Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 17:59:25.005 00:00:10.362 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:59:41.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 17:59:41.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 17:59:33.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-10-08 18:00:25.408 00:00:10.363 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:56:39.509 00:05:02.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:00:33.938 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6452 1 2025-10-08 18:01:25.809 00:00:10.326 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-10-08 17:57:39.510 00:05:02.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:01:34.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41258 10 6452 1 2025-10-08 18:02:26.174 00:00:10.366 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:02:34.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33320 10 6452 1 2025-10-08 18:03:26.576 00:00:10.367 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:03:34.609 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-10-08 18:04:26.985 00:00:10.368 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:04:41.374 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:04:41.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:04:34.823 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-10-08 18:05:27.389 00:00:10.372 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:05:35.041 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-10-08 18:02:39.509 00:05:02.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:06:27.797 00:00:10.365 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:06:35.250 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6452 1 2025-10-08 18:07:28.203 00:00:10.364 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:07:35.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-10-08 18:03:39.513 00:05:02.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:08:28.605 00:00:10.365 TCP 23.104.0.1:46500 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:08:35.640 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 10 6452 1 2025-10-08 18:09:41.517 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:09:29.015 00:00:10.362 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:09:41.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:09:35.857 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-10-08 18:10:29.412 00:00:10.337 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:10:36.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-10-08 18:11:29.788 00:00:10.371 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:11:36.301 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-10-08 18:12:30.204 00:00:10.365 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:12:36.474 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-10-08 18:08:39.512 00:05:02.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:13:30.608 00:00:10.365 TCP 23.104.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:09:39.513 00:05:02.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:13:36.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-10-08 18:14:41.810 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:14:41.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:14:31.013 00:00:10.362 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:14:36.896 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 10 6452 1 2025-10-08 18:15:31.416 00:00:10.325 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:15:37.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33450 10 6452 1 2025-10-08 18:16:31.775 00:00:10.372 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:16:37.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6452 1 2025-10-08 18:17:32.185 00:00:10.366 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:17:37.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-10-08 18:14:39.513 00:05:02.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:18:32.594 00:00:10.384 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:18:37.733 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-10-08 18:19:41.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:19:41.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:15:39.515 00:05:02.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:19:33.053 00:00:10.366 TCP 23.104.0.1:41206 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:19:37.943 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41016 10 6452 1 2025-10-08 18:20:33.472 00:00:10.737 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:20:38.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-10-08 18:21:34.260 00:00:10.364 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:21:38.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-10-08 18:22:34.659 00:00:10.367 TCP 23.104.0.1:38588 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:22:38.610 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 10 6452 1 2025-10-08 18:23:35.069 00:00:10.370 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:23:38.845 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6452 1 2025-10-08 18:24:42.107 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:24:35.477 00:00:10.369 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:24:42.599 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:20:39.513 00:05:02.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:24:39.092 00:00:10.493 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-10-08 18:21:39.516 00:05:02.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:25:35.883 00:00:10.377 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:25:39.624 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35102 10 6452 1 2025-10-08 18:26:36.292 00:00:10.363 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:26:39.850 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-10-08 18:27:36.695 00:00:10.323 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:27:40.051 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-10-08 18:28:37.058 00:00:10.369 TCP 23.104.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:28:40.257 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-10-08 18:29:41.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:29:41.937 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:29:40.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 10 6452 1 2025-10-08 18:29:37.462 00:00:10.320 TCP 23.104.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:26:39.514 00:05:02.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:30:37.822 00:00:10.364 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:30:40.687 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-10-08 18:27:39.516 00:05:02.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:31:40.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-10-08 18:31:38.227 00:00:10.360 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:32:38.624 00:00:10.321 TCP 23.104.0.1:35298 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:32:41.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 10 6452 1 2025-10-08 18:33:41.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-10-08 18:33:38.983 00:00:10.366 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:34:41.897 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:34:41.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:34:39.388 00:00:10.368 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:34:41.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-10-08 18:35:41.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52816 10 6452 1 2025-10-08 18:35:39.800 00:00:10.368 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:32:39.515 00:05:02.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:36:40.207 00:00:10.365 TCP 23.104.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:36:41.969 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56058 10 6452 1 2025-10-08 18:33:39.519 00:05:02.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:37:40.611 00:00:10.359 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:37:42.198 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-10-08 18:38:41.012 00:00:10.364 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:38:42.409 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-10-08 18:39:42.107 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:39:42.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:39:41.418 00:00:10.372 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:39:42.580 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51748 10 6452 1 2025-10-08 18:40:41.826 00:00:10.363 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:40:42.789 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 11 6504 1 2025-10-08 18:41:42.225 00:00:10.324 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:41:43.079 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-10-08 18:38:39.516 00:05:02.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:42:43.255 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-10-08 18:42:42.588 00:00:10.375 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:39:39.518 00:05:02.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:43:43.000 00:00:10.361 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:43:43.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-08 18:44:42.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:44:42.418 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:44:43.685 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37036 10 6452 1 2025-10-08 18:44:43.396 00:00:10.379 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:45:43.856 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-10-08 18:45:43.808 00:00:10.368 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:46:44.216 00:00:10.454 TCP 23.104.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:46:44.078 00:00:10.501 TCP 1.101.0.1:3000 -> 22.102.0.1:50470 10 6452 1 2025-10-08 18:47:44.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-10-08 18:47:44.706 00:00:10.365 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:44:39.517 00:05:02.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:48:44.839 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-10-08 18:48:45.125 00:00:10.349 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:45:39.519 00:05:02.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:49:42.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:49:42.176 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:49:45.503 00:00:10.368 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:49:45.116 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-10-08 18:50:45.913 00:00:10.376 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:50:45.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53826 10 6452 1 2025-10-08 18:51:45.491 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39526 10 6452 1 2025-10-08 18:51:46.330 00:00:10.378 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:52:45.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59496 10 6452 1 2025-10-08 18:52:46.746 00:00:10.368 TCP 23.104.0.1:50706 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:53:45.906 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-10-08 18:53:47.146 00:00:10.369 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:54:42.260 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 18:50:39.522 00:05:02.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 18:54:42.309 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 18:54:46.123 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-10-08 18:54:47.554 00:00:10.369 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:51:39.523 00:05:02.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 18:55:46.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-10-08 18:55:47.964 00:00:10.331 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:56:46.550 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 6452 1 2025-10-08 18:56:48.336 00:00:10.364 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-10-08 18:57:46.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-10-08 18:57:48.738 00:00:10.365 TCP 23.104.0.1:36242 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490441, total packets: 1552, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-10-08 17:56:39 - 2025-10-08 18:57:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0016s Wall: 0.0021s flows/second: 76457.4 Runtime: 0.0021s