Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 01:58:47.915 00:00:10.366 TCP 23.104.0.1:57858 -> 1.101.0.1:3000 11 1507 1 2025-10-09 01:59:30.999 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 12 10369 1 2025-10-09 01:59:50.779 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 01:59:50.859 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 01:59:48.316 00:00:10.446 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 15 1926 1 2025-10-09 02:00:31.246 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60602 10 6452 1 2025-10-09 01:56:39.635 00:05:02.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:00:48.793 00:00:10.367 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-10-09 01:57:39.638 00:05:02.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:01:31.470 00:00:18.788 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-10-09 02:01:49.197 00:00:10.322 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:02:40.308 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-10-09 02:02:49.553 00:00:10.368 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:03:40.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-10-09 02:03:49.954 00:00:10.327 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:04:51.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:04:51.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:04:40.758 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-10-09 02:04:50.319 00:00:10.381 TCP 23.104.0.1:57896 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:05:41.493 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-10-09 02:05:50.758 00:00:10.339 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:02:39.639 00:05:02.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:06:41.699 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-10-09 02:06:51.136 00:00:10.394 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:03:39.643 00:05:02.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:07:41.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-10-09 02:07:51.575 00:00:10.375 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:08:42.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44832 10 6452 1 2025-10-09 02:08:51.984 00:00:10.366 TCP 23.104.0.1:58514 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:09:51.023 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:09:51.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:09:42.339 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6452 1 2025-10-09 02:09:52.390 00:00:10.363 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:10:42.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-10-09 02:10:52.788 00:00:10.378 TCP 23.104.0.1:48246 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:11:42.727 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-10-09 02:11:53.196 00:00:10.321 TCP 23.104.0.1:58820 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:08:39.640 00:05:02.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:12:42.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58454 10 6452 1 2025-10-09 02:12:53.557 00:00:10.372 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:09:39.644 00:05:02.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:13:43.117 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-10-09 02:13:53.971 00:00:10.373 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:14:51.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:14:51.486 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:14:43.344 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 12 10375 1 2025-10-09 02:14:54.384 00:00:10.975 TCP 23.104.0.1:39358 -> 1.101.0.1:3000 16 1978 1 2025-10-09 02:15:43.598 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-10-09 02:15:55.400 00:00:10.322 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:16:43.821 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-10-09 02:16:55.762 00:00:10.327 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:17:44.008 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-10-09 02:17:56.129 00:00:10.369 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:14:39.640 00:05:02.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:18:44.195 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36264 10 6452 1 2025-10-09 02:18:56.535 00:00:10.373 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:15:39.643 00:05:02.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:19:51.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:19:51.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:19:44.408 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-10-09 02:19:56.952 00:00:10.371 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:20:44.620 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-10-09 02:20:57.362 00:00:10.321 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:21:44.792 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-10-09 02:21:57.725 00:00:10.370 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:22:45.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-10-09 02:22:58.131 00:00:10.325 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:23:45.247 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-10-09 02:23:58.496 00:00:10.366 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:24:51.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:20:39.641 00:05:02.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:24:51.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:24:45.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-10-09 02:24:58.898 00:00:10.372 TCP 23.104.0.1:47800 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:21:39.645 00:05:02.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:25:45.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-10-09 02:25:59.311 00:00:10.595 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:26:45.910 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:34206 10 6452 1 2025-10-09 02:26:59.945 00:00:10.369 TCP 23.104.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:27:46.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-10-09 02:28:00.353 00:00:10.320 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:28:46.280 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-10-09 02:29:00.708 00:00:10.365 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:29:51.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:29:51.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:29:46.501 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-10-09 02:30:01.109 00:00:10.338 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:26:39.643 00:05:02.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:30:46.719 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36492 10 6452 1 2025-10-09 02:31:01.489 00:00:10.365 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:27:39.645 00:05:02.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:31:46.942 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-10-09 02:32:01.892 00:00:10.370 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:32:47.144 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-10-09 02:33:02.299 00:00:10.363 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:33:47.321 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60492 10 6452 1 2025-10-09 02:34:02.706 00:00:10.389 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:34:51.784 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:34:51.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:34:47.537 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-10-09 02:35:03.158 00:00:10.384 TCP 23.104.0.1:37618 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:35:47.763 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-10-09 02:36:03.580 00:00:10.368 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:32:39.645 00:05:02.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:36:47.975 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 2025-10-09 02:37:03.989 00:00:10.324 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:33:39.647 00:05:02.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:37:48.204 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40372 10 6452 1 2025-10-09 02:38:04.355 00:00:10.365 TCP 23.104.0.1:53394 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:38:48.417 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-10-09 02:39:04.767 00:00:10.373 TCP 23.104.0.1:59410 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:39:51.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:39:51.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:39:48.581 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48274 10 6452 1 2025-10-09 02:40:05.174 00:00:10.365 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:40:48.792 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45384 10 6452 1 2025-10-09 02:41:05.581 00:00:10.369 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:41:48.965 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-10-09 02:42:05.985 00:00:10.327 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:38:39.644 00:05:02.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:42:49.155 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6452 1 2025-10-09 02:43:06.352 00:00:18.960 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:39:39.648 00:05:02.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:43:49.369 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-10-09 02:44:15.365 00:00:10.364 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:44:52.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:44:52.271 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:44:49.545 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 12 10375 1 2025-10-09 02:45:15.769 00:00:10.453 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 15 1926 1 2025-10-09 02:45:49.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-10-09 02:46:16.255 00:00:10.367 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:46:50.039 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 10 6452 1 2025-10-09 02:47:16.662 00:00:10.371 TCP 23.104.0.1:58728 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:47:50.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-10-09 02:48:17.092 00:00:10.364 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:44:39.645 00:05:02.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:48:50.429 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-10-09 02:49:17.503 00:00:10.369 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:45:39.649 00:05:02.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:49:51.860 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:49:52.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:49:50.647 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-10-09 02:50:17.945 00:00:10.371 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:50:51.131 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-10-09 02:51:18.357 00:00:10.323 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:51:51.301 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-10-09 02:52:18.718 00:00:10.373 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:52:51.483 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38910 10 6452 1 2025-10-09 02:53:19.129 00:00:10.323 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:53:51.695 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42556 10 6452 1 2025-10-09 02:54:19.494 00:00:10.363 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:50:39.648 00:05:02.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 02:54:52.005 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 02:54:52.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 02:54:51.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-10-09 02:55:19.900 00:00:10.368 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:51:39.650 00:05:02.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 02:55:52.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6452 1 2025-10-09 02:56:20.304 00:00:10.370 TCP 23.104.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:56:52.332 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-10-09 02:57:20.707 00:00:10.360 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-09 02:57:52.497 00:00:11.328 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6452 1 2025-10-09 02:58:21.109 00:00:10.368 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504968, total packets: 1581, avg bps: 1088, avg pps: 0, avg bpp: 319 Time window: 2025-10-09 01:56:39 - 2025-10-09 02:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0010s Wall: 0.0019s flows/second: 87080.8 Runtime: 0.0019s