Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 19:59:06.949 00:00:10.326 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-10-01 19:59:27.394 00:00:23.932 TCP 1.101.0.1:3000 -> 22.102.0.1:36036 10 6452 1 2025-10-01 20:00:07.317 00:00:10.363 TCP 23.104.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-10-01 19:56:36.268 00:05:01.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:00:41.390 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-10-01 20:01:21.716 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:01:07.719 00:00:10.372 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:01:21.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 19:57:36.271 00:05:01.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:01:41.607 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-10-01 20:02:08.126 00:00:10.366 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:02:41.839 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-10-01 20:03:08.531 00:00:10.325 TCP 23.104.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:03:42.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6452 1 2025-10-01 20:04:08.891 00:00:10.373 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:04:42.300 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-10-01 20:05:09.303 00:00:10.321 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:05:42.509 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-10-01 20:06:22.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:06:09.661 00:00:10.364 TCP 23.104.0.1:35104 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:06:22.015 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:02:36.269 00:05:01.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:06:42.689 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6452 1 2025-10-01 20:07:10.094 00:00:10.325 TCP 23.104.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:03:36.272 00:05:01.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:07:42.896 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-10-01 20:08:10.454 00:00:10.323 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:08:43.085 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45788 10 6452 1 2025-10-01 20:09:10.812 00:00:10.579 TCP 23.104.0.1:39536 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:09:43.309 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-10-01 20:10:11.430 00:00:10.364 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:10:43.479 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40246 10 6452 1 2025-10-01 20:11:21.827 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:11:21.904 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:11:11.832 00:00:10.855 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:11:43.660 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53286 10 6452 1 2025-10-01 20:12:12.725 00:00:10.372 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:08:36.271 00:05:01.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:12:43.827 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-10-01 20:13:13.140 00:00:10.369 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:09:36.275 00:05:01.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:13:44.061 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-10-01 20:14:13.546 00:00:10.369 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:14:44.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54306 10 6452 1 2025-10-01 20:15:13.959 00:00:10.367 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:15:44.492 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 12 6556 1 2025-10-01 20:16:21.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:16:22.001 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:16:14.358 00:00:10.367 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:16:44.712 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-10-01 20:17:14.761 00:00:10.386 TCP 23.104.0.1:48378 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:17:44.932 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:42024 12 10375 1 2025-10-01 20:18:15.183 00:00:10.398 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 15 1926 1 2025-10-01 20:14:36.275 00:05:01.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:18:45.193 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-10-01 20:19:15.620 00:00:10.361 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:15:36.280 00:05:01.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:19:45.366 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47096 10 6452 1 2025-10-01 20:20:16.022 00:00:10.331 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:20:45.549 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 10 6452 1 2025-10-01 20:21:22.061 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:21:16.394 00:00:10.364 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:21:22.124 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:21:45.768 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6452 1 2025-10-01 20:22:16.800 00:00:10.344 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:22:45.954 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45848 12 6556 1 2025-10-01 20:23:17.189 00:00:10.318 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:23:46.197 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-10-01 20:24:17.546 00:00:11.123 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:20:36.275 00:05:01.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:24:46.413 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-10-01 20:25:18.708 00:00:10.401 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:21:36.277 00:05:01.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:25:46.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36088 10 6452 1 2025-10-01 20:26:22.312 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:26:22.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:26:19.143 00:00:10.369 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:26:46.848 00:00:10.760 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-10-01 20:27:19.557 00:00:10.360 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:27:47.647 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-10-01 20:28:19.961 00:00:10.361 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:28:47.864 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58970 10 6452 1 2025-10-01 20:29:20.362 00:00:10.407 TCP 23.104.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:29:48.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 2025-10-01 20:30:20.812 00:00:10.364 TCP 23.104.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:26:36.277 00:05:01.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:30:48.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-10-01 20:31:22.550 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:31:22.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:31:21.214 00:00:10.368 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:27:36.280 00:05:01.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:31:48.511 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33604 10 6452 1 2025-10-01 20:32:21.618 00:00:10.368 TCP 23.104.0.1:49202 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:32:48.735 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54604 10 6452 1 2025-10-01 20:33:22.028 00:00:10.356 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:33:48.962 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52108 10 6452 1 2025-10-01 20:34:22.431 00:00:10.363 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:34:49.196 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55324 10 6452 1 2025-10-01 20:35:22.833 00:00:10.347 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:35:49.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-10-01 20:36:22.383 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:36:22.517 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:36:23.231 00:00:10.368 TCP 23.104.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:32:36.278 00:05:01.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:36:49.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-10-01 20:37:23.635 00:00:10.358 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:33:36.280 00:05:01.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:37:49.836 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53354 10 6452 1 2025-10-01 20:38:24.036 00:00:10.369 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:38:50.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-10-01 20:39:24.438 00:00:10.369 TCP 23.104.0.1:59218 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:39:50.297 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36946 10 6452 1 2025-10-01 20:40:24.841 00:00:10.383 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:40:50.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36930 10 6452 1 2025-10-01 20:41:21.925 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:41:21.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:41:25.263 00:00:10.798 TCP 23.104.0.1:60110 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:41:50.731 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-10-01 20:42:26.106 00:00:10.365 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:38:36.279 00:05:01.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:42:50.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-10-01 20:43:26.511 00:00:10.327 TCP 23.104.0.1:49500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:39:36.282 00:05:01.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:43:51.120 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-10-01 20:44:26.875 00:00:10.363 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:44:51.341 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-10-01 20:45:27.274 00:00:10.368 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:45:51.795 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-10-01 20:46:22.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:46:22.507 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:46:27.686 00:00:10.363 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:46:52.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-10-01 20:47:28.105 00:00:10.365 TCP 23.104.0.1:47362 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:47:52.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-10-01 20:48:28.509 00:00:10.366 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:44:36.281 00:05:01.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:48:52.459 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-10-01 20:49:28.910 00:00:10.321 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:45:36.283 00:05:01.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:49:52.678 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2025-10-01 20:50:29.282 00:00:10.324 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:50:52.897 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-10-01 20:51:22.619 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:51:22.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:51:29.646 00:00:10.361 TCP 23.104.0.1:56530 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:51:53.119 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-10-01 20:52:30.069 00:00:10.373 TCP 23.104.0.1:34644 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:52:53.352 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6452 1 2025-10-01 20:53:30.473 00:00:10.368 TCP 23.104.0.1:57354 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:53:53.564 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-10-01 20:50:36.281 00:05:01.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 20:54:30.874 00:00:10.352 TCP 23.104.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:54:53.785 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50768 10 6452 1 2025-10-01 20:55:31.270 00:00:10.362 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:51:36.286 00:05:01.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 20:55:54.024 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-10-01 20:56:22.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:56:22.907 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 20:56:31.671 00:00:10.361 TCP 23.104.0.1:45054 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:56:54.236 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-10-01 20:57:32.097 00:00:10.363 TCP 23.104.0.1:51262 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:57:54.413 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-10-01 20:58:32.499 00:00:10.369 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496446, total packets: 1572, avg bps: 1065, avg pps: 0, avg bpp: 315 Time window: 2025-10-01 19:56:36 - 2025-10-01 20:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0009s Wall: 0.0024s flows/second: 68981.1 Runtime: 0.0024s