Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 04:59:06.992 00:00:10.324 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-10-04 04:59:13.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56368 10 6452 1 2025-10-04 05:00:07.352 00:00:10.364 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:00:13.594 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-10-04 04:56:37.384 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:01:07.752 00:00:10.382 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:01:13.764 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-10-04 04:57:37.387 00:05:01.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:02:08.167 00:00:10.364 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:02:13.943 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-10-04 05:02:30.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:02:30.264 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:03:08.572 00:00:10.363 TCP 23.104.0.1:55006 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:03:14.171 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 12 6556 1 2025-10-04 05:04:08.970 00:00:10.327 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:04:14.464 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-10-04 05:05:09.340 00:00:10.365 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:05:14.673 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-10-04 05:06:09.745 00:00:10.369 TCP 23.104.0.1:60082 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:06:14.881 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37278 10 6452 1 2025-10-04 05:02:37.386 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:07:10.150 00:00:10.328 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:07:15.108 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48006 10 6452 1 2025-10-04 05:07:30.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:07:30.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:03:37.387 00:05:01.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:08:10.516 00:00:10.322 TCP 23.104.0.1:37320 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:08:15.321 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-10-04 05:09:10.877 00:00:10.343 TCP 23.104.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:09:15.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51028 10 6452 1 2025-10-04 05:10:11.261 00:00:10.327 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:10:15.708 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-10-04 05:11:11.626 00:00:10.365 TCP 23.104.0.1:41808 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:11:15.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35302 10 6452 1 2025-10-04 05:12:12.033 00:00:10.363 TCP 23.104.0.1:36786 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:12:16.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-10-04 05:12:30.946 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:12:30.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:08:37.388 00:05:01.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:13:12.435 00:00:10.373 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:13:16.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-10-04 05:09:37.390 00:05:01.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:14:16.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-10-04 05:14:12.850 00:00:10.391 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:15:16.773 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-10-04 05:15:13.284 00:00:10.368 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:16:13.688 00:00:10.365 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:16:16.993 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60598 10 6452 1 2025-10-04 05:17:14.105 00:00:10.366 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:17:30.595 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:17:17.240 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-10-04 05:17:30.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:18:14.508 00:00:10.369 TCP 23.104.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:18:17.464 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-10-04 05:14:37.389 00:05:01.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:19:14.916 00:00:10.358 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:19:17.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57548 10 6452 1 2025-10-04 05:15:37.391 00:05:01.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:20:17.905 00:00:13.719 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-10-04 05:20:15.311 00:00:16.396 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:21:21.670 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-10-04 05:21:21.754 00:00:10.371 TCP 23.104.0.1:56784 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:22:30.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:22:30.881 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:22:21.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-10-04 05:22:22.162 00:00:10.362 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:23:22.101 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2025-10-04 05:23:22.557 00:00:10.386 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:24:22.974 00:00:10.374 TCP 23.104.0.1:37834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:24:22.313 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-10-04 05:20:37.390 00:05:01.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:25:22.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-10-04 05:25:23.381 00:00:10.361 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:21:37.393 00:05:01.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:26:22.733 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57076 10 6452 1 2025-10-04 05:26:23.782 00:00:10.365 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:27:30.668 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:27:31.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:27:22.947 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-10-04 05:27:24.186 00:00:10.364 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:28:24.588 00:00:10.334 TCP 23.104.0.1:59240 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:28:23.200 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-10-04 05:29:24.969 00:00:10.338 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:29:23.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-10-04 05:30:25.344 00:00:10.365 TCP 23.104.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:30:23.633 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-10-04 05:26:37.391 00:05:01.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:31:23.854 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-10-04 05:31:25.743 00:00:10.366 TCP 23.104.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:27:37.394 00:05:01.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:32:30.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:32:24.079 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51280 10 6452 1 2025-10-04 05:32:30.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:32:26.147 00:00:10.366 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:33:26.548 00:00:10.362 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:33:24.253 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44618 10 6452 1 2025-10-04 05:34:24.471 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-10-04 05:34:26.948 00:00:10.364 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:35:24.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6452 1 2025-10-04 05:35:27.349 00:00:10.364 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:36:24.913 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-10-04 05:36:27.754 00:00:10.333 TCP 23.104.0.1:50790 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:32:37.394 00:05:01.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:37:31.016 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:37:31.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:37:25.197 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-10-04 05:33:37.397 00:05:01.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:37:28.126 00:00:10.366 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:38:25.408 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 12 10369 1 2025-10-04 05:38:28.537 00:00:10.471 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 15 1926 1 2025-10-04 05:39:25.610 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-10-04 05:39:29.085 00:00:10.365 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:40:25.832 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-10-04 05:40:29.490 00:00:10.324 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:41:26.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-10-04 05:41:29.855 00:00:10.376 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:42:31.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:42:31.111 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:42:30.271 00:00:10.364 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:42:26.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-10-04 05:38:37.396 00:05:01.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:43:26.504 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-10-04 05:39:37.399 00:05:01.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:43:30.679 00:00:10.370 TCP 23.104.0.1:58648 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:44:31.113 00:00:10.395 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:44:26.846 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-10-04 05:45:27.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6452 1 2025-10-04 05:45:31.552 00:00:10.320 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:46:27.295 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6452 1 2025-10-04 05:46:31.910 00:00:10.325 TCP 23.104.0.1:60692 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:47:31.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:47:31.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:47:27.510 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-10-04 05:47:32.276 00:00:10.363 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:48:27.686 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-10-04 05:44:37.397 00:05:01.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:48:32.680 00:00:10.372 TCP 23.104.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:45:37.398 00:05:01.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:49:27.899 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-10-04 05:49:33.103 00:00:10.369 TCP 23.104.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:50:28.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-10-04 05:50:33.521 00:00:10.366 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:51:28.327 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-10-04 05:51:33.927 00:00:10.348 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:52:31.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:52:31.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:52:28.500 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42874 10 6452 1 2025-10-04 05:52:34.309 00:00:10.363 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:53:28.707 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 2025-10-04 05:53:34.712 00:00:10.368 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:54:28.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-10-04 05:50:37.397 00:05:01.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 05:54:35.118 00:00:10.363 TCP 23.104.0.1:41366 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:51:37.400 00:05:01.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 05:55:29.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47122 10 6452 1 2025-10-04 05:55:35.520 00:00:10.371 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:56:29.392 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 2025-10-04 05:56:35.928 00:00:10.383 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:57:31.381 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 05:57:31.456 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 05:57:29.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41160 10 6452 1 2025-10-04 05:57:36.352 00:00:10.360 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-10-04 05:58:29.828 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-10-04 05:58:36.750 00:00:10.385 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-04 04:56:37 - 2025-10-04 05:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0023s flows/second: 72567.3 Runtime: 0.0023s