Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 13:59:03.174 00:00:10.370 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-10-02 13:59:21.164 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 10 6452 1 2025-10-02 14:00:03.587 00:00:10.366 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:00:21.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-10-02 13:56:36.624 00:05:01.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:01:03.990 00:00:10.363 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:01:21.564 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-10-02 14:01:43.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 13:57:36.626 00:05:01.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:01:43.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:02:04.391 00:00:10.367 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:02:21.908 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-10-02 14:03:04.796 00:00:10.370 TCP 23.104.0.1:42798 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:03:22.128 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49416 10 6452 1 2025-10-02 14:04:05.201 00:00:10.366 TCP 23.104.0.1:51530 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:04:22.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-10-02 14:05:05.605 00:00:10.370 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:05:22.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56784 10 6452 1 2025-10-02 14:06:06.020 00:00:10.330 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:06:22.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-10-02 14:02:36.625 00:05:01.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:06:43.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:06:43.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:07:06.392 00:00:10.393 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:07:22.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-10-02 14:03:36.629 00:05:01.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:08:06.832 00:00:10.342 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:08:23.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57722 10 6452 1 2025-10-02 14:09:07.220 00:00:10.370 TCP 23.104.0.1:42236 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:09:23.394 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59792 10 6452 1 2025-10-02 14:10:07.626 00:00:10.364 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:10:23.575 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-10-02 14:11:08.030 00:00:10.362 TCP 23.104.0.1:37544 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:11:23.791 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37976 10 6452 1 2025-10-02 14:11:43.844 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:11:43.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:12:08.437 00:00:10.362 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:12:24.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-10-02 14:08:36.631 00:05:01.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:13:08.833 00:00:10.417 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 15 1926 1 2025-10-02 14:13:24.219 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35144 12 10375 1 2025-10-02 14:09:36.633 00:05:01.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:14:09.288 00:00:10.369 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:14:24.460 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-10-02 14:15:09.693 00:00:10.326 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:15:24.670 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58176 10 6452 1 2025-10-02 14:16:10.062 00:00:10.372 TCP 23.104.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:16:24.880 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47706 10 6452 1 2025-10-02 14:16:43.350 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:16:43.655 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:17:10.474 00:00:10.365 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:17:25.098 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 10 6452 1 2025-10-02 14:18:10.874 00:00:10.323 TCP 23.104.0.1:53664 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:18:25.309 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-10-02 14:14:36.631 00:05:01.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:19:11.239 00:00:10.577 TCP 23.104.0.1:40294 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:19:25.520 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58776 10 6452 1 2025-10-02 14:15:36.634 00:05:01.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:20:11.852 00:00:10.372 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:20:25.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-10-02 14:21:12.263 00:00:10.325 TCP 23.104.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:21:25.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43612 10 6452 1 2025-10-02 14:21:43.781 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:21:43.869 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:22:12.629 00:00:10.369 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:22:26.120 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-10-02 14:23:13.039 00:00:10.432 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 15 1926 1 2025-10-02 14:23:26.433 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37024 12 10369 1 2025-10-02 14:24:13.510 00:00:10.363 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:24:26.689 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-10-02 14:20:36.632 00:05:01.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:25:13.911 00:00:10.362 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:25:27.235 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-10-02 14:21:36.634 00:05:01.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:26:14.313 00:00:10.367 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:26:27.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-10-02 14:26:43.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:26:43.682 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:27:14.719 00:00:10.371 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:27:27.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42364 10 6452 1 2025-10-02 14:28:15.128 00:00:10.363 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:28:27.862 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-10-02 14:29:15.536 00:00:10.368 TCP 23.104.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:29:28.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-10-02 14:30:15.936 00:00:10.390 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:30:28.311 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-10-02 14:26:36.634 00:05:01.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:31:16.363 00:00:10.391 TCP 23.104.0.1:32768 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:31:28.480 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33584 10 6452 1 2025-10-02 14:27:36.636 00:05:01.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:31:43.887 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:31:43.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:32:16.790 00:00:10.365 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:32:28.693 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-10-02 14:33:17.203 00:00:10.337 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:33:28.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-10-02 14:34:17.580 00:00:10.327 TCP 23.104.0.1:59684 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:34:29.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-10-02 14:35:17.950 00:00:10.365 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:35:29.327 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60770 10 6452 1 2025-10-02 14:36:18.354 00:00:10.322 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:36:29.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-10-02 14:32:36.637 00:05:01.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:36:44.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:36:44.103 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:37:18.715 00:00:10.362 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:37:29.769 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42276 10 6452 1 2025-10-02 14:33:36.642 00:05:01.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:38:19.117 00:00:10.359 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:38:29.995 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-10-02 14:39:19.518 00:00:10.325 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:39:30.223 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-02 14:40:19.880 00:00:10.390 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:40:30.394 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52720 10 6452 1 2025-10-02 14:41:20.306 00:00:10.362 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:41:44.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:41:30.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-10-02 14:41:44.271 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:42:20.706 00:00:10.361 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:42:30.822 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6452 1 2025-10-02 14:38:36.640 00:05:01.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:43:21.119 00:00:10.364 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:43:31.010 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-02 14:39:36.641 00:05:01.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:44:21.521 00:00:10.407 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:44:31.223 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37768 10 6452 1 2025-10-02 14:45:21.968 00:00:10.324 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:45:31.447 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6452 1 2025-10-02 14:46:22.326 00:00:10.367 TCP 23.104.0.1:47108 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:46:31.659 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-10-02 14:46:44.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:46:44.318 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:47:22.734 00:00:10.368 TCP 23.104.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:47:31.830 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-10-02 14:48:23.140 00:00:10.363 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:44:36.642 00:05:01.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:48:32.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6452 1 2025-10-02 14:49:23.539 00:00:17.817 TCP 23.104.0.1:35246 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:45:36.644 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:49:32.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-10-02 14:50:31.407 00:00:10.368 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:50:32.440 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-10-02 14:51:44.502 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:51:31.816 00:00:10.366 TCP 23.104.0.1:53194 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:51:32.668 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-10-02 14:51:44.524 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:52:32.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-10-02 14:52:32.219 00:00:10.367 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:53:33.104 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-10-02 14:53:32.621 00:00:10.363 TCP 23.104.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:50:36.643 00:05:01.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 14:54:33.024 00:00:10.364 TCP 23.104.0.1:35184 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:54:33.313 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-10-02 14:51:36.646 00:05:01.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 14:55:33.526 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-10-02 14:55:33.428 00:00:10.374 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:56:33.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-10-02 14:56:44.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 14:56:44.677 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 14:56:33.836 00:00:10.348 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:57:34.218 00:00:10.361 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:57:33.957 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35698 10 6452 1 2025-10-02 14:58:34.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46186 10 6452 1 2025-10-02 14:58:34.617 00:00:10.367 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1087, avg pps: 0, avg bpp: 320 Time window: 2025-10-02 13:56:36 - 2025-10-02 14:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0015s Wall: 0.0029s flows/second: 55915.0 Runtime: 0.0030s