Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 14:58:57.395 00:00:10.364 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-20 14:59:00.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-10-20 15:00:00.554 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-10-20 14:59:57.799 00:00:10.369 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:00:24.069 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:00:24.485 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 14:55:47.755 00:05:57.356 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 14:56:45.107 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:00:58.206 00:00:10.363 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:01:00.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 10 6452 1 2025-10-20 15:01:58.608 00:00:10.366 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:02:00.979 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-10-20 15:02:59.015 00:00:10.407 TCP 23.104.0.1:55766 -> 1.101.0.1:3000 15 1926 1 2025-10-20 15:03:01.165 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 12 10375 1 2025-10-20 15:04:01.405 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-10-20 15:03:59.461 00:00:10.320 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:04:59.816 00:00:10.365 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:05:01.617 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-10-20 15:05:24.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:05:24.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:06:00.221 00:00:10.363 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:06:01.832 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-10-20 15:01:47.755 00:05:57.357 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:02:45.108 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:07:00.623 00:00:10.386 TCP 23.104.0.1:60682 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:07:02.068 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-10-20 15:08:01.072 00:00:10.389 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:08:02.278 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-10-20 15:09:01.496 00:00:10.325 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:09:02.517 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47126 10 6452 1 2025-10-20 15:10:01.862 00:00:10.372 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:10:02.716 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-10-20 15:10:24.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:10:24.579 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:11:02.270 00:00:10.327 TCP 23.104.0.1:45546 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:11:02.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52168 10 6452 1 2025-10-20 15:12:03.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-10-20 15:12:02.636 00:00:10.622 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:07:47.757 00:05:57.356 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:08:45.110 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:13:03.321 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-10-20 15:13:03.295 00:00:10.367 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:14:03.700 00:00:10.447 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:14:03.541 00:00:10.444 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-10-20 15:15:04.028 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-10-20 15:15:04.186 00:00:10.363 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:15:24.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:15:24.525 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:16:04.587 00:00:10.376 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:16:04.203 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-10-20 15:17:04.989 00:00:10.369 TCP 23.104.0.1:56616 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:17:04.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-10-20 15:18:05.397 00:00:10.373 TCP 23.104.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:18:04.628 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-10-20 15:13:47.758 00:05:57.358 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:14:45.111 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:19:04.844 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-20 15:19:05.810 00:00:10.353 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:20:06.187 00:00:10.365 TCP 23.104.0.1:43142 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:20:05.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-10-20 15:20:24.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:20:24.908 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:21:06.587 00:00:10.363 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:21:05.309 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48492 10 6452 1 2025-10-20 15:22:05.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-10-20 15:22:06.989 00:00:10.325 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:23:05.737 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-10-20 15:23:07.351 00:00:10.363 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:24:06.152 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-10-20 15:24:07.749 00:00:10.329 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:19:47.759 00:05:57.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:20:45.114 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:25:06.326 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35616 10 6452 1 2025-10-20 15:25:08.119 00:00:10.360 TCP 23.104.0.1:53548 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:25:24.793 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:25:24.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:26:06.548 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-10-20 15:26:08.517 00:00:10.884 TCP 23.104.0.1:53376 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:27:06.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-10-20 15:27:09.439 00:00:10.323 TCP 23.104.0.1:59410 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:28:07.013 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40238 10 6452 1 2025-10-20 15:28:09.802 00:00:10.345 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:29:10.209 00:00:10.330 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:29:07.232 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-20 15:30:10.578 00:00:10.368 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:30:07.443 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 10 6452 1 2025-10-20 15:30:24.632 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:30:24.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:25:47.761 00:05:57.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:26:45.117 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:31:10.982 00:00:10.326 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:31:07.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-10-20 15:32:11.345 00:00:10.368 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:32:07.857 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-10-20 15:33:08.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33114 10 6452 1 2025-10-20 15:33:11.759 00:00:10.372 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:34:08.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56512 10 6452 1 2025-10-20 15:34:12.172 00:00:10.365 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:35:08.505 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-10-20 15:35:25.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:35:25.002 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:35:12.578 00:00:10.371 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:36:08.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6452 1 2025-10-20 15:36:12.987 00:00:10.376 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:31:47.764 00:05:57.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:32:45.118 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:37:08.935 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 10 6452 1 2025-10-20 15:37:13.415 00:00:10.327 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:38:09.165 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 10 6452 1 2025-10-20 15:38:13.776 00:00:10.371 TCP 23.104.0.1:51552 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:39:09.376 00:00:17.330 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-10-20 15:39:14.186 00:00:12.682 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:40:16.760 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-10-20 15:40:25.401 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:40:25.409 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:40:16.923 00:00:10.394 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:41:16.940 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-10-20 15:41:17.357 00:00:10.335 TCP 23.104.0.1:60026 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:42:17.734 00:00:10.369 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:42:17.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-10-20 15:37:47.768 00:05:57.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:38:45.120 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:43:17.380 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46294 10 6452 1 2025-10-20 15:43:18.137 00:00:10.325 TCP 23.104.0.1:52248 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:44:18.499 00:00:10.365 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:44:17.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38640 10 6452 1 2025-10-20 15:45:25.276 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:45:25.141 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:45:17.812 00:00:10.907 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-10-20 15:45:18.905 00:00:10.367 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:46:19.311 00:00:10.326 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:46:18.759 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48046 10 6452 1 2025-10-20 15:47:19.682 00:00:10.326 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:47:18.983 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40676 10 6452 1 2025-10-20 15:48:19.218 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56056 10 6452 1 2025-10-20 15:48:20.061 00:00:10.368 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:43:47.769 00:05:57.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:44:45.121 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:49:19.443 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6452 1 2025-10-20 15:49:20.462 00:00:10.370 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:50:25.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:50:25.329 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:50:20.861 00:00:10.368 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:50:19.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6452 1 2025-10-20 15:51:21.270 00:00:10.359 TCP 23.104.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:51:19.865 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-10-20 15:52:21.667 00:00:10.319 TCP 23.104.0.1:51826 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:52:20.100 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44544 10 6452 1 2025-10-20 15:53:20.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49970 10 6452 1 2025-10-20 15:53:22.024 00:00:10.361 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:54:20.529 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-10-20 15:54:22.421 00:00:10.327 TCP 23.104.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:49:47.771 00:05:57.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:50:45.120 00:05:02.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 15:55:25.503 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 15:55:25.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 15:55:20.747 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-10-20 15:55:22.781 00:00:10.366 TCP 23.104.0.1:43028 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:56:20.970 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-10-20 15:56:23.186 00:00:10.365 TCP 23.104.0.1:54748 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:57:21.209 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-10-20 15:57:23.586 00:00:10.368 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:58:21.386 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-10-20 15:58:23.990 00:00:10.366 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1067, avg pps: 0, avg bpp: 318 Time window: 2025-10-20 14:55:47 - 2025-10-20 15:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0009s Wall: 0.0031s flows/second: 52937.2 Runtime: 0.0031s