Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 00:59:08.878 00:00:10.325 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:59:32.604 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49232 10 6452 1 2025-09-23 01:00:09.243 00:00:10.365 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:56:32.239 00:05:01.393 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:00:32.775 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-09-23 01:01:09.642 00:00:10.367 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:57:32.242 00:05:01.389 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:01:32.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43582 10 6452 1 2025-09-23 01:02:07.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:02:07.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:02:10.055 00:00:10.372 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:02:33.218 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56720 10 6452 1 2025-09-23 01:03:10.467 00:00:10.361 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:03:33.442 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-09-23 01:04:10.866 00:00:10.362 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:04:33.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6452 1 2025-09-23 01:05:11.271 00:00:10.365 TCP 23.104.0.1:48432 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:05:33.867 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-09-23 01:06:11.670 00:00:10.364 TCP 23.104.0.1:40936 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:02:32.239 00:05:01.395 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:06:34.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-09-23 01:07:07.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:07:07.854 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:07:12.099 00:00:10.324 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:03:32.243 00:05:01.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:07:34.303 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50924 10 6452 1 2025-09-23 01:08:12.464 00:00:10.371 TCP 23.104.0.1:40950 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:08:34.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40774 10 6452 1 2025-09-23 01:09:12.876 00:00:10.360 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:09:34.748 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51268 10 6452 1 2025-09-23 01:10:13.276 00:00:10.363 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:10:34.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-09-23 01:11:13.677 00:00:10.324 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:11:35.191 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-09-23 01:12:07.897 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:12:07.961 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:12:14.049 00:00:10.364 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:08:32.241 00:05:01.394 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:12:35.399 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-09-23 01:13:14.449 00:00:10.324 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:09:32.243 00:05:01.389 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:13:35.571 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6452 1 2025-09-23 01:14:14.809 00:00:10.367 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:14:35.798 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-09-23 01:15:15.212 00:00:10.340 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:15:36.011 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52258 10 6452 1 2025-09-23 01:16:15.590 00:00:10.332 TCP 23.104.0.1:43592 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:16:36.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42388 10 6452 1 2025-09-23 01:17:08.115 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:17:08.006 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:17:15.962 00:00:10.365 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:17:36.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60098 10 6452 1 2025-09-23 01:18:16.362 00:00:10.363 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:14:32.243 00:05:01.394 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:18:36.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-09-23 01:19:16.763 00:00:10.376 TCP 23.104.0.1:51218 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:15:32.245 00:05:01.389 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:19:36.870 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48272 10 6452 1 2025-09-23 01:20:17.176 00:00:10.362 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:20:37.097 00:00:10.751 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-09-23 01:21:17.576 00:00:10.365 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:21:37.884 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-09-23 01:22:07.994 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:22:08.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:22:17.981 00:00:10.325 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:22:38.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-09-23 01:23:18.340 00:00:10.363 TCP 23.104.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:23:38.321 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-09-23 01:24:18.742 00:00:10.368 TCP 23.104.0.1:57018 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:20:32.250 00:05:01.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:24:38.531 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 10 6452 1 2025-09-23 01:25:19.150 00:00:10.362 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:21:32.253 00:05:01.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:25:38.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-09-23 01:26:19.551 00:00:10.363 TCP 23.104.0.1:49906 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:26:38.970 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-09-23 01:27:08.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:27:08.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:27:19.951 00:00:10.370 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:27:39.211 00:00:10.565 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-09-23 01:28:20.356 00:00:10.364 TCP 23.104.0.1:51432 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:28:39.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-09-23 01:29:20.753 00:00:17.879 TCP 23.104.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:29:40.044 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6452 1 2025-09-23 01:26:32.255 00:05:01.397 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:30:28.681 00:00:10.325 TCP 23.104.0.1:55032 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:30:40.256 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:44406 10 6452 1 2025-09-23 01:27:32.257 00:05:01.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:31:29.048 00:00:10.364 TCP 23.104.0.1:55284 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:31:40.620 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-09-23 01:32:08.625 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:32:08.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:32:29.451 00:00:10.364 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:32:40.832 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-09-23 01:33:29.855 00:00:10.371 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:33:41.066 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51920 10 6452 1 2025-09-23 01:34:30.265 00:00:10.362 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:34:41.286 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 10 6452 1 2025-09-23 01:35:30.668 00:00:10.365 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:35:41.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6452 1 2025-09-23 01:32:32.254 00:05:01.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:36:31.094 00:00:10.362 TCP 23.104.0.1:49602 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:36:41.676 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-09-23 01:37:08.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:37:08.546 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:33:32.257 00:05:01.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:37:31.492 00:00:10.369 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:37:41.852 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55894 10 6452 1 2025-09-23 01:38:31.900 00:00:10.365 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:38:42.086 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-09-23 01:39:32.302 00:00:10.390 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:39:42.316 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 10 6452 1 2025-09-23 01:40:32.729 00:00:10.377 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:40:42.545 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45618 10 6452 1 2025-09-23 01:41:33.139 00:00:10.367 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:41:42.769 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-09-23 01:42:08.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:42:08.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:38:32.256 00:05:01.402 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:42:33.541 00:00:10.364 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:42:42.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-09-23 01:39:32.258 00:05:01.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:43:33.946 00:00:10.370 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:43:43.212 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34876 10 6452 1 2025-09-23 01:44:34.350 00:00:10.376 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:44:43.454 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6452 1 2025-09-23 01:45:34.762 00:00:10.331 TCP 23.104.0.1:57276 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:45:43.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45364 10 6452 1 2025-09-23 01:46:35.134 00:00:10.365 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:46:43.859 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-09-23 01:47:08.554 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:47:08.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:47:35.538 00:00:10.362 TCP 23.104.0.1:52400 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:47:44.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-09-23 01:44:32.258 00:05:01.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:48:35.937 00:00:10.376 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:48:44.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41184 10 6452 1 2025-09-23 01:45:32.260 00:05:01.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:49:36.352 00:00:10.323 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:49:44.519 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42118 10 6452 1 2025-09-23 01:50:36.714 00:00:10.372 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:50:44.746 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-09-23 01:51:37.132 00:00:10.365 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:51:45.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-09-23 01:52:08.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:52:08.726 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:52:37.536 00:00:10.326 TCP 23.104.0.1:51456 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:52:45.401 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44712 10 6452 1 2025-09-23 01:53:37.905 00:00:10.367 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:53:45.635 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43130 10 6452 1 2025-09-23 01:50:32.260 00:05:01.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 01:54:38.310 00:00:10.332 TCP 23.104.0.1:43072 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:54:45.853 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-09-23 01:51:32.264 00:05:01.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 01:55:38.679 00:00:10.330 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:55:46.085 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-09-23 01:56:39.056 00:00:10.330 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:56:46.303 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6452 1 2025-09-23 01:57:08.971 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 01:57:09.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 01:57:39.429 00:00:10.369 TCP 23.104.0.1:56900 -> 1.101.0.1:3000 11 1507 1 2025-09-23 01:57:46.515 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-09-23 01:58:39.838 00:00:10.388 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1052, avg pps: 0, avg bpp: 314 Time window: 2025-09-23 00:56:32 - 2025-09-23 01:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0027s flows/second: 59971.2 Runtime: 0.0027s