Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 00:59:02.134 00:00:10.363 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-09-30 00:59:21.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-09-30 01:00:02.539 00:00:10.328 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:00:30.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:00:29.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:00:21.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-09-30 00:56:35.473 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:01:02.912 00:00:10.372 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:01:22.013 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-09-30 00:57:35.475 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:02:03.326 00:00:10.367 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:02:22.231 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-09-30 01:03:03.729 00:00:10.369 TCP 23.104.0.1:41662 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:03:22.406 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55240 10 6452 1 2025-09-30 01:04:04.138 00:00:10.324 TCP 23.104.0.1:37382 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:04:22.575 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-09-30 01:05:04.502 00:00:10.367 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:05:30.056 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:05:29.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:05:22.796 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48250 10 6452 1 2025-09-30 01:06:04.903 00:00:10.368 TCP 23.104.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:06:23.002 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-09-30 01:02:35.474 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:07:05.304 00:00:10.321 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:07:23.179 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:39072 10 6452 1 2025-09-30 01:03:35.477 00:05:01.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:08:05.665 00:00:10.364 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:08:23.927 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6452 1 2025-09-30 01:09:06.099 00:00:10.324 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:09:24.170 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42978 10 6452 1 2025-09-30 01:10:06.459 00:00:10.363 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:10:29.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:10:30.108 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:10:24.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59670 10 6452 1 2025-09-30 01:11:06.858 00:00:10.334 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:11:24.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-09-30 01:12:07.225 00:00:10.447 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:12:24.818 00:00:10.510 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-09-30 01:08:35.475 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:13:07.709 00:00:10.363 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:13:25.368 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-30 01:09:35.477 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:14:08.111 00:00:10.379 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:14:25.579 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-09-30 01:15:08.522 00:00:10.364 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:15:30.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:15:30.111 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:15:25.790 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-09-30 01:16:08.924 00:00:10.385 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:16:26.006 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-09-30 01:17:09.349 00:00:10.824 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:17:26.242 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-09-30 01:18:10.211 00:00:10.366 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:18:26.418 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-09-30 01:14:35.476 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:19:10.617 00:00:10.370 TCP 23.104.0.1:33166 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:19:26.643 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-09-30 01:15:35.478 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:20:11.023 00:00:10.371 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:20:30.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:20:30.376 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:20:26.873 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-09-30 01:21:11.429 00:00:10.384 TCP 23.104.0.1:59566 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:21:27.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-09-30 01:22:11.861 00:00:10.336 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:22:27.325 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-09-30 01:23:12.230 00:00:10.367 TCP 23.104.0.1:59456 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:23:27.548 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47526 10 6452 1 2025-09-30 01:24:12.633 00:00:10.368 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:24:27.754 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 10 6452 1 2025-09-30 01:20:35.477 00:05:01.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:25:13.059 00:00:10.367 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:25:30.376 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:25:30.405 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:21:35.479 00:05:01.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:25:27.961 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36040 12 6556 1 2025-09-30 01:26:13.465 00:00:10.368 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:26:28.179 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-09-30 01:27:13.872 00:00:10.370 TCP 23.104.0.1:56480 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:27:28.345 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-09-30 01:28:14.288 00:00:10.371 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:28:28.560 00:00:10.957 TCP 1.101.0.1:3000 -> 22.102.0.1:43816 10 6452 1 2025-09-30 01:29:14.691 00:00:10.366 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:29:29.557 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-09-30 01:30:15.104 00:00:10.366 TCP 23.104.0.1:41922 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:30:30.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:30:30.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:30:29.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53510 10 6452 1 2025-09-30 01:26:35.480 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:31:15.507 00:00:10.363 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:31:30.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-09-30 01:27:35.481 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:32:15.905 00:00:10.333 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:32:30.219 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55470 10 6452 1 2025-09-30 01:33:16.276 00:00:10.323 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:33:30.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-09-30 01:34:16.633 00:00:10.368 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:34:30.664 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:46640 10 6452 1 2025-09-30 01:35:30.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:35:30.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:35:17.058 00:00:10.329 TCP 23.104.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:35:30.927 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-09-30 01:36:17.423 00:00:10.418 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:36:31.169 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-09-30 01:32:35.479 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:37:17.881 00:00:10.347 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:37:31.359 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-09-30 01:33:35.482 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:38:18.267 00:00:10.323 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:38:31.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-09-30 01:39:18.628 00:00:10.365 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:39:31.749 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6452 1 2025-09-30 01:40:30.692 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:40:30.505 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:40:19.033 00:00:10.360 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:40:31.920 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-09-30 01:41:19.436 00:00:10.323 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:41:32.095 00:00:15.004 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-09-30 01:42:19.802 00:00:10.366 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:38:35.489 00:05:01.658 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:42:37.134 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-09-30 01:43:20.211 00:00:11.378 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:39:35.493 00:05:01.653 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:43:37.345 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-09-30 01:44:21.627 00:00:10.325 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:44:37.557 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-09-30 01:45:30.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:45:30.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:45:21.993 00:00:10.366 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:45:37.730 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2025-09-30 01:46:22.403 00:00:10.375 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:46:38.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59198 10 6452 1 2025-09-30 01:47:22.818 00:00:10.370 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:47:38.329 00:00:10.802 TCP 1.101.0.1:3000 -> 22.102.0.1:52898 10 6452 1 2025-09-30 01:48:23.221 00:00:10.326 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:44:35.490 00:05:01.659 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:48:39.170 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-09-30 01:49:23.587 00:00:10.366 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:45:35.494 00:05:01.654 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:49:39.342 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35364 10 6452 1 2025-09-30 01:50:30.932 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:50:30.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:50:23.987 00:00:10.674 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:50:39.548 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33510 10 6452 1 2025-09-30 01:51:24.703 00:00:10.360 TCP 23.104.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:51:39.757 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-09-30 01:52:25.108 00:00:10.364 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:52:39.927 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 10 6452 1 2025-09-30 01:53:25.511 00:00:10.362 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:53:40.164 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52014 10 6452 1 2025-09-30 01:54:25.913 00:00:10.329 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:50:35.492 00:05:01.662 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 01:54:40.381 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-09-30 01:55:31.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:55:31.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 01:55:26.291 00:00:10.365 TCP 23.104.0.1:56114 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:51:35.495 00:05:01.656 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 01:55:40.597 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36774 10 6452 1 2025-09-30 01:56:26.695 00:00:10.324 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:56:40.825 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-09-30 01:57:27.080 00:00:10.435 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 15 1926 1 2025-09-30 01:57:41.065 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:36492 12 10375 1 2025-09-30 01:58:27.554 00:00:10.369 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:58:41.319 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-30 00:56:35 - 2025-09-30 01:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0012s Wall: 0.0016s flows/second: 103734.9 Runtime: 0.0016s