Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 14:59:13.233 00:00:10.369 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:59:37.550 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-10-05 15:00:13.639 00:00:10.367 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:56:38.066 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:00:37.810 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6452 1 2025-10-05 15:01:14.049 00:00:10.367 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:57:38.069 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:01:38.088 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-10-05 15:02:14.453 00:00:10.360 TCP 23.104.0.1:48612 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:02:38.266 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2025-10-05 15:03:11.293 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:03:11.381 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:03:14.850 00:00:10.387 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:03:38.478 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 12 10375 1 2025-10-05 15:04:15.275 00:00:10.440 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 15 1926 1 2025-10-05 15:04:38.721 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-10-05 15:05:15.750 00:00:10.360 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:05:38.936 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-10-05 15:06:16.151 00:00:10.368 TCP 23.104.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:02:38.078 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:06:39.185 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-10-05 15:07:16.561 00:00:10.365 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:03:38.081 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:07:39.359 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-10-05 15:08:11.140 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:08:11.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:08:16.981 00:00:10.371 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:08:39.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-10-05 15:09:17.392 00:00:10.324 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:09:39.795 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-10-05 15:10:17.754 00:00:10.396 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:10:40.019 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41678 10 6452 1 2025-10-05 15:11:18.185 00:00:10.367 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:11:40.187 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-10-05 15:12:18.588 00:00:10.665 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:08:38.080 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:12:40.361 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60288 10 6452 1 2025-10-05 15:13:11.425 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:13:11.450 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:13:19.297 00:00:10.368 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:09:38.083 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:13:40.577 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45942 10 6452 1 2025-10-05 15:14:19.701 00:00:10.363 TCP 23.104.0.1:57654 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:14:40.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-10-05 15:15:20.108 00:00:10.365 TCP 23.104.0.1:48118 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:15:41.002 00:00:10.953 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-10-05 15:16:20.515 00:00:10.361 TCP 23.104.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:16:41.999 00:00:10.714 TCP 1.101.0.1:3000 -> 22.102.0.1:46318 10 6452 1 2025-10-05 15:17:20.918 00:00:10.386 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:17:42.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-10-05 15:18:11.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:18:11.541 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:18:21.338 00:00:10.368 TCP 23.104.0.1:34740 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:14:38.083 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:18:42.971 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 10 6452 1 2025-10-05 15:19:21.740 00:00:10.367 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:15:38.085 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:19:43.196 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-10-05 15:20:22.143 00:00:10.369 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:20:43.410 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37030 10 6452 1 2025-10-05 15:21:22.550 00:00:10.363 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:21:43.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-10-05 15:22:22.950 00:00:10.370 TCP 23.104.0.1:55040 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:22:43.839 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-10-05 15:23:11.824 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:23:12.119 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:23:23.355 00:00:10.628 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:23:44.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-10-05 15:24:24.016 00:00:10.363 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:20:38.084 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:24:44.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54464 10 6452 1 2025-10-05 15:25:24.412 00:00:10.324 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:21:38.086 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:25:44.517 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-10-05 15:26:24.776 00:00:10.369 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:26:44.730 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-10-05 15:27:25.186 00:00:10.365 TCP 23.104.0.1:45394 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:27:44.955 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-10-05 15:28:11.750 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:28:11.751 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:28:25.589 00:00:10.364 TCP 23.104.0.1:48422 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:28:45.514 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-10-05 15:29:25.989 00:00:10.366 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:29:45.754 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60460 10 6452 1 2025-10-05 15:30:26.398 00:00:10.367 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:26:38.085 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:30:45.985 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-10-05 15:31:26.801 00:00:10.367 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:27:38.087 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:31:46.221 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-10-05 15:32:27.206 00:00:10.367 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:32:46.446 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53538 10 6452 1 2025-10-05 15:33:11.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:33:11.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:33:27.609 00:00:10.366 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:33:46.662 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-10-05 15:34:28.015 00:00:10.360 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:34:46.876 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-10-05 15:35:28.419 00:00:10.323 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:35:47.106 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54704 10 6452 1 2025-10-05 15:32:38.085 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:36:28.781 00:00:10.337 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:36:47.277 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37516 10 6452 1 2025-10-05 15:37:29.161 00:00:10.373 TCP 23.104.0.1:37412 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:33:38.087 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:37:47.489 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-10-05 15:38:11.922 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:38:11.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:38:29.568 00:00:10.383 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:38:48.301 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-10-05 15:39:29.989 00:00:10.332 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:39:48.524 00:00:10.837 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-10-05 15:40:30.371 00:00:10.367 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:40:49.396 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-10-05 15:41:30.776 00:00:10.368 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:41:49.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 2025-10-05 15:38:38.086 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:42:31.185 00:00:10.365 TCP 23.104.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:42:49.817 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-10-05 15:43:12.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:43:12.167 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:39:38.089 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:43:31.591 00:00:10.369 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:43:50.034 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-10-05 15:44:32.000 00:00:10.416 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:44:50.250 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-10-05 15:45:32.454 00:00:10.366 TCP 23.104.0.1:34112 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:45:50.420 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-10-05 15:46:32.862 00:00:10.373 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:46:50.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36300 10 6452 1 2025-10-05 15:47:33.276 00:00:10.321 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:47:50.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-10-05 15:48:12.265 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:48:12.142 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:44:38.102 00:05:01.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:48:33.636 00:00:10.369 TCP 23.104.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:48:51.040 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60756 10 6452 1 2025-10-05 15:45:38.103 00:05:01.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:49:34.035 00:00:10.368 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:49:51.249 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-10-05 15:50:34.441 00:00:10.359 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:50:51.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-10-05 15:51:34.838 00:00:10.341 TCP 23.104.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:51:51.683 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-10-05 15:52:35.218 00:00:10.364 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:52:51.858 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-10-05 15:53:12.343 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:53:12.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:53:35.622 00:00:10.362 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:53:52.090 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-10-05 15:50:38.103 00:05:01.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 15:54:36.028 00:00:10.364 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:54:52.306 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41046 10 6452 1 2025-10-05 15:51:38.107 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 15:55:36.431 00:00:10.365 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:55:52.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45358 10 6452 1 2025-10-05 15:56:36.841 00:00:10.386 TCP 23.104.0.1:53732 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:56:52.745 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 10 6452 1 2025-10-05 15:57:37.265 00:00:10.324 TCP 23.104.0.1:50006 -> 1.101.0.1:3000 11 1507 1 2025-10-05 15:57:52.966 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41350 10 6452 1 2025-10-05 15:58:12.341 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 15:58:12.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 15:58:37.629 00:00:10.362 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1064, avg pps: 0, avg bpp: 316 Time window: 2025-10-05 14:56:38 - 2025-10-05 15:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0012s Wall: 0.0027s flows/second: 60034.4 Runtime: 0.0027s