Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 06:58:47.754 00:00:10.373 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-09-30 06:59:07.891 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-09-30 06:59:48.164 00:00:10.324 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:00:08.241 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52078 10 6452 1 2025-09-30 07:00:37.314 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 06:56:35.570 00:05:01.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:00:37.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:00:48.524 00:00:10.324 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:01:08.459 00:00:10.442 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-09-30 06:57:35.572 00:05:01.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:01:48.884 00:00:10.385 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:02:08.935 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-09-30 07:02:49.313 00:00:10.381 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:03:09.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-09-30 07:03:49.751 00:00:10.381 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:04:09.351 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-30 07:04:50.168 00:00:10.362 TCP 23.104.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:05:09.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6452 1 2025-09-30 07:05:37.265 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:05:37.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:05:50.573 00:00:10.400 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:06:09.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-09-30 07:02:35.570 00:05:01.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:06:51.012 00:00:10.365 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:07:09.946 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-09-30 07:03:35.574 00:05:01.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:07:51.414 00:00:10.369 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:08:10.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-09-30 07:08:51.820 00:00:10.363 TCP 23.104.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:09:10.351 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-09-30 07:09:52.226 00:00:10.365 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:10:10.558 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32786 10 6452 1 2025-09-30 07:10:37.203 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:10:37.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:10:52.629 00:00:10.364 TCP 23.104.0.1:53840 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:11:10.776 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35928 10 6452 1 2025-09-30 07:11:53.035 00:00:10.365 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:12:10.995 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-09-30 07:08:35.571 00:05:01.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:12:53.437 00:00:10.365 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:13:11.229 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-09-30 07:09:35.574 00:05:01.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:13:53.838 00:00:10.388 TCP 23.104.0.1:50192 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:14:11.456 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-09-30 07:14:54.264 00:00:10.326 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:15:11.665 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35942 10 6452 1 2025-09-30 07:15:37.577 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:15:37.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:15:54.628 00:00:10.359 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:16:11.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-09-30 07:16:55.028 00:00:10.362 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:17:12.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-09-30 07:17:55.427 00:00:10.320 TCP 23.104.0.1:51150 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:18:12.331 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46834 10 6452 1 2025-09-30 07:14:35.572 00:05:01.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:18:55.785 00:00:18.070 TCP 23.104.0.1:51678 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:19:12.574 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-09-30 07:15:35.574 00:05:01.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:20:03.891 00:00:10.374 TCP 23.104.0.1:41620 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:20:12.811 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:55702 11 6504 1 2025-09-30 07:20:37.531 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:20:37.623 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:21:04.308 00:00:10.325 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:21:13.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-09-30 07:22:04.673 00:00:10.362 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:22:13.318 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60368 10 6452 1 2025-09-30 07:23:05.100 00:00:10.364 TCP 23.104.0.1:37278 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:23:13.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2025-09-30 07:24:05.501 00:00:10.373 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:24:13.722 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2025-09-30 07:20:35.574 00:05:01.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:25:05.904 00:00:10.365 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:25:13.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-09-30 07:25:37.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:21:35.578 00:05:01.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:25:37.617 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:26:06.311 00:00:10.364 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:26:14.121 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-09-30 07:27:06.712 00:00:10.326 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:27:14.339 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 12 10369 1 2025-09-30 07:28:07.105 00:00:10.399 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 15 1926 1 2025-09-30 07:28:14.540 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-09-30 07:29:07.549 00:00:10.372 TCP 23.104.0.1:50402 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:29:14.755 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-09-30 07:30:07.954 00:00:10.418 TCP 23.104.0.1:49696 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:30:14.965 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 12 6556 1 2025-09-30 07:30:37.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:30:38.054 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:26:35.577 00:05:01.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:31:08.407 00:00:10.330 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:31:15.187 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32998 10 6452 1 2025-09-30 07:27:35.580 00:05:01.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:32:08.773 00:00:10.362 TCP 23.104.0.1:52188 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:32:15.360 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-09-30 07:33:09.173 00:00:10.366 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:33:15.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55654 10 6452 1 2025-09-30 07:34:09.575 00:00:10.364 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:34:15.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-09-30 07:35:09.982 00:00:10.365 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:35:15.959 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 12 6556 1 2025-09-30 07:35:38.511 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:35:37.906 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:36:10.386 00:00:10.324 TCP 23.104.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:36:16.181 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6452 1 2025-09-30 07:32:35.578 00:05:01.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:37:10.750 00:00:10.325 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:37:16.390 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56438 10 6452 1 2025-09-30 07:33:35.582 00:05:01.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:38:11.112 00:00:10.371 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:38:16.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39390 10 6452 1 2025-09-30 07:39:11.529 00:00:10.368 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:39:16.823 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-09-30 07:40:11.935 00:00:10.367 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:40:17.048 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-09-30 07:40:38.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:40:38.119 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:41:12.339 00:00:10.324 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:41:17.258 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-09-30 07:42:12.704 00:00:10.368 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:42:17.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-09-30 07:38:35.583 00:05:01.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:43:13.114 00:00:10.381 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:43:17.685 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-09-30 07:39:35.597 00:05:01.674 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:44:13.533 00:00:10.366 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:44:17.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39156 10 6452 1 2025-09-30 07:45:13.939 00:00:10.387 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:45:18.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-09-30 07:45:37.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:45:38.256 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:46:14.364 00:00:10.525 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:46:18.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55922 10 6452 1 2025-09-30 07:47:14.935 00:00:10.346 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:47:18.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36634 10 6452 1 2025-09-30 07:48:15.320 00:00:10.465 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:48:18.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6452 1 2025-09-30 07:44:35.599 00:05:01.677 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:49:15.826 00:00:10.394 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:49:18.975 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-09-30 07:45:35.601 00:05:01.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:50:16.260 00:00:10.364 TCP 23.104.0.1:54958 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:50:19.199 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 6452 1 2025-09-30 07:50:38.165 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:50:38.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:51:19.423 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-09-30 07:51:16.668 00:00:10.384 TCP 23.104.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:52:17.110 00:00:10.761 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:52:19.601 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6452 1 2025-09-30 07:53:17.910 00:00:10.369 TCP 23.104.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:53:19.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-09-30 07:54:20.035 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 6452 1 2025-09-30 07:54:18.318 00:00:10.364 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:50:35.603 00:05:01.674 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 07:55:20.468 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-09-30 07:55:18.716 00:00:10.372 TCP 23.104.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:55:38.365 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 07:55:38.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 07:51:35.605 00:05:01.669 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 07:56:19.127 00:00:10.380 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:56:20.643 00:00:10.587 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6452 1 2025-09-30 07:57:19.540 00:00:10.326 TCP 23.104.0.1:46042 -> 1.101.0.1:3000 11 1507 1 2025-09-30 07:57:21.272 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-09-30 07:58:21.485 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43164 10 6452 1 2025-09-30 07:58:19.905 00:00:10.970 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502944, total packets: 1583, avg bps: 1082, avg pps: 0, avg bpp: 317 Time window: 2025-09-30 06:56:35 - 2025-09-30 07:58:31 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0020s flows/second: 81433.2 Runtime: 0.0020s