Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 13:59:06.838 00:00:10.386 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 13:59:23.868 00:00:17.258 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-10-04 14:00:07.264 00:00:10.368 TCP 23.104.0.1:52604 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:00:31.176 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48536 10 6452 1 2025-10-04 13:56:37.545 00:05:01.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:01:07.674 00:00:10.379 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 12 1559 1 2025-10-04 14:01:31.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38864 10 6452 1 2025-10-04 13:57:37.547 00:05:01.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:02:08.112 00:00:10.342 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:02:41.092 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:02:31.565 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-10-04 14:02:40.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:03:08.475 00:00:10.335 TCP 23.104.0.1:37846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:03:31.788 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-10-04 14:04:08.894 00:00:10.380 TCP 23.104.0.1:46438 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:04:31.957 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:55982 10 6452 1 2025-10-04 14:05:09.313 00:00:10.363 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:05:32.154 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-10-04 14:06:09.724 00:00:10.382 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:02:37.547 00:05:01.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:06:32.364 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-10-04 14:07:10.141 00:00:10.322 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:07:41.309 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:03:37.548 00:05:01.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:07:41.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:07:32.534 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-10-04 14:08:10.502 00:00:10.365 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:08:32.752 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 2025-10-04 14:09:10.907 00:00:10.326 TCP 23.104.0.1:55934 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:09:32.964 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:60248 10 6452 1 2025-10-04 14:10:11.270 00:00:10.330 TCP 23.104.0.1:57782 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:10:33.154 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-10-04 14:11:11.639 00:00:10.366 TCP 23.104.0.1:34340 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:11:33.324 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-10-04 14:12:12.063 00:00:10.367 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:12:41.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:12:41.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:08:37.549 00:05:01.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:12:33.565 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 10 6452 1 2025-10-04 14:13:12.467 00:00:10.364 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:09:37.551 00:05:01.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:13:33.959 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 12 6556 1 2025-10-04 14:14:12.870 00:00:10.368 TCP 23.104.0.1:39800 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:14:34.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-10-04 14:15:13.279 00:00:10.384 TCP 23.104.0.1:41300 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:15:34.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-10-04 14:16:13.701 00:00:10.372 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:16:34.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-10-04 14:17:14.114 00:00:10.391 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:17:41.353 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:17:41.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:17:34.848 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 10 6452 1 2025-10-04 14:18:14.527 00:00:10.362 TCP 23.104.0.1:40986 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:14:37.549 00:05:01.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:18:35.033 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 12 6556 1 2025-10-04 14:19:14.928 00:00:10.335 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:15:37.553 00:05:01.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:19:35.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-10-04 14:20:15.302 00:00:10.368 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:20:35.455 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-10-04 14:21:15.705 00:00:10.367 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:21:35.663 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-10-04 14:22:16.108 00:00:10.366 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:22:41.400 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:22:41.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:22:35.870 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-10-04 14:23:16.514 00:00:10.331 TCP 23.104.0.1:38592 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:23:36.074 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 2025-10-04 14:24:16.885 00:00:10.432 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:20:37.550 00:05:01.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:24:36.285 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-10-04 14:25:17.358 00:00:10.360 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:21:37.561 00:05:01.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:25:36.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-10-04 14:26:17.756 00:00:10.389 TCP 23.104.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:26:36.725 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43162 10 6452 1 2025-10-04 14:27:18.184 00:00:10.325 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:27:41.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:27:42.468 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:27:36.956 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-10-04 14:28:18.547 00:00:10.367 TCP 23.104.0.1:42838 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:28:37.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57634 10 6452 1 2025-10-04 14:29:18.950 00:00:10.330 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:29:37.393 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40846 10 6452 1 2025-10-04 14:30:19.316 00:00:10.368 TCP 23.104.0.1:37508 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:26:37.558 00:05:01.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:30:37.567 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-10-04 14:31:19.721 00:00:10.370 TCP 23.104.0.1:55844 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:27:37.561 00:05:01.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:31:37.743 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-10-04 14:32:20.131 00:00:10.376 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:32:41.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:32:41.628 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:32:37.960 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 12 6556 1 2025-10-04 14:33:20.570 00:00:10.361 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:33:38.195 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-10-04 14:34:20.971 00:00:10.375 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:34:38.409 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-10-04 14:35:21.395 00:00:10.320 TCP 23.104.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:35:38.628 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-10-04 14:36:21.753 00:00:10.383 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:32:37.561 00:05:01.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:36:38.842 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-10-04 14:37:22.196 00:00:10.360 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:37:41.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:33:37.564 00:05:01.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:37:41.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:37:39.015 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60896 10 6452 1 2025-10-04 14:38:22.592 00:00:10.435 TCP 23.104.0.1:53620 -> 1.101.0.1:3000 15 1926 1 2025-10-04 14:38:39.190 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 12 10369 1 2025-10-04 14:39:23.101 00:00:10.323 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:39:39.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47746 10 6452 1 2025-10-04 14:40:23.465 00:00:10.320 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:40:39.604 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6452 1 2025-10-04 14:41:23.824 00:00:10.369 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:41:39.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48128 10 6452 1 2025-10-04 14:42:41.847 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:38:37.562 00:05:01.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:42:24.229 00:00:10.363 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:42:41.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:42:40.038 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-10-04 14:43:24.629 00:00:10.365 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:39:37.564 00:05:01.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:43:40.246 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53764 10 6452 1 2025-10-04 14:44:25.034 00:00:10.371 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:44:40.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6452 1 2025-10-04 14:45:25.439 00:00:10.364 TCP 23.104.0.1:54760 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:45:40.675 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-10-04 14:46:25.843 00:00:10.381 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:46:40.892 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-10-04 14:47:26.261 00:00:10.367 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:47:41.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:47:42.238 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:47:41.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51514 10 6452 1 2025-10-04 14:44:37.565 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:48:26.671 00:00:11.048 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:48:41.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-10-04 14:49:27.755 00:00:10.376 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:45:37.567 00:05:01.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:49:41.531 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49388 10 6452 1 2025-10-04 14:50:28.172 00:00:10.363 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:50:41.702 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-10-04 14:51:28.576 00:00:10.365 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:51:41.907 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52634 10 6452 1 2025-10-04 14:52:28.986 00:00:10.757 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:52:41.943 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:52:42.203 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:52:42.120 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-10-04 14:53:29.774 00:00:10.367 TCP 23.104.0.1:48118 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:53:42.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-10-04 14:50:37.567 00:05:01.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 14:54:30.174 00:00:10.370 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:54:42.543 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60902 10 6452 1 2025-10-04 14:51:37.571 00:05:01.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 14:55:30.581 00:00:10.370 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:55:42.759 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-10-04 14:56:30.985 00:00:10.369 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:56:42.934 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-10-04 14:57:31.390 00:00:10.360 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-10-04 14:57:42.130 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 14:57:42.059 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 14:57:43.170 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45240 10 6452 1 2025-10-04 14:58:31.788 00:00:10.376 TCP 23.104.0.1:54988 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496596, total packets: 1575, avg bps: 1066, avg pps: 0, avg bpp: 315 Time window: 2025-10-04 13:56:37 - 2025-10-04 14:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0009s Wall: 0.0014s flows/second: 117087.1 Runtime: 0.0014s