Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 03:58:48.075 00:00:10.371 TCP 23.104.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:59:06.731 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:59:07.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:59:21.169 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-09-27 03:59:48.485 00:00:10.714 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:00:21.379 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41154 10 6452 1 2025-09-27 03:56:34.164 00:05:01.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:00:49.235 00:00:10.324 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:01:21.552 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-09-27 03:57:34.167 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:01:49.597 00:00:10.843 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:02:21.725 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-09-27 04:02:50.477 00:00:10.363 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:03:22.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-09-27 04:03:50.882 00:00:10.340 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:04:06.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:04:06.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:04:22.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44944 10 6452 1 2025-09-27 04:04:51.272 00:00:10.711 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:05:22.759 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:58034 10 6452 1 2025-09-27 04:05:52.043 00:00:10.370 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:06:23.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-09-27 04:02:34.166 00:05:01.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:06:52.452 00:00:10.373 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:07:23.283 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-09-27 04:03:34.170 00:05:01.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:07:52.869 00:00:10.328 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:08:23.500 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6452 1 2025-09-27 04:09:06.861 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:08:53.238 00:00:10.366 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:09:07.095 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:09:23.704 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56308 10 6452 1 2025-09-27 04:09:53.643 00:00:10.364 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:10:23.885 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49626 10 6452 1 2025-09-27 04:10:54.056 00:00:10.362 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:11:24.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48806 10 6452 1 2025-09-27 04:11:54.455 00:00:10.363 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:12:24.316 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-09-27 04:08:34.169 00:05:01.551 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:12:54.859 00:00:10.372 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:09:34.172 00:05:01.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:13:24.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-09-27 04:13:55.273 00:00:10.362 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:14:07.180 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:14:07.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:14:24.712 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 12 6556 1 2025-09-27 04:14:55.673 00:00:10.366 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:15:24.923 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-09-27 04:15:56.098 00:00:10.323 TCP 23.104.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:16:25.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-09-27 04:16:56.461 00:00:10.359 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:17:25.339 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:50442 10 6452 1 2025-09-27 04:17:56.865 00:00:10.383 TCP 23.104.0.1:54738 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:18:25.537 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-09-27 04:14:34.170 00:05:01.551 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:19:07.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:19:07.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:18:57.285 00:00:10.415 TCP 23.104.0.1:51388 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:19:25.759 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-09-27 04:15:34.172 00:05:01.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:19:57.748 00:00:10.363 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:20:25.969 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-09-27 04:20:58.151 00:00:10.337 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:21:26.205 00:00:10.787 TCP 1.101.0.1:3000 -> 22.102.0.1:42814 10 6452 1 2025-09-27 04:21:58.526 00:00:10.366 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:22:27.036 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39712 10 6452 1 2025-09-27 04:22:58.928 00:00:10.351 TCP 23.104.0.1:60678 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:23:27.246 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53998 10 6452 1 2025-09-27 04:24:07.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:23:59.316 00:00:10.369 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:24:07.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:20:34.171 00:05:01.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:24:27.470 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-09-27 04:24:59.724 00:00:10.370 TCP 23.104.0.1:58204 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:21:34.173 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:25:27.683 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-09-27 04:26:00.132 00:00:10.363 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:26:27.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49726 10 6452 1 2025-09-27 04:27:00.533 00:00:10.368 TCP 23.104.0.1:57914 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:27:28.122 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-09-27 04:28:00.935 00:00:10.331 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:28:28.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59792 10 6452 1 2025-09-27 04:29:07.316 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:29:01.306 00:00:10.363 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:29:07.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:29:28.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 6452 1 2025-09-27 04:30:01.706 00:00:10.359 TCP 23.104.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:26:34.172 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:30:28.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-09-27 04:31:02.107 00:00:10.366 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:27:34.175 00:05:01.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:31:28.971 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48946 10 6452 1 2025-09-27 04:32:02.514 00:00:10.365 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:32:29.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46516 10 6452 1 2025-09-27 04:33:02.921 00:00:10.382 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:33:29.421 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2025-09-27 04:34:07.213 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:34:07.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:34:03.345 00:00:10.364 TCP 23.104.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:34:29.634 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-09-27 04:35:03.749 00:00:10.337 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:35:29.844 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 10 6452 1 2025-09-27 04:36:04.123 00:00:10.366 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:32:34.174 00:05:01.551 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:36:30.080 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-09-27 04:37:04.527 00:00:10.365 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:33:34.176 00:05:01.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:37:30.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-27 04:38:04.929 00:00:10.431 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:38:30.467 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-09-27 04:39:07.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:39:07.604 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:39:05.401 00:00:10.324 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:39:30.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50792 10 6452 1 2025-09-27 04:40:05.761 00:00:10.332 TCP 23.104.0.1:40468 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:40:30.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-09-27 04:41:06.132 00:00:10.336 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:41:31.111 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-09-27 04:42:06.505 00:00:10.362 TCP 23.104.0.1:38490 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:38:34.176 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:42:31.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 10 6452 1 2025-09-27 04:43:06.906 00:00:10.367 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:39:34.176 00:05:01.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:43:31.548 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-09-27 04:44:08.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:44:08.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:44:07.313 00:00:10.373 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:44:31.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41078 10 6452 1 2025-09-27 04:45:07.727 00:00:10.336 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:45:32.036 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55504 10 6452 1 2025-09-27 04:46:08.108 00:00:10.323 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:46:32.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34824 10 6452 1 2025-09-27 04:47:08.470 00:00:10.360 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:47:32.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-09-27 04:48:08.869 00:00:10.369 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:44:34.178 00:05:01.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:48:32.680 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-09-27 04:49:07.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:49:07.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:49:09.276 00:00:10.367 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:45:34.184 00:05:01.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:49:32.895 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-09-27 04:50:09.690 00:00:13.199 TCP 23.104.0.1:35694 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:50:33.082 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-09-27 04:51:12.940 00:00:13.100 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:51:33.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-09-27 04:52:16.099 00:00:10.335 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:52:33.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-09-27 04:53:16.471 00:00:10.370 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:53:33.730 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-09-27 04:54:07.872 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 04:54:07.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 04:54:16.878 00:00:10.358 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:50:34.182 00:05:01.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 04:54:33.901 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36566 10 6452 1 2025-09-27 04:55:17.273 00:00:10.358 TCP 23.104.0.1:51484 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:51:34.184 00:05:01.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 04:55:34.119 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-09-27 04:56:17.673 00:00:10.360 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:56:34.335 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-09-27 04:57:18.104 00:00:10.440 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 15 1926 1 2025-09-27 04:57:34.555 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 12 10367 1 2025-09-27 04:58:18.581 00:00:10.361 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-09-27 04:58:34.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-09-27 03:56:34 - 2025-09-27 04:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0024s flows/second: 68993.6 Runtime: 0.0024s