Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 06:58:52.437 00:00:10.376 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:59:02.328 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36446 10 6452 1 2025-10-20 06:59:52.857 00:00:10.336 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:00:14.647 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:00:02.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 12 6556 1 2025-10-20 07:00:14.467 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:56:44.945 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:56:44.942 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:00:53.233 00:00:10.325 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:01:02.720 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44590 10 6452 1 2025-10-20 07:01:53.595 00:00:10.357 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:02:02.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60916 10 6452 1 2025-10-20 07:02:53.992 00:00:10.378 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:03:03.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-10-20 07:03:54.407 00:00:10.364 TCP 23.104.0.1:39056 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:04:03.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 10 6452 1 2025-10-20 07:04:54.811 00:00:10.367 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:05:14.670 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:05:03.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51068 10 6452 1 2025-10-20 07:05:14.921 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:05:55.216 00:00:10.358 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:06:03.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-10-20 07:02:44.945 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:02:44.943 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:06:55.615 00:00:10.361 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:07:04.037 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54732 10 6452 1 2025-10-20 07:07:56.014 00:00:10.325 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:08:04.258 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2025-10-20 07:08:56.379 00:00:10.364 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:09:04.475 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-10-20 07:09:56.779 00:00:10.417 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:10:04.646 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-10-20 07:10:14.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:10:14.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:10:57.238 00:00:10.330 TCP 23.104.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:11:04.866 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50900 10 6452 1 2025-10-20 07:11:57.604 00:00:10.365 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:12:05.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-10-20 07:08:44.944 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:08:44.946 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:12:58.008 00:00:10.363 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:13:05.289 00:00:10.772 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-10-20 07:13:58.407 00:00:10.323 TCP 23.104.0.1:51202 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:14:06.110 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-10-20 07:14:58.770 00:00:10.325 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:15:14.967 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:15:06.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33440 10 6452 1 2025-10-20 07:15:14.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:15:59.135 00:00:10.325 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:16:06.547 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-20 07:16:59.499 00:00:10.369 TCP 23.104.0.1:36746 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:17:06.770 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-10-20 07:17:59.907 00:00:10.379 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:18:06.942 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-10-20 07:14:44.947 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:14:44.949 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:19:00.329 00:00:10.371 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:19:07.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38744 10 6452 1 2025-10-20 07:20:00.745 00:00:10.368 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:20:15.032 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:20:15.243 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:20:07.405 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-10-20 07:21:01.152 00:00:10.364 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:21:07.582 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41334 10 6452 1 2025-10-20 07:22:01.554 00:00:10.364 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:22:07.794 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-10-20 07:23:01.957 00:00:10.368 TCP 23.104.0.1:41974 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:23:08.013 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6452 1 2025-10-20 07:24:02.363 00:00:10.367 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:24:08.233 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-10-20 07:20:44.951 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:20:44.955 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:25:15.101 00:00:00.054 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:25:02.772 00:00:10.366 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:25:15.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:25:08.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58046 10 6452 1 2025-10-20 07:26:03.194 00:00:10.387 TCP 23.104.0.1:41874 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:26:08.662 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59984 10 6452 1 2025-10-20 07:27:03.633 00:00:10.362 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:27:08.887 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45248 10 6452 1 2025-10-20 07:28:04.032 00:00:16.738 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:28:09.114 00:00:11.570 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-10-20 07:29:10.721 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35138 10 6452 1 2025-10-20 07:29:10.811 00:00:10.360 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:30:15.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:30:15.197 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:30:10.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-10-20 07:30:11.215 00:00:10.371 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:26:44.957 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:26:44.955 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:31:11.626 00:00:10.365 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:31:11.113 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-10-20 07:32:11.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56704 10 6452 1 2025-10-20 07:32:12.032 00:00:10.364 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:33:11.553 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-10-20 07:33:12.431 00:00:10.371 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:34:11.780 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37470 10 6452 1 2025-10-20 07:34:12.839 00:00:10.451 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:35:15.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:35:15.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:35:13.332 00:00:10.367 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:35:11.997 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38226 10 6452 1 2025-10-20 07:36:12.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 2025-10-20 07:36:13.731 00:00:10.324 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:32:44.958 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:32:44.961 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:37:12.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45034 10 6452 1 2025-10-20 07:37:14.107 00:00:10.367 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:38:12.665 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-10-20 07:38:14.513 00:00:10.324 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:39:14.887 00:00:10.369 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:39:12.884 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 10 6452 1 2025-10-20 07:40:15.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:40:15.534 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:40:15.295 00:00:10.316 TCP 23.104.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:40:13.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-10-20 07:41:15.650 00:00:10.360 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:41:13.323 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50946 10 6452 1 2025-10-20 07:42:13.502 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-10-20 07:42:16.058 00:00:10.359 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:38:44.961 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:38:44.958 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:43:13.711 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 12 10375 1 2025-10-20 07:43:16.459 00:00:10.444 TCP 23.104.0.1:58536 -> 1.101.0.1:3000 15 1926 1 2025-10-20 07:44:13.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-10-20 07:44:16.942 00:00:10.374 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:45:15.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:45:15.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:45:14.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-10-20 07:45:17.354 00:00:10.361 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:46:14.389 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-10-20 07:46:17.756 00:00:10.831 TCP 23.104.0.1:57078 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:47:14.567 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-10-20 07:47:18.624 00:00:10.369 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:48:14.771 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52560 12 10375 1 2025-10-20 07:48:19.035 00:00:10.438 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 15 1926 1 2025-10-20 07:44:44.963 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:44:44.961 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:49:15.012 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38748 10 6452 1 2025-10-20 07:49:19.512 00:00:10.364 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:50:15.868 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:50:16.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:50:15.250 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-10-20 07:50:19.913 00:00:10.324 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:51:15.460 00:00:10.627 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-10-20 07:51:20.276 00:00:10.367 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:52:16.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6452 1 2025-10-20 07:52:20.680 00:00:10.369 TCP 23.104.0.1:42436 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:53:16.349 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44314 10 6452 1 2025-10-20 07:53:21.109 00:00:10.369 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:54:16.565 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54800 10 6452 1 2025-10-20 07:54:21.516 00:00:10.369 TCP 23.104.0.1:54400 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:50:44.964 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 07:50:44.966 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 07:55:15.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 07:55:16.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 07:55:16.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-10-20 07:55:21.933 00:00:10.383 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:56:17.002 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6452 1 2025-10-20 07:56:22.353 00:00:10.968 TCP 23.104.0.1:36982 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:57:17.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-10-20 07:57:23.369 00:00:10.363 TCP 23.104.0.1:45702 -> 1.101.0.1:3000 11 1507 1 2025-10-20 07:58:17.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-10-20 07:58:23.773 00:00:10.370 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1093, avg pps: 0, avg bpp: 319 Time window: 2025-10-20 06:56:44 - 2025-10-20 07:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0021s flows/second: 78282.2 Runtime: 0.0021s