Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 19:59:12.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-10-24 19:55:46.906 00:05:03.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 19:59:40.160 00:00:10.363 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:00:12.690 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-10-24 19:56:46.904 00:05:03.064 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:00:40.562 00:00:10.366 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:01:12.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-10-24 20:01:40.967 00:00:10.374 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:02:13.085 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-10-24 20:02:26.344 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:02:26.309 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:02:41.378 00:00:10.322 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:03:13.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6452 1 2025-10-24 20:03:41.737 00:00:10.365 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:04:13.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-10-24 20:04:42.139 00:00:10.370 TCP 23.104.0.1:44676 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:05:13.739 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:34542 12 10375 1 2025-10-24 20:01:46.906 00:05:03.061 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:05:42.543 00:00:10.439 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 15 1926 1 2025-10-24 20:06:13.987 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-10-24 20:02:46.904 00:05:03.066 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:06:43.023 00:00:10.363 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:07:14.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-10-24 20:07:26.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:07:26.102 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:07:43.428 00:00:10.361 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:08:14.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-10-24 20:08:43.828 00:00:10.347 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:09:14.658 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46808 10 6452 1 2025-10-24 20:09:44.216 00:00:10.364 TCP 23.104.0.1:58652 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:10:14.882 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-10-24 20:10:44.618 00:00:10.755 TCP 23.104.0.1:55564 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:11:15.109 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6452 1 2025-10-24 20:07:46.907 00:05:03.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:11:45.408 00:00:10.325 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:12:26.578 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:12:15.339 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-10-24 20:12:26.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:08:46.905 00:05:03.066 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:12:45.776 00:00:10.337 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:13:15.526 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 10 6452 1 2025-10-24 20:13:46.154 00:00:10.322 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:14:15.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47958 10 6452 1 2025-10-24 20:14:46.520 00:00:10.363 TCP 23.104.0.1:37468 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:15:15.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-10-24 20:15:46.920 00:00:10.373 TCP 23.104.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:16:16.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-10-24 20:16:47.330 00:00:10.361 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:17:26.618 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:17:16.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-10-24 20:17:26.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:13:46.907 00:05:03.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:17:47.732 00:00:10.371 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:18:16.552 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54184 10 6452 1 2025-10-24 20:14:46.905 00:05:03.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:18:48.143 00:00:10.367 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:19:16.775 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-10-24 20:19:48.547 00:00:10.355 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:20:17.002 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-10-24 20:20:48.935 00:00:10.389 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:21:17.241 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-10-24 20:21:49.357 00:00:10.367 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:22:26.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:22:26.684 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:22:17.456 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 10 6452 1 2025-10-24 20:22:49.759 00:00:10.326 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:23:17.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-10-24 20:19:46.910 00:05:03.062 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:23:50.125 00:00:10.363 TCP 23.104.0.1:60682 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:24:17.883 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-10-24 20:20:46.907 00:05:03.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:24:50.528 00:00:10.362 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:25:18.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37462 10 6452 1 2025-10-24 20:25:50.930 00:00:10.387 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:26:18.315 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-10-24 20:26:51.349 00:00:10.365 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:27:26.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:27:26.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:27:18.535 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-10-24 20:27:51.752 00:00:10.323 TCP 23.104.0.1:59990 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:28:18.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-10-24 20:28:52.114 00:00:10.366 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:29:18.929 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38434 10 6452 1 2025-10-24 20:25:46.909 00:05:03.063 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:29:52.528 00:00:10.364 TCP 23.104.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:30:19.152 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 12 10369 1 2025-10-24 20:26:46.909 00:05:03.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:30:52.930 00:00:10.464 TCP 23.104.0.1:50604 -> 1.101.0.1:3000 15 1926 1 2025-10-24 20:31:19.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-10-24 20:31:53.433 00:00:10.362 TCP 23.104.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:32:19.558 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-10-24 20:32:27.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:32:27.023 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:32:53.831 00:00:10.381 TCP 23.104.0.1:56170 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:33:19.779 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-10-24 20:33:54.251 00:00:10.365 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:34:19.990 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-10-24 20:34:54.660 00:00:10.322 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:35:20.242 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58524 10 6452 1 2025-10-24 20:31:46.918 00:05:03.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:35:55.022 00:00:10.361 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:36:20.450 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-10-24 20:32:46.916 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:36:55.421 00:00:10.324 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:37:26.969 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:37:20.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-10-24 20:37:27.069 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:37:55.782 00:00:10.366 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:38:20.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-10-24 20:38:56.187 00:00:10.340 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:39:21.111 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-10-24 20:39:56.571 00:00:10.364 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:40:21.289 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-10-24 20:40:56.972 00:00:10.389 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:41:21.509 00:00:10.688 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-10-24 20:37:46.922 00:05:03.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:41:57.425 00:00:10.363 TCP 23.104.0.1:43724 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:42:26.834 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:42:27.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:42:22.234 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-10-24 20:38:46.920 00:05:03.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:42:57.827 00:00:10.345 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:43:22.443 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-10-24 20:43:58.214 00:00:10.326 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:44:22.611 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-10-24 20:44:58.577 00:00:10.440 TCP 23.104.0.1:49456 -> 1.101.0.1:3000 15 1926 1 2025-10-24 20:45:22.816 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 12 10584 1 2025-10-24 20:45:59.081 00:00:10.360 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:46:23.081 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41894 10 6661 1 2025-10-24 20:46:59.479 00:00:10.369 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:47:26.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:47:27.220 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:47:23.258 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6661 1 2025-10-24 20:43:46.924 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:47:59.886 00:00:10.768 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:48:23.502 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6661 1 2025-10-24 20:44:46.922 00:05:03.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:49:00.691 00:00:10.368 TCP 23.104.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:49:23.724 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6661 1 2025-10-24 20:50:01.100 00:00:10.365 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:50:23.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6661 1 2025-10-24 20:51:01.501 00:00:10.368 TCP 23.104.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:51:24.166 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6661 1 2025-10-24 20:52:01.909 00:00:10.367 TCP 23.104.0.1:45110 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:52:27.301 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:52:27.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:52:24.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6661 1 2025-10-24 20:53:02.314 00:00:10.380 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:53:24.595 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6661 1 2025-10-24 20:49:46.926 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 20:54:02.731 00:00:10.335 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:54:24.806 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6661 1 2025-10-24 20:50:46.923 00:05:03.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 20:55:03.106 00:00:10.370 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:55:25.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6661 1 2025-10-24 20:56:03.524 00:00:10.371 TCP 23.104.0.1:60374 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:56:25.241 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6661 1 2025-10-24 20:57:03.931 00:00:10.373 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:57:27.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 20:57:27.394 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 20:57:25.461 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6661 1 2025-10-24 20:58:04.344 00:00:10.368 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-10-24 20:58:25.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6661 1 Summary: total flows: 163, total bytes: 512787, total packets: 1579, avg bps: 1088, avg pps: 0, avg bpp: 324 Time window: 2025-10-24 19:55:46 - 2025-10-24 20:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0000s Wall: 0.0023s flows/second: 71935.1 Runtime: 0.0023s