Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 02:59:18.430 00:00:10.361 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:59:34.127 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 10 6452 1 2025-10-02 03:00:18.831 00:00:10.491 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:56:36.397 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:00:34.336 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-10-02 03:01:30.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:01:19.377 00:00:10.365 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:01:30.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:57:36.399 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:01:34.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41892 10 6452 1 2025-10-02 03:02:19.777 00:00:10.331 TCP 23.104.0.1:59314 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:02:34.781 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-10-02 03:03:20.176 00:00:10.355 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:03:34.998 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-10-02 03:04:20.573 00:00:10.388 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:04:35.221 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-10-02 03:05:21.000 00:00:10.368 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:05:35.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-10-02 03:06:30.563 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:06:30.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:06:21.408 00:00:10.367 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:02:36.397 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:06:35.661 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-10-02 03:07:21.817 00:00:10.364 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:03:36.399 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:07:35.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-10-02 03:08:22.224 00:00:10.365 TCP 23.104.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:08:36.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-10-02 03:09:22.632 00:00:10.364 TCP 23.104.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:09:36.323 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-10-02 03:10:23.044 00:00:10.362 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:10:36.531 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-10-02 03:11:30.341 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:11:30.408 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:11:23.448 00:00:10.368 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:11:36.745 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-10-02 03:12:23.855 00:00:10.376 TCP 23.104.0.1:45010 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:08:36.398 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:12:36.924 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 12 10375 1 2025-10-02 03:13:24.270 00:00:10.489 TCP 23.104.0.1:47650 -> 1.101.0.1:3000 15 1926 1 2025-10-02 03:09:36.400 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:13:37.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-10-02 03:14:24.802 00:00:10.344 TCP 23.104.0.1:45558 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:14:37.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47500 10 6452 1 2025-10-02 03:15:25.182 00:00:10.366 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:15:37.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-10-02 03:16:30.328 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:16:30.368 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:16:25.588 00:00:10.328 TCP 23.104.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:16:37.838 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-10-02 03:17:25.957 00:00:10.366 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:17:38.077 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-10-02 03:18:26.360 00:00:10.367 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:14:36.399 00:05:01.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:18:38.304 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 2025-10-02 03:19:26.769 00:00:10.373 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:15:36.403 00:05:01.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:19:38.482 00:00:10.402 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-10-02 03:20:27.177 00:00:10.364 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:20:38.925 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33356 10 6452 1 2025-10-02 03:21:30.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:21:30.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:21:27.578 00:00:10.371 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:21:39.136 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:35676 10 6452 1 2025-10-02 03:22:27.984 00:00:10.388 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:22:39.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-02 03:23:28.411 00:00:10.360 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:23:39.942 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48518 10 6452 1 2025-10-02 03:20:36.401 00:05:01.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:24:28.809 00:00:10.366 TCP 23.104.0.1:54098 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:24:40.140 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-10-02 03:21:36.406 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:25:29.211 00:00:10.373 TCP 23.104.0.1:39348 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:25:40.350 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-10-02 03:26:30.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:26:30.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:26:29.624 00:00:10.365 TCP 23.104.0.1:53462 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:26:40.568 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-10-02 03:27:30.028 00:00:10.365 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:27:40.906 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-10-02 03:28:30.436 00:00:10.373 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:28:41.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-10-02 03:29:30.849 00:00:10.389 TCP 23.104.0.1:33146 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:29:41.336 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48030 10 6452 1 2025-10-02 03:26:36.407 00:05:01.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:30:31.282 00:00:10.367 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:30:41.505 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:34114 10 6452 1 2025-10-02 03:31:30.896 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:31:30.735 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:27:36.410 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:31:31.688 00:00:10.322 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:31:41.814 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-10-02 03:32:32.050 00:00:10.375 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:32:42.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45062 10 6452 1 2025-10-02 03:33:32.464 00:00:10.328 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:33:42.321 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-10-02 03:34:32.827 00:00:10.352 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:34:42.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-10-02 03:35:33.223 00:00:10.360 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:35:42.734 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6452 1 2025-10-02 03:36:30.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:36:30.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:32:36.407 00:05:01.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:36:33.624 00:00:10.320 TCP 23.104.0.1:48616 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:36:42.950 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-10-02 03:33:36.410 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:37:33.982 00:00:10.362 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:37:43.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-10-02 03:38:34.390 00:00:10.370 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:38:43.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33906 10 6452 1 2025-10-02 03:39:34.796 00:00:10.338 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:39:43.610 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40276 10 6452 1 2025-10-02 03:40:35.175 00:00:10.366 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:40:43.832 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-10-02 03:41:30.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:41:31.052 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:41:35.578 00:00:10.325 TCP 23.104.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:41:44.074 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-10-02 03:38:36.408 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:42:35.941 00:00:10.334 TCP 23.104.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:42:44.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 10 6452 1 2025-10-02 03:39:36.410 00:05:01.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:43:36.309 00:00:10.368 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:43:44.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-10-02 03:44:36.714 00:00:10.374 TCP 23.104.0.1:37198 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:44:44.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-10-02 03:45:37.125 00:00:10.327 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:45:44.954 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56982 10 6452 1 2025-10-02 03:46:30.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:46:31.259 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:46:37.489 00:00:10.363 TCP 23.104.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:46:45.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6452 1 2025-10-02 03:47:37.892 00:00:10.321 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:47:45.394 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6452 1 2025-10-02 03:44:36.408 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:48:38.258 00:00:10.380 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:48:45.568 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-10-02 03:45:36.412 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:49:38.679 00:00:10.361 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:49:45.796 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6452 1 2025-10-02 03:50:39.104 00:00:10.321 TCP 23.104.0.1:56598 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:50:46.011 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-10-02 03:51:31.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:51:30.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:51:39.467 00:00:10.366 TCP 23.104.0.1:34758 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:51:46.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44578 10 6452 1 2025-10-02 03:52:39.869 00:00:10.371 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:52:46.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-10-02 03:53:40.281 00:00:10.368 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:53:46.613 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-10-02 03:50:36.412 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 03:54:40.684 00:00:10.377 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:54:46.828 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-10-02 03:51:36.416 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 03:55:41.109 00:00:10.362 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:55:46.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-10-02 03:56:31.292 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 03:56:31.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:56:41.514 00:00:10.365 TCP 23.104.0.1:41630 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:56:47.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38826 10 6452 1 2025-10-02 03:57:41.919 00:00:10.370 TCP 23.104.0.1:37136 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:57:47.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1075, avg pps: 0, avg bpp: 317 Time window: 2025-10-02 02:56:36 - 2025-10-02 03:57:57 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0020s Wall: 0.0022s flows/second: 72001.4 Runtime: 0.0023s