Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 16:58:52.577 00:00:10.362 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-10-06 16:59:23.888 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-10-06 16:59:52.974 00:00:10.333 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:00:24.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59526 10 6452 1 2025-10-06 16:56:38.603 00:05:01.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:00:53.346 00:00:10.367 TCP 23.104.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:01:24.336 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57496 10 6452 1 2025-10-06 16:57:38.606 00:05:01.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:01:53.750 00:00:10.362 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:02:24.558 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-10-06 17:02:54.150 00:00:10.337 TCP 23.104.0.1:52118 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:03:24.786 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-10-06 17:03:42.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:03:42.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:03:54.527 00:00:10.376 TCP 23.104.0.1:48470 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:04:25.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-10-06 17:04:54.941 00:00:10.377 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:05:25.226 00:00:12.488 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 10 6452 1 2025-10-06 17:05:55.352 00:00:10.325 TCP 23.104.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:06:27.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-10-06 17:02:38.605 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:06:55.712 00:00:10.370 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:03:38.607 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:07:27.977 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-10-06 17:07:56.119 00:00:10.366 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:08:28.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-10-06 17:08:42.763 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:08:42.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:08:56.521 00:00:10.365 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:09:28.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39742 10 6452 1 2025-10-06 17:09:56.927 00:00:20.211 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:10:28.617 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-10-06 17:11:07.178 00:00:10.361 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:11:28.829 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53288 10 6452 1 2025-10-06 17:12:07.580 00:00:10.362 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:08:38.606 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:12:29.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-10-06 17:13:07.982 00:00:10.366 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:09:38.609 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:13:42.534 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:13:29.295 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-10-06 17:13:42.469 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:14:08.382 00:00:10.892 TCP 23.104.0.1:34996 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:14:29.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54936 10 6452 1 2025-10-06 17:15:09.312 00:00:10.363 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:15:29.737 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56466 10 6452 1 2025-10-06 17:16:09.713 00:00:10.372 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:16:29.907 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-10-06 17:17:10.127 00:00:10.326 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:17:30.127 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53050 10 6452 1 2025-10-06 17:18:10.492 00:00:10.362 TCP 23.104.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:18:30.351 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34310 10 6452 1 2025-10-06 17:14:38.607 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:18:42.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:18:42.911 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:19:10.896 00:00:10.372 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:19:30.523 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54532 10 6452 1 2025-10-06 17:15:38.609 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:20:11.329 00:00:10.363 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:20:30.707 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58582 10 6452 1 2025-10-06 17:21:11.732 00:00:10.325 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:21:30.931 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:38756 10 6452 1 2025-10-06 17:22:12.102 00:00:10.367 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:22:31.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-10-06 17:23:12.510 00:00:10.366 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:23:31.398 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-10-06 17:23:43.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:23:42.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:24:12.908 00:00:10.368 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:24:31.616 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-10-06 17:20:38.608 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:25:13.314 00:00:10.328 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:25:31.792 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41202 10 6452 1 2025-10-06 17:21:38.611 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:26:13.678 00:00:10.372 TCP 23.104.0.1:60204 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:26:32.007 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 10 6452 1 2025-10-06 17:27:14.104 00:00:10.364 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:27:32.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37294 10 6452 1 2025-10-06 17:28:14.502 00:00:10.372 TCP 23.104.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:28:42.874 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:28:32.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-10-06 17:28:43.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:29:14.926 00:00:10.392 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:29:32.561 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43776 10 6452 1 2025-10-06 17:30:15.357 00:00:10.366 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:26:38.611 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:30:32.774 00:00:15.313 TCP 1.101.0.1:3000 -> 22.102.0.1:56284 10 6452 1 2025-10-06 17:31:15.767 00:00:10.375 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:27:38.615 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:31:38.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36492 10 6452 1 2025-10-06 17:32:16.178 00:00:10.361 TCP 23.104.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:32:38.353 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-10-06 17:33:16.583 00:00:10.366 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:33:42.951 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:33:42.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:33:38.573 00:00:23.556 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-10-06 17:34:16.984 00:00:10.366 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:34:52.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48060 10 6452 1 2025-10-06 17:35:17.396 00:00:10.321 TCP 23.104.0.1:50044 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:35:52.421 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6452 1 2025-10-06 17:36:17.756 00:00:11.000 TCP 23.104.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:32:38.615 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:36:52.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-10-06 17:37:18.793 00:00:10.367 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:33:38.618 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:37:52.853 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-10-06 17:38:19.198 00:00:10.361 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:38:43.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:38:43.049 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:38:53.040 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-10-06 17:39:19.608 00:00:10.368 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:39:53.256 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-10-06 17:40:20.011 00:00:10.357 TCP 23.104.0.1:36256 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:40:53.463 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-10-06 17:41:20.404 00:00:10.366 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:41:53.680 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51402 10 6452 1 2025-10-06 17:42:20.804 00:00:10.364 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:38:38.618 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:42:53.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-10-06 17:43:21.210 00:00:10.363 TCP 23.104.0.1:50842 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:39:38.621 00:05:01.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:43:43.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:43:43.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:43:54.117 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-10-06 17:44:21.614 00:00:10.360 TCP 23.104.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:44:54.328 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-10-06 17:45:22.011 00:00:10.325 TCP 23.104.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:45:54.499 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-10-06 17:46:22.375 00:00:10.362 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:46:54.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43672 10 6452 1 2025-10-06 17:47:22.775 00:00:10.363 TCP 23.104.0.1:45564 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:47:54.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 2025-10-06 17:48:23.179 00:00:10.367 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:44:38.625 00:05:01.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:48:43.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:48:43.151 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:48:55.132 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-10-06 17:49:23.588 00:00:10.363 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:45:38.627 00:05:01.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:49:55.351 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39482 10 6452 1 2025-10-06 17:50:23.989 00:00:20.149 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:50:55.528 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-10-06 17:51:34.187 00:00:10.371 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:51:55.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53856 10 6452 1 2025-10-06 17:52:34.595 00:00:10.366 TCP 23.104.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:52:55.960 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-10-06 17:53:43.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:53:35.001 00:00:10.359 TCP 23.104.0.1:40454 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:53:43.592 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:53:56.151 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-10-06 17:50:38.627 00:05:01.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 17:54:35.396 00:00:10.366 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:54:56.368 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-10-06 17:51:38.629 00:05:01.976 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 17:55:35.798 00:00:10.367 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:55:56.576 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-10-06 17:56:36.206 00:00:10.372 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:56:56.787 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-10-06 17:57:36.617 00:00:10.366 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-10-06 17:57:57.005 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-10-06 17:58:43.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 17:58:43.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 17:58:37.024 00:00:10.359 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1055, avg pps: 0, avg bpp: 314 Time window: 2025-10-06 16:56:38 - 2025-10-06 17:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0013s Wall: 0.0019s flows/second: 84581.4 Runtime: 0.0019s