Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 01:59:29.629 00:00:10.364 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-10-25 01:59:34.349 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-10-25 01:55:47.059 00:05:03.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:00:30.031 00:00:10.361 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:00:34.568 00:00:10.952 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-10-25 01:56:47.058 00:05:03.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:01:30.435 00:00:10.332 TCP 23.104.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:01:35.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57686 10 6452 1 2025-10-25 02:02:33.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:02:33.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:02:30.807 00:00:10.375 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:02:35.782 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34580 10 6452 1 2025-10-25 02:03:31.226 00:00:10.362 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:03:35.992 00:00:10.438 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-10-25 02:04:31.626 00:00:10.366 TCP 23.104.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:04:36.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41278 10 6452 1 2025-10-25 02:05:36.683 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50672 10 6452 1 2025-10-25 02:05:32.028 00:00:10.369 TCP 23.104.0.1:50722 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:01:47.060 00:05:03.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:06:32.438 00:00:10.366 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:06:36.907 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36666 10 6452 1 2025-10-25 02:02:47.058 00:05:03.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:07:33.433 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:07:33.636 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:07:32.838 00:00:10.345 TCP 23.104.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:07:37.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57112 10 6452 1 2025-10-25 02:08:33.227 00:00:10.360 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:08:37.343 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-10-25 02:09:33.643 00:00:10.372 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:09:37.554 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-10-25 02:10:34.049 00:00:10.361 TCP 23.104.0.1:54052 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:10:37.766 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-10-25 02:11:37.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34190 10 6452 1 2025-10-25 02:11:34.453 00:00:10.365 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:07:47.063 00:05:03.049 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:12:33.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:12:33.755 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:12:34.853 00:00:10.376 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:12:38.216 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6452 1 2025-10-25 02:08:47.061 00:05:03.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:13:35.267 00:00:10.385 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:13:38.438 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59098 10 6452 1 2025-10-25 02:14:35.687 00:00:10.326 TCP 23.104.0.1:57218 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:14:38.620 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39394 10 6452 1 2025-10-25 02:15:36.057 00:00:10.362 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:15:38.833 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-10-25 02:16:36.455 00:00:10.323 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:16:39.079 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-10-25 02:17:33.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:17:33.865 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:13:47.064 00:05:03.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:17:36.815 00:00:10.329 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:17:39.324 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-10-25 02:18:39.551 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37732 10 6452 1 2025-10-25 02:14:47.062 00:05:03.055 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:18:37.183 00:00:10.364 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:19:37.585 00:00:10.319 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:19:39.767 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-10-25 02:20:37.942 00:00:11.564 TCP 23.104.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:20:39.996 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-10-25 02:21:40.172 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40986 10 6452 1 2025-10-25 02:21:39.544 00:00:10.367 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:22:34.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:22:34.318 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:22:40.391 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55568 10 6452 1 2025-10-25 02:22:39.940 00:00:10.377 TCP 23.104.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:23:40.605 00:00:11.008 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 11 6504 1 2025-10-25 02:23:40.352 00:00:11.304 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:19:47.066 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:24:41.650 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57572 10 6452 1 2025-10-25 02:20:47.063 00:05:03.058 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:24:41.698 00:00:10.361 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:25:41.866 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6452 1 2025-10-25 02:25:42.109 00:00:10.364 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:26:42.056 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45872 10 6452 1 2025-10-25 02:26:42.513 00:00:10.358 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:27:34.346 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:27:34.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:27:42.914 00:00:10.381 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:27:42.270 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57448 10 6452 1 2025-10-25 02:28:42.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-10-25 02:28:43.328 00:00:10.364 TCP 23.104.0.1:56000 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:25:47.067 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:29:43.731 00:00:10.361 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:29:42.658 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41694 10 6452 1 2025-10-25 02:26:47.063 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:30:44.134 00:00:10.341 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:30:42.874 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52528 10 6452 1 2025-10-25 02:31:43.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-10-25 02:31:44.526 00:00:10.368 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:32:34.361 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:32:34.100 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:32:43.294 00:00:10.593 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-10-25 02:32:44.931 00:00:10.336 TCP 23.104.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:33:45.304 00:00:10.378 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:33:43.937 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-10-25 02:34:45.731 00:00:10.324 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:34:44.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-10-25 02:31:47.067 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:35:44.406 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-10-25 02:35:46.103 00:00:10.931 TCP 23.104.0.1:33540 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:32:47.066 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:36:44.724 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6452 1 2025-10-25 02:36:47.090 00:00:10.365 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:37:34.158 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:37:34.421 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:37:44.937 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 10 6452 1 2025-10-25 02:37:47.494 00:00:10.328 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:38:45.130 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-10-25 02:38:47.859 00:00:10.371 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:39:45.351 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35320 10 6452 1 2025-10-25 02:39:48.267 00:00:10.360 TCP 23.104.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:40:45.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-10-25 02:40:48.667 00:00:10.364 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:37:47.071 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:41:45.734 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59640 10 6452 1 2025-10-25 02:41:49.100 00:00:10.365 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:42:34.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:42:34.523 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:38:47.068 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:42:45.907 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-10-25 02:42:49.505 00:00:10.364 TCP 23.104.0.1:53412 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:43:46.120 00:00:10.743 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-25 02:43:49.920 00:00:10.391 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:44:50.356 00:00:10.366 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:44:46.909 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-10-25 02:45:47.123 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-10-25 02:45:50.757 00:00:10.384 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:46:47.339 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-10-25 02:46:51.180 00:00:10.367 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:47:34.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:47:34.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:43:47.073 00:05:03.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:47:51.582 00:00:10.370 TCP 23.104.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:47:47.553 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41692 10 6452 1 2025-10-25 02:44:47.069 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:48:47.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42494 10 6452 1 2025-10-25 02:48:51.990 00:00:10.327 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:49:47.971 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-10-25 02:49:52.353 00:00:10.325 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:50:48.211 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 12 10369 1 2025-10-25 02:50:52.713 00:00:10.441 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 15 1926 1 2025-10-25 02:51:48.442 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-10-25 02:51:53.197 00:00:10.364 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:52:34.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:52:34.822 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:52:48.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-10-25 02:52:53.603 00:00:10.360 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:49:47.073 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:53:48.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54996 10 6452 1 2025-10-25 02:53:54.004 00:00:10.361 TCP 23.104.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:50:47.071 00:05:03.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 02:54:49.090 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-10-25 02:54:54.405 00:00:10.366 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:55:49.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-10-25 02:55:54.815 00:00:10.366 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:56:49.511 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-10-25 02:56:55.225 00:00:10.323 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:57:34.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 02:57:34.761 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 02:57:49.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-10-25 02:57:55.589 00:00:10.365 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494777, total packets: 1558, avg bps: 1058, avg pps: 0, avg bpp: 317 Time window: 2025-10-25 01:55:47 - 2025-10-25 02:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0010s Wall: 0.0028s flows/second: 57936.3 Runtime: 0.0028s