Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 01:59:32.883 00:00:10.345 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-10-24 01:59:32.073 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6452 1 2025-10-24 01:55:46.603 00:05:02.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:00:33.266 00:00:10.331 TCP 23.104.0.1:47840 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:00:32.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-10-24 01:56:46.601 00:05:02.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:01:33.639 00:00:10.365 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:01:32.460 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-10-24 02:02:05.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:02:05.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:02:32.732 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37900 10 6452 1 2025-10-24 02:02:34.055 00:00:10.374 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:03:32.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-10-24 02:03:34.466 00:00:10.369 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:04:33.178 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 10 6452 1 2025-10-24 02:04:34.870 00:00:11.034 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:05:33.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51466 10 6452 1 2025-10-24 02:05:35.941 00:00:10.349 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:01:46.605 00:05:02.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:06:33.714 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 11 6504 1 2025-10-24 02:06:36.320 00:00:10.362 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:02:46.602 00:05:02.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:07:04.416 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:07:04.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:07:33.988 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6452 1 2025-10-24 02:07:36.717 00:00:10.383 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:08:34.219 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-10-24 02:08:37.138 00:00:10.327 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:09:34.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6452 1 2025-10-24 02:09:37.500 00:00:10.364 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:10:34.660 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-10-24 02:10:37.903 00:00:10.368 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:11:34.879 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-10-24 02:11:38.306 00:00:10.369 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:07:46.606 00:05:02.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:12:04.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:12:04.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:12:35.105 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-10-24 02:08:46.603 00:05:02.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:12:38.717 00:00:10.324 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:13:35.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-10-24 02:13:39.108 00:00:10.364 TCP 23.104.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:14:35.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-10-24 02:14:39.514 00:00:10.365 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:15:35.757 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-10-24 02:15:39.920 00:00:10.373 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:16:35.974 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-10-24 02:16:40.330 00:00:10.371 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:17:04.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:17:04.799 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:17:36.207 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-10-24 02:13:46.606 00:05:02.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:17:40.738 00:00:10.367 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:18:36.438 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 12 6556 1 2025-10-24 02:18:41.142 00:00:10.370 TCP 23.104.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:14:46.604 00:05:02.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:19:36.654 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55458 10 6452 1 2025-10-24 02:19:41.554 00:00:10.363 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:20:36.880 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-10-24 02:20:41.956 00:00:10.323 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:21:37.097 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6452 1 2025-10-24 02:21:42.320 00:00:10.372 TCP 23.104.0.1:48000 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:22:04.774 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:22:04.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:22:37.272 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-10-24 02:22:42.747 00:00:10.396 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:23:37.489 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-10-24 02:19:46.608 00:05:02.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:23:43.187 00:00:10.367 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:20:46.606 00:05:02.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:24:37.714 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-10-24 02:24:43.587 00:00:10.330 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:25:37.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-10-24 02:25:43.961 00:00:10.361 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:26:38.109 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-10-24 02:26:44.363 00:00:10.336 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:27:04.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:27:04.746 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:27:38.279 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:44976 10 6452 1 2025-10-24 02:27:44.739 00:00:10.366 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:28:38.471 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-10-24 02:28:45.145 00:00:10.375 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:25:46.610 00:05:02.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:29:38.684 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-10-24 02:29:45.562 00:00:10.440 TCP 23.104.0.1:59000 -> 1.101.0.1:3000 15 1926 1 2025-10-24 02:30:38.900 00:00:11.339 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 12 10375 1 2025-10-24 02:26:46.606 00:05:02.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:30:46.050 00:00:10.363 TCP 23.104.0.1:51486 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:31:40.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-10-24 02:31:46.455 00:00:10.365 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:32:04.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:32:04.883 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:32:40.495 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-10-24 02:32:46.856 00:00:10.371 TCP 23.104.0.1:33776 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:33:40.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-10-24 02:33:47.263 00:00:10.367 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:34:40.887 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-10-24 02:34:47.662 00:00:10.362 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:31:46.611 00:05:02.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:35:41.099 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-10-24 02:35:48.090 00:00:10.621 TCP 23.104.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:36:41.322 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-10-24 02:32:46.610 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:36:48.741 00:00:10.365 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:37:05.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:37:05.161 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:37:41.532 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2025-10-24 02:37:49.140 00:00:10.369 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:38:41.756 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39238 10 6452 1 2025-10-24 02:38:49.550 00:00:10.366 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:39:41.982 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 13 6608 1 2025-10-24 02:39:49.953 00:00:10.367 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:40:42.222 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-10-24 02:40:50.361 00:00:10.326 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:37:46.613 00:05:02.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:41:42.428 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:33538 10 6452 1 2025-10-24 02:41:50.726 00:00:10.374 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:42:04.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:42:05.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:38:46.609 00:05:02.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:42:42.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-10-24 02:42:51.140 00:00:10.319 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:43:42.816 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-10-24 02:43:51.500 00:00:10.364 TCP 23.104.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:44:43.084 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-10-24 02:44:51.905 00:00:10.363 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:45:43.301 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-10-24 02:45:52.306 00:00:10.328 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:46:43.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-10-24 02:47:05.097 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:46:52.671 00:00:10.375 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:47:05.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:43:46.613 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:47:43.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-10-24 02:47:53.106 00:00:10.369 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:44:46.611 00:05:02.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:48:43.913 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44756 10 6452 1 2025-10-24 02:48:53.509 00:00:10.369 TCP 23.104.0.1:50206 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:49:44.099 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-10-24 02:49:53.913 00:00:10.363 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:50:44.321 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-10-24 02:50:54.315 00:00:10.322 TCP 23.104.0.1:38708 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:51:44.494 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50814 10 6452 1 2025-10-24 02:52:05.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:51:54.679 00:00:10.362 TCP 23.104.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:52:05.060 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:52:44.708 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-10-24 02:52:55.105 00:00:10.375 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:49:46.616 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:53:44.926 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-10-24 02:53:55.525 00:00:10.360 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:50:46.614 00:05:02.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 02:54:45.115 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:58126 14 14298 1 2025-10-24 02:54:55.923 00:00:10.670 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 17 2241 1 2025-10-24 02:55:45.385 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35058 10 6452 1 2025-10-24 02:55:56.633 00:00:10.329 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:56:45.556 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42814 10 6452 1 2025-10-24 02:57:05.574 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 02:57:05.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 02:56:56.998 00:00:10.356 TCP 23.104.0.1:45374 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:57:45.726 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-10-24 02:57:57.395 00:00:10.365 TCP 23.104.0.1:55832 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503623, total packets: 1573, avg bps: 1076, avg pps: 0, avg bpp: 320 Time window: 2025-10-24 01:55:46 - 2025-10-24 02:58:07 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 78597.7 Runtime: 0.0021s