:37:30.672 00:00:10.361 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:37:37.534 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-09-14 07:37:55.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:37:55.779 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:38:31.099 00:00:10.366 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:38:37.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6452 1 2025-09-14 07:39:31.508 00:00:10.359 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:39:37.946 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-09-14 07:40:31.906 00:00:10.326 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:40:38.189 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37620 10 6452 1 2025-09-14 07:41:32.273 00:00:10.327 TCP 23.104.0.1:55558 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:41:38.410 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-09-14 07:38:28.222 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:42:32.633 00:00:10.370 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:42:38.630 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-09-14 07:42:55.914 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:42:55.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:39:28.225 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:43:33.048 00:00:10.393 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:43:38.809 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-09-14 07:44:33.477 00:00:10.367 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:44:39.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-09-14 07:45:33.881 00:00:10.387 TCP 23.104.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:45:39.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-09-14 07:46:34.309 00:00:10.369 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:46:39.426 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38246 10 6452 1 2025-09-14 07:47:34.708 00:00:10.386 TCP 23.104.0.1:48472 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:47:55.994 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:47:39.595 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-09-14 07:47:56.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:44:28.223 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:48:35.128 00:00:11.107 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:48:39.804 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-09-14 07:45:28.227 00:05:00.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:49:36.268 00:00:10.363 TCP 23.104.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:49:39.976 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 10 6452 1 2025-09-14 07:50:36.674 00:00:10.332 TCP 23.104.0.1:60608 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:50:40.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-09-14 07:51:37.064 00:00:10.365 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:51:40.425 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-09-14 07:52:37.468 00:00:10.368 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:52:40.601 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 2025-09-14 07:52:56.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:52:56.215 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:53:40.824 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 10 6452 1 2025-09-14 07:53:37.871 00:00:10.373 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:50:28.227 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 07:54:38.277 00:00:10.329 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:54:41.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58350 10 6452 1 2025-09-14 07:51:28.229 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 07:55:41.291 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-09-14 07:55:38.646 00:00:10.377 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:56:41.511 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-09-14 07:56:39.047 00:00:10.363 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:57:39.451 00:00:10.361 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 07:57:55.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 07:57:41.729 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-09-14 07:57:56.267 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 07:58:39.857 00:00:10.333 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496228, total packets: 1568, avg bps: 1060, avg pps: 0, avg bpp: 316 Time window: 2025-09-14 06:56:28 - 2025-09-14 07:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0008s Wall: 0.0023s flows/second: 71141.7 Runtime: 0.0023s