Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 11:58:50.585 00:00:10.367 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-09-23 11:59:02.857 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-09-23 11:59:50.989 00:00:10.366 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:00:03.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6452 1 2025-09-23 11:56:32.440 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:00:51.393 00:00:10.374 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:01:03.304 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46524 10 6452 1 2025-09-23 11:57:32.442 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:01:51.800 00:00:10.370 TCP 23.104.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:02:03.523 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-09-23 12:02:20.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:02:20.990 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:02:52.207 00:00:10.364 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:03:03.771 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-09-23 12:03:52.615 00:00:10.367 TCP 23.104.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:04:03.981 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-09-23 12:04:53.021 00:00:10.367 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:05:04.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-09-23 12:05:53.427 00:00:10.366 TCP 23.104.0.1:53376 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:06:04.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-09-23 12:02:32.440 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:06:53.831 00:00:10.451 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 15 1926 1 2025-09-23 12:07:21.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:07:04.641 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 12 10367 1 2025-09-23 12:07:21.145 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:03:32.443 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:07:54.323 00:00:10.360 TCP 23.104.0.1:42212 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:08:04.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-09-23 12:08:54.719 00:00:10.334 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:09:05.106 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-09-23 12:09:55.104 00:00:10.323 TCP 23.104.0.1:52460 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:10:05.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57556 10 6452 1 2025-09-23 12:10:55.464 00:00:10.359 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:11:05.534 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-09-23 12:11:55.866 00:00:10.329 TCP 23.104.0.1:37414 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:12:05.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58264 10 6452 1 2025-09-23 12:12:21.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:12:21.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:08:32.442 00:05:01.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:12:56.244 00:00:10.367 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:13:05.957 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-09-23 12:09:32.443 00:05:01.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:13:56.648 00:00:10.367 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:14:06.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-09-23 12:14:57.052 00:00:10.368 TCP 23.104.0.1:50922 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:15:06.393 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-09-23 12:15:57.459 00:00:10.321 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:16:06.563 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-09-23 12:16:57.819 00:00:10.324 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:17:06.776 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-09-23 12:17:21.098 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:17:21.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:17:58.182 00:00:10.361 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:18:06.949 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-09-23 12:14:32.443 00:05:01.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:18:58.579 00:00:10.375 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:19:07.178 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-09-23 12:15:32.446 00:05:01.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:19:58.987 00:00:10.352 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:20:07.369 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 2025-09-23 12:20:59.386 00:00:10.386 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:21:07.585 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-09-23 12:21:59.815 00:00:10.367 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:22:21.421 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:22:07.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-09-23 12:22:21.608 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:23:00.225 00:00:10.374 TCP 23.104.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:23:08.026 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-09-23 12:24:00.636 00:00:10.327 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:24:08.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-09-23 12:20:32.444 00:05:01.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:25:00.998 00:00:10.369 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:25:08.453 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 6452 1 2025-09-23 12:21:32.448 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:26:01.402 00:00:10.368 TCP 23.104.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:26:08.651 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-09-23 12:27:08.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-09-23 12:27:21.569 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:27:01.807 00:00:10.613 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:27:21.468 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:28:02.454 00:00:10.361 TCP 23.104.0.1:34574 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:28:09.071 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-09-23 12:29:02.854 00:00:10.375 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:29:09.245 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-09-23 12:30:03.268 00:00:10.324 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:30:09.471 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-09-23 12:26:32.446 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:31:03.632 00:00:10.363 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:31:09.693 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 10 6452 1 2025-09-23 12:27:32.449 00:05:01.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:32:09.912 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-09-23 12:32:21.672 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:32:04.036 00:00:10.319 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:32:21.614 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:33:04.398 00:00:10.327 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:33:10.129 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39130 10 6452 1 2025-09-23 12:34:04.762 00:00:10.375 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:34:10.349 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-09-23 12:35:05.172 00:00:10.370 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:35:10.575 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58452 10 6452 1 2025-09-23 12:36:05.576 00:00:10.369 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:36:10.795 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-09-23 12:32:32.447 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:37:05.984 00:00:10.375 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:37:11.025 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56190 10 6452 1 2025-09-23 12:37:21.804 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:37:21.613 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:33:32.450 00:05:01.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:38:06.390 00:00:10.364 TCP 23.104.0.1:41080 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:38:11.198 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-09-23 12:39:06.792 00:00:10.363 TCP 23.104.0.1:55732 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:39:11.374 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-09-23 12:40:11.590 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-09-23 12:40:07.193 00:00:10.373 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:41:11.797 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37426 10 6452 1 2025-09-23 12:41:07.603 00:00:10.594 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:42:21.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:42:21.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:42:08.235 00:00:10.364 TCP 23.104.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:42:12.015 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-09-23 12:38:32.448 00:05:01.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:43:08.638 00:00:10.889 TCP 23.104.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:43:12.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50840 10 6452 1 2025-09-23 12:39:32.451 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:44:09.569 00:00:10.327 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:44:12.432 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-09-23 12:45:09.936 00:00:10.379 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:45:12.606 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2025-09-23 12:46:10.353 00:00:10.364 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:46:12.810 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-09-23 12:47:21.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:47:10.761 00:00:10.375 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:47:21.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:47:12.980 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 10 6452 1 2025-09-23 12:48:11.172 00:00:10.365 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:48:13.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-09-23 12:44:32.449 00:05:01.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:49:11.577 00:00:10.325 TCP 23.104.0.1:40324 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:49:13.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-09-23 12:45:32.452 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:50:11.941 00:00:10.366 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:50:13.649 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-09-23 12:51:13.863 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38000 10 6452 1 2025-09-23 12:51:12.346 00:00:10.364 TCP 23.104.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:52:21.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:52:22.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:52:12.751 00:00:10.413 TCP 23.104.0.1:35348 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:52:14.089 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54172 10 6452 1 2025-09-23 12:53:14.265 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55918 10 6452 1 2025-09-23 12:53:13.170 00:00:10.364 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:54:14.479 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-09-23 12:54:13.574 00:00:10.334 TCP 23.104.0.1:35036 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:50:32.450 00:05:01.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 12:55:14.686 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41030 10 6452 1 2025-09-23 12:55:13.945 00:00:10.368 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:51:32.453 00:05:01.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 12:56:14.349 00:00:10.366 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:56:14.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-09-23 12:57:22.107 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 12:57:14.750 00:00:10.393 TCP 23.104.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:57:15.119 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54772 10 6452 1 2025-09-23 12:57:22.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 12:58:15.181 00:00:10.364 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-09-23 12:58:15.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-09-23 11:56:32 - 2025-09-23 12:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0032s flows/second: 52028.3 Runtime: 0.0032s