Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 02:59:04.607 00:00:10.331 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-10-05 02:59:35.815 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-10-05 03:00:04.974 00:00:10.378 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-10-05 02:56:37.786 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:00:35.983 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-10-05 03:01:05.385 00:00:10.369 TCP 23.104.0.1:39620 -> 1.101.0.1:3000 11 1507 1 2025-10-05 02:57:37.788 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:01:36.213 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-10-05 03:02:05.795 00:00:10.371 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:02:36.431 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-10-05 03:02:56.626 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:02:56.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:03:06.204 00:00:10.362 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:03:36.604 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46274 12 10375 1 2025-10-05 03:04:06.606 00:00:10.401 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 15 1926 1 2025-10-05 03:04:36.847 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54446 10 6452 1 2025-10-05 03:05:07.050 00:00:10.364 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:05:37.020 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-10-05 03:06:07.460 00:00:10.365 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:02:37.788 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:06:37.235 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-10-05 03:07:07.859 00:00:10.374 TCP 23.104.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:03:37.789 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:07:37.405 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-10-05 03:07:56.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:07:56.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:08:08.270 00:00:10.374 TCP 23.104.0.1:39560 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:08:37.580 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-10-05 03:09:08.682 00:00:10.507 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:09:37.752 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2025-10-05 03:10:09.225 00:00:10.410 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:10:37.975 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-10-05 03:11:09.672 00:00:10.380 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:11:38.200 00:00:17.867 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-10-05 03:12:10.104 00:00:10.367 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:08:37.788 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:12:46.115 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38506 10 6452 1 2025-10-05 03:12:56.916 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:12:56.980 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:13:10.506 00:00:10.367 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:09:37.791 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:13:46.285 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-10-05 03:14:10.910 00:00:10.323 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:14:46.495 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-10-05 03:15:11.270 00:00:10.368 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:15:46.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-10-05 03:16:11.676 00:00:10.326 TCP 23.104.0.1:44600 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:16:46.876 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-10-05 03:17:12.051 00:00:10.365 TCP 23.104.0.1:47780 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:17:57.168 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:17:47.104 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-10-05 03:17:57.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:18:12.458 00:00:10.372 TCP 23.104.0.1:41970 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:14:37.789 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:18:47.273 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45234 10 6452 1 2025-10-05 03:19:12.871 00:00:10.366 TCP 23.104.0.1:52366 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:15:37.793 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:19:47.493 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33552 10 6452 1 2025-10-05 03:20:13.275 00:00:10.365 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:20:47.700 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-10-05 03:21:13.678 00:00:10.362 TCP 23.104.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:21:47.908 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-10-05 03:22:14.092 00:00:10.368 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:22:57.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:22:48.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-10-05 03:22:57.176 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:23:14.505 00:00:10.517 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 15 1926 1 2025-10-05 03:23:48.341 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 12 10375 1 2025-10-05 03:24:15.056 00:00:10.366 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:20:37.791 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:24:48.547 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-10-05 03:25:15.460 00:00:10.369 TCP 23.104.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:21:37.794 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:25:48.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 10 6452 1 2025-10-05 03:26:15.863 00:00:10.367 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:26:48.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40654 10 6452 1 2025-10-05 03:27:16.272 00:00:10.363 TCP 23.104.0.1:42214 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:27:49.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-10-05 03:27:57.497 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:27:57.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:28:16.672 00:00:10.439 TCP 23.104.0.1:36438 -> 1.101.0.1:3000 15 1926 1 2025-10-05 03:28:49.433 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:52118 12 10375 1 2025-10-05 03:29:17.149 00:00:10.366 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:29:49.631 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-10-05 03:30:17.551 00:00:10.327 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:26:37.793 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:30:49.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42186 10 6452 1 2025-10-05 03:31:17.916 00:00:10.371 TCP 23.104.0.1:44986 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:27:37.795 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:31:50.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49722 10 6452 1 2025-10-05 03:32:18.322 00:00:10.365 TCP 23.104.0.1:44210 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:32:57.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:32:50.289 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-10-05 03:32:57.482 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:33:18.724 00:00:10.369 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:33:50.506 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58448 10 6452 1 2025-10-05 03:34:19.133 00:00:10.364 TCP 23.104.0.1:54190 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:34:50.723 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55536 10 6452 1 2025-10-05 03:35:19.533 00:00:10.377 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:35:50.942 00:00:10.586 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6452 1 2025-10-05 03:36:19.946 00:00:10.330 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:32:37.797 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:36:51.575 00:00:10.264 TCP 1.101.0.1:3000 -> 22.102.0.1:48908 10 6452 1 2025-10-05 03:37:20.317 00:00:10.331 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:33:37.799 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:37:57.254 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:37:57.325 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:37:51.871 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-10-05 03:38:20.686 00:00:10.324 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:38:52.103 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57330 10 6452 1 2025-10-05 03:39:21.048 00:00:10.364 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:39:52.324 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-10-05 03:40:21.450 00:00:10.363 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:40:52.543 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47206 10 6452 1 2025-10-05 03:41:21.852 00:00:10.376 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:41:52.767 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-10-05 03:42:22.266 00:00:10.366 TCP 23.104.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:38:37.796 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:42:57.508 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:42:57.602 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:42:52.988 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48752 10 6452 1 2025-10-05 03:43:22.668 00:00:10.365 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:39:37.799 00:05:02.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:43:53.222 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-10-05 03:44:23.094 00:00:10.362 TCP 23.104.0.1:55790 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:44:53.414 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-10-05 03:45:23.498 00:00:10.366 TCP 23.104.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:45:53.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6452 1 2025-10-05 03:46:23.903 00:00:10.371 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:46:53.840 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-10-05 03:47:24.311 00:00:10.327 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:47:57.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:47:57.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:47:54.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-10-05 03:48:24.674 00:00:10.366 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:44:37.798 00:05:02.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:48:54.307 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-10-05 03:49:25.107 00:00:10.371 TCP 23.104.0.1:56118 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:45:37.803 00:05:02.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:49:54.488 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-10-05 03:50:25.518 00:00:10.364 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:50:54.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6452 1 2025-10-05 03:51:25.918 00:00:10.390 TCP 23.104.0.1:46262 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:51:54.898 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6452 1 2025-10-05 03:52:26.348 00:00:10.328 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 12 1559 1 2025-10-05 03:52:57.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:52:58.091 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:52:55.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-10-05 03:53:26.715 00:00:10.369 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:53:55.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6452 1 2025-10-05 03:50:37.801 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 03:54:27.128 00:00:10.364 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:54:55.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-10-05 03:51:37.804 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 03:55:27.532 00:00:10.361 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:55:55.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 2025-10-05 03:56:27.944 00:00:10.329 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:56:55.937 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-10-05 03:57:28.314 00:00:10.328 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-10-05 03:57:58.554 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 03:57:58.669 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 03:57:56.192 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-10-05 03:58:28.691 00:00:10.370 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504974, total packets: 1581, avg bps: 1085, avg pps: 0, avg bpp: 319 Time window: 2025-10-05 02:56:37 - 2025-10-05 03:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0019s Wall: 0.0025s flows/second: 65643.0 Runtime: 0.0025s