Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 01:58:58.866 00:00:10.326 TCP 23.104.0.1:45580 -> 1.101.0.1:3000 11 1507 1 2025-09-20 01:59:04.498 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50908 10 6452 1 2025-09-20 01:59:59.227 00:00:10.325 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:00:04.716 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-09-20 01:56:30.846 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:00:42.191 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:00:42.154 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:00:59.593 00:00:10.364 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:01:04.941 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6452 1 2025-09-20 01:57:30.849 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:01:59.997 00:00:10.360 TCP 23.104.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:02:05.176 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-09-20 02:03:00.396 00:00:10.366 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:03:05.358 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 10 6452 1 2025-09-20 02:04:00.797 00:00:10.341 TCP 23.104.0.1:60530 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:04:05.575 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39892 10 6452 1 2025-09-20 02:05:01.178 00:00:10.363 TCP 23.104.0.1:33450 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:05:05.795 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-09-20 02:05:42.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:05:42.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:06:01.578 00:00:10.361 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:06:05.967 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51898 12 6556 1 2025-09-20 02:02:30.846 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:07:01.981 00:00:10.367 TCP 23.104.0.1:45556 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:07:06.194 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-09-20 02:03:30.852 00:05:01.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:08:02.384 00:00:10.330 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:08:06.412 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-09-20 02:09:06.637 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-20 02:09:02.754 00:00:10.373 TCP 23.104.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:10:03.168 00:00:10.354 TCP 23.104.0.1:53698 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:10:06.854 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 12 6556 1 2025-09-20 02:10:42.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:10:42.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:11:03.583 00:00:10.331 TCP 23.104.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:11:07.084 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 10 6452 1 2025-09-20 02:12:03.957 00:00:10.371 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:12:07.280 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6452 1 2025-09-20 02:08:30.853 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:13:04.366 00:00:10.371 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:13:07.495 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-09-20 02:09:30.854 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:14:04.774 00:00:10.363 TCP 23.104.0.1:46946 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:14:07.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-09-20 02:15:05.175 00:00:10.369 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:15:07.925 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44184 10 6452 1 2025-09-20 02:15:42.912 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:15:42.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:16:05.576 00:00:10.364 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:16:08.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-09-20 02:17:05.979 00:00:10.364 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:17:08.384 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 10 6452 1 2025-09-20 02:18:06.381 00:00:10.371 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:18:08.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48560 10 6452 1 2025-09-20 02:14:30.852 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:19:06.786 00:00:10.371 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:19:08.773 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-09-20 02:15:30.854 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:20:08.990 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41678 10 6452 1 2025-09-20 02:20:07.196 00:00:10.365 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:20:42.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:20:42.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:21:07.601 00:00:10.369 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:21:09.174 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-09-20 02:22:09.391 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 10 6452 1 2025-09-20 02:22:08.006 00:00:10.364 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:23:09.559 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6452 1 2025-09-20 02:23:08.405 00:00:10.368 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:24:09.779 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-09-20 02:24:08.811 00:00:10.332 TCP 23.104.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:20:30.853 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:25:09.177 00:00:10.366 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:25:09.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49182 10 6452 1 2025-09-20 02:21:30.855 00:05:01.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:25:42.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:25:42.935 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:26:09.579 00:00:10.363 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:26:10.170 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54766 10 6452 1 2025-09-20 02:27:09.978 00:00:10.368 TCP 23.104.0.1:34694 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:27:10.347 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-09-20 02:28:10.387 00:00:10.365 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:28:10.562 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44336 10 6452 1 2025-09-20 02:29:10.785 00:00:10.320 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:29:10.739 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-09-20 02:30:10.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39678 10 6452 1 2025-09-20 02:30:11.146 00:00:10.324 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:26:30.859 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:30:42.768 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:30:42.785 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:31:11.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48240 10 6452 1 2025-09-20 02:31:11.512 00:00:10.366 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:27:30.862 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:32:11.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37258 10 6452 1 2025-09-20 02:32:11.916 00:00:10.400 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:33:11.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-09-20 02:33:12.352 00:00:10.325 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:34:11.758 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48928 10 6452 1 2025-09-20 02:34:12.715 00:00:10.334 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:35:13.110 00:00:10.389 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:35:11.974 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-09-20 02:35:43.443 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:35:43.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:36:13.513 00:00:10.369 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:36:12.212 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-09-20 02:32:30.862 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:37:13.931 00:00:10.395 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:37:12.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-09-20 02:33:30.864 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:38:14.365 00:00:10.323 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:38:12.633 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-09-20 02:39:12.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 10 6452 1 2025-09-20 02:39:14.721 00:00:10.339 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:40:15.102 00:00:10.325 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:40:13.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34966 10 6452 1 2025-09-20 02:40:43.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:40:43.182 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:41:13.288 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35326 10 6452 1 2025-09-20 02:41:15.467 00:00:10.370 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:42:15.875 00:00:10.325 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:42:13.463 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 10 6452 1 2025-09-20 02:38:30.861 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:43:13.681 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-09-20 02:43:16.240 00:00:10.363 TCP 23.104.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:39:30.865 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:44:13.899 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45358 10 6452 1 2025-09-20 02:44:16.644 00:00:10.369 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:45:14.086 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-09-20 02:45:17.063 00:00:10.329 TCP 23.104.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:45:43.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:45:43.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:46:14.264 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-09-20 02:46:17.434 00:00:10.361 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:47:14.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45924 10 6452 1 2025-09-20 02:47:17.830 00:00:10.351 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:48:14.685 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-09-20 02:48:18.226 00:00:10.330 TCP 23.104.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:44:30.864 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:49:14.858 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-09-20 02:49:18.592 00:00:10.365 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:45:30.866 00:05:01.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:50:15.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-09-20 02:50:18.995 00:00:10.324 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:50:43.040 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:50:43.369 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:51:15.298 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60490 10 6452 1 2025-09-20 02:51:19.353 00:00:10.370 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:52:15.511 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-09-20 02:52:19.757 00:00:10.388 TCP 23.104.0.1:53600 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:53:15.683 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-09-20 02:53:20.183 00:00:10.324 TCP 23.104.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:54:15.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-09-20 02:54:20.547 00:00:10.326 TCP 23.104.0.1:38544 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:50:30.867 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 02:55:16.118 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-09-20 02:55:20.915 00:00:10.369 TCP 23.104.0.1:60794 -> 1.101.0.1:3000 11 1507 1 2025-09-20 02:51:30.869 00:05:01.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 02:55:43.406 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 02:55:43.399 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 02:56:16.356 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 12 10367 1 2025-09-20 02:56:21.317 00:00:10.458 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 15 1926 1 2025-09-20 02:57:16.597 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-09-20 02:57:21.812 00:00:11.733 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 13 1611 1 2025-09-20 02:58:16.810 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-09-20 02:58:23.581 00:00:10.364 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502994, total packets: 1584, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-09-20 01:56:30 - 2025-09-20 02:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0015s Wall: 0.0024s flows/second: 67272.9 Runtime: 0.0025s