Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 04:59:01.275 00:00:10.360 TCP 23.104.0.1:37442 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:59:34.972 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39982 12 10367 1 2025-09-15 05:00:01.677 00:00:10.458 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 15 1926 1 2025-09-15 04:56:28.612 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:00:35.214 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-09-15 05:01:02.174 00:00:10.373 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:57:28.614 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:01:35.431 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-09-15 05:02:02.585 00:00:10.324 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:02:35.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-09-15 05:03:21.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:03:02.948 00:00:10.370 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:03:21.453 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:03:35.811 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-09-15 05:04:03.356 00:00:10.324 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:04:36.033 00:00:10.976 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-09-15 05:05:03.717 00:00:10.381 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:05:37.072 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-09-15 05:06:04.138 00:00:10.398 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:02:28.614 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:06:37.277 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-09-15 05:07:04.605 00:00:10.370 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:03:28.616 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:07:37.501 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-09-15 05:08:21.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:08:05.011 00:00:10.367 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:08:21.517 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:08:37.735 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-09-15 05:09:05.418 00:00:10.368 TCP 23.104.0.1:55240 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:09:37.976 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-09-15 05:10:05.832 00:00:10.394 TCP 23.104.0.1:38928 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:10:38.231 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53010 10 6452 1 2025-09-15 05:11:06.260 00:00:10.369 TCP 23.104.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:11:38.457 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35100 10 6452 1 2025-09-15 05:12:06.666 00:00:10.364 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:08:28.614 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:12:38.673 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57654 10 6452 1 2025-09-15 05:13:21.951 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:13:07.093 00:00:10.370 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:13:21.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:09:28.617 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:13:38.895 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49522 10 6452 1 2025-09-15 05:14:07.501 00:00:10.372 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:14:39.120 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50176 10 6452 1 2025-09-15 05:15:07.913 00:00:10.367 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:15:39.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-09-15 05:16:08.315 00:00:24.430 TCP 23.104.0.1:46626 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:16:39.555 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-09-15 05:17:22.795 00:00:10.344 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:17:39.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6452 1 2025-09-15 05:18:21.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:18:21.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:14:28.615 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:18:23.178 00:00:10.370 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:18:39.949 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:39812 10 6452 1 2025-09-15 05:15:28.617 00:05:00.967 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:19:23.581 00:00:10.443 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 15 1926 1 2025-09-15 05:19:40.145 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 12 10365 1 2025-09-15 05:20:24.095 00:00:10.357 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:20:40.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41614 10 6452 1 2025-09-15 05:21:24.490 00:00:10.363 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:21:40.596 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-15 05:22:24.892 00:00:10.376 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:22:40.766 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-09-15 05:23:21.843 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:23:22.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:23:25.307 00:00:10.370 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:23:40.986 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-09-15 05:20:28.618 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:24:25.714 00:00:10.366 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:24:41.219 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-09-15 05:21:28.622 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:25:26.119 00:00:10.364 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:25:41.406 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-09-15 05:26:26.522 00:00:10.361 TCP 23.104.0.1:47202 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:26:41.583 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6452 1 2025-09-15 05:27:26.929 00:00:10.383 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:27:41.799 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-09-15 05:28:22.219 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:28:22.110 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:28:27.355 00:00:10.329 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:28:42.039 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-09-15 05:29:27.727 00:00:10.373 TCP 23.104.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:29:42.259 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-09-15 05:26:28.619 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:30:28.138 00:00:10.367 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:30:42.476 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-09-15 05:27:28.626 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:31:28.545 00:00:10.359 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:31:42.685 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37956 10 6452 1 2025-09-15 05:32:28.948 00:00:10.369 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:32:42.898 00:00:10.691 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-09-15 05:33:22.061 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:33:22.231 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:33:29.354 00:00:10.364 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:33:43.625 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6452 1 2025-09-15 05:34:29.758 00:00:10.383 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:34:43.848 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-09-15 05:35:30.182 00:00:10.360 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:35:44.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-09-15 05:32:28.624 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:36:30.580 00:00:10.321 TCP 23.104.0.1:41590 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:36:44.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45916 10 6452 1 2025-09-15 05:33:28.626 00:05:00.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:37:30.941 00:00:10.362 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:37:44.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-09-15 05:38:22.223 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:38:22.166 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:38:31.341 00:00:10.362 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:38:44.744 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-09-15 05:39:31.742 00:00:10.359 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:39:44.965 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 12 6556 1 2025-09-15 05:40:32.140 00:00:10.376 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:40:45.194 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-09-15 05:41:32.554 00:00:10.360 TCP 23.104.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:41:45.414 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33488 10 6452 1 2025-09-15 05:38:28.625 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:42:32.959 00:00:10.364 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:42:45.634 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-09-15 05:43:22.377 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:43:22.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:39:28.627 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:43:33.359 00:00:10.368 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:43:45.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-09-15 05:44:33.767 00:00:10.374 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:44:46.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-09-15 05:45:34.180 00:00:10.362 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:45:46.247 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46130 10 6452 1 2025-09-15 05:46:34.585 00:00:10.326 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:46:46.485 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43928 10 6452 1 2025-09-15 05:47:34.948 00:00:10.393 TCP 23.104.0.1:33872 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:47:46.656 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-09-15 05:48:22.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:48:22.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:44:28.625 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:48:35.377 00:00:10.367 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:48:46.879 00:00:10.584 TCP 1.101.0.1:3000 -> 22.102.0.1:50792 10 6452 1 2025-09-15 05:45:28.628 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:49:35.786 00:00:10.364 TCP 23.104.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:49:47.510 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-09-15 05:50:36.190 00:00:10.368 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:50:47.677 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-09-15 05:51:36.596 00:00:10.369 TCP 23.104.0.1:35676 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:51:47.897 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:39692 10 6452 1 2025-09-15 05:52:37.008 00:00:10.737 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:52:48.237 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6452 1 2025-09-15 05:53:22.566 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:53:22.599 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:53:37.784 00:00:10.380 TCP 23.104.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:53:48.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-09-15 05:50:28.628 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 05:54:38.201 00:00:10.360 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:54:48.690 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34546 10 6452 1 2025-09-15 05:51:28.631 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 05:55:38.601 00:00:10.366 TCP 23.104.0.1:47212 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:55:48.904 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-09-15 05:56:39.006 00:00:10.324 TCP 23.104.0.1:33270 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:56:49.117 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56636 10 6452 1 2025-09-15 05:57:39.367 00:00:10.367 TCP 23.104.0.1:52772 -> 1.101.0.1:3000 11 1507 1 2025-09-15 05:57:49.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-09-15 05:58:22.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 05:58:22.841 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 05:58:39.770 00:00:10.372 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500666, total packets: 1576, avg bps: 1070, avg pps: 0, avg bpp: 317 Time window: 2025-09-15 04:56:28 - 2025-09-15 05:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0008s Wall: 0.0020s flows/second: 82869.3 Runtime: 0.0020s