Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 14:58:41.955 00:00:10.335 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-09-27 14:59:06.140 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6452 1 2025-09-27 14:59:20.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 14:59:20.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 14:59:42.327 00:00:10.324 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:00:06.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-09-27 14:56:34.370 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:00:42.691 00:00:10.737 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:01:06.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-09-27 14:57:34.372 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:01:43.476 00:00:10.366 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:02:06.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40874 10 6452 1 2025-09-27 15:02:43.881 00:00:10.377 TCP 23.104.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:03:06.944 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-27 15:03:44.299 00:00:10.713 TCP 23.104.0.1:37124 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:04:20.394 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:04:07.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-09-27 15:04:20.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:04:45.057 00:00:10.361 TCP 23.104.0.1:54592 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:05:07.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6452 1 2025-09-27 15:05:45.453 00:00:10.728 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:06:07.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52074 10 6452 1 2025-09-27 15:02:34.373 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:06:46.217 00:00:10.363 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:07:07.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34034 10 6452 1 2025-09-27 15:03:34.377 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:07:46.615 00:00:10.318 TCP 23.104.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:08:07.996 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-09-27 15:08:46.971 00:00:10.371 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:09:20.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:09:08.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56924 10 6452 1 2025-09-27 15:09:20.488 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:09:47.382 00:00:10.369 TCP 23.104.0.1:34350 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:10:08.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-09-27 15:10:47.789 00:00:10.425 TCP 23.104.0.1:54982 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:11:08.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-09-27 15:11:48.253 00:00:10.402 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 15 1926 1 2025-09-27 15:12:08.847 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 12 10367 1 2025-09-27 15:08:34.374 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:12:48.698 00:00:10.362 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:13:09.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53362 10 6452 1 2025-09-27 15:09:34.377 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:13:49.103 00:00:10.367 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:14:09.318 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-09-27 15:14:20.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:14:20.540 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:14:49.507 00:00:10.363 TCP 23.104.0.1:60590 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:15:09.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-09-27 15:15:49.904 00:00:10.373 TCP 23.104.0.1:60876 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:16:09.741 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53000 10 6452 1 2025-09-27 15:16:50.315 00:00:10.364 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:17:09.962 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-09-27 15:17:50.716 00:00:10.326 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:18:10.140 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-09-27 15:14:34.375 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:18:51.105 00:00:10.363 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:19:20.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:19:20.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:19:10.354 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-09-27 15:15:34.377 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:19:51.509 00:00:10.368 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:20:10.592 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 10 6452 1 2025-09-27 15:20:51.914 00:00:10.332 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:21:10.822 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-09-27 15:21:52.288 00:00:10.322 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:22:11.001 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-09-27 15:22:52.651 00:00:10.370 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:23:11.192 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6452 1 2025-09-27 15:23:53.065 00:00:10.329 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:24:20.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:24:11.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-27 15:24:20.610 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:20:34.375 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:24:53.431 00:00:10.366 TCP 23.104.0.1:48976 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:25:11.626 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6452 1 2025-09-27 15:21:34.380 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:25:53.832 00:00:10.340 TCP 23.104.0.1:49690 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:26:11.840 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:58086 10 6452 1 2025-09-27 15:26:54.215 00:00:10.356 TCP 23.104.0.1:57536 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:27:12.038 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-09-27 15:27:54.617 00:00:10.323 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:28:12.253 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-09-27 15:28:54.982 00:00:10.657 TCP 23.104.0.1:60424 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:29:21.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:29:21.010 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:29:12.464 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-09-27 15:29:55.680 00:00:10.372 TCP 23.104.0.1:54438 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:30:12.680 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50958 10 6452 1 2025-09-27 15:26:34.379 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:30:56.103 00:00:10.336 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:31:12.908 00:00:10.770 TCP 1.101.0.1:3000 -> 22.102.0.1:46444 10 6452 1 2025-09-27 15:27:34.382 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:31:56.477 00:00:10.363 TCP 23.104.0.1:46946 -> 1.101.0.1:3000 12 1559 1 2025-09-27 15:32:13.716 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-09-27 15:32:56.879 00:00:10.366 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:33:13.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58120 10 6452 1 2025-09-27 15:33:57.282 00:00:10.369 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:34:20.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:34:20.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:34:14.169 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53574 10 6452 1 2025-09-27 15:34:57.689 00:00:10.366 TCP 23.104.0.1:35916 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:35:14.386 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-09-27 15:35:58.103 00:00:10.364 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:36:14.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34918 10 6452 1 2025-09-27 15:32:34.383 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:36:58.521 00:00:10.368 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:37:14.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-09-27 15:33:34.384 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:37:58.927 00:00:10.342 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:38:15.037 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-09-27 15:38:59.304 00:00:10.367 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:39:21.188 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:39:21.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:39:15.264 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-09-27 15:39:59.709 00:00:10.383 TCP 23.104.0.1:46612 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:40:15.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-09-27 15:41:00.113 00:00:10.325 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:41:15.648 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-09-27 15:42:00.474 00:00:10.359 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:42:15.864 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49886 10 6452 1 2025-09-27 15:38:34.384 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:43:00.867 00:00:10.375 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:43:16.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-09-27 15:39:34.387 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:44:01.282 00:00:10.327 TCP 23.104.0.1:44232 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:44:20.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:44:21.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:44:16.316 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-09-27 15:45:01.646 00:00:10.359 TCP 23.104.0.1:58330 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:45:16.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35210 10 6452 1 2025-09-27 15:46:02.049 00:00:10.367 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:46:16.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-09-27 15:47:02.454 00:00:10.326 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:47:16.922 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-09-27 15:48:02.820 00:00:10.369 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:48:17.140 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47654 10 6452 1 2025-09-27 15:44:34.384 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:49:03.229 00:00:10.327 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:49:21.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:49:21.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:49:17.360 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41118 10 6452 1 2025-09-27 15:45:34.389 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:50:03.590 00:00:10.366 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:50:17.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-09-27 15:51:04.005 00:00:10.364 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:51:17.756 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-09-27 15:52:04.408 00:00:10.360 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:52:17.970 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52254 10 6452 1 2025-09-27 15:53:04.808 00:00:10.367 TCP 23.104.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:53:18.215 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-09-27 15:54:05.208 00:00:10.364 TCP 23.104.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:54:21.202 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 15:54:21.180 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 15:54:18.433 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60086 10 6452 1 2025-09-27 15:50:34.386 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 15:55:05.607 00:00:10.362 TCP 23.104.0.1:34658 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:55:18.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55054 10 6452 1 2025-09-27 15:51:34.388 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 15:56:06.012 00:00:10.324 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:56:18.861 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-09-27 15:57:06.372 00:00:10.318 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:57:19.049 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-09-27 15:58:06.731 00:00:10.369 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-09-27 15:58:19.264 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55088 10 6452 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-09-27 14:56:34 - 2025-09-27 15:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0010s Wall: 0.0027s flows/second: 60556.9 Runtime: 0.0027s