Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 08:58:47.539 00:00:10.370 TCP 23.104.0.1:33910 -> 1.101.0.1:3000 11 1507 1 2025-09-17 08:59:04.395 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-09-17 08:59:23.902 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 08:59:24.180 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 08:59:47.948 00:00:10.911 TCP 23.104.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:00:04.573 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59286 10 6452 1 2025-09-17 08:56:29.621 00:05:01.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:00:48.894 00:00:10.377 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:01:04.742 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-09-17 08:57:29.626 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:01:49.308 00:00:10.366 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:02:04.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-09-17 09:02:49.720 00:00:10.325 TCP 23.104.0.1:52744 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:03:05.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40258 10 6452 1 2025-09-17 09:03:50.106 00:00:10.372 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:04:05.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49168 10 6452 1 2025-09-17 09:04:23.968 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:04:24.262 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:04:50.509 00:00:10.325 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:05:05.559 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-09-17 09:05:50.874 00:00:10.365 TCP 23.104.0.1:53646 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:06:05.772 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41630 10 6452 1 2025-09-17 09:02:29.625 00:05:01.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:06:51.277 00:00:10.374 TCP 23.104.0.1:37442 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:07:05.979 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45380 10 6452 1 2025-09-17 09:03:29.627 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:07:51.684 00:00:10.367 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:08:06.224 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-09-17 09:08:52.106 00:00:10.372 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:09:06.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34092 12 6556 1 2025-09-17 09:09:24.378 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:09:24.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:09:52.516 00:00:10.376 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:10:06.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-09-17 09:10:52.928 00:00:10.389 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:11:06.864 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-09-17 09:11:53.349 00:00:10.329 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:12:07.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-09-17 09:08:29.625 00:05:01.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:12:53.723 00:00:10.371 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:13:07.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-09-17 09:09:29.629 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:13:54.130 00:00:10.367 TCP 23.104.0.1:39342 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:14:07.509 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-09-17 09:14:24.454 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:14:24.636 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:14:54.538 00:00:10.323 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:15:07.720 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-09-17 09:15:54.904 00:00:10.341 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:16:07.897 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-09-17 09:16:55.289 00:00:10.358 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:17:08.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-09-17 09:17:55.688 00:00:10.366 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:18:08.322 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-09-17 09:14:29.626 00:05:01.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:18:56.102 00:00:10.370 TCP 23.104.0.1:37722 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:19:08.499 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 10 6452 1 2025-09-17 09:19:24.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:19:24.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:15:29.628 00:05:01.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:19:56.511 00:00:10.438 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 15 1926 1 2025-09-17 09:20:08.719 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 12 10365 1 2025-09-17 09:20:56.989 00:00:10.365 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:21:08.917 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-09-17 09:21:57.396 00:00:10.326 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:22:09.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50088 10 6452 1 2025-09-17 09:22:57.761 00:00:10.377 TCP 23.104.0.1:48966 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:23:09.348 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-09-17 09:23:58.179 00:00:10.367 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:24:09.561 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:39500 10 6452 1 2025-09-17 09:24:24.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:24:24.718 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:20:29.626 00:05:01.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:24:58.583 00:00:10.406 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 15 1926 1 2025-09-17 09:25:09.967 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:53280 12 10367 1 2025-09-17 09:21:29.630 00:05:01.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:25:59.023 00:00:10.359 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:26:10.221 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-09-17 09:26:59.421 00:00:10.365 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:27:10.459 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-09-17 09:27:59.823 00:00:10.364 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:28:10.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46576 10 6452 1 2025-09-17 09:29:00.225 00:00:10.333 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:29:10.888 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-09-17 09:29:24.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:29:24.661 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:30:00.597 00:00:10.361 TCP 23.104.0.1:48310 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:30:11.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-09-17 09:26:29.628 00:05:01.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:31:01.000 00:00:10.361 TCP 23.104.0.1:57844 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:31:11.301 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-09-17 09:27:29.631 00:05:01.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:32:01.398 00:00:10.363 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:32:11.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-09-17 09:33:01.801 00:00:10.361 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:33:11.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59872 10 6452 1 2025-09-17 09:34:02.203 00:00:10.363 TCP 23.104.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:34:24.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:34:11.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34210 10 6452 1 2025-09-17 09:34:24.860 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:35:02.604 00:00:10.430 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 15 1926 1 2025-09-17 09:35:12.116 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 12 10576 1 2025-09-17 09:36:03.103 00:00:10.331 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:36:12.359 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6661 1 2025-09-17 09:32:29.631 00:05:01.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:37:03.475 00:00:10.331 TCP 23.104.0.1:54438 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:37:12.576 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43026 10 6661 1 2025-09-17 09:33:29.633 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:38:03.841 00:00:10.381 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:38:12.794 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6661 1 2025-09-17 09:39:04.267 00:00:10.330 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:39:24.963 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:39:24.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:39:13.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56038 10 6661 1 2025-09-17 09:40:04.635 00:00:10.366 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:40:13.228 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45038 10 6661 1 2025-09-17 09:41:05.050 00:00:10.331 TCP 23.104.0.1:33594 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:41:13.442 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 12 6765 1 2025-09-17 09:42:05.423 00:00:10.366 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:42:13.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6661 1 2025-09-17 09:38:29.634 00:05:01.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:43:05.829 00:00:10.389 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:43:13.870 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6661 1 2025-09-17 09:39:29.636 00:05:01.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:44:06.255 00:00:10.369 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:44:25.142 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:44:24.751 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:44:14.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53186 10 6661 1 2025-09-17 09:45:06.670 00:00:10.343 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:45:14.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6661 1 2025-09-17 09:46:07.050 00:00:10.364 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:46:14.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40258 10 6661 1 2025-09-17 09:47:07.453 00:00:10.363 TCP 23.104.0.1:52248 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:47:14.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6661 1 2025-09-17 09:48:07.859 00:00:10.343 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:48:14.953 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:54178 10 6661 1 2025-09-17 09:44:29.635 00:05:01.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:49:08.238 00:00:10.375 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:49:25.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:49:15.161 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56766 10 6661 1 2025-09-17 09:49:25.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:45:29.640 00:05:01.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:50:08.655 00:00:10.325 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:50:15.339 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37660 10 6661 1 2025-09-17 09:51:09.019 00:00:10.318 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:51:15.514 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6661 1 2025-09-17 09:52:09.380 00:00:10.362 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:52:15.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6661 1 2025-09-17 09:53:09.776 00:00:10.376 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:53:15.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 12 6765 1 2025-09-17 09:54:10.190 00:00:10.326 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:54:25.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 09:54:16.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6661 1 2025-09-17 09:54:25.290 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 09:50:29.638 00:05:01.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 09:55:10.557 00:00:10.374 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:55:16.398 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6661 1 2025-09-17 09:51:29.642 00:05:01.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 09:56:10.974 00:00:10.367 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:56:16.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6661 1 2025-09-17 09:57:16.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47982 10 6661 1 2025-09-17 09:57:11.381 00:00:10.732 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:58:12.153 00:00:10.361 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-09-17 09:58:17.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6661 1 Summary: total flows: 164, total bytes: 516676, total packets: 1596, avg bps: 1111, avg pps: 0, avg bpp: 323 Time window: 2025-09-17 08:56:29 - 2025-09-17 09:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0000s Wall: 0.0015s flows/second: 111648.4 Runtime: 0.0015s