Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 12:58:42.361 00:00:10.442 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 15 1926 1 2025-10-03 12:59:19.381 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6452 1 2025-10-03 12:59:42.839 00:00:10.388 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:00:19.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-03 12:56:37.113 00:05:01.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:00:43.263 00:00:10.361 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:01:19.774 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-10-03 12:57:37.116 00:05:01.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:01:43.663 00:00:10.367 TCP 23.104.0.1:50264 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:02:11.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:02:11.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:02:19.950 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60904 10 6452 1 2025-10-03 13:02:44.098 00:00:10.334 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:03:20.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33630 10 6452 1 2025-10-03 13:03:44.466 00:00:10.363 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:04:20.388 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46600 10 6452 1 2025-10-03 13:04:44.864 00:00:10.370 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:05:20.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-10-03 13:05:45.278 00:00:10.363 TCP 23.104.0.1:34742 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:06:20.777 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-10-03 13:02:37.120 00:05:01.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:06:45.684 00:00:10.384 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:07:11.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:07:11.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:07:20.954 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 12 6556 1 2025-10-03 13:03:37.122 00:05:01.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:07:46.126 00:00:10.365 TCP 23.104.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:08:21.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-10-03 13:08:46.529 00:00:10.372 TCP 23.104.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:09:21.400 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-10-03 13:09:46.963 00:00:10.379 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:10:21.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-10-03 13:10:47.382 00:00:10.325 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:11:21.834 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-10-03 13:11:47.746 00:00:10.366 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:12:11.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:12:11.426 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:12:22.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-10-03 13:08:37.121 00:05:01.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:12:48.154 00:00:10.360 TCP 23.104.0.1:56146 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:13:22.302 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-10-03 13:09:37.123 00:05:01.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:13:48.547 00:00:10.366 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:14:22.541 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-10-03 13:14:48.954 00:00:10.359 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:15:22.751 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-10-03 13:15:49.345 00:00:10.370 TCP 23.104.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:16:22.972 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:57344 10 6452 1 2025-10-03 13:16:49.754 00:00:10.390 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:17:11.329 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:17:11.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:17:23.158 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-10-03 13:17:50.183 00:00:10.324 TCP 23.104.0.1:53620 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:18:23.374 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43138 10 6452 1 2025-10-03 13:14:37.122 00:05:01.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:18:50.545 00:00:10.362 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:19:23.602 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-10-03 13:15:37.124 00:05:01.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:19:50.946 00:00:10.378 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:20:24.178 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53000 10 6452 1 2025-10-03 13:20:51.363 00:00:10.359 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:21:24.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48376 10 6452 1 2025-10-03 13:21:51.760 00:00:10.333 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:22:11.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:22:12.040 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:22:24.611 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-10-03 13:22:52.129 00:00:10.326 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:23:24.828 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53114 10 6452 1 2025-10-03 13:23:52.497 00:00:10.321 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:24:25.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-10-03 13:20:37.123 00:05:01.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:24:52.857 00:00:10.371 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:25:25.283 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-10-03 13:21:37.125 00:05:01.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:25:53.268 00:00:10.319 TCP 23.104.0.1:52456 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:26:25.497 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-10-03 13:26:53.634 00:00:10.363 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:27:11.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:27:11.728 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:27:25.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 10 6452 1 2025-10-03 13:27:54.052 00:00:10.364 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:28:25.924 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6452 1 2025-10-03 13:28:54.454 00:00:10.368 TCP 23.104.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:29:26.147 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40746 10 6452 1 2025-10-03 13:29:54.856 00:00:10.378 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:30:26.357 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6452 1 2025-10-03 13:26:37.125 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:30:55.270 00:00:10.371 TCP 23.104.0.1:37004 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:31:26.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-10-03 13:27:37.128 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:32:11.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:31:55.676 00:00:10.376 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:32:11.776 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:32:26.784 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-10-03 13:32:56.106 00:00:10.366 TCP 23.104.0.1:46914 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:33:27.029 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59750 10 6452 1 2025-10-03 13:33:56.510 00:00:10.331 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:34:27.244 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-10-03 13:34:56.875 00:00:10.362 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:35:27.455 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-10-03 13:35:57.274 00:00:10.381 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:36:27.663 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-10-03 13:32:37.128 00:05:01.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:37:11.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:37:11.847 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:36:57.687 00:00:10.369 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:33:37.129 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:37:27.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-10-03 13:37:58.111 00:00:10.382 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:38:28.076 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-03 13:38:58.539 00:00:10.362 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:39:28.294 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-10-03 13:39:58.944 00:00:10.376 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:40:28.512 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41960 10 6452 1 2025-10-03 13:40:59.355 00:00:10.361 TCP 23.104.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:41:28.729 00:00:10.342 TCP 1.101.0.1:3000 -> 22.102.0.1:40242 10 6452 1 2025-10-03 13:41:59.754 00:00:10.332 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:42:11.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:42:12.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:42:29.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-10-03 13:38:37.128 00:05:01.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:43:00.123 00:00:10.364 TCP 23.104.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:39:37.133 00:05:01.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:43:29.326 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:52234 10 6452 1 2025-10-03 13:44:00.523 00:00:10.367 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:44:29.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43730 10 6452 1 2025-10-03 13:45:00.931 00:00:10.335 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:45:29.851 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 10 6452 1 2025-10-03 13:46:01.308 00:00:10.364 TCP 23.104.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:46:30.089 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-10-03 13:47:11.894 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:47:01.710 00:00:10.363 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:47:11.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:47:30.268 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-10-03 13:48:02.116 00:00:10.322 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:48:30.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-10-03 13:44:37.131 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:49:02.476 00:00:10.362 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:45:37.133 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:49:30.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-10-03 13:50:02.878 00:00:10.985 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:50:30.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59884 10 6452 1 2025-10-03 13:51:03.905 00:00:10.364 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:51:31.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54388 10 6452 1 2025-10-03 13:52:12.104 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:52:04.312 00:00:10.408 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:52:12.140 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:52:31.333 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-10-03 13:53:04.756 00:00:10.380 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:53:31.551 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-10-03 13:54:05.173 00:00:10.361 TCP 23.104.0.1:46140 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:54:31.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54714 10 6452 1 2025-10-03 13:50:37.134 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 13:55:05.575 00:00:10.377 TCP 23.104.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:51:37.136 00:05:01.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 13:55:31.986 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-10-03 13:56:05.990 00:00:10.415 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:56:32.203 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48312 10 6452 1 2025-10-03 13:57:06.447 00:00:10.329 TCP 23.104.0.1:53620 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:57:12.014 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 13:57:12.158 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 13:57:32.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-10-03 13:58:06.814 00:00:10.367 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-10-03 13:58:32.634 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 Summary: total flows: 164, total bytes: 498871, total packets: 1578, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-10-03 12:56:37 - 2025-10-03 13:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0021s flows/second: 76633.9 Runtime: 0.0022s