Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 03:58:42.176 00:00:10.370 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:58:55.892 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-09-17 03:59:17.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:59:18.179 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:59:42.582 00:00:10.364 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:59:56.114 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-09-17 03:56:29.504 00:05:01.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:00:42.984 00:00:10.513 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:00:56.377 00:00:10.831 TCP 1.101.0.1:3000 -> 22.102.0.1:54756 10 6452 1 2025-09-17 03:57:29.506 00:05:01.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:01:43.537 00:00:10.363 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:01:57.249 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 2025-09-17 04:02:43.936 00:00:10.339 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:02:57.467 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-09-17 04:03:44.328 00:00:10.366 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:03:57.688 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42642 10 6452 1 2025-09-17 04:04:18.047 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:04:18.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:04:44.734 00:00:10.458 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 15 1926 1 2025-09-17 04:04:57.907 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 12 10367 1 2025-09-17 04:05:45.236 00:00:10.378 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:05:58.149 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44976 10 6452 1 2025-09-17 04:02:29.506 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:06:45.654 00:00:10.368 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:06:58.360 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-09-17 04:03:29.508 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:07:46.087 00:00:10.365 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:07:58.574 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-09-17 04:08:46.493 00:00:10.367 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:08:58.783 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-09-17 04:09:18.495 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:09:18.543 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:09:46.899 00:00:10.362 TCP 23.104.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:09:59.010 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49426 10 6452 1 2025-09-17 04:10:47.301 00:00:10.365 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:10:59.228 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60816 10 6452 1 2025-09-17 04:11:47.714 00:00:10.378 TCP 23.104.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:11:59.457 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-09-17 04:08:29.507 00:05:01.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:12:48.135 00:00:10.364 TCP 23.104.0.1:40084 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:12:59.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36148 10 6452 1 2025-09-17 04:09:29.510 00:05:01.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:13:48.540 00:00:10.322 TCP 23.104.0.1:37688 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:13:59.885 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-09-17 04:14:18.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:14:18.112 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:14:48.899 00:00:10.370 TCP 23.104.0.1:57244 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:15:00.110 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-09-17 04:15:49.309 00:00:10.370 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:16:00.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-09-17 04:16:49.731 00:00:10.326 TCP 23.104.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:17:00.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-09-17 04:17:50.114 00:00:10.324 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:18:00.723 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52496 10 6452 1 2025-09-17 04:14:29.512 00:05:01.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:18:50.484 00:00:10.328 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:19:00.948 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:56742 11 6504 1 2025-09-17 04:19:18.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:19:18.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:15:29.514 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:19:50.847 00:00:10.387 TCP 23.104.0.1:58446 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:20:01.235 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-09-17 04:20:51.273 00:00:10.325 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:21:01.453 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:43022 10 6452 1 2025-09-17 04:21:51.638 00:00:10.370 TCP 23.104.0.1:57658 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:22:01.707 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-09-17 04:22:52.050 00:00:10.372 TCP 23.104.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:23:01.890 00:00:10.743 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-09-17 04:23:52.461 00:00:10.326 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:24:02.674 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6452 1 2025-09-17 04:24:18.688 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:24:18.669 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:20:29.515 00:05:01.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:24:52.826 00:00:10.393 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:25:02.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-09-17 04:21:29.517 00:05:01.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:25:53.258 00:00:10.361 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:26:03.110 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60508 10 6452 1 2025-09-17 04:26:53.652 00:00:10.362 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:27:03.274 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-09-17 04:27:54.066 00:00:10.365 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:28:03.487 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33440 10 6452 1 2025-09-17 04:28:54.469 00:00:10.366 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:29:03.659 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37452 10 6452 1 2025-09-17 04:29:18.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:29:18.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:29:54.869 00:00:10.324 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:30:03.833 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 10 6452 1 2025-09-17 04:26:29.517 00:05:01.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:30:55.230 00:00:10.373 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:31:04.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44342 10 6452 1 2025-09-17 04:27:29.518 00:05:01.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:31:55.637 00:00:10.323 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:32:04.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-09-17 04:32:56.001 00:00:10.364 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:33:04.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51010 10 6452 1 2025-09-17 04:33:56.403 00:00:10.320 TCP 23.104.0.1:34034 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:34:04.703 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 2025-09-17 04:34:18.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:34:18.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:34:56.759 00:00:10.335 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:35:04.920 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6452 1 2025-09-17 04:35:57.132 00:00:10.323 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:36:05.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-09-17 04:32:29.521 00:05:01.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:36:57.495 00:00:10.326 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:37:05.396 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-09-17 04:33:29.523 00:05:01.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:37:57.867 00:00:10.367 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:38:05.559 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-09-17 04:38:58.273 00:00:10.335 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:39:05.776 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-09-17 04:39:18.896 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:39:18.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:39:58.660 00:00:10.368 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:40:05.995 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-09-17 04:40:59.100 00:00:10.366 TCP 23.104.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:41:06.221 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47756 10 6452 1 2025-09-17 04:41:59.505 00:00:10.362 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:42:06.430 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-09-17 04:38:29.520 00:05:01.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:42:59.906 00:00:10.363 TCP 23.104.0.1:42552 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:43:06.654 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-09-17 04:39:29.524 00:05:01.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:44:00.317 00:00:10.361 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:44:19.016 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:44:19.032 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:44:06.864 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-09-17 04:45:00.718 00:00:10.374 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:45:07.089 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6452 1 2025-09-17 04:46:01.131 00:00:10.362 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:46:07.341 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-09-17 04:47:01.531 00:00:10.367 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:47:07.558 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-09-17 04:48:01.934 00:00:10.383 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:48:07.793 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46578 10 6452 1 2025-09-17 04:44:29.522 00:05:01.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:49:02.353 00:00:10.321 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:49:19.094 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:49:07.961 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-09-17 04:49:19.224 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:45:29.526 00:05:01.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:50:02.714 00:00:10.453 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 15 1926 1 2025-09-17 04:50:08.206 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 12 10365 1 2025-09-17 04:51:03.203 00:00:10.319 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:51:08.473 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-09-17 04:52:03.567 00:00:10.359 TCP 23.104.0.1:49748 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:52:08.653 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 11 6504 1 2025-09-17 04:53:03.973 00:00:10.370 TCP 23.104.0.1:36614 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:53:08.917 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-09-17 04:54:04.379 00:00:10.377 TCP 23.104.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:54:09.169 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-09-17 04:54:19.189 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:54:19.226 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 04:50:29.523 00:05:01.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 04:55:04.782 00:00:10.368 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:55:09.340 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-09-17 04:51:29.527 00:05:01.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 04:56:05.185 00:00:10.370 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:56:09.562 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35086 10 6452 1 2025-09-17 04:57:05.590 00:00:10.366 TCP 23.104.0.1:52212 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:57:09.783 00:00:10.371 TCP 1.101.0.1:3000 -> 22.102.0.1:50590 10 6452 1 2025-09-17 04:58:05.996 00:00:10.604 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:58:10.195 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54988 10 6452 1 Summary: total flows: 164, total bytes: 507118, total packets: 1586, avg bps: 1093, avg pps: 0, avg bpp: 319 Time window: 2025-09-17 03:56:29 - 2025-09-17 04:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 76455.0 Runtime: 0.0022s