Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 02:59:08.106 00:00:10.366 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-10-01 02:59:20.193 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-10-01 03:00:08.511 00:00:10.372 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:00:20.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36554 10 6452 1 2025-10-01 02:56:35.968 00:05:01.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:01:01.343 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:01:01.419 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:01:08.918 00:00:10.373 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:01:20.617 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-10-01 02:57:35.970 00:05:01.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:02:09.331 00:00:10.762 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:02:20.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6452 1 2025-10-01 03:03:10.129 00:00:10.324 TCP 23.104.0.1:33450 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:03:21.069 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-10-01 03:04:10.493 00:00:10.362 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:04:21.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-10-01 03:05:10.895 00:00:10.329 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:05:21.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58486 10 6452 1 2025-10-01 03:06:01.435 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:06:01.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:06:11.264 00:00:10.323 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:06:21.671 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59190 10 6452 1 2025-10-01 03:02:35.969 00:05:01.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:07:11.627 00:00:10.366 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:07:21.885 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-10-01 03:03:35.970 00:05:01.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:08:12.028 00:00:10.371 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:08:22.109 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60308 10 6452 1 2025-10-01 03:09:12.439 00:00:10.363 TCP 23.104.0.1:43956 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:09:22.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56590 10 6452 1 2025-10-01 03:10:12.841 00:00:10.381 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:10:22.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2025-10-01 03:11:01.411 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:11:01.396 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:11:13.265 00:00:10.366 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:11:22.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56878 10 6452 1 2025-10-01 03:12:13.672 00:00:10.626 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:12:22.961 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-10-01 03:08:35.968 00:05:01.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:13:14.356 00:00:10.376 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:13:23.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-10-01 03:09:35.972 00:05:01.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:14:14.773 00:00:10.341 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:14:23.405 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-10-01 03:15:15.157 00:00:10.361 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:15:23.577 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-10-01 03:16:01.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:16:01.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:16:15.562 00:00:10.326 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:16:23.793 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-10-01 03:17:15.926 00:00:10.381 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:17:23.980 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:32998 10 6452 1 2025-10-01 03:18:16.345 00:00:10.367 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:18:24.170 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57930 10 6452 1 2025-10-01 03:14:35.970 00:05:01.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:19:16.751 00:00:10.375 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:19:24.384 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-10-01 03:15:35.972 00:05:01.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:20:17.168 00:00:10.363 TCP 23.104.0.1:42364 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:20:24.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45938 10 6452 1 2025-10-01 03:21:01.608 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:21:01.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:21:17.568 00:00:10.362 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:21:24.845 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-10-01 03:22:17.968 00:00:10.975 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:22:25.102 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-10-01 03:23:18.986 00:00:10.567 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:23:25.329 00:00:10.844 TCP 1.101.0.1:3000 -> 22.102.0.1:37044 10 6452 1 2025-10-01 03:24:19.593 00:00:10.362 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:24:26.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 10 6452 1 2025-10-01 03:20:35.970 00:05:01.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:25:19.992 00:00:10.371 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:25:26.434 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53522 10 6452 1 2025-10-01 03:21:35.972 00:05:01.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:26:01.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:26:01.649 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:26:20.405 00:00:10.366 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:26:26.656 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45760 10 6452 1 2025-10-01 03:27:20.811 00:00:10.333 TCP 23.104.0.1:37910 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:27:26.880 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 10 6452 1 2025-10-01 03:28:21.188 00:00:10.363 TCP 23.104.0.1:49908 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:28:27.108 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2025-10-01 03:29:21.590 00:00:10.362 TCP 23.104.0.1:43702 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:29:27.335 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-10-01 03:30:21.988 00:00:10.373 TCP 23.104.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:30:27.549 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44584 10 6452 1 2025-10-01 03:26:35.974 00:05:01.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:31:01.756 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:31:01.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:31:22.400 00:00:10.364 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:31:27.762 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42332 10 6452 1 2025-10-01 03:27:35.978 00:05:01.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:32:22.805 00:00:10.371 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:32:27.944 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-10-01 03:33:23.208 00:00:10.397 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:33:28.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32838 10 6452 1 2025-10-01 03:34:23.643 00:00:10.372 TCP 23.104.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:34:28.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-10-01 03:35:24.053 00:00:10.367 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:35:28.607 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-10-01 03:36:01.818 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:36:01.596 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:36:24.460 00:00:10.360 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:36:28.815 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47522 10 6452 1 2025-10-01 03:32:35.978 00:05:01.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:37:24.862 00:00:10.376 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:37:29.049 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-10-01 03:33:35.980 00:05:01.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:38:25.274 00:00:10.361 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:38:29.261 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40992 10 6452 1 2025-10-01 03:39:25.679 00:00:10.365 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:39:29.475 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-10-01 03:40:26.103 00:00:10.362 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:40:29.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51794 10 6452 1 2025-10-01 03:41:01.903 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:41:01.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:41:26.512 00:00:10.370 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:41:29.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36114 10 6452 1 2025-10-01 03:42:30.118 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-10-01 03:38:35.978 00:05:01.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:42:26.918 00:00:10.387 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:43:27.342 00:00:10.369 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:39:35.981 00:05:01.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:43:30.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-10-01 03:44:30.510 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43702 10 6452 1 2025-10-01 03:44:27.754 00:00:10.375 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:45:30.722 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-10-01 03:45:28.166 00:00:10.368 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:46:01.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:46:01.759 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:46:31.224 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40962 10 6452 1 2025-10-01 03:46:28.576 00:00:10.363 TCP 23.104.0.1:54320 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:47:31.400 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-10-01 03:47:28.975 00:00:10.365 TCP 23.104.0.1:60300 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:48:31.573 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-10-01 03:44:35.978 00:05:01.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:48:29.383 00:00:10.322 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:49:29.741 00:00:10.366 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:45:35.982 00:05:01.704 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:49:31.792 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-10-01 03:50:30.144 00:00:10.322 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:50:32.026 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-10-01 03:51:01.953 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:51:02.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:51:30.508 00:00:10.529 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:51:32.254 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-10-01 03:52:31.092 00:00:10.471 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 17 2241 1 2025-10-01 03:52:32.474 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:42488 14 14292 1 2025-10-01 03:53:31.602 00:00:10.363 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:53:32.740 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51160 10 6452 1 2025-10-01 03:50:35.980 00:05:01.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 03:54:32.955 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40108 12 6556 1 2025-10-01 03:54:32.003 00:00:10.325 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:55:33.186 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40250 10 6452 1 2025-10-01 03:51:35.982 00:05:01.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 03:55:32.371 00:00:10.366 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:56:02.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 03:56:02.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 03:56:32.777 00:00:10.366 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:56:33.408 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 2025-10-01 03:57:33.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 10 6452 1 2025-10-01 03:57:33.187 00:00:10.365 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-10-01 03:58:33.845 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 10 6452 1 2025-10-01 03:58:33.598 00:00:10.359 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1088, avg pps: 0, avg bpp: 320 Time window: 2025-10-01 02:56:35 - 2025-10-01 03:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0018s Wall: 0.0023s flows/second: 71518.6 Runtime: 0.0023s