Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 19:58:51.170 00:00:10.370 TCP 23.104.0.1:44850 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:58:49.108 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 2025-10-02 19:59:49.848 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-10-02 19:59:51.578 00:00:10.677 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:56:36.726 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:00:50.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-10-02 20:00:52.305 00:00:10.366 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:57:36.728 00:05:01.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:01:50.673 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:01:50.592 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:01:50.303 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-10-02 20:01:52.712 00:00:10.839 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:02:50.478 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56266 10 6452 1 2025-10-02 20:02:53.587 00:00:10.367 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:03:50.689 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-10-02 20:03:53.995 00:00:10.323 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:04:50.867 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-10-02 20:04:54.356 00:00:10.363 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:05:51.056 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-10-02 20:05:54.756 00:00:10.337 TCP 23.104.0.1:60650 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:02:36.727 00:05:01.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:06:50.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:06:50.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:06:51.275 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-10-02 20:06:55.131 00:00:10.364 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:03:36.731 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:07:51.505 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2025-10-02 20:07:55.532 00:00:10.376 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:08:51.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35224 10 6452 1 2025-10-02 20:08:55.943 00:00:10.372 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:09:51.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38442 10 6452 1 2025-10-02 20:09:56.353 00:00:10.363 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:10:52.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 12 6556 1 2025-10-02 20:10:56.758 00:00:10.340 TCP 23.104.0.1:52850 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:11:51.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:11:50.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:11:52.415 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32950 10 6452 1 2025-10-02 20:11:57.133 00:00:10.370 TCP 23.104.0.1:34982 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:08:36.730 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:12:52.630 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-10-02 20:12:57.540 00:00:10.368 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:09:36.734 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:13:52.851 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:36694 10 6452 1 2025-10-02 20:13:57.946 00:00:10.331 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:14:53.074 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-10-02 20:14:58.320 00:00:10.363 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:15:53.246 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-10-02 20:15:58.725 00:00:10.337 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:16:50.697 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:16:51.050 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:16:53.468 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-10-02 20:16:59.104 00:00:10.319 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:17:59.468 00:00:19.150 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:17:53.692 00:00:24.834 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-10-02 20:14:36.734 00:05:01.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:19:08.710 00:00:21.221 TCP 23.104.0.1:42620 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:19:08.573 00:00:21.259 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-10-02 20:15:36.735 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:20:20.010 00:00:10.322 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:20:19.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-10-02 20:21:20.117 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-10-02 20:21:20.374 00:00:10.370 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:21:50.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:21:50.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:22:20.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-10-02 20:22:20.786 00:00:10.370 TCP 23.104.0.1:51688 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:23:21.190 00:00:10.801 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:23:20.550 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-10-02 20:24:20.722 00:00:11.121 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-10-02 20:24:22.033 00:00:10.366 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:20:36.735 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:25:21.880 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-10-02 20:25:22.435 00:00:10.365 TCP 23.104.0.1:60204 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:21:36.738 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:26:22.836 00:00:10.371 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:26:22.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-10-02 20:26:50.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:26:51.055 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:27:23.246 00:00:10.365 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:27:22.334 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-10-02 20:28:22.544 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-10-02 20:28:23.651 00:00:10.363 TCP 23.104.0.1:48114 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:29:22.760 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-10-02 20:29:24.058 00:00:10.857 TCP 23.104.0.1:59578 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:30:24.953 00:00:10.371 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:30:22.966 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 2025-10-02 20:26:36.736 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:31:23.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-10-02 20:31:25.360 00:00:10.324 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:27:36.740 00:05:01.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:31:50.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:31:51.064 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:32:25.724 00:00:10.373 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:32:23.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-10-02 20:33:23.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-10-02 20:33:26.135 00:00:10.369 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:34:23.834 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-10-02 20:34:26.534 00:00:10.366 TCP 23.104.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:35:24.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-10-02 20:35:26.941 00:00:10.375 TCP 23.104.0.1:48410 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:36:24.284 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-10-02 20:36:27.355 00:00:10.367 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:32:36.740 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:36:51.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:36:51.037 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:37:24.458 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45082 10 6452 1 2025-10-02 20:37:27.759 00:00:10.379 TCP 23.104.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:33:36.743 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:38:24.664 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-10-02 20:38:28.175 00:00:10.365 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:39:24.841 00:00:10.681 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6452 1 2025-10-02 20:39:28.581 00:00:10.329 TCP 23.104.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:40:25.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-10-02 20:40:28.948 00:00:10.364 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:41:25.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-10-02 20:41:29.350 00:00:10.364 TCP 23.104.0.1:49906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:41:51.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:41:51.396 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:42:25.986 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57540 10 6452 1 2025-10-02 20:42:29.751 00:00:10.380 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:38:36.742 00:05:01.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:43:26.220 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48902 10 6452 1 2025-10-02 20:39:36.743 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:43:30.171 00:00:10.360 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:44:26.450 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-10-02 20:44:30.571 00:00:10.358 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:45:30.968 00:00:10.373 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:45:26.669 00:00:10.423 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-10-02 20:46:27.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-10-02 20:46:31.377 00:00:10.369 TCP 23.104.0.1:48326 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:46:51.447 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:46:51.442 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:47:27.349 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-10-02 20:47:31.809 00:00:10.362 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:48:27.570 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-10-02 20:44:36.743 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:48:32.211 00:00:10.371 TCP 23.104.0.1:53696 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:45:36.747 00:05:01.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:49:27.816 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-10-02 20:49:32.630 00:00:10.359 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:50:28.043 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-10-02 20:50:33.028 00:00:10.362 TCP 23.104.0.1:52962 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:51:28.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55192 10 6452 1 2025-10-02 20:51:33.427 00:00:10.365 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:51:51.283 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:51:51.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:52:28.469 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51610 10 6452 1 2025-10-02 20:52:33.831 00:00:10.390 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:53:28.673 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-10-02 20:53:34.262 00:00:10.370 TCP 23.104.0.1:43154 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:54:28.877 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37672 10 6452 1 2025-10-02 20:50:36.746 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 20:54:34.681 00:00:10.363 TCP 23.104.0.1:53998 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:55:29.104 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-10-02 20:51:36.747 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 20:55:35.106 00:00:10.363 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:56:29.483 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57684 10 6452 1 2025-10-02 20:56:35.508 00:00:10.369 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:56:51.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 20:56:51.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 20:57:29.658 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:45884 10 6452 1 2025-10-02 20:57:35.912 00:00:10.362 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-10-02 20:58:30.119 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-10-02 20:58:36.313 00:00:10.369 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-10-02 19:56:36 - 2025-10-02 20:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0014s Wall: 0.0017s flows/second: 96529.0 Runtime: 0.0017s