Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 13:58:47.985 00:00:10.364 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-10-05 13:59:16.623 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 10 6452 1 2025-10-05 13:59:48.387 00:00:10.365 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:00:16.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-10-05 13:56:38.031 00:05:02.022 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:00:48.788 00:00:10.368 TCP 23.104.0.1:55692 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:01:17.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-10-05 13:57:38.036 00:05:02.016 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:01:49.200 00:00:10.377 TCP 23.104.0.1:45836 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:02:17.303 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39238 10 6452 1 2025-10-05 14:02:49.617 00:00:10.367 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:03:10.158 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:03:09.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:03:17.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-10-05 14:03:50.023 00:00:10.366 TCP 23.104.0.1:59382 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:04:17.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-10-05 14:04:50.423 00:00:10.615 TCP 23.104.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:05:17.950 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-10-05 14:05:51.096 00:00:10.370 TCP 23.104.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:06:18.175 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-10-05 14:02:38.033 00:05:02.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:06:51.506 00:00:10.370 TCP 23.104.0.1:50760 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:07:18.345 00:00:10.459 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-10-05 14:03:38.036 00:05:02.017 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:07:51.917 00:00:10.367 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:08:10.007 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:08:10.087 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:08:18.839 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51174 10 6452 1 2025-10-05 14:08:52.322 00:00:10.365 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:09:19.082 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-10-05 14:09:52.731 00:00:10.327 TCP 23.104.0.1:45566 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:10:19.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-10-05 14:10:53.106 00:00:10.366 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:11:19.495 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-10-05 14:11:53.510 00:00:10.365 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:12:19.720 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-10-05 14:08:38.036 00:05:02.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:12:53.917 00:00:10.361 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:13:10.165 00:00:00.012 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:13:10.218 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:13:19.930 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41526 10 6452 1 2025-10-05 14:09:38.038 00:05:02.026 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:13:54.317 00:00:10.328 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:14:20.161 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-10-05 14:14:54.684 00:00:10.360 TCP 23.104.0.1:33482 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:15:20.391 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-10-05 14:15:55.098 00:00:10.367 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:16:20.647 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-10-05 14:16:55.500 00:00:10.366 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:17:20.832 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 2025-10-05 14:17:55.904 00:00:10.364 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:18:10.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:18:10.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:18:21.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-10-05 14:14:38.037 00:05:02.027 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:18:56.303 00:00:10.365 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:19:21.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-10-05 14:15:38.047 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:19:56.711 00:00:10.363 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:20:21.520 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-10-05 14:20:57.112 00:00:10.364 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:21:21.737 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47562 10 6452 1 2025-10-05 14:21:57.515 00:00:10.366 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:22:21.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6452 1 2025-10-05 14:23:10.352 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:22:57.917 00:00:10.365 TCP 23.104.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:23:10.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:23:22.128 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42386 10 6452 1 2025-10-05 14:23:58.322 00:00:10.372 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:24:22.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-10-05 14:20:38.048 00:05:02.019 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:24:58.736 00:00:10.379 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:25:22.511 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-10-05 14:21:38.051 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:25:59.145 00:00:10.333 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:26:22.721 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-10-05 14:26:59.514 00:00:10.368 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:27:22.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-10-05 14:27:59.918 00:00:10.364 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:28:11.394 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:28:11.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:28:23.176 00:00:17.321 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-10-05 14:29:00.321 00:00:10.436 TCP 23.104.0.1:37448 -> 1.101.0.1:3000 15 1926 1 2025-10-05 14:29:30.542 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 12 10375 1 2025-10-05 14:30:00.798 00:00:10.366 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:30:30.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-10-05 14:26:38.053 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:31:01.204 00:00:10.367 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:27:38.055 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:31:30.961 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-10-05 14:32:01.608 00:00:10.376 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:32:31.204 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-10-05 14:33:10.455 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:33:10.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:33:02.023 00:00:10.884 TCP 23.104.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:33:31.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-10-05 14:34:02.939 00:00:10.336 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:34:31.629 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 10 6452 1 2025-10-05 14:35:03.308 00:00:10.367 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:35:31.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-10-05 14:36:03.710 00:00:10.367 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:32:38.052 00:05:02.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:36:32.027 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59570 10 6452 1 2025-10-05 14:37:04.112 00:00:10.324 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:33:38.056 00:05:02.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:37:32.243 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-10-05 14:38:10.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:38:10.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:38:04.475 00:00:10.364 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:38:32.615 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-10-05 14:39:04.883 00:00:10.440 TCP 23.104.0.1:39778 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:39:32.780 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48622 10 6452 1 2025-10-05 14:40:05.377 00:00:10.380 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:40:32.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37170 10 6452 1 2025-10-05 14:41:05.795 00:00:10.361 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:41:33.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-10-05 14:42:06.197 00:00:10.370 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:38:38.054 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:42:33.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56058 10 6452 1 2025-10-05 14:43:10.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:43:10.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:43:06.608 00:00:10.367 TCP 23.104.0.1:50442 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:39:38.057 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:43:33.647 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56040 10 6452 1 2025-10-05 14:44:07.014 00:00:10.365 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:44:33.870 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-10-05 14:45:07.416 00:00:10.361 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:45:34.100 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54518 10 6452 1 2025-10-05 14:46:07.815 00:00:10.368 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:46:34.330 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41370 10 6452 1 2025-10-05 14:47:08.217 00:00:10.365 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:47:34.549 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:49746 10 6452 1 2025-10-05 14:48:10.933 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:48:10.817 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:48:08.616 00:00:10.367 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:44:38.055 00:05:02.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:48:35.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-10-05 14:49:09.023 00:00:10.373 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:45:38.059 00:05:02.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:49:35.471 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 10 6452 1 2025-10-05 14:50:09.435 00:00:10.613 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:50:35.680 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36650 10 6452 1 2025-10-05 14:51:10.106 00:00:10.366 TCP 23.104.0.1:33324 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:51:35.900 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-10-05 14:52:10.516 00:00:10.323 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:52:36.121 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-10-05 14:53:10.989 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:53:11.100 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:53:10.876 00:00:10.365 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:53:36.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-10-05 14:54:11.281 00:00:10.366 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:50:38.066 00:05:02.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 14:54:36.505 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44352 10 6452 1 2025-10-05 14:55:11.685 00:00:10.371 TCP 23.104.0.1:38548 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:51:38.069 00:05:02.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 14:55:36.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-10-05 14:56:12.107 00:00:10.323 TCP 23.104.0.1:38206 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:56:36.892 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54160 10 6452 1 2025-10-05 14:57:12.466 00:00:10.364 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:57:37.110 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 2025-10-05 14:58:11.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 14:58:11.048 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 14:58:12.868 00:00:10.328 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-10-05 14:58:37.333 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-05 13:56:38 - 2025-10-05 14:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0015s Wall: 0.0021s flows/second: 77689.8 Runtime: 0.0021s