Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 13:58:46.736 00:00:10.368 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-10-24 13:59:13.959 00:00:14.414 TCP 1.101.0.1:3000 -> 22.102.0.1:46284 10 6452 1 2025-10-24 13:55:46.809 00:05:03.023 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 13:59:47.140 00:00:10.363 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:00:18.423 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-10-24 13:56:46.806 00:05:03.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:00:47.537 00:00:10.369 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:01:18.639 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55800 10 6452 1 2025-10-24 14:01:47.943 00:00:11.054 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:02:18.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:02:18.797 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:02:18.845 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-10-24 14:02:49.057 00:00:10.363 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:03:19.043 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-10-24 14:03:49.460 00:00:10.420 TCP 23.104.0.1:50832 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:04:19.246 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 10 6452 1 2025-10-24 14:04:49.918 00:00:10.329 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:05:19.467 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6452 1 2025-10-24 14:01:46.811 00:05:03.021 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:05:50.287 00:00:10.362 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:06:19.641 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38830 10 6452 1 2025-10-24 14:02:46.810 00:05:03.027 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:06:50.691 00:00:10.376 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:07:18.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:07:19.002 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:07:19.854 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-10-24 14:07:51.108 00:00:10.362 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:08:20.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-10-24 14:08:51.504 00:00:10.365 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:09:20.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6452 1 2025-10-24 14:09:51.911 00:00:10.364 TCP 23.104.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:10:20.529 00:00:10.852 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-10-24 14:10:52.310 00:00:10.329 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:11:21.421 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-10-24 14:07:46.816 00:05:03.018 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:11:52.674 00:00:10.330 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:12:19.107 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:12:19.253 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:12:21.646 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38822 10 6452 1 2025-10-24 14:08:46.814 00:05:03.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:12:53.054 00:00:10.367 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:13:21.867 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-10-24 14:13:53.460 00:00:10.361 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:14:22.327 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-10-24 14:14:53.861 00:00:10.381 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:15:22.548 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-10-24 14:15:54.293 00:00:10.366 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:16:22.721 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58690 10 6452 1 2025-10-24 14:16:54.699 00:00:10.322 TCP 23.104.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:17:19.485 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:17:19.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:17:22.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 12 6556 1 2025-10-24 14:13:46.818 00:05:03.018 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:17:55.089 00:00:10.320 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:18:23.115 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-10-24 14:14:46.816 00:05:03.023 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:18:55.444 00:00:10.365 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:19:23.339 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60184 10 6452 1 2025-10-24 14:19:55.855 00:00:10.378 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:20:23.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6452 1 2025-10-24 14:20:56.269 00:00:10.364 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:21:23.768 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 10 6452 1 2025-10-24 14:21:56.669 00:00:10.365 TCP 23.104.0.1:37666 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:22:19.514 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:22:19.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:22:23.933 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-10-24 14:22:57.094 00:00:10.365 TCP 23.104.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:23:24.190 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-10-24 14:19:46.824 00:05:03.020 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:23:57.492 00:00:10.323 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:24:24.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6452 1 2025-10-24 14:20:46.818 00:05:03.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:24:57.852 00:00:10.382 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:25:24.630 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-10-24 14:25:58.274 00:00:10.370 TCP 23.104.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:26:24.852 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-10-24 14:26:58.691 00:00:10.328 TCP 23.104.0.1:42590 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:27:19.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:27:19.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:27:25.086 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52086 10 6452 1 2025-10-24 14:27:59.055 00:00:10.367 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:28:25.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-10-24 14:28:59.457 00:00:10.327 TCP 23.104.0.1:46200 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:29:25.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38386 10 6452 1 2025-10-24 14:25:46.820 00:05:03.025 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:29:59.833 00:00:10.345 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:30:25.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-10-24 14:26:46.818 00:05:03.029 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:31:00.215 00:00:10.368 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:31:25.938 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-10-24 14:32:00.619 00:00:10.369 TCP 23.104.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:32:19.635 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:32:19.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:32:26.194 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-10-24 14:33:01.025 00:00:10.361 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:33:26.421 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-10-24 14:34:01.414 00:00:10.381 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:34:26.643 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57496 10 6452 1 2025-10-24 14:35:01.833 00:00:10.393 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:35:26.863 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-10-24 14:31:46.823 00:05:03.025 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:36:02.266 00:00:10.372 TCP 23.104.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:36:27.087 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-10-24 14:32:46.819 00:05:03.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:37:19.800 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:37:02.676 00:00:10.365 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:37:19.603 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:37:27.269 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56784 10 6452 1 2025-10-24 14:38:03.104 00:00:10.366 TCP 23.104.0.1:54192 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:38:27.486 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-10-24 14:39:03.512 00:00:10.374 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:39:27.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-10-24 14:40:03.917 00:00:10.384 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:40:27.914 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42072 10 6452 1 2025-10-24 14:41:04.338 00:00:10.365 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:41:28.099 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-10-24 14:37:46.822 00:05:03.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:42:19.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:42:04.743 00:00:10.364 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:42:19.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:42:28.320 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44088 10 6452 1 2025-10-24 14:38:46.820 00:05:03.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:43:05.144 00:00:10.375 TCP 23.104.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:43:28.537 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-10-24 14:44:05.551 00:00:10.361 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:44:28.760 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-10-24 14:45:05.949 00:00:10.371 TCP 23.104.0.1:37036 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:45:28.982 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45358 10 6452 1 2025-10-24 14:46:06.354 00:00:10.331 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:46:29.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-10-24 14:47:20.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:47:06.724 00:00:10.384 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:47:19.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:47:29.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52164 10 6452 1 2025-10-24 14:43:46.825 00:05:03.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:48:07.148 00:00:10.364 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:48:29.609 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-10-24 14:44:46.823 00:05:03.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:49:07.552 00:00:10.374 TCP 23.104.0.1:37082 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:49:29.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-10-24 14:50:07.963 00:00:10.332 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:50:30.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-10-24 14:51:08.334 00:00:10.383 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:51:30.340 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-10-24 14:52:20.161 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:52:20.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:52:08.763 00:00:10.378 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:52:30.525 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48524 10 6452 1 2025-10-24 14:53:09.184 00:00:10.362 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:53:30.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-10-24 14:49:46.825 00:05:03.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 14:54:09.584 00:00:10.368 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:54:30.971 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-10-24 14:50:46.823 00:05:03.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 14:55:09.985 00:00:10.413 TCP 23.104.0.1:45978 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:55:31.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-10-24 14:56:10.441 00:00:10.375 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:56:31.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-10-24 14:57:20.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 14:57:19.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 14:57:10.868 00:00:10.334 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:57:31.617 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47148 10 6452 1 2025-10-24 14:58:11.250 00:00:10.361 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-10-24 14:58:31.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1056, avg pps: 0, avg bpp: 316 Time window: 2025-10-24 13:55:46 - 2025-10-24 14:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0017s User: 0.0033s Wall: 0.0023s flows/second: 70935.9 Runtime: 0.0023s