Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 03:59:06.106 00:00:10.370 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-10-11 03:59:32.590 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-10-11 04:00:06.509 00:00:10.367 TCP 23.104.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:00:32.816 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 12 10375 1 2025-10-11 03:56:40.622 00:05:02.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:00:51.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:00:51.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:01:06.913 00:00:10.461 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 15 1926 1 2025-10-11 03:56:42.927 00:05:57.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:01:33.093 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 12 6556 1 2025-10-11 04:02:07.418 00:00:10.382 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:02:33.316 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-10-11 04:03:07.852 00:00:10.385 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:03:33.534 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-10-11 04:04:08.279 00:00:10.367 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:04:33.871 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41030 10 6452 1 2025-10-11 04:05:08.696 00:00:10.366 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:05:34.100 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34746 10 6452 1 2025-10-11 04:05:50.909 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:05:51.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:06:09.124 00:00:10.376 TCP 23.104.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:06:34.320 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41260 10 6452 1 2025-10-11 04:02:40.624 00:05:02.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:07:09.536 00:00:10.359 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:02:42.928 00:05:57.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:07:34.547 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-10-11 04:08:09.939 00:00:10.377 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:08:34.729 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-10-11 04:09:10.355 00:00:10.364 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:09:34.901 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-10-11 04:10:10.757 00:00:10.331 TCP 23.104.0.1:44708 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:10:35.082 00:00:12.987 TCP 1.101.0.1:3000 -> 22.102.0.1:59714 10 6452 1 2025-10-11 04:10:51.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:10:51.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:11:11.127 00:00:10.327 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:11:38.102 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-10-11 04:12:11.492 00:00:10.364 TCP 23.104.0.1:34338 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:08:40.627 00:05:02.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:12:38.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6452 1 2025-10-11 04:13:11.893 00:00:10.338 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:08:42.932 00:05:57.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:13:38.510 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-10-11 04:14:12.269 00:00:10.366 TCP 23.104.0.1:33058 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:14:38.729 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-10-11 04:15:12.674 00:00:10.371 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:15:51.656 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:15:51.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:15:38.946 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-10-11 04:16:13.103 00:00:10.365 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:16:39.189 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-10-11 04:17:13.508 00:00:10.393 TCP 23.104.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:17:39.370 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35908 10 6452 1 2025-10-11 04:18:13.918 00:00:10.375 TCP 23.104.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:14:40.630 00:05:02.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:18:39.577 00:00:15.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-10-11 04:19:14.332 00:00:10.361 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:14:42.934 00:05:57.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:19:44.829 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-10-11 04:20:14.734 00:00:10.370 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:20:51.558 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:20:51.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:20:45.060 00:00:11.015 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-10-11 04:21:15.146 00:00:16.714 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:21:46.116 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-10-11 04:22:21.900 00:00:10.370 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:22:46.289 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-10-11 04:23:22.308 00:00:10.364 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:23:46.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48078 10 6452 1 2025-10-11 04:24:22.710 00:00:10.366 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:20:40.630 00:05:02.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:24:46.729 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-10-11 04:25:23.113 00:00:10.370 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:20:42.935 00:05:57.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:25:51.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:25:51.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:25:46.939 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-10-11 04:26:23.524 00:00:10.320 TCP 23.104.0.1:49918 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:26:47.184 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-10-11 04:27:23.882 00:00:10.377 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:27:47.364 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-10-11 04:28:24.298 00:00:10.377 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:28:47.571 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-10-11 04:29:24.710 00:00:10.326 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:29:47.903 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-10-11 04:30:25.099 00:00:10.367 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:26:40.631 00:05:02.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:30:51.791 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:30:51.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:30:48.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-10-11 04:31:25.507 00:00:10.331 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:26:42.937 00:05:57.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:31:48.342 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-10-11 04:32:25.878 00:00:10.380 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:32:48.515 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-10-11 04:33:26.292 00:00:10.364 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:33:48.736 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-10-11 04:34:26.697 00:00:10.338 TCP 23.104.0.1:35984 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:34:48.949 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 13 6608 1 2025-10-11 04:35:27.104 00:00:10.363 TCP 23.104.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:35:51.790 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:35:52.009 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:35:49.207 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50186 10 6452 1 2025-10-11 04:36:27.506 00:00:10.367 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:32:40.633 00:05:02.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:36:49.425 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6452 1 2025-10-11 04:37:27.911 00:00:10.364 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:32:42.940 00:05:57.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:37:49.661 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 10 6452 1 2025-10-11 04:38:28.314 00:00:10.359 TCP 23.104.0.1:58140 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:38:49.878 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-10-11 04:39:28.710 00:00:10.326 TCP 23.104.0.1:34264 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:39:50.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-10-11 04:40:29.101 00:00:10.366 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:40:51.754 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:40:51.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:40:50.323 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38578 10 6452 1 2025-10-11 04:41:29.506 00:00:10.334 TCP 23.104.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:41:50.549 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-10-11 04:42:29.881 00:00:10.914 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:38:40.635 00:05:02.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:42:50.771 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6452 1 2025-10-11 04:43:30.852 00:00:10.381 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:38:42.941 00:05:57.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:43:50.956 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49272 12 6556 1 2025-10-11 04:44:31.268 00:00:10.365 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:44:51.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59492 10 6452 1 2025-10-11 04:45:31.671 00:00:10.334 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:45:52.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:45:52.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:45:51.401 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:38172 10 6452 1 2025-10-11 04:46:32.046 00:00:10.371 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:46:51.961 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-10-11 04:47:32.455 00:00:10.364 TCP 23.104.0.1:43184 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:47:52.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-10-11 04:44:40.635 00:05:02.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:48:32.861 00:00:10.368 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:48:52.402 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-10-11 04:44:42.942 00:05:57.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:49:33.270 00:00:10.369 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:49:52.612 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-10-11 04:50:33.695 00:00:10.372 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:50:52.223 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:50:52.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:50:52.958 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 12 6556 1 2025-10-11 04:51:34.107 00:00:10.324 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:51:53.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54740 10 6452 1 2025-10-11 04:52:34.470 00:00:10.364 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:52:53.410 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51142 10 6452 1 2025-10-11 04:53:34.875 00:00:10.365 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:53:53.625 00:00:10.624 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-10-11 04:50:40.639 00:05:02.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 04:54:35.278 00:00:10.365 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:54:54.283 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-10-11 04:50:42.946 00:05:57.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 04:55:35.681 00:00:10.323 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:55:52.504 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 04:55:52.558 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 04:55:54.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-10-11 04:56:36.054 00:00:10.371 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:56:54.718 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40380 10 6452 1 2025-10-11 04:57:36.471 00:00:10.363 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:57:54.895 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-10-11 04:58:36.873 00:00:10.364 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496706, total packets: 1577, avg bps: 1066, avg pps: 0, avg bpp: 314 Time window: 2025-10-11 03:56:40 - 2025-10-11 04:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0031s flows/second: 52940.3 Runtime: 0.0031s