Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 00:59:19.591 00:00:10.516 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 17 2241 1 2025-09-15 00:59:31.916 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 14 14278 1 2025-09-15 01:00:20.146 00:00:10.322 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:56:28.531 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:00:32.186 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-09-15 00:57:28.533 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:01:20.506 00:00:10.336 TCP 23.104.0.1:51296 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:01:32.359 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-09-15 01:02:20.880 00:00:10.396 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:02:32.571 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-09-15 01:03:16.868 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:03:16.883 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:03:21.317 00:00:10.322 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:03:32.793 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-09-15 01:04:21.679 00:00:10.368 TCP 23.104.0.1:42490 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:04:33.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-09-15 01:05:22.103 00:00:10.949 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:05:33.232 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59950 10 6452 1 2025-09-15 01:02:28.532 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:06:23.106 00:00:10.366 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:06:33.438 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37724 10 6452 1 2025-09-15 01:03:28.534 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:07:23.513 00:00:10.366 TCP 23.104.0.1:49760 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:07:33.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58724 10 6452 1 2025-09-15 01:08:16.890 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:08:16.617 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:08:23.919 00:00:10.383 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:08:33.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40416 10 6452 1 2025-09-15 01:09:24.337 00:00:10.369 TCP 23.104.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:09:34.064 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-09-15 01:10:24.746 00:00:10.366 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:10:34.334 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-09-15 01:11:25.152 00:00:10.364 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:11:34.551 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-09-15 01:08:28.534 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:12:25.555 00:00:10.367 TCP 23.104.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:12:34.766 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60562 10 6452 1 2025-09-15 01:13:17.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:13:17.517 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:09:28.536 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:13:25.963 00:00:10.364 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:13:34.981 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-09-15 01:14:26.367 00:00:10.368 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:14:35.238 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-09-15 01:15:26.777 00:00:10.363 TCP 23.104.0.1:48934 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:15:35.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-09-15 01:16:27.180 00:00:10.324 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:16:35.661 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6452 1 2025-09-15 01:17:27.542 00:00:10.364 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:17:35.871 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-09-15 01:18:17.457 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:18:17.296 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:14:28.535 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:18:27.950 00:00:10.392 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:18:36.105 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-09-15 01:15:28.536 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:19:28.395 00:00:10.560 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:19:36.312 00:00:10.687 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-09-15 01:20:29.004 00:00:10.366 TCP 23.104.0.1:53394 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:20:37.051 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-09-15 01:21:29.404 00:00:10.371 TCP 23.104.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:21:37.262 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-09-15 01:22:29.813 00:00:10.361 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:22:37.479 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36692 10 6452 1 2025-09-15 01:23:17.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:23:17.181 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:23:30.216 00:00:10.331 TCP 23.104.0.1:45564 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:23:37.694 00:00:10.493 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 2025-09-15 01:20:28.536 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:24:30.582 00:00:10.364 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:24:38.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-09-15 01:21:28.538 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:25:30.987 00:00:10.369 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:25:38.451 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-09-15 01:26:31.396 00:00:10.421 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:26:38.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-09-15 01:27:31.859 00:00:10.377 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:27:38.901 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-09-15 01:28:17.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:28:17.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:28:32.276 00:00:10.368 TCP 23.104.0.1:37572 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:28:39.119 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-09-15 01:29:32.682 00:00:10.338 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:29:39.327 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-09-15 01:26:28.539 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:30:33.103 00:00:10.919 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:30:39.551 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-09-15 01:27:28.542 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:31:34.096 00:00:10.364 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:31:39.760 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59928 10 6452 1 2025-09-15 01:32:34.496 00:00:10.372 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:32:39.932 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:57496 10 6452 1 2025-09-15 01:33:17.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:33:17.251 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:33:34.899 00:00:10.375 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:33:40.134 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:44734 10 6452 1 2025-09-15 01:34:35.310 00:00:10.328 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:34:40.867 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-09-15 01:35:35.674 00:00:10.371 TCP 23.104.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:35:41.085 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35796 10 6452 1 2025-09-15 01:32:28.540 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:36:36.109 00:00:10.379 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:36:41.308 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57062 10 6452 1 2025-09-15 01:33:28.543 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:37:36.544 00:00:10.366 TCP 23.104.0.1:39950 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:37:41.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 10 6452 1 2025-09-15 01:38:17.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:38:17.276 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:38:36.947 00:00:10.374 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:38:41.730 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6452 1 2025-09-15 01:39:37.357 00:00:10.375 TCP 23.104.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:39:42.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-09-15 01:40:37.760 00:00:10.335 TCP 23.104.0.1:40152 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:40:42.359 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-09-15 01:41:38.129 00:00:10.361 TCP 23.104.0.1:46624 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:41:42.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-09-15 01:38:28.542 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:42:38.530 00:00:10.368 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:42:42.831 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-09-15 01:43:17.807 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:43:17.580 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:39:28.544 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:43:38.935 00:00:10.380 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:43:43.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52498 10 6452 1 2025-09-15 01:44:39.354 00:00:10.363 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:44:43.293 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-09-15 01:45:39.757 00:00:10.373 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:45:43.512 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-09-15 01:46:40.168 00:00:10.362 TCP 23.104.0.1:45928 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:46:43.733 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-09-15 01:47:40.568 00:00:10.362 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:47:43.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38038 10 6452 1 2025-09-15 01:48:17.593 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:48:17.424 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:44:28.546 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:48:40.971 00:00:11.246 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:48:44.184 00:00:11.053 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-09-15 01:45:28.548 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:49:45.273 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-09-15 01:49:42.256 00:00:10.364 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:50:45.488 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46114 10 6452 1 2025-09-15 01:50:42.660 00:00:10.365 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:51:45.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-09-15 01:51:43.093 00:00:10.364 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:52:43.496 00:00:10.361 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:52:45.880 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-09-15 01:53:17.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 01:53:17.562 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:53:46.077 00:00:10.849 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-15 01:53:43.898 00:00:10.593 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:50:28.547 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 01:54:44.526 00:00:10.366 TCP 23.104.0.1:50454 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:54:46.968 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-09-15 01:51:28.551 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 01:55:44.930 00:00:10.380 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:55:47.156 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-09-15 01:56:45.347 00:00:10.367 TCP 23.104.0.1:50844 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:56:47.367 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-09-15 01:57:45.755 00:00:10.352 TCP 23.104.0.1:52182 -> 1.101.0.1:3000 11 1507 1 2025-09-15 01:57:47.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-09-15 01:58:17.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 01:58:17.719 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 498949, total packets: 1561, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-09-15 00:56:28 - 2025-09-15 01:58:17 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0026s Wall: 0.0025s flows/second: 65796.2 Runtime: 0.0025s