Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 00:58:55.684 00:00:10.361 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-10-23 00:59:29.519 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44926 10 6452 1 2025-10-23 00:55:46.122 00:05:02.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 00:59:56.096 00:00:10.362 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:00:29.750 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55986 10 6452 1 2025-10-23 00:56:46.121 00:05:02.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:00:56.490 00:00:10.364 TCP 23.104.0.1:43086 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:01:34.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:01:34.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:01:29.970 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-10-23 01:01:56.896 00:00:10.366 TCP 23.104.0.1:51724 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:02:30.203 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-10-23 01:02:57.298 00:00:10.372 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:03:30.442 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-10-23 01:03:57.701 00:00:10.360 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:04:30.613 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-10-23 01:04:58.103 00:00:10.361 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:05:30.829 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-10-23 01:01:46.125 00:05:02.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:05:58.505 00:00:10.366 TCP 23.104.0.1:45670 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:06:33.968 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:06:34.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:06:31.069 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-10-23 01:02:46.125 00:05:02.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:06:58.909 00:00:10.337 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:07:31.247 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47948 10 6452 1 2025-10-23 01:07:59.283 00:00:10.368 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:08:31.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-10-23 01:08:59.690 00:00:10.364 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:09:31.676 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-10-23 01:10:00.101 00:00:10.326 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:10:31.888 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-10-23 01:11:00.468 00:00:10.374 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:11:34.309 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:11:34.357 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:11:32.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-10-23 01:07:46.127 00:05:02.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:12:00.884 00:00:10.384 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:12:32.329 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-10-23 01:08:46.125 00:05:02.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:13:01.307 00:00:10.326 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:13:32.512 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 11 6492 1 2025-10-23 01:14:01.675 00:00:10.373 TCP 23.104.0.1:59440 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:14:32.738 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46946 10 6452 1 2025-10-23 01:15:02.108 00:00:10.362 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:15:32.969 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-10-23 01:16:02.511 00:00:10.373 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:16:35.042 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:16:34.683 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:16:33.198 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58830 10 6452 1 2025-10-23 01:17:02.928 00:00:10.749 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:17:33.373 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-10-23 01:13:46.130 00:05:02.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:18:03.743 00:00:10.366 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:18:33.589 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33102 10 6452 1 2025-10-23 01:14:46.126 00:05:02.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:19:04.145 00:00:10.362 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:19:33.765 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-10-23 01:20:04.547 00:00:10.366 TCP 23.104.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:20:33.975 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53514 10 6452 1 2025-10-23 01:21:04.957 00:00:10.329 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:21:34.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:21:34.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:21:34.226 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 10 6452 1 2025-10-23 01:22:05.322 00:00:10.372 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:22:34.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-23 01:23:05.735 00:00:10.407 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:23:34.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57952 10 6452 1 2025-10-23 01:19:46.130 00:05:02.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:24:06.180 00:00:10.329 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:24:34.825 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6452 1 2025-10-23 01:20:46.128 00:05:02.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:25:06.542 00:00:10.367 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:25:35.066 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-10-23 01:26:06.951 00:00:10.373 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:26:34.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:26:34.622 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:26:35.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-10-23 01:27:07.365 00:00:10.907 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:27:35.459 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 10 6452 1 2025-10-23 01:28:08.311 00:00:10.329 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:28:35.682 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47980 10 6452 1 2025-10-23 01:29:08.676 00:00:10.366 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:29:35.901 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-23 01:25:46.130 00:05:02.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:30:09.105 00:00:10.325 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:30:36.593 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38374 10 6452 1 2025-10-23 01:26:46.127 00:05:02.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:31:09.462 00:00:10.370 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:31:34.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:31:34.822 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:31:36.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-10-23 01:32:09.873 00:00:10.364 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:32:36.985 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-10-23 01:33:10.273 00:00:10.461 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:33:37.208 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-10-23 01:34:10.778 00:00:10.329 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:34:37.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33262 10 6452 1 2025-10-23 01:35:11.141 00:00:10.374 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:35:37.641 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-10-23 01:31:46.131 00:05:02.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:36:11.560 00:00:10.367 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:36:34.765 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:36:34.621 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:36:37.870 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33238 10 6452 1 2025-10-23 01:32:46.129 00:05:02.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:37:11.965 00:00:10.370 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:37:38.096 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-10-23 01:38:12.373 00:00:10.366 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:38:38.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-10-23 01:39:12.778 00:00:10.369 TCP 23.104.0.1:36404 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:39:38.527 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48906 10 6452 1 2025-10-23 01:40:13.186 00:00:10.366 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:40:38.701 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-10-23 01:41:13.584 00:00:10.327 TCP 23.104.0.1:58576 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:41:35.221 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:41:35.199 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:41:38.926 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-10-23 01:37:46.132 00:05:02.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:42:13.950 00:00:10.326 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:42:39.151 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47238 10 6452 1 2025-10-23 01:38:46.130 00:05:02.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:43:14.314 00:00:10.362 TCP 23.104.0.1:56752 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:43:39.372 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-10-23 01:44:14.716 00:00:10.326 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:44:39.589 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-10-23 01:45:15.122 00:00:10.367 TCP 23.104.0.1:59808 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:45:39.804 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-10-23 01:46:15.529 00:00:10.371 TCP 23.104.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:46:35.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:46:34.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:46:40.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-10-23 01:47:15.947 00:00:10.332 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:47:40.234 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6452 1 2025-10-23 01:43:46.134 00:05:02.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:48:16.321 00:00:10.360 TCP 23.104.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:48:40.448 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-10-23 01:44:46.131 00:05:02.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:49:16.721 00:00:10.371 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:49:40.666 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59520 12 10375 1 2025-10-23 01:50:17.138 00:00:10.415 TCP 23.104.0.1:60294 -> 1.101.0.1:3000 15 1926 1 2025-10-23 01:50:40.903 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45256 10 6452 1 2025-10-23 01:51:17.598 00:00:10.366 TCP 23.104.0.1:51616 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:51:35.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:51:35.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:51:41.130 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-10-23 01:52:18.007 00:00:10.360 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:52:41.338 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-10-23 01:53:18.407 00:00:10.323 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:49:46.136 00:05:02.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 01:53:41.511 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-10-23 01:54:18.768 00:00:10.378 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:50:46.134 00:05:02.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 01:54:41.723 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60172 10 6452 1 2025-10-23 01:55:19.184 00:00:10.331 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:55:41.937 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-10-23 01:56:19.551 00:00:10.365 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:56:35.213 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 01:56:35.407 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 01:56:42.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56480 10 6452 1 2025-10-23 01:57:19.952 00:00:10.369 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-10-23 01:57:42.393 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-10-23 01:58:20.363 00:00:10.365 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496278, total packets: 1569, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-10-23 00:55:46 - 2025-10-23 01:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0027s Wall: 0.0026s flows/second: 63846.8 Runtime: 0.0026s