Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 06:58:41.630 00:00:10.846 TCP 23.104.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-10-07 06:58:59.320 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 06:58:49.758 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49046 10 6452 1 2025-10-07 06:58:59.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 06:59:42.511 00:00:10.553 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-07 06:59:49.986 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-07 06:56:38.876 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:00:43.108 00:00:10.320 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:00:50.212 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57552 10 6452 1 2025-10-07 06:57:38.880 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:01:43.474 00:00:10.361 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:01:50.384 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 10 6452 1 2025-10-07 07:02:43.873 00:00:10.377 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:02:50.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-10-07 07:03:44.290 00:00:10.366 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:03:59.246 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:03:59.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:03:50.817 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-10-07 07:04:44.705 00:00:10.372 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:04:51.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-10-07 07:05:45.115 00:00:10.364 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:05:51.395 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-10-07 07:02:38.876 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:06:45.518 00:00:10.369 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:06:51.610 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-10-07 07:03:38.880 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:07:45.925 00:00:10.390 TCP 23.104.0.1:33512 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:07:51.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-10-07 07:08:46.355 00:00:10.371 TCP 23.104.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:08:59.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:08:59.412 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:08:52.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-10-07 07:09:46.761 00:00:10.336 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:09:52.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-10-07 07:10:47.135 00:00:10.383 TCP 23.104.0.1:49642 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:10:52.466 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-10-07 07:11:47.555 00:00:10.363 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:11:52.636 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59102 10 6452 1 2025-10-07 07:08:38.880 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:12:47.958 00:00:10.370 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:12:52.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-10-07 07:09:38.882 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:13:59.488 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:13:48.357 00:00:10.371 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:13:59.626 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:13:53.088 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-10-07 07:14:48.769 00:00:10.334 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:14:53.257 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47098 10 6452 1 2025-10-07 07:15:49.144 00:00:10.369 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:15:53.431 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48744 10 6452 1 2025-10-07 07:16:49.546 00:00:10.376 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:16:53.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40126 10 6452 1 2025-10-07 07:17:49.950 00:00:10.337 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:17:53.863 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-10-07 07:14:38.881 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:18:59.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:18:50.322 00:00:10.372 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:18:59.516 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:18:54.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-10-07 07:15:38.883 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:19:50.730 00:00:10.371 TCP 23.104.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:19:54.301 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-10-07 07:20:51.151 00:00:10.368 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:20:54.486 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-10-07 07:21:51.566 00:00:10.369 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:21:54.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-10-07 07:22:54.913 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-10-07 07:22:51.971 00:00:10.375 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:23:59.775 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:23:59.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:23:55.104 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-10-07 07:23:52.385 00:00:10.321 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:20:38.881 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:24:52.749 00:00:10.364 TCP 23.104.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:24:55.447 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6452 1 2025-10-07 07:21:38.884 00:05:02.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:25:53.152 00:00:10.371 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:25:55.670 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6452 1 2025-10-07 07:26:55.881 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6452 1 2025-10-07 07:26:53.564 00:00:10.363 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:27:53.969 00:00:10.386 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:27:56.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-10-07 07:28:59.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:28:59.832 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:28:56.319 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-07 07:28:54.392 00:00:10.324 TCP 23.104.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:29:54.759 00:00:10.382 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:29:56.499 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-10-07 07:26:38.884 00:05:02.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:30:55.188 00:00:10.365 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:30:56.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51816 10 6452 1 2025-10-07 07:27:38.886 00:05:02.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:31:55.591 00:00:10.370 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:31:56.893 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-10-07 07:32:55.997 00:00:10.371 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:32:57.100 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43940 10 6452 1 2025-10-07 07:33:59.731 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:33:59.561 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:33:57.311 00:00:13.548 TCP 1.101.0.1:3000 -> 22.102.0.1:51736 10 6452 1 2025-10-07 07:33:56.404 00:00:14.549 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:35:00.992 00:00:10.367 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:35:00.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47132 10 6452 1 2025-10-07 07:36:01.392 00:00:10.367 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:36:01.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-10-07 07:32:38.886 00:05:02.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:37:01.341 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-10-07 07:37:01.796 00:00:10.361 TCP 23.104.0.1:48700 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:33:38.889 00:05:02.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:38:01.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-10-07 07:38:02.199 00:00:10.364 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:39:00.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:39:00.158 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:39:01.777 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44398 10 6452 1 2025-10-07 07:39:02.608 00:00:10.365 TCP 23.104.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:40:01.991 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-10-07 07:40:03.018 00:00:10.366 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:41:03.420 00:00:10.359 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:41:02.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-10-07 07:42:03.822 00:00:10.369 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:42:02.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-10-07 07:38:38.894 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:43:02.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-10-07 07:43:04.227 00:00:10.369 TCP 23.104.0.1:43288 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:39:38.895 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:44:00.370 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:44:00.222 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:44:02.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-10-07 07:44:04.636 00:00:10.372 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:45:05.053 00:00:10.370 TCP 23.104.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:45:03.092 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-10-07 07:46:05.460 00:00:10.363 TCP 23.104.0.1:59736 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:46:03.315 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-10-07 07:47:05.860 00:00:10.372 TCP 23.104.0.1:46244 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:47:03.532 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50922 10 6452 1 2025-10-07 07:48:03.757 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39556 10 6452 1 2025-10-07 07:48:06.268 00:00:10.368 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:44:38.901 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:49:00.004 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:49:00.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:49:04.004 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-10-07 07:49:06.675 00:00:10.372 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:45:38.905 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:50:04.241 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-10-07 07:50:07.115 00:00:10.391 TCP 23.104.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:51:04.458 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-10-07 07:51:07.581 00:00:10.362 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:52:04.681 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-10-07 07:52:07.983 00:00:10.378 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:53:04.968 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35680 10 6452 1 2025-10-07 07:53:08.397 00:00:10.365 TCP 23.104.0.1:32858 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:54:00.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 07:54:00.099 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 07:54:05.214 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60296 10 6452 1 2025-10-07 07:54:08.802 00:00:10.363 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:50:38.904 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 07:55:05.391 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35996 10 6452 1 2025-10-07 07:55:09.212 00:00:10.364 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:51:38.908 00:05:01.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 07:56:05.570 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-10-07 07:56:09.616 00:00:10.362 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:57:05.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-10-07 07:57:10.014 00:00:10.363 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-10-07 07:58:05.956 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57530 12 6556 1 2025-10-07 07:58:10.414 00:00:10.328 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1077, avg pps: 0, avg bpp: 316 Time window: 2025-10-07 06:56:38 - 2025-10-07 07:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0008s Wall: 0.0020s flows/second: 84060.4 Runtime: 0.0020s