Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-28 02:58:49.941 00:00:10.372 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-09-28 02:59:20.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-09-28 02:59:34.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 02:59:34.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 02:59:50.353 00:00:10.366 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:00:20.336 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-09-28 02:56:34.583 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:00:50.762 00:00:10.379 TCP 23.104.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:01:20.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-09-28 02:57:34.585 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:01:51.183 00:00:10.360 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:02:20.759 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-09-28 03:02:51.587 00:00:10.322 TCP 23.104.0.1:37032 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:03:20.990 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-09-28 03:03:51.946 00:00:10.369 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:04:21.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-09-28 03:04:34.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:04:34.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:04:52.358 00:00:10.363 TCP 23.104.0.1:58038 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:05:21.419 00:00:10.544 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-09-28 03:05:52.761 00:00:10.376 TCP 23.104.0.1:33980 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:02:34.584 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:06:21.998 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-09-28 03:06:53.177 00:00:10.370 TCP 23.104.0.1:54890 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:07:22.221 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-09-28 03:03:34.588 00:05:01.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:07:53.587 00:00:10.380 TCP 23.104.0.1:48942 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:08:22.432 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39602 10 6452 1 2025-09-28 03:08:54.005 00:00:10.366 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:09:22.649 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-09-28 03:09:34.625 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:09:34.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:09:54.409 00:00:10.365 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:10:22.878 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45422 10 6452 1 2025-09-28 03:10:54.811 00:00:10.368 TCP 23.104.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:11:23.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-09-28 03:11:55.225 00:00:10.403 TCP 23.104.0.1:56216 -> 1.101.0.1:3000 15 1926 1 2025-09-28 03:12:23.256 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 12 10365 1 2025-09-28 03:08:34.585 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:12:55.669 00:00:10.364 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:09:34.587 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:13:23.502 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6452 1 2025-09-28 03:13:56.104 00:00:10.372 TCP 23.104.0.1:51176 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:14:34.694 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:14:23.723 00:00:10.322 TCP 1.101.0.1:3000 -> 22.102.0.1:39968 10 6452 1 2025-09-28 03:14:34.986 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:14:56.510 00:00:10.365 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:15:24.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53456 12 6556 1 2025-09-28 03:15:56.911 00:00:10.369 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:16:24.302 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-09-28 03:16:57.318 00:00:10.365 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:17:24.857 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-09-28 03:17:57.724 00:00:10.368 TCP 23.104.0.1:55744 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:18:25.102 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-09-28 03:14:34.585 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:18:58.130 00:00:10.371 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:19:34.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:19:25.280 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-09-28 03:19:35.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:15:34.588 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:19:58.537 00:00:10.368 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:20:25.488 00:00:10.918 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 11 6504 1 2025-09-28 03:20:58.944 00:00:10.371 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:21:26.445 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-09-28 03:21:59.356 00:00:10.375 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:22:26.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44970 10 6452 1 2025-09-28 03:22:59.773 00:00:10.369 TCP 23.104.0.1:57232 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:23:26.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6452 1 2025-09-28 03:24:00.181 00:00:10.361 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:24:34.979 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:24:34.875 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:20:34.587 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:24:27.101 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 10 6452 1 2025-09-28 03:25:00.580 00:00:10.363 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:21:34.591 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:25:27.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-09-28 03:26:00.983 00:00:10.374 TCP 23.104.0.1:44886 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:26:27.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-09-28 03:27:01.403 00:00:10.373 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:27:27.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-09-28 03:28:01.817 00:00:10.365 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:28:27.949 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 11 6504 1 2025-09-28 03:29:02.218 00:00:10.324 TCP 23.104.0.1:42092 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:29:34.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:29:35.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:29:28.202 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-09-28 03:30:02.572 00:00:10.368 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:26:34.589 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:30:28.415 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36016 10 6452 1 2025-09-28 03:31:02.976 00:00:10.383 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:27:34.592 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:31:28.593 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-09-28 03:32:03.420 00:00:10.366 TCP 23.104.0.1:57848 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:32:28.805 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-09-28 03:33:03.828 00:00:10.394 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:33:29.026 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-09-28 03:34:04.258 00:00:10.365 TCP 23.104.0.1:48174 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:34:35.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:34:35.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:34:29.251 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2025-09-28 03:35:04.661 00:00:10.368 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:35:29.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-09-28 03:36:05.094 00:00:10.327 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:32:34.592 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:36:29.675 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33454 10 6452 1 2025-09-28 03:37:05.458 00:00:10.367 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:33:34.595 00:05:01.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:37:29.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-09-28 03:38:05.864 00:00:10.370 TCP 23.104.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:38:30.124 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43132 10 6452 1 2025-09-28 03:39:06.276 00:00:10.328 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:39:35.515 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:39:35.366 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:39:30.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58618 10 6452 1 2025-09-28 03:40:06.642 00:00:10.377 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:40:30.570 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 6452 1 2025-09-28 03:41:07.084 00:00:10.363 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:41:30.795 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-09-28 03:42:07.488 00:00:10.363 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:42:30.977 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39394 10 6452 1 2025-09-28 03:38:34.600 00:05:01.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:43:07.887 00:00:10.384 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:39:34.603 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:43:31.211 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-09-28 03:44:08.309 00:00:10.367 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:44:35.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:44:35.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:44:31.417 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-09-28 03:45:08.717 00:00:10.379 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:45:31.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-09-28 03:46:09.134 00:00:10.368 TCP 23.104.0.1:49956 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:46:31.845 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49346 10 6452 1 2025-09-28 03:47:09.543 00:00:10.364 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:47:32.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49914 10 6452 1 2025-09-28 03:48:09.943 00:00:10.335 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:44:34.609 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:48:32.294 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-09-28 03:49:10.322 00:00:10.684 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:49:35.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:49:35.571 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:45:34.611 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:49:32.506 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-09-28 03:50:11.053 00:00:10.363 TCP 23.104.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:50:32.725 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:32784 10 6452 1 2025-09-28 03:51:11.451 00:00:10.360 TCP 23.104.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:51:32.896 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-09-28 03:52:11.854 00:00:10.379 TCP 23.104.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:52:33.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52512 10 6452 1 2025-09-28 03:53:12.269 00:00:10.367 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:53:33.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-09-28 03:54:12.677 00:00:10.346 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:54:35.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-28 03:54:35.748 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-28 03:50:34.610 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-28 03:54:33.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48696 10 6452 1 2025-09-28 03:55:13.067 00:00:10.365 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:51:34.612 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-28 03:55:33.753 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-09-28 03:56:13.471 00:00:10.366 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:56:33.965 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2025-09-28 03:57:13.875 00:00:10.363 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:57:34.145 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-09-28 03:58:14.277 00:00:10.369 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-09-28 03:58:34.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 Summary: total flows: 164, total bytes: 502888, total packets: 1582, avg bps: 1078, avg pps: 0, avg bpp: 317 Time window: 2025-09-28 02:56:34 - 2025-09-28 03:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0020s Wall: 0.0023s flows/second: 71303.6 Runtime: 0.0023s