Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 02:59:08.604 00:00:10.367 TCP 23.104.0.1:57542 -> 1.101.0.1:3000 11 1507 1 2025-10-04 02:59:20.565 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-10-04 03:00:09.013 00:00:10.364 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:00:20.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-10-04 02:56:37.349 00:05:01.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:01:09.412 00:00:10.363 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:01:21.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-10-04 02:57:37.352 00:05:01.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:02:09.810 00:00:10.368 TCP 23.104.0.1:42496 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:02:27.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:02:21.282 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 10 6452 1 2025-10-04 03:02:27.804 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:03:10.216 00:00:10.372 TCP 23.104.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:03:21.496 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-10-04 03:04:10.623 00:00:10.362 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:04:21.714 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33762 10 6452 1 2025-10-04 03:05:11.022 00:00:10.369 TCP 23.104.0.1:36624 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:05:21.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-10-04 03:06:11.428 00:00:10.362 TCP 23.104.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:06:22.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6452 1 2025-10-04 03:02:37.350 00:05:01.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:07:11.832 00:00:10.392 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:07:28.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:07:28.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:07:22.328 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 10 6452 1 2025-10-04 03:03:37.354 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:08:12.261 00:00:10.364 TCP 23.104.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:08:22.558 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 11 6504 1 2025-10-04 03:09:12.665 00:00:10.323 TCP 23.104.0.1:44538 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:09:22.829 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41138 10 6452 1 2025-10-04 03:10:13.033 00:00:10.321 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:10:23.040 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44182 10 6452 1 2025-10-04 03:11:13.401 00:00:10.369 TCP 23.104.0.1:59414 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:11:23.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 10 6452 1 2025-10-04 03:12:13.805 00:00:10.366 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:12:28.063 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:12:28.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:12:23.443 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-10-04 03:08:37.353 00:05:01.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:13:14.209 00:00:10.362 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:13:23.655 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-10-04 03:09:37.354 00:05:01.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:14:14.615 00:00:10.359 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:14:23.868 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40308 10 6452 1 2025-10-04 03:15:15.031 00:00:10.358 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:15:24.098 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-10-04 03:16:15.429 00:00:10.365 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:16:24.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-10-04 03:17:15.837 00:00:10.391 TCP 23.104.0.1:35110 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:17:28.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:17:28.294 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:17:25.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-10-04 03:18:16.271 00:00:10.442 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 15 1926 1 2025-10-04 03:18:25.231 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 12 10375 1 2025-10-04 03:14:37.356 00:05:01.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:19:16.760 00:00:10.373 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:19:25.480 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-10-04 03:15:37.359 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:20:17.169 00:00:10.363 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:20:25.693 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-10-04 03:21:17.573 00:00:10.365 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:21:25.913 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46342 10 6452 1 2025-10-04 03:22:28.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:22:28.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:22:17.978 00:00:10.365 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:22:26.134 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 11 6813 1 2025-10-04 03:23:18.385 00:00:10.363 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:23:26.365 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-10-04 03:24:18.791 00:00:10.336 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:24:26.583 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-10-04 03:20:37.359 00:05:01.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:25:19.166 00:00:10.364 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:25:26.797 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58780 10 6452 1 2025-10-04 03:21:37.361 00:05:01.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:26:19.573 00:00:10.321 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:26:27.039 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-10-04 03:27:28.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:27:28.656 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:27:19.933 00:00:10.390 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:27:27.251 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38700 10 6452 1 2025-10-04 03:28:20.361 00:00:10.367 TCP 23.104.0.1:56176 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:28:27.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-10-04 03:29:20.768 00:00:10.369 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:29:27.680 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-10-04 03:30:21.172 00:00:10.368 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:30:27.912 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-10-04 03:26:37.360 00:05:01.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:31:21.574 00:00:10.325 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:31:28.139 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-10-04 03:27:37.361 00:05:01.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:32:28.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:32:28.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:32:21.933 00:00:10.332 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:32:28.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51136 10 6452 1 2025-10-04 03:33:22.301 00:00:10.369 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:33:28.566 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-10-04 03:34:22.707 00:00:10.379 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:34:28.791 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6452 1 2025-10-04 03:35:23.122 00:00:11.394 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:35:29.009 00:00:23.369 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-10-04 03:36:24.554 00:00:10.362 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:32:37.360 00:05:01.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:36:42.445 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-10-04 03:37:28.735 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:37:28.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:37:24.955 00:00:10.373 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:33:37.364 00:05:01.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:37:42.662 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-10-04 03:38:25.365 00:00:10.365 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:38:42.870 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-10-04 03:39:25.770 00:00:10.367 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:39:43.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 2025-10-04 03:40:26.174 00:00:10.369 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:40:43.297 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34086 10 6452 1 2025-10-04 03:41:26.580 00:00:10.367 TCP 23.104.0.1:53970 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:41:43.468 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-10-04 03:42:29.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:42:29.747 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:42:26.982 00:00:11.041 TCP 23.104.0.1:41766 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:38:37.362 00:05:01.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:42:43.681 00:00:10.934 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-10-04 03:43:28.088 00:00:10.360 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:39:37.365 00:05:01.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:43:44.656 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-10-04 03:44:28.490 00:00:10.334 TCP 23.104.0.1:58360 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:44:44.832 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-10-04 03:45:28.863 00:00:10.425 TCP 23.104.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:45:45.065 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-10-04 03:46:29.326 00:00:10.368 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:46:45.275 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50048 10 6452 1 2025-10-04 03:47:28.867 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:47:28.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:47:29.727 00:00:10.326 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:47:45.448 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-10-04 03:44:37.371 00:05:01.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:48:30.107 00:00:10.366 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:48:45.664 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-10-04 03:45:37.373 00:05:01.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:49:30.510 00:00:10.365 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:49:45.872 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-10-04 03:50:30.918 00:00:10.390 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:50:46.057 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-10-04 03:51:31.349 00:00:10.365 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:51:46.279 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-10-04 03:52:28.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:52:28.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:52:31.755 00:00:10.331 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:52:46.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-10-04 03:53:32.125 00:00:10.363 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:53:46.705 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48496 10 6452 1 2025-10-04 03:50:37.372 00:05:01.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 03:54:32.528 00:00:10.362 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:54:46.911 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-10-04 03:51:37.375 00:05:01.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 03:55:32.934 00:00:10.376 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:55:47.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-10-04 03:56:33.347 00:00:10.359 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:56:47.322 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 10 6452 1 2025-10-04 03:57:29.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 03:57:28.917 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 03:57:33.749 00:00:10.376 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-10-04 03:57:47.562 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6452 1 2025-10-04 03:58:34.164 00:00:10.326 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496651, total packets: 1570, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-10-04 02:56:37 - 2025-10-04 03:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0010s Wall: 0.0027s flows/second: 59444.5 Runtime: 0.0028s