Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 17:58:49.500 00:00:10.369 TCP 23.104.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:59:37.777 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-10-24 17:55:46.874 00:05:03.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:59:49.913 00:00:10.365 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:00:38.041 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-10-24 17:56:46.872 00:05:03.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:00:50.315 00:00:10.336 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:01:38.262 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6452 1 2025-10-24 18:01:50.690 00:00:10.320 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:02:24.027 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:02:23.705 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:02:38.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53460 10 6452 1 2025-10-24 18:02:51.053 00:00:10.362 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:03:38.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58638 10 6452 1 2025-10-24 18:03:51.454 00:00:10.365 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:04:38.926 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60006 10 6452 1 2025-10-24 18:04:51.857 00:00:10.378 TCP 23.104.0.1:38840 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:01:46.875 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:05:39.161 00:00:10.843 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-10-24 18:05:52.269 00:00:10.362 TCP 23.104.0.1:54770 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:06:40.071 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-10-24 18:02:46.874 00:05:03.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:06:52.669 00:00:10.324 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:07:23.822 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:07:23.969 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:07:40.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45976 10 6452 1 2025-10-24 18:07:53.032 00:00:10.327 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:08:40.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58970 10 6452 1 2025-10-24 18:08:53.394 00:00:10.365 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:09:40.706 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37844 10 6452 1 2025-10-24 18:09:53.797 00:00:10.443 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 15 1926 1 2025-10-24 18:10:40.922 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57494 12 10375 1 2025-10-24 18:10:54.276 00:00:10.361 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:11:41.161 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6452 1 2025-10-24 18:07:46.878 00:05:03.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:11:54.678 00:00:10.337 TCP 23.104.0.1:36952 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:12:24.318 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:12:24.269 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:12:41.337 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6452 1 2025-10-24 18:08:46.877 00:05:03.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:12:55.057 00:00:10.373 TCP 23.104.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:13:41.568 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51424 12 6556 1 2025-10-24 18:13:55.467 00:00:10.379 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:14:41.776 00:00:10.300 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-10-24 18:14:55.879 00:00:10.329 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:15:42.112 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-10-24 18:15:56.245 00:00:10.366 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:16:42.336 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-10-24 18:16:56.646 00:00:10.739 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:17:24.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:17:23.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:13:46.880 00:05:03.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:17:42.557 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-10-24 18:17:57.427 00:00:10.366 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:14:46.877 00:05:03.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:18:42.794 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-10-24 18:18:57.834 00:00:10.346 TCP 23.104.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:19:43.005 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-10-24 18:19:58.217 00:00:10.367 TCP 23.104.0.1:60652 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:20:43.261 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-10-24 18:20:58.623 00:00:10.362 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:21:43.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-10-24 18:21:59.023 00:00:10.364 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:22:24.265 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:22:24.273 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:22:43.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43140 10 6452 1 2025-10-24 18:22:59.427 00:00:10.363 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:19:46.882 00:05:03.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:23:43.847 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-10-24 18:23:59.827 00:00:10.361 TCP 23.104.0.1:60496 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:20:46.879 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:24:44.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-10-24 18:25:00.230 00:00:10.372 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:25:44.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-10-24 18:26:00.643 00:00:10.361 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:26:44.512 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 10 6452 1 2025-10-24 18:27:01.058 00:00:10.328 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:27:24.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:27:24.543 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:27:44.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-10-24 18:28:01.434 00:00:10.376 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:28:44.934 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46126 10 6452 1 2025-10-24 18:29:01.845 00:00:10.379 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:25:46.882 00:05:03.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:29:45.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39390 10 6452 1 2025-10-24 18:30:02.265 00:00:10.364 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:26:46.881 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:30:45.330 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6452 1 2025-10-24 18:31:02.675 00:00:10.361 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:31:45.502 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43046 10 6452 1 2025-10-24 18:32:03.112 00:00:10.369 TCP 23.104.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:32:24.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:32:24.595 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:32:45.725 00:00:11.246 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-10-24 18:33:03.522 00:00:10.324 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:33:47.011 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43354 10 6452 1 2025-10-24 18:34:03.882 00:00:10.394 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:34:47.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34650 10 6452 1 2025-10-24 18:35:04.309 00:00:10.363 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:31:46.883 00:05:03.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:35:47.396 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48148 10 6452 1 2025-10-24 18:36:04.714 00:00:10.386 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:32:46.882 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:36:47.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6452 1 2025-10-24 18:37:05.137 00:00:10.327 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:37:24.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:37:24.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:37:47.821 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-10-24 18:38:05.503 00:00:10.366 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:38:47.992 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39290 10 6452 1 2025-10-24 18:39:05.901 00:00:10.376 TCP 23.104.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:39:48.215 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6452 1 2025-10-24 18:40:06.313 00:00:10.362 TCP 23.104.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:40:48.446 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-10-24 18:41:06.714 00:00:10.372 TCP 23.104.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:37:46.886 00:05:03.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:41:48.667 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42236 10 6452 1 2025-10-24 18:42:07.121 00:00:10.366 TCP 23.104.0.1:48244 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:42:24.597 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:42:24.712 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:38:46.883 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:42:48.889 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 6452 1 2025-10-24 18:43:07.527 00:00:10.368 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:43:49.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-10-24 18:44:07.935 00:00:10.402 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:44:49.400 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-10-24 18:45:08.381 00:00:10.372 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:45:49.627 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-10-24 18:46:08.787 00:00:10.367 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:46:49.848 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-10-24 18:47:09.194 00:00:10.365 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:47:24.782 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:47:24.985 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:43:46.886 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:47:50.081 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-10-24 18:48:09.594 00:00:10.362 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:44:46.885 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:48:50.314 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-10-24 18:49:09.996 00:00:10.365 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:49:50.494 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 10 6452 1 2025-10-24 18:50:10.396 00:00:10.363 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:50:50.712 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 10 6452 1 2025-10-24 18:51:10.799 00:00:10.366 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:51:50.886 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56898 10 6452 1 2025-10-24 18:52:11.213 00:00:10.365 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:52:24.965 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:52:24.883 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:52:51.117 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-10-24 18:53:11.614 00:00:10.361 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:49:46.889 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 18:53:51.342 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-10-24 18:54:12.020 00:00:10.363 TCP 23.104.0.1:33058 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:50:46.886 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 18:54:51.565 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-10-24 18:55:12.422 00:00:10.366 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:55:51.792 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52514 10 6452 1 2025-10-24 18:56:12.829 00:00:10.388 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:56:52.013 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35492 10 6452 1 2025-10-24 18:57:25.188 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 18:57:13.255 00:00:10.363 TCP 23.104.0.1:42208 -> 1.101.0.1:3000 11 1507 1 2025-10-24 18:57:25.248 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 18:57:52.235 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42556 10 6452 1 2025-10-24 18:58:13.656 00:00:10.369 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496342, total packets: 1570, avg bps: 1056, avg pps: 0, avg bpp: 316 Time window: 2025-10-24 17:55:46 - 2025-10-24 18:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 80450.9 Runtime: 0.0020s