Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 06:58:45.469 00:00:10.364 TCP 23.104.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-09-23 06:58:53.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32954 10 6452 1 2025-09-23 06:59:45.871 00:00:10.324 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-09-23 06:59:53.876 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45630 10 6452 1 2025-09-23 06:56:32.355 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:00:46.234 00:00:10.367 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:00:54.097 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-09-23 06:57:32.357 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:01:46.640 00:00:10.365 TCP 23.104.0.1:33108 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:01:54.398 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55266 10 6452 1 2025-09-23 07:02:15.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:02:14.742 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:02:47.050 00:00:10.377 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:02:54.605 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-09-23 07:03:47.465 00:00:10.361 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:03:54.827 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-09-23 07:04:47.874 00:00:10.365 TCP 23.104.0.1:38226 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:04:55.009 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-09-23 07:05:48.274 00:00:10.370 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:05:55.222 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-09-23 07:02:32.355 00:05:01.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:06:48.683 00:00:10.376 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:06:55.396 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-09-23 07:07:14.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:07:15.236 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:03:32.358 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:07:49.101 00:00:10.328 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:07:55.607 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44982 10 6452 1 2025-09-23 07:08:49.474 00:00:10.364 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:08:55.815 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-09-23 07:09:49.875 00:00:10.340 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:09:56.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-09-23 07:10:50.254 00:00:10.344 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:10:56.321 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-09-23 07:11:50.646 00:00:10.324 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:11:56.528 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-09-23 07:12:15.511 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:12:15.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:08:32.356 00:05:01.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:12:51.015 00:00:10.362 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:12:56.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-09-23 07:09:32.359 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:13:51.416 00:00:10.373 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:13:56.975 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-09-23 07:14:51.826 00:00:10.328 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:14:57.207 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-09-23 07:15:52.195 00:00:10.323 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:15:57.419 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-09-23 07:16:52.556 00:00:10.377 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:17:15.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:16:57.601 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-09-23 07:17:15.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:17:52.983 00:00:10.368 TCP 23.104.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:17:57.772 00:00:10.788 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6452 1 2025-09-23 07:14:32.357 00:05:01.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:18:53.388 00:00:10.372 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:18:58.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36986 10 6452 1 2025-09-23 07:15:32.362 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:19:53.802 00:00:10.619 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:19:58.814 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54354 10 6452 1 2025-09-23 07:20:54.463 00:00:10.362 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:20:59.068 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35212 10 6452 1 2025-09-23 07:21:54.862 00:00:10.328 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:21:59.275 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-09-23 07:22:15.354 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:22:15.103 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:22:55.229 00:00:10.324 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:22:59.449 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55944 10 6452 1 2025-09-23 07:23:55.587 00:00:10.368 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:23:59.663 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-09-23 07:20:32.361 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:24:55.990 00:00:10.333 TCP 23.104.0.1:48244 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:24:59.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41354 10 6452 1 2025-09-23 07:21:32.362 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:25:56.355 00:00:10.319 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:26:00.075 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40826 10 6452 1 2025-09-23 07:26:56.710 00:00:10.760 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 15 1926 1 2025-09-23 07:27:00.288 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 12 10365 1 2025-09-23 07:27:15.353 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:27:15.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:28:00.535 00:00:10.295 TCP 1.101.0.1:3000 -> 22.102.0.1:38490 10 6452 1 2025-09-23 07:27:57.514 00:00:10.368 TCP 23.104.0.1:47052 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:29:00.863 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-09-23 07:28:57.920 00:00:10.340 TCP 23.104.0.1:39346 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:29:58.299 00:00:10.362 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:30:01.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-09-23 07:26:32.362 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:30:58.701 00:00:10.364 TCP 23.104.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:31:01.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-09-23 07:27:32.364 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:32:01.467 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6452 1 2025-09-23 07:32:15.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:31:59.109 00:00:10.321 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:32:15.592 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:33:01.694 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54904 10 6452 1 2025-09-23 07:32:59.468 00:00:10.370 TCP 23.104.0.1:52728 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:33:59.873 00:00:10.368 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:34:01.872 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6452 1 2025-09-23 07:35:00.278 00:00:10.363 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:35:02.113 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-09-23 07:36:00.678 00:00:10.366 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:36:02.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39764 10 6452 1 2025-09-23 07:32:32.363 00:05:01.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:37:02.504 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57112 10 6452 1 2025-09-23 07:37:15.727 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:37:01.105 00:00:10.367 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:37:15.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:33:32.365 00:05:01.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:38:01.506 00:00:10.361 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:38:02.718 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-09-23 07:39:01.906 00:00:10.368 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:39:02.894 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-09-23 07:40:02.313 00:00:10.329 TCP 23.104.0.1:43842 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:40:03.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-09-23 07:41:03.332 00:00:10.686 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 10 6452 1 2025-09-23 07:41:02.683 00:00:10.327 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:42:15.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:42:03.056 00:00:10.372 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:42:04.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57002 10 6452 1 2025-09-23 07:42:15.792 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:38:32.363 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:43:03.467 00:00:10.367 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:43:04.301 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-09-23 07:39:32.366 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:44:04.479 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-09-23 07:44:03.878 00:00:10.405 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:45:04.717 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33620 10 6452 1 2025-09-23 07:45:04.327 00:00:10.323 TCP 23.104.0.1:58514 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:46:04.688 00:00:10.377 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:46:04.953 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35008 10 6452 1 2025-09-23 07:47:05.153 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 14 14280 1 2025-09-23 07:47:15.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:47:15.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:47:05.111 00:00:10.475 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 17 2241 1 2025-09-23 07:48:05.623 00:00:10.363 TCP 23.104.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:48:05.420 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60058 10 6452 1 2025-09-23 07:44:32.365 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:49:06.025 00:00:10.363 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:49:05.644 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60736 10 6452 1 2025-09-23 07:45:32.368 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:50:06.426 00:00:10.371 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:50:05.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 10 6452 1 2025-09-23 07:51:06.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-09-23 07:51:06.830 00:00:10.393 TCP 23.104.0.1:38764 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:52:15.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:52:15.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:52:06.298 00:00:10.861 TCP 1.101.0.1:3000 -> 22.102.0.1:53990 10 6452 1 2025-09-23 07:52:07.261 00:00:10.366 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:53:07.666 00:00:10.363 TCP 23.104.0.1:56344 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:53:07.194 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-09-23 07:54:07.417 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-09-23 07:54:08.094 00:00:10.362 TCP 23.104.0.1:57362 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:50:32.366 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 07:55:08.495 00:00:10.381 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:55:07.791 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-09-23 07:51:32.368 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 07:56:08.906 00:00:10.329 TCP 23.104.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:56:08.016 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40950 10 6452 1 2025-09-23 07:57:15.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 07:57:16.205 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 07:57:09.275 00:00:10.378 TCP 23.104.0.1:42234 -> 1.101.0.1:3000 11 1507 1 2025-09-23 07:57:08.228 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-09-23 07:58:08.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-09-23 07:58:09.688 00:00:10.368 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511242, total packets: 1588, avg bps: 1103, avg pps: 0, avg bpp: 321 Time window: 2025-09-23 06:56:32 - 2025-09-23 07:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0018s Wall: 0.0021s flows/second: 77506.0 Runtime: 0.0021s