Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 19:58:43.918 00:00:10.377 TCP 23.104.0.1:54890 -> 1.101.0.1:3000 11 1507 1 2025-09-20 19:59:00.996 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-09-20 19:59:44.334 00:00:10.593 TCP 23.104.0.1:39546 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:00:01.218 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-09-20 19:56:31.249 00:05:01.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:00:44.978 00:00:10.362 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:01:03.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:01:04.136 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:01:01.387 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-09-20 19:57:31.251 00:05:01.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:01:45.384 00:00:10.371 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:02:01.566 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-09-20 20:02:45.795 00:00:10.363 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:03:01.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37338 10 6452 1 2025-09-20 20:03:46.199 00:00:10.321 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:04:02.000 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6452 1 2025-09-20 20:04:46.565 00:00:10.320 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:05:02.211 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-09-20 20:05:46.926 00:00:10.336 TCP 23.104.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:06:04.155 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:06:03.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:06:02.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-09-20 20:02:31.251 00:05:01.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:06:47.298 00:00:10.364 TCP 23.104.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:07:02.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-09-20 20:03:31.254 00:05:01.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:07:47.699 00:00:10.363 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:08:02.852 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48468 10 6452 1 2025-09-20 20:08:48.105 00:00:10.364 TCP 23.104.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:09:03.082 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6452 1 2025-09-20 20:09:48.508 00:00:10.364 TCP 23.104.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:10:03.307 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-09-20 20:10:48.913 00:00:10.368 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:11:04.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:11:04.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:11:03.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-09-20 20:11:49.316 00:00:10.363 TCP 23.104.0.1:43086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:12:03.730 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-09-20 20:08:31.252 00:05:01.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:12:49.714 00:00:10.382 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:13:03.956 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6452 1 2025-09-20 20:09:31.255 00:05:01.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:13:50.129 00:00:10.364 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:14:04.137 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6452 1 2025-09-20 20:14:50.530 00:00:10.368 TCP 23.104.0.1:60600 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:15:04.349 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-09-20 20:15:50.935 00:00:10.371 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:16:04.529 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:16:04.428 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:16:04.792 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56854 10 6452 1 2025-09-20 20:16:51.343 00:00:10.363 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:17:05.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-09-20 20:17:51.744 00:00:10.366 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:18:05.243 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-09-20 20:14:31.254 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:18:52.145 00:00:10.362 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:19:05.418 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-09-20 20:15:31.257 00:05:01.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:19:52.548 00:00:10.359 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:20:05.635 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50868 10 6452 1 2025-09-20 20:21:04.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:20:52.945 00:00:10.368 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:21:04.331 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:21:05.871 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-09-20 20:21:53.352 00:00:10.324 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:22:06.100 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:45630 10 6452 1 2025-09-20 20:22:53.710 00:00:10.375 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:23:06.662 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52634 10 6452 1 2025-09-20 20:23:54.122 00:00:10.323 TCP 23.104.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:24:06.871 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43870 10 6452 1 2025-09-20 20:20:31.256 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:24:54.480 00:00:10.369 TCP 23.104.0.1:58484 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:25:07.088 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-09-20 20:21:31.258 00:05:01.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:26:04.174 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:25:54.890 00:00:10.382 TCP 23.104.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:26:04.401 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:26:07.264 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-09-20 20:26:55.312 00:00:10.322 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:27:07.482 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6452 1 2025-09-20 20:27:55.675 00:00:10.367 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:28:07.693 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47974 10 6452 1 2025-09-20 20:28:56.109 00:00:10.365 TCP 23.104.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:29:07.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-09-20 20:29:56.512 00:00:10.372 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:30:08.129 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59568 10 6452 1 2025-09-20 20:26:31.257 00:05:01.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:31:04.565 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:31:04.633 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:30:56.943 00:00:10.378 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:31:08.301 00:00:10.698 TCP 1.101.0.1:3000 -> 22.102.0.1:51458 10 6452 1 2025-09-20 20:27:31.259 00:05:01.305 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:31:57.368 00:00:10.365 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:32:09.043 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-09-20 20:32:57.768 00:00:10.373 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:33:09.256 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-09-20 20:33:58.172 00:00:10.370 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:34:09.465 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-09-20 20:34:58.582 00:00:10.676 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:35:09.678 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-09-20 20:36:04.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:36:04.703 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:35:59.295 00:00:10.323 TCP 23.104.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:36:09.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 2025-09-20 20:32:31.259 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:36:59.653 00:00:10.367 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:37:10.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6452 1 2025-09-20 20:33:31.261 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:38:00.059 00:00:10.371 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:38:10.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-09-20 20:39:00.464 00:00:10.325 TCP 23.104.0.1:34566 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:39:10.520 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:36712 10 6452 1 2025-09-20 20:40:00.829 00:00:10.359 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:40:10.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6452 1 2025-09-20 20:41:04.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:41:04.649 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:41:01.232 00:00:10.368 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:41:11.107 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54510 10 6452 1 2025-09-20 20:42:01.641 00:00:10.323 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:42:11.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-09-20 20:38:31.262 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:43:02.005 00:00:10.858 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:43:11.493 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 2025-09-20 20:39:31.265 00:05:01.308 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:44:02.902 00:00:10.370 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:44:11.707 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-09-20 20:45:03.313 00:00:10.319 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:45:11.880 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 10 6452 1 2025-09-20 20:46:05.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:46:05.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:46:03.678 00:00:10.386 TCP 23.104.0.1:56530 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:46:12.106 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6452 1 2025-09-20 20:47:04.124 00:00:10.326 TCP 23.104.0.1:35940 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:47:12.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50078 10 6452 1 2025-09-20 20:48:04.486 00:00:10.369 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:48:12.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40996 10 6452 1 2025-09-20 20:44:31.264 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:49:04.895 00:00:10.373 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:49:12.710 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-09-20 20:45:31.266 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:50:05.302 00:00:10.369 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:50:12.921 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49958 10 6452 1 2025-09-20 20:51:05.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:51:05.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:51:05.709 00:00:10.382 TCP 23.104.0.1:34180 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:51:13.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-09-20 20:52:06.133 00:00:10.365 TCP 23.104.0.1:47170 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:52:13.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 10 6452 1 2025-09-20 20:53:06.539 00:00:10.370 TCP 23.104.0.1:39484 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:53:13.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53864 10 6452 1 2025-09-20 20:54:06.947 00:00:10.340 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:54:13.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6452 1 2025-09-20 20:50:31.264 00:05:01.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 20:55:07.322 00:00:10.325 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:55:13.977 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-09-20 20:51:31.267 00:05:01.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 20:56:05.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 20:56:05.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 20:56:07.687 00:00:10.365 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:56:14.212 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-09-20 20:57:08.110 00:00:10.372 TCP 23.104.0.1:54928 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:57:14.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-09-20 20:58:08.523 00:00:10.355 TCP 23.104.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:58:14.640 00:00:10.332 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1073, avg pps: 0, avg bpp: 317 Time window: 2025-09-20 19:56:31 - 2025-09-20 20:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0026s flows/second: 62284.1 Runtime: 0.0026s