Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 09:59:11.351 00:00:10.324 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-10-09 09:59:33.257 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43588 10 6452 1 2025-10-09 10:00:01.062 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:00:00.621 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:00:11.711 00:00:10.367 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:00:33.472 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-10-09 09:56:39.784 00:05:02.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:01:12.117 00:00:10.362 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-10-09 09:57:39.787 00:05:02.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:01:33.695 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-10-09 10:02:12.518 00:00:10.472 TCP 23.104.0.1:50804 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:02:33.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36726 10 6452 1 2025-10-09 10:03:13.030 00:00:10.326 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:03:34.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-10-09 10:04:13.394 00:00:10.367 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:04:34.328 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44960 10 6452 1 2025-10-09 10:05:00.824 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:05:00.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:05:13.799 00:00:10.373 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:05:34.576 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-10-09 10:06:14.207 00:00:10.323 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:06:34.748 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-10-09 10:02:39.784 00:05:02.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:07:14.570 00:00:10.367 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:03:39.787 00:05:02.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:07:34.914 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-10-09 10:08:14.973 00:00:10.369 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:08:35.198 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-10-09 10:09:15.382 00:00:10.365 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:09:35.374 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 12 10375 1 2025-10-09 10:10:00.766 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:10:00.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:10:15.784 00:00:10.436 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 15 1926 1 2025-10-09 10:10:35.619 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33468 10 6452 1 2025-10-09 10:11:16.256 00:00:10.365 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:11:35.789 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6452 1 2025-10-09 10:12:16.661 00:00:10.369 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:12:36.003 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46134 10 6452 1 2025-10-09 10:08:39.790 00:05:02.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:13:17.091 00:00:10.367 TCP 23.104.0.1:35034 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:09:39.791 00:05:02.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:13:36.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-10-09 10:14:17.500 00:00:10.367 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:14:36.441 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36176 10 6452 1 2025-10-09 10:15:00.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:15:00.731 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:15:17.909 00:00:10.373 TCP 23.104.0.1:42004 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:15:36.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46588 10 6452 1 2025-10-09 10:16:18.318 00:00:10.367 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:16:36.828 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-10-09 10:17:18.727 00:00:10.367 TCP 23.104.0.1:46990 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:17:36.995 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-10-09 10:18:19.131 00:00:10.360 TCP 23.104.0.1:60862 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:14:39.791 00:05:02.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:18:37.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-10-09 10:19:19.527 00:00:10.363 TCP 23.104.0.1:58576 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:15:39.793 00:05:02.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:19:37.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-10-09 10:20:01.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:20:00.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:20:19.932 00:00:10.377 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:20:37.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35652 10 6452 1 2025-10-09 10:21:20.358 00:00:10.321 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:21:37.851 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60492 10 6452 1 2025-10-09 10:22:20.718 00:00:10.332 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:22:38.075 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-09 10:23:21.099 00:00:11.043 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:23:38.282 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35326 10 6452 1 2025-10-09 10:24:22.180 00:00:10.366 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:20:39.805 00:05:02.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:24:38.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-10-09 10:25:01.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:25:01.240 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:25:22.577 00:00:10.370 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:21:39.807 00:05:02.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:25:38.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59526 10 6452 1 2025-10-09 10:26:22.981 00:00:10.377 TCP 23.104.0.1:41140 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:26:38.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-10-09 10:27:23.390 00:00:10.364 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:27:39.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-10-09 10:28:23.792 00:00:10.370 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:28:39.338 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6452 1 2025-10-09 10:29:24.205 00:00:10.373 TCP 23.104.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:29:39.568 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41398 10 6452 1 2025-10-09 10:30:01.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:30:01.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:30:24.620 00:00:10.361 TCP 23.104.0.1:57902 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:26:39.805 00:05:02.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:30:39.795 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:39262 10 6452 1 2025-10-09 10:31:25.031 00:00:10.363 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:27:39.808 00:05:02.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:31:40.081 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:60564 10 6452 1 2025-10-09 10:32:25.431 00:00:10.367 TCP 23.104.0.1:53430 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:32:40.275 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-10-09 10:33:25.839 00:00:10.389 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:33:40.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-10-09 10:34:26.268 00:00:10.320 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:34:40.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-10-09 10:35:01.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:35:01.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:35:26.625 00:00:10.363 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:35:40.922 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-10-09 10:36:27.027 00:00:10.362 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:32:39.810 00:05:02.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:36:41.104 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-10-09 10:37:27.427 00:00:10.366 TCP 23.104.0.1:53696 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:33:39.812 00:05:02.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:37:41.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-10-09 10:38:27.832 00:00:10.381 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:38:41.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-10-09 10:39:28.252 00:00:18.325 TCP 23.104.0.1:34062 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:39:41.751 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-10-09 10:40:01.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:40:01.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:40:36.618 00:00:10.325 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:40:41.963 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 12 6556 1 2025-10-09 10:41:36.984 00:00:10.364 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:41:42.187 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 10 6452 1 2025-10-09 10:38:39.814 00:05:02.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:42:37.392 00:00:10.360 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:42:42.399 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-10-09 10:39:39.816 00:05:02.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:43:37.792 00:00:10.368 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:43:42.610 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6452 1 2025-10-09 10:44:38.200 00:00:10.322 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:44:42.829 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-10-09 10:45:01.731 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:45:01.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:45:38.560 00:00:10.366 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:45:43.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41900 10 6452 1 2025-10-09 10:46:38.964 00:00:10.373 TCP 23.104.0.1:51408 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:46:43.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-10-09 10:47:39.376 00:00:10.358 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:47:43.493 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52616 10 6452 1 2025-10-09 10:44:39.813 00:05:02.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:48:39.769 00:00:10.373 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:48:43.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41008 10 6452 1 2025-10-09 10:45:39.816 00:05:02.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:49:40.181 00:00:10.362 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:49:43.925 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-10-09 10:50:01.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:50:01.486 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:50:40.584 00:00:10.344 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:50:44.137 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-10-09 10:51:41.028 00:00:10.905 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:51:44.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34506 10 6452 1 2025-10-09 10:52:41.971 00:00:10.327 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:52:44.580 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-10-09 10:53:44.765 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-10-09 10:53:42.338 00:00:10.367 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:50:39.819 00:05:02.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 10:54:42.741 00:00:10.441 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 15 1926 1 2025-10-09 10:54:44.984 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:48140 12 10375 1 2025-10-09 10:55:01.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 10:55:01.797 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 10:51:39.821 00:05:02.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 10:55:43.222 00:00:10.369 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:55:45.245 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-10-09 10:56:43.624 00:00:10.891 TCP 23.104.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-10-09 10:56:45.460 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-10-09 10:57:45.675 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-10-09 10:57:44.550 00:00:10.363 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499177, total packets: 1565, avg bps: 1086, avg pps: 0, avg bpp: 318 Time window: 2025-10-09 09:56:39 - 2025-10-09 10:57:55 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0009s Wall: 0.0018s flows/second: 90657.4 Runtime: 0.0018s