Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 09:59:15.309 00:00:10.362 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-10-02 09:59:19.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34234 10 6452 1 2025-10-02 10:00:15.717 00:00:10.378 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:00:19.412 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38708 10 6452 1 2025-10-02 09:56:36.545 00:05:01.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:01:16.134 00:00:10.324 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:01:19.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55982 10 6452 1 2025-10-02 10:01:38.134 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 09:57:36.550 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:01:38.446 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:02:16.496 00:00:10.322 TCP 23.104.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:02:19.843 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-10-02 10:03:20.080 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 12 10369 1 2025-10-02 10:03:16.859 00:00:10.457 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 15 1926 1 2025-10-02 10:04:17.375 00:00:10.327 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:04:20.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-10-02 10:05:17.741 00:00:10.368 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:05:20.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-10-02 10:06:20.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6452 1 2025-10-02 10:06:18.147 00:00:10.369 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:06:38.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:06:38.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:02:36.548 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:07:20.974 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-10-02 10:07:18.558 00:00:10.374 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:03:36.551 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:08:21.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43170 10 6452 1 2025-10-02 10:08:18.989 00:00:10.326 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:09:21.443 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-10-02 10:09:19.352 00:00:10.360 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:10:19.749 00:00:10.380 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:10:21.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-10-02 10:11:20.166 00:00:10.366 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:11:21.874 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45398 10 6452 1 2025-10-02 10:11:38.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:11:38.740 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:12:20.572 00:00:10.367 TCP 23.104.0.1:38364 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:12:22.069 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-10-02 10:08:36.552 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:13:20.992 00:00:10.375 TCP 23.104.0.1:58654 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:13:22.239 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-10-02 10:09:36.555 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:14:21.397 00:00:10.368 TCP 23.104.0.1:54176 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:14:22.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-10-02 10:15:21.800 00:00:10.364 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:15:22.667 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59984 10 6452 1 2025-10-02 10:16:38.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:16:27.451 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 2025-10-02 10:16:39.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:16:22.200 00:00:15.427 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:17:27.663 00:00:11.016 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:17:27.624 00:00:10.926 TCP 1.101.0.1:3000 -> 22.102.0.1:43028 11 6504 1 2025-10-02 10:18:28.720 00:00:10.372 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:18:28.591 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45010 10 6452 1 2025-10-02 10:14:36.556 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:19:28.805 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41818 10 6452 1 2025-10-02 10:15:36.558 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:19:29.129 00:00:10.364 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:20:29.027 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59766 10 6452 1 2025-10-02 10:20:29.529 00:00:10.367 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:21:39.087 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:21:29.936 00:00:10.376 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:21:39.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:21:29.241 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-10-02 10:22:30.346 00:00:10.361 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:22:29.458 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-10-02 10:23:29.633 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 12 10375 1 2025-10-02 10:23:30.751 00:00:10.461 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 15 1926 1 2025-10-02 10:24:31.251 00:00:10.363 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:24:29.872 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-10-02 10:20:36.557 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:21:36.560 00:05:01.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:25:30.100 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40238 10 6452 1 2025-10-02 10:25:31.654 00:00:10.369 TCP 23.104.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:26:30.270 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-10-02 10:26:39.151 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:26:39.005 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:26:32.067 00:00:10.364 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:27:30.484 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-10-02 10:27:32.466 00:00:10.365 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:28:30.695 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-10-02 10:28:32.868 00:00:10.364 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:29:30.903 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-10-02 10:29:33.273 00:00:10.325 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:30:31.085 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-10-02 10:26:36.558 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:30:33.633 00:00:10.371 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:31:31.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35642 10 6452 1 2025-10-02 10:31:38.947 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:31:38.931 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:27:36.563 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:31:34.033 00:00:10.326 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:32:31.470 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-10-02 10:32:34.394 00:00:10.362 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:33:31.644 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-10-02 10:33:34.793 00:00:10.366 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:34:31.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32870 10 6452 1 2025-10-02 10:34:35.195 00:00:10.325 TCP 23.104.0.1:37242 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:35:32.051 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2025-10-02 10:35:35.557 00:00:10.326 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:36:39.162 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:32:36.560 00:05:01.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:36:39.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:36:35.921 00:00:10.390 TCP 23.104.0.1:36652 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:36:32.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41964 10 6452 1 2025-10-02 10:33:36.563 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:37:32.439 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-10-02 10:37:36.347 00:00:10.329 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:38:32.625 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-10-02 10:38:36.712 00:00:10.378 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:39:32.841 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-10-02 10:39:37.127 00:00:10.408 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:40:33.016 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-10-02 10:40:37.575 00:00:10.359 TCP 23.104.0.1:57506 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:41:39.174 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:41:39.279 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:41:33.740 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-10-02 10:41:37.975 00:00:11.006 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:38:36.563 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:42:34.434 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-10-02 10:42:39.022 00:00:10.328 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:39:36.565 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:43:34.649 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45976 10 6452 1 2025-10-02 10:43:39.384 00:00:10.367 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:44:34.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45186 10 6452 1 2025-10-02 10:44:39.790 00:00:10.369 TCP 23.104.0.1:59144 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:45:35.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38800 10 6452 1 2025-10-02 10:45:40.198 00:00:10.366 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:46:39.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:46:39.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:46:35.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33362 10 6452 1 2025-10-02 10:46:40.599 00:00:10.360 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:47:35.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6452 1 2025-10-02 10:47:40.998 00:00:11.028 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:44:36.564 00:05:01.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:48:35.727 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56152 10 6452 1 2025-10-02 10:48:42.080 00:00:10.366 TCP 23.104.0.1:42222 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:45:36.567 00:05:01.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:49:35.946 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-10-02 10:49:42.492 00:00:10.370 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:50:36.138 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-10-02 10:50:42.892 00:00:10.334 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:51:39.440 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:51:39.358 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:51:36.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-10-02 10:51:43.261 00:00:10.366 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:52:36.564 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41626 10 6452 1 2025-10-02 10:52:43.665 00:00:10.364 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:53:36.738 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48800 10 6452 1 2025-10-02 10:53:44.089 00:00:10.367 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:50:36.564 00:05:01.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 10:54:36.953 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-10-02 10:54:44.495 00:00:10.325 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:51:36.569 00:05:01.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 10:55:37.147 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-10-02 10:55:44.857 00:00:10.373 TCP 23.104.0.1:33950 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:56:39.889 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 10:56:40.064 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 10:56:37.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-10-02 10:56:45.268 00:00:10.324 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:57:37.582 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-10-02 10:57:45.631 00:00:10.365 TCP 23.104.0.1:46960 -> 1.101.0.1:3000 11 1507 1 2025-10-02 10:58:37.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 Summary: total flows: 163, total bytes: 505571, total packets: 1574, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-10-02 09:56:36 - 2025-10-02 10:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0016s Wall: 0.0024s flows/second: 68456.1 Runtime: 0.0024s