Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 03:59:10.111 00:00:10.363 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-09-26 03:59:23.719 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6452 1 2025-09-26 04:00:10.513 00:00:10.323 TCP 23.104.0.1:39328 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:00:23.946 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53942 10 6452 1 2025-09-26 03:56:33.682 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:01:10.873 00:00:10.328 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:01:24.140 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 12 10365 1 2025-09-26 03:57:33.686 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:02:11.237 00:00:10.441 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 15 1926 1 2025-09-26 04:02:24.383 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-09-26 04:03:11.716 00:00:10.371 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:03:24.609 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-09-26 04:03:37.808 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:03:38.074 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:04:12.126 00:00:10.371 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:04:24.824 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-09-26 04:05:12.538 00:00:10.360 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:05:25.069 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51612 10 6452 1 2025-09-26 04:06:12.936 00:00:10.334 TCP 23.104.0.1:53380 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:06:25.275 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-09-26 04:02:33.688 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:07:13.309 00:00:10.368 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:07:25.489 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-09-26 04:03:33.689 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:08:13.714 00:00:10.369 TCP 23.104.0.1:35660 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:08:25.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-09-26 04:08:38.173 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:08:38.359 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:09:14.127 00:00:10.326 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:09:25.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-09-26 04:10:14.495 00:00:10.361 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:10:26.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-09-26 04:11:14.896 00:00:10.381 TCP 23.104.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:11:26.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58550 10 6452 1 2025-09-26 04:12:15.314 00:00:10.367 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:08:33.689 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:12:26.556 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:44380 10 6452 1 2025-09-26 04:13:15.723 00:00:10.372 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:09:33.691 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:13:38.101 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:13:38.292 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:13:27.025 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42492 10 6452 1 2025-09-26 04:14:16.129 00:00:10.322 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:14:27.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-09-26 04:15:16.497 00:00:10.376 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:15:27.454 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-09-26 04:16:16.962 00:00:10.429 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:16:27.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-09-26 04:17:17.428 00:00:10.367 TCP 23.104.0.1:35660 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:17:27.882 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-09-26 04:18:17.832 00:00:10.345 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:14:33.690 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:18:38.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:18:28.101 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 2025-09-26 04:18:38.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:19:18.217 00:00:10.363 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:15:33.695 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:19:28.314 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34384 10 6452 1 2025-09-26 04:20:18.623 00:00:10.359 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:20:28.536 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-09-26 04:21:19.026 00:00:10.365 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:21:28.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-09-26 04:22:19.432 00:00:10.363 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:22:28.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-09-26 04:23:19.836 00:00:10.349 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:23:38.452 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:23:29.215 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57438 10 6452 1 2025-09-26 04:23:38.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:24:20.220 00:00:10.367 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:20:33.693 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:24:29.451 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-09-26 04:25:20.624 00:00:10.361 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:21:33.696 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:25:29.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51146 10 6452 1 2025-09-26 04:26:21.025 00:00:10.323 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:26:29.876 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52258 10 6452 1 2025-09-26 04:27:21.389 00:00:10.361 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:27:30.101 00:00:10.883 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-09-26 04:28:21.789 00:00:10.366 TCP 23.104.0.1:46634 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:28:38.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:28:39.033 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:28:31.025 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40786 10 6452 1 2025-09-26 04:29:22.196 00:00:10.368 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:29:31.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54118 10 6452 1 2025-09-26 04:26:33.694 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:30:22.600 00:00:10.325 TCP 23.104.0.1:39754 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:30:31.455 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-09-26 04:27:33.697 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:31:22.962 00:00:10.365 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:31:31.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59430 10 6452 1 2025-09-26 04:32:23.361 00:00:10.367 TCP 23.104.0.1:53868 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:32:31.798 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40608 10 6452 1 2025-09-26 04:33:23.766 00:00:10.332 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:33:38.493 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:33:38.516 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:33:32.006 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-09-26 04:34:24.139 00:00:10.360 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:34:32.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60648 10 6452 1 2025-09-26 04:35:24.537 00:00:10.362 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:35:32.431 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-09-26 04:36:24.936 00:00:10.340 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:32:33.696 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:36:32.645 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-09-26 04:37:25.317 00:00:10.362 TCP 23.104.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:33:33.700 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:37:32.857 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-09-26 04:38:25.719 00:00:10.364 TCP 23.104.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:38:38.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:38:38.899 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:38:33.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-09-26 04:39:26.121 00:00:10.366 TCP 23.104.0.1:54670 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:39:33.295 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-09-26 04:40:26.531 00:00:10.368 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:40:33.501 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-09-26 04:41:26.932 00:00:10.389 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:41:34.212 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-09-26 04:38:33.698 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:42:27.385 00:00:10.367 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:42:34.421 00:00:11.093 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-09-26 04:39:33.700 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:43:38.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:43:27.795 00:00:10.380 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:43:39.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:43:35.551 00:00:11.339 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-09-26 04:44:28.216 00:00:10.360 TCP 23.104.0.1:60404 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:44:36.931 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51372 10 6452 1 2025-09-26 04:45:28.618 00:00:10.373 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:45:37.171 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-09-26 04:46:29.032 00:00:10.741 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:46:37.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51028 10 6452 1 2025-09-26 04:47:29.820 00:00:10.368 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:47:37.553 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-09-26 04:48:39.316 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:48:30.222 00:00:10.328 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:44:33.700 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:48:39.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:48:37.728 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-09-26 04:45:33.703 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:49:30.589 00:00:10.363 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:49:37.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6452 1 2025-09-26 04:50:30.991 00:00:10.327 TCP 23.104.0.1:56134 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:50:38.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-09-26 04:51:31.354 00:00:10.361 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:51:38.387 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-09-26 04:52:31.752 00:00:10.381 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:52:38.595 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-09-26 04:53:38.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:53:39.118 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:53:32.171 00:00:10.325 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:53:38.809 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-26 04:50:33.701 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 04:54:32.536 00:00:10.365 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:54:39.031 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36620 10 6452 1 2025-09-26 04:51:33.705 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 04:55:32.935 00:00:10.376 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:55:39.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-09-26 04:56:33.346 00:00:10.371 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:56:39.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6452 1 2025-09-26 04:57:33.755 00:00:10.372 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:57:39.671 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-09-26 04:58:39.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 04:58:39.084 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 04:58:34.162 00:00:10.363 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-09-26 04:58:39.884 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-26 03:56:33 - 2025-09-26 04:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0052s flows/second: 31782.4 Runtime: 0.0052s