Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 18:59:17.617 00:00:10.329 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-10-04 18:59:37.325 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56502 10 6452 1 2025-10-04 19:00:17.985 00:00:10.369 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-10-04 18:56:37.635 00:05:02.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:00:37.498 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42008 10 6452 1 2025-10-04 19:01:18.396 00:00:10.368 TCP 23.104.0.1:38664 -> 1.101.0.1:3000 11 1507 1 2025-10-04 18:57:37.639 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:01:37.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-10-04 19:02:18.798 00:00:10.364 TCP 23.104.0.1:60102 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:02:47.230 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:02:37.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-10-04 19:02:47.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:03:19.206 00:00:10.362 TCP 23.104.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:03:38.100 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38898 10 6452 1 2025-10-04 19:04:19.609 00:00:10.364 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:04:38.317 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34088 10 6452 1 2025-10-04 19:05:20.012 00:00:10.374 TCP 23.104.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:05:38.537 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59478 10 6452 1 2025-10-04 19:06:20.420 00:00:10.328 TCP 23.104.0.1:41458 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:02:37.637 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:06:38.747 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50606 10 6452 1 2025-10-04 19:07:20.784 00:00:10.324 TCP 23.104.0.1:54766 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:03:37.639 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:07:47.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:07:46.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:07:38.965 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40728 12 6556 1 2025-10-04 19:08:21.146 00:00:10.366 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:08:39.196 00:00:10.671 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6452 1 2025-10-04 19:09:21.551 00:00:10.364 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:09:39.909 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-10-04 19:10:21.952 00:00:10.377 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:10:40.125 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36334 10 6452 1 2025-10-04 19:11:22.370 00:00:11.007 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:11:40.298 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47488 10 6452 1 2025-10-04 19:12:23.411 00:00:10.322 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:08:37.638 00:05:02.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:12:40.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-10-04 19:12:47.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:12:47.267 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:13:23.773 00:00:10.372 TCP 23.104.0.1:40902 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:09:37.641 00:05:02.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:13:40.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-10-04 19:14:24.179 00:00:10.370 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:14:40.952 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-10-04 19:15:24.595 00:00:10.322 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:15:41.138 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-10-04 19:16:24.958 00:00:10.370 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:16:41.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-10-04 19:17:25.369 00:00:10.362 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:17:47.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:17:41.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42740 10 6452 1 2025-10-04 19:17:47.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:18:25.766 00:00:10.377 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:14:37.641 00:05:02.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:18:41.791 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39050 10 6452 1 2025-10-04 19:19:26.174 00:00:10.693 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:15:37.644 00:05:02.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:19:42.007 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-10-04 19:20:26.909 00:00:10.325 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:20:42.184 00:00:10.434 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-10-04 19:21:27.271 00:00:10.363 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:21:42.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51128 10 6452 1 2025-10-04 19:22:27.670 00:00:10.386 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:22:47.510 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:22:47.525 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:22:42.877 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-10-04 19:23:28.113 00:00:10.360 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:23:43.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-10-04 19:24:28.513 00:00:10.365 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:20:37.651 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:24:43.293 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54952 10 6452 1 2025-10-04 19:25:28.925 00:00:10.397 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:21:37.652 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:25:43.466 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6452 1 2025-10-04 19:26:29.358 00:00:10.366 TCP 23.104.0.1:41624 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:26:43.681 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-10-04 19:27:29.765 00:00:10.335 TCP 23.104.0.1:49242 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:27:47.732 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:27:47.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:27:43.897 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 10 6452 1 2025-10-04 19:28:30.141 00:00:10.367 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:28:44.122 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34778 10 6452 1 2025-10-04 19:29:30.548 00:00:10.326 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:29:44.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33944 10 6452 1 2025-10-04 19:30:30.916 00:00:10.380 TCP 23.104.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:26:37.651 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:30:44.501 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37902 10 6452 1 2025-10-04 19:31:31.333 00:00:10.364 TCP 23.104.0.1:45386 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:27:37.654 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:31:44.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36566 10 6452 1 2025-10-04 19:32:31.730 00:00:10.327 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:32:47.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:32:47.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:32:44.931 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:35536 10 6452 1 2025-10-04 19:33:32.107 00:00:10.366 TCP 23.104.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:33:45.125 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 10 6452 1 2025-10-04 19:34:32.512 00:00:10.321 TCP 23.104.0.1:60142 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:34:45.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39966 10 6452 1 2025-10-04 19:35:32.870 00:00:10.328 TCP 23.104.0.1:41748 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:35:45.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-10-04 19:32:37.652 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:36:33.236 00:00:10.372 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:36:45.756 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56656 10 6452 1 2025-10-04 19:33:37.654 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:37:33.643 00:00:10.837 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:37:47.692 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:37:47.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:37:45.971 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-10-04 19:38:34.513 00:00:10.328 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:38:46.211 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-10-04 19:39:34.879 00:00:11.177 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:39:46.387 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 11 6504 1 2025-10-04 19:40:36.106 00:00:10.363 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:40:46.667 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-10-04 19:41:36.504 00:00:10.369 TCP 23.104.0.1:34054 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:41:46.880 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37874 10 6452 1 2025-10-04 19:38:37.655 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:42:47.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:42:47.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:42:36.912 00:00:14.438 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:42:47.104 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-10-04 19:39:37.658 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:43:41.392 00:00:10.330 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:43:47.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-10-04 19:44:41.755 00:00:10.334 TCP 23.104.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:44:47.499 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44352 10 6452 1 2025-10-04 19:45:42.126 00:00:10.371 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:45:47.710 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-10-04 19:46:42.538 00:00:10.372 TCP 23.104.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:46:47.926 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6452 1 2025-10-04 19:47:47.972 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:47:48.060 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:47:42.947 00:00:10.376 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:47:48.142 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:56474 10 6452 1 2025-10-04 19:44:37.657 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:48:43.360 00:00:10.368 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:48:48.315 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51746 10 6452 1 2025-10-04 19:45:37.661 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:49:43.764 00:00:10.329 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:49:48.534 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 10 6452 1 2025-10-04 19:50:44.134 00:00:10.322 TCP 23.104.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:50:48.752 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-10-04 19:51:44.492 00:00:10.327 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:51:48.964 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43774 10 6452 1 2025-10-04 19:52:48.047 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:52:48.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:52:44.858 00:00:10.330 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:52:49.191 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-04 19:53:45.224 00:00:10.361 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:53:49.404 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39938 10 6452 1 2025-10-04 19:50:37.660 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 19:54:45.622 00:00:10.364 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:54:49.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54884 10 6452 1 2025-10-04 19:51:37.662 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 19:55:46.025 00:00:10.367 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:55:49.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6452 1 2025-10-04 19:56:46.428 00:00:10.362 TCP 23.104.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:56:49.998 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-10-04 19:57:48.123 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 19:57:48.249 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 19:57:46.840 00:00:10.388 TCP 23.104.0.1:58820 -> 1.101.0.1:3000 11 1507 1 2025-10-04 19:57:50.224 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 Summary: total flows: 162, total bytes: 490545, total packets: 1554, avg bps: 1065, avg pps: 0, avg bpp: 315 Time window: 2025-10-04 18:56:37 - 2025-10-04 19:58:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0019s Wall: 0.0022s flows/second: 75246.6 Runtime: 0.0022s