Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 04:59:06.637 00:00:10.328 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-09-17 04:59:19.246 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 04:59:10.413 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36454 10 6452 1 2025-09-17 04:59:19.092 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:00:07.002 00:00:10.398 TCP 23.104.0.1:53286 -> 1.101.0.1:3000 15 1926 1 2025-09-17 05:00:10.636 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 12 10367 1 2025-09-17 04:56:29.526 00:05:01.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:01:07.436 00:00:10.363 TCP 23.104.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:01:10.878 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53676 10 6452 1 2025-09-17 04:57:29.528 00:05:01.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:02:11.081 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-09-17 05:02:07.839 00:00:10.384 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:03:08.261 00:00:10.365 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:03:11.258 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-09-17 05:04:08.665 00:00:10.819 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:04:19.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:04:11.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2025-09-17 05:04:19.487 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:05:11.681 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40246 10 6452 1 2025-09-17 05:05:09.527 00:00:10.365 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:06:09.930 00:00:10.378 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:06:11.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48076 10 6452 1 2025-09-17 05:02:29.533 00:05:01.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:07:10.352 00:00:10.405 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:07:12.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-09-17 05:03:29.534 00:05:01.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:08:10.849 00:00:10.336 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:08:12.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50742 10 6452 1 2025-09-17 05:09:19.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:09:11.222 00:00:10.363 TCP 23.104.0.1:47536 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:09:19.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:09:12.511 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-09-17 05:10:11.638 00:00:10.369 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:10:12.734 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-09-17 05:11:12.949 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-09-17 05:11:12.070 00:00:10.365 TCP 23.104.0.1:38964 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:12:12.477 00:00:10.328 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:12:13.186 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-09-17 05:08:29.533 00:05:01.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:13:13.405 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-09-17 05:13:12.840 00:00:10.390 TCP 23.104.0.1:56336 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:09:29.535 00:05:01.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:14:19.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:14:13.270 00:00:10.381 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:14:19.653 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:14:13.613 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6452 1 2025-09-17 05:15:13.686 00:00:10.371 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:15:13.828 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38748 10 6452 1 2025-09-17 05:16:14.107 00:00:10.368 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:16:14.062 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43218 10 6452 1 2025-09-17 05:17:14.275 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51996 10 6452 1 2025-09-17 05:17:14.513 00:00:10.697 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:18:14.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39350 10 6452 1 2025-09-17 05:18:15.244 00:00:10.363 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:14:29.534 00:05:01.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:19:19.623 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:19:15.647 00:00:10.326 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:19:19.728 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:19:14.702 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-09-17 05:15:29.536 00:05:01.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:20:16.014 00:00:10.364 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:20:14.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-09-17 05:21:16.418 00:00:10.366 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:21:15.127 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-09-17 05:22:15.305 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-09-17 05:22:16.818 00:00:10.368 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:23:15.478 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51838 10 6452 1 2025-09-17 05:23:17.220 00:00:10.363 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:24:19.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:24:19.848 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:24:15.689 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-09-17 05:20:29.541 00:05:01.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:24:17.623 00:00:10.327 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:25:15.906 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:60218 10 6452 1 2025-09-17 05:21:29.544 00:05:01.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:25:17.986 00:00:10.369 TCP 23.104.0.1:43890 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:26:16.098 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6452 1 2025-09-17 05:26:18.391 00:00:10.363 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:27:16.312 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-09-17 05:27:18.795 00:00:10.370 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:28:16.478 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-09-17 05:28:19.205 00:00:10.361 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:29:19.698 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:29:19.937 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:29:16.695 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-09-17 05:29:19.603 00:00:10.568 TCP 23.104.0.1:45516 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:30:20.211 00:00:10.397 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 15 1926 1 2025-09-17 05:30:16.913 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 12 10365 1 2025-09-17 05:26:29.544 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:31:20.650 00:00:10.321 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:27:29.547 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:31:17.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-09-17 05:32:21.011 00:00:10.324 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:32:17.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-09-17 05:33:21.383 00:00:10.331 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:33:17.621 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-09-17 05:34:20.013 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:34:20.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:34:17.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-09-17 05:34:21.760 00:00:10.380 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:35:18.082 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54624 10 6452 1 2025-09-17 05:35:22.180 00:00:10.804 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:36:18.293 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-09-17 05:32:29.550 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:36:23.024 00:00:10.323 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:37:18.502 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56448 10 6452 1 2025-09-17 05:33:29.548 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:37:23.386 00:00:10.359 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:38:18.679 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53996 10 6452 1 2025-09-17 05:38:23.785 00:00:10.364 TCP 23.104.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:39:20.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:39:20.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:39:18.852 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-09-17 05:39:24.190 00:00:10.363 TCP 23.104.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:40:19.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-09-17 05:40:24.591 00:00:10.366 TCP 23.104.0.1:36466 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:41:19.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-09-17 05:41:24.997 00:00:10.364 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:42:19.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6452 1 2025-09-17 05:38:29.547 00:05:01.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:42:25.401 00:00:10.366 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:39:29.550 00:05:01.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:43:19.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 2025-09-17 05:43:25.806 00:00:10.372 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:44:20.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:44:19.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:44:19.941 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-09-17 05:44:26.212 00:00:10.367 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:45:20.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42554 10 6452 1 2025-09-17 05:45:26.615 00:00:10.371 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:46:20.342 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-09-17 05:46:27.018 00:00:10.366 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:47:20.616 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-09-17 05:47:27.421 00:00:10.363 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:48:20.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6452 1 2025-09-17 05:44:29.549 00:05:01.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:48:27.825 00:00:10.329 TCP 23.104.0.1:60656 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:49:20.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:49:20.212 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:49:21.000 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-09-17 05:45:29.553 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:49:28.190 00:00:10.393 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:50:21.223 00:00:11.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6452 1 2025-09-17 05:50:28.652 00:00:10.367 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:51:22.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6452 1 2025-09-17 05:51:29.063 00:00:10.328 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:52:22.618 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-09-17 05:52:29.440 00:00:10.376 TCP 23.104.0.1:32820 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:53:22.792 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-09-17 05:53:29.851 00:00:10.351 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:54:20.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 05:54:20.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 05:50:29.552 00:05:01.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 05:54:23.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-09-17 05:54:30.235 00:00:10.364 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:51:29.553 00:05:01.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 05:55:23.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-17 05:55:30.641 00:00:10.368 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:56:23.437 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-09-17 05:56:31.061 00:00:10.363 TCP 23.104.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:57:23.661 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-09-17 05:57:31.464 00:00:10.332 TCP 23.104.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-09-17 05:58:23.870 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:37278 10 6452 1 2025-09-17 05:58:31.833 00:00:10.391 TCP 23.104.0.1:47670 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-09-17 04:56:29 - 2025-09-17 05:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0022s flows/second: 74107.5 Runtime: 0.0022s