Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 15:58:45.594 00:00:10.366 TCP 23.104.0.1:57420 -> 1.101.0.1:3000 11 1507 1 2025-10-07 15:59:09.843 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 15:59:10.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 15:59:23.160 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43630 10 6452 1 2025-10-07 15:59:45.997 00:00:10.365 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:00:23.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-10-07 15:56:39.085 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:00:46.403 00:00:10.323 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:01:23.591 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-10-07 15:57:39.087 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:01:46.766 00:00:10.377 TCP 23.104.0.1:41418 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:02:23.957 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-10-07 16:02:47.178 00:00:10.320 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:03:24.177 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-10-07 16:03:47.538 00:00:10.321 TCP 23.104.0.1:44480 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:04:09.922 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:04:10.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:04:24.400 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-10-07 16:04:47.901 00:00:10.392 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:05:24.624 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-10-07 16:05:48.336 00:00:10.363 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:06:24.850 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-10-07 16:02:39.086 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:06:48.739 00:00:10.366 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:07:25.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-10-07 16:03:39.089 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:07:49.145 00:00:10.367 TCP 23.104.0.1:35656 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:08:25.303 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51762 10 6452 1 2025-10-07 16:08:49.549 00:00:10.366 TCP 23.104.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:09:10.252 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:09:10.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:09:25.527 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-10-07 16:09:49.954 00:00:10.376 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:10:25.741 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-10-07 16:10:50.369 00:00:10.360 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:11:25.961 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-10-07 16:11:50.761 00:00:10.376 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:12:26.186 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-10-07 16:08:39.088 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:12:51.177 00:00:10.372 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:13:26.356 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34146 10 6452 1 2025-10-07 16:09:39.090 00:05:01.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:13:51.588 00:00:10.325 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:14:10.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:14:10.040 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:14:26.578 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-10-07 16:14:51.952 00:00:10.365 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:15:26.793 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-10-07 16:15:52.354 00:00:10.367 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:16:27.005 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47670 10 6452 1 2025-10-07 16:16:52.753 00:00:10.392 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:17:27.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50084 10 6452 1 2025-10-07 16:17:53.179 00:00:10.375 TCP 23.104.0.1:50584 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:14:39.088 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:18:27.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 10 6452 1 2025-10-07 16:18:53.594 00:00:10.326 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:19:10.203 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:19:10.370 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:19:27.654 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-10-07 16:15:39.090 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:19:53.959 00:00:10.372 TCP 23.104.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:20:27.858 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50728 10 6452 1 2025-10-07 16:20:54.370 00:00:10.364 TCP 23.104.0.1:36894 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:21:28.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 10 6452 1 2025-10-07 16:21:54.776 00:00:10.371 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:22:28.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-10-07 16:22:55.188 00:00:10.364 TCP 23.104.0.1:60508 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:23:28.515 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-10-07 16:23:55.597 00:00:10.365 TCP 23.104.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:24:10.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:24:10.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:20:39.087 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:24:28.729 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 12 10375 1 2025-10-07 16:24:56.003 00:00:10.432 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 15 1926 1 2025-10-07 16:21:39.090 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:25:28.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-10-07 16:25:56.491 00:00:10.320 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:26:29.206 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35080 10 6452 1 2025-10-07 16:26:56.848 00:00:10.377 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:27:29.444 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58934 10 6452 1 2025-10-07 16:27:57.264 00:00:10.365 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:28:29.631 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59740 10 6452 1 2025-10-07 16:29:10.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:28:57.677 00:00:10.369 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:29:10.660 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:29:29.848 00:00:10.603 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-10-07 16:29:58.106 00:00:10.359 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:30:30.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-10-07 16:26:39.089 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:30:58.506 00:00:10.360 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:27:39.090 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:31:30.711 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38612 10 6452 1 2025-10-07 16:31:58.906 00:00:10.369 TCP 23.104.0.1:54220 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:32:30.920 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-10-07 16:32:59.314 00:00:10.365 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:33:31.132 00:00:10.469 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-10-07 16:34:11.274 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:34:11.308 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:33:59.717 00:00:10.327 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:34:31.642 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45130 10 6452 1 2025-10-07 16:35:00.103 00:00:10.373 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:35:31.859 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-10-07 16:36:00.519 00:00:10.369 TCP 23.104.0.1:49368 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:32:39.090 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:36:32.095 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-10-07 16:37:00.926 00:00:10.380 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:33:39.094 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:37:32.318 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-10-07 16:38:01.345 00:00:10.370 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:38:32.533 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47584 10 6452 1 2025-10-07 16:39:10.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:39:10.955 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:39:01.753 00:00:10.337 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:39:32.774 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44870 10 6452 1 2025-10-07 16:40:02.124 00:00:10.335 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:40:32.995 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48638 10 6452 1 2025-10-07 16:41:02.498 00:00:10.367 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:41:33.225 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-10-07 16:42:02.898 00:00:10.370 TCP 23.104.0.1:59112 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:38:39.091 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:42:33.446 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-10-07 16:43:03.309 00:00:10.372 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:39:39.094 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:43:33.658 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-10-07 16:44:10.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:44:10.824 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:44:03.721 00:00:11.092 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:44:33.867 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-10-07 16:45:04.851 00:00:10.346 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:45:34.092 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-10-07 16:46:05.230 00:00:10.369 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:46:34.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-10-07 16:47:05.635 00:00:10.366 TCP 23.104.0.1:53510 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:47:34.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 12 6556 1 2025-10-07 16:48:06.041 00:00:10.326 TCP 23.104.0.1:54862 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:48:34.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-10-07 16:44:39.092 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:49:11.119 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:49:10.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:49:06.404 00:00:10.365 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:45:39.096 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:49:34.953 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6452 1 2025-10-07 16:50:06.808 00:00:10.374 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:50:35.188 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42790 10 6452 1 2025-10-07 16:51:07.234 00:00:10.367 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:51:35.403 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-10-07 16:52:07.641 00:00:10.566 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:52:35.630 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53412 10 6452 1 2025-10-07 16:53:08.249 00:00:10.364 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:53:35.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 2025-10-07 16:54:11.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 16:54:11.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 16:54:08.649 00:00:10.326 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:50:39.093 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 16:54:36.092 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6452 1 2025-10-07 16:55:09.012 00:00:10.363 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:51:39.098 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 16:55:36.304 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51424 10 6452 1 2025-10-07 16:56:09.415 00:00:10.364 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:56:36.516 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-10-07 16:57:09.818 00:00:10.360 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:57:36.731 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-10-07 16:58:10.218 00:00:10.333 TCP 23.104.0.1:49722 -> 1.101.0.1:3000 11 1507 1 2025-10-07 16:58:36.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-07 15:56:39 - 2025-10-07 16:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0020s Wall: 0.0023s flows/second: 70994.5 Runtime: 0.0023s