Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 03:59:17.783 00:00:10.367 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-10-06 03:59:26.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-10-06 04:00:18.188 00:00:10.361 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:00:26.867 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-10-06 03:56:38.333 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:01:18.589 00:00:10.367 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-10-06 03:57:38.332 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:01:27.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-10-06 04:02:18.988 00:00:10.372 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:02:27.246 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56970 10 6452 1 2025-10-06 04:03:26.842 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:03:26.612 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:03:19.397 00:00:10.366 TCP 23.104.0.1:60230 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:03:27.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47662 10 6452 1 2025-10-06 04:04:19.803 00:00:10.365 TCP 23.104.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:04:27.631 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57830 10 6452 1 2025-10-06 04:05:20.212 00:00:10.384 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:05:27.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-10-06 04:06:20.655 00:00:10.367 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:06:28.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36440 10 6452 1 2025-10-06 04:02:38.331 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:07:21.094 00:00:10.364 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:07:28.243 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-10-06 04:03:38.334 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:08:26.920 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:08:26.942 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:08:21.496 00:00:10.329 TCP 23.104.0.1:44498 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:08:28.467 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6452 1 2025-10-06 04:09:21.874 00:00:10.367 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:09:28.679 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-10-06 04:10:22.278 00:00:10.367 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:10:28.895 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-10-06 04:11:22.683 00:00:10.368 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:11:29.113 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44528 10 6452 1 2025-10-06 04:12:23.108 00:00:10.364 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:12:29.296 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46762 10 6452 1 2025-10-06 04:08:38.333 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:13:26.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:13:27.118 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:13:23.509 00:00:10.366 TCP 23.104.0.1:35382 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:13:29.476 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-10-06 04:09:38.335 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:14:23.914 00:00:10.411 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 15 1926 1 2025-10-06 04:14:29.692 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 12 10375 1 2025-10-06 04:15:24.364 00:00:10.361 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:15:29.933 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-10-06 04:16:24.769 00:00:10.376 TCP 23.104.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:16:30.128 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-10-06 04:17:25.184 00:00:10.366 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:17:30.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-10-06 04:18:27.021 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:18:27.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:18:25.591 00:00:10.365 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:18:30.573 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-10-06 04:14:38.334 00:05:01.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:19:26.001 00:00:10.363 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:15:38.336 00:05:01.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:19:30.779 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-10-06 04:20:26.400 00:00:10.367 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:20:30.996 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-10-06 04:21:26.805 00:00:10.491 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:21:31.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2025-10-06 04:22:31.387 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55192 10 6452 1 2025-10-06 04:22:27.339 00:00:10.327 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:23:27.080 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:23:27.285 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:23:27.710 00:00:10.384 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:23:31.605 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60112 10 6452 1 2025-10-06 04:20:38.336 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:24:31.819 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-10-06 04:24:28.169 00:00:10.366 TCP 23.104.0.1:60080 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:25:28.576 00:00:10.368 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:21:38.337 00:05:01.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:25:32.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58714 10 6452 1 2025-10-06 04:26:28.988 00:00:10.351 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:26:32.260 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-10-06 04:27:29.381 00:00:10.377 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:27:32.583 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-10-06 04:28:27.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:28:27.169 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:28:29.793 00:00:10.369 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:28:32.804 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43300 10 6452 1 2025-10-06 04:29:30.199 00:00:10.365 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:29:32.984 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59110 10 6452 1 2025-10-06 04:30:30.602 00:00:10.363 TCP 23.104.0.1:57034 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:26:38.337 00:05:01.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:30:33.213 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49102 10 6452 1 2025-10-06 04:27:38.338 00:05:01.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:31:31.000 00:00:10.363 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:31:33.387 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6452 1 2025-10-06 04:32:31.406 00:00:10.364 TCP 23.104.0.1:39114 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:32:33.553 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42394 10 6452 1 2025-10-06 04:33:27.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:33:27.257 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:33:31.810 00:00:10.363 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:33:33.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-10-06 04:34:32.210 00:00:10.370 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:34:33.973 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:40974 10 6452 1 2025-10-06 04:35:34.159 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-10-06 04:35:32.619 00:00:10.365 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:32:38.337 00:05:01.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:36:34.370 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 10 6452 1 2025-10-06 04:36:33.024 00:00:10.361 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:33:38.341 00:05:01.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:37:34.583 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-10-06 04:37:33.423 00:00:10.358 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:38:27.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:38:27.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:38:34.791 00:00:10.583 TCP 1.101.0.1:3000 -> 22.102.0.1:36434 10 6452 1 2025-10-06 04:38:33.821 00:00:10.408 TCP 23.104.0.1:54118 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:39:34.268 00:00:10.439 TCP 23.104.0.1:46656 -> 1.101.0.1:3000 15 1926 1 2025-10-06 04:39:35.411 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:60694 12 10369 1 2025-10-06 04:40:34.748 00:00:10.395 TCP 23.104.0.1:59850 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:40:35.610 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6452 1 2025-10-06 04:41:35.184 00:00:10.360 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:41:35.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-10-06 04:38:38.339 00:05:01.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:42:35.581 00:00:10.320 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:42:36.053 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-10-06 04:43:28.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:43:27.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:39:38.343 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:43:35.939 00:00:10.372 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:43:36.264 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42886 10 6452 1 2025-10-06 04:44:36.439 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-10-06 04:44:36.349 00:00:10.366 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:45:36.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40470 10 6452 1 2025-10-06 04:45:36.752 00:00:10.381 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:46:36.872 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-10-06 04:46:37.171 00:00:10.324 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:47:37.536 00:00:10.363 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:47:37.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-10-06 04:48:27.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:48:27.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:44:38.342 00:05:01.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:48:37.937 00:00:10.331 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:48:37.314 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43072 10 6452 1 2025-10-06 04:45:38.345 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:49:38.307 00:00:10.424 TCP 23.104.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:49:37.513 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-10-06 04:50:38.773 00:00:10.325 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:50:37.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-10-06 04:51:39.137 00:00:10.364 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:51:37.896 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48230 10 6452 1 2025-10-06 04:52:38.119 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-10-06 04:52:39.544 00:00:10.385 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:53:28.023 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:53:27.862 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:53:39.973 00:00:10.368 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:53:38.334 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58670 10 6452 1 2025-10-06 04:50:38.345 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 04:54:38.544 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-10-06 04:54:40.380 00:00:10.324 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:51:38.348 00:05:01.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 04:55:40.741 00:00:10.363 TCP 23.104.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:55:38.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48658 10 6452 1 2025-10-06 04:56:41.146 00:00:10.323 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:56:38.971 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-10-06 04:57:41.504 00:00:10.367 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-10-06 04:57:39.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-10-06 04:58:27.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 04:58:28.037 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 04:58:39.419 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-10-06 03:56:38 - 2025-10-06 04:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 72769.7 Runtime: 0.0023s