Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 15:58:51.129 00:00:10.361 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-10-25 15:59:25.164 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-10-25 15:55:47.302 00:05:03.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 15:59:51.528 00:00:10.366 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:00:25.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-25 15:56:47.299 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:00:51.928 00:00:10.344 TCP 23.104.0.1:56692 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:01:25.545 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2025-10-25 16:01:52.312 00:00:10.365 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:02:25.871 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49302 10 6452 1 2025-10-25 16:02:50.522 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:02:50.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:02:52.711 00:00:10.365 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:03:26.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-10-25 16:03:53.115 00:00:10.366 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:04:26.307 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57608 10 6452 1 2025-10-25 16:04:53.521 00:00:10.323 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:05:26.527 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6452 1 2025-10-25 16:01:47.301 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:05:53.882 00:00:10.376 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:06:26.745 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-10-25 16:02:47.303 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:06:54.298 00:00:11.394 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:07:26.965 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 12 6556 1 2025-10-25 16:07:50.627 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:07:50.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:07:55.732 00:00:10.368 TCP 23.104.0.1:38770 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:08:27.196 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-10-25 16:08:56.135 00:00:10.363 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:09:27.409 00:00:10.622 TCP 1.101.0.1:3000 -> 22.102.0.1:38048 10 6452 1 2025-10-25 16:09:56.537 00:00:11.350 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:10:28.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-10-25 16:10:57.928 00:00:10.370 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:11:28.294 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53612 10 6452 1 2025-10-25 16:07:47.308 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:11:58.337 00:00:10.368 TCP 23.104.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:12:28.498 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-10-25 16:12:50.487 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:12:50.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:08:47.306 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:12:58.745 00:00:10.365 TCP 23.104.0.1:56730 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:13:28.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-10-25 16:13:59.153 00:00:10.331 TCP 23.104.0.1:44426 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:14:28.927 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37800 10 6452 1 2025-10-25 16:14:59.515 00:00:10.364 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:15:29.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-10-25 16:15:59.920 00:00:10.387 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:16:29.350 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 11 6504 1 2025-10-25 16:17:00.347 00:00:10.370 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:17:29.580 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41716 10 6452 1 2025-10-25 16:17:50.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:17:50.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:13:47.310 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:18:00.760 00:00:10.373 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:18:29.798 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-10-25 16:14:47.307 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:19:01.169 00:00:10.344 TCP 23.104.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:19:30.013 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-10-25 16:20:01.535 00:00:10.320 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:20:30.191 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-10-25 16:21:01.896 00:00:10.331 TCP 23.104.0.1:52868 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:21:30.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37362 10 6452 1 2025-10-25 16:22:02.263 00:00:10.367 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:22:30.582 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 10 6452 1 2025-10-25 16:22:51.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:22:51.027 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:23:02.667 00:00:10.368 TCP 23.104.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:23:30.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40248 10 6452 1 2025-10-25 16:19:47.310 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:24:03.107 00:00:10.325 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:24:30.970 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-25 16:20:47.308 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:25:03.474 00:00:10.371 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:25:31.208 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-10-25 16:26:03.883 00:00:10.365 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:26:31.425 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45300 10 6452 1 2025-10-25 16:27:04.294 00:00:10.362 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:27:31.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-10-25 16:27:50.796 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:27:50.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:28:04.696 00:00:10.368 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:28:31.857 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-10-25 16:29:05.104 00:00:10.364 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:29:32.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-10-25 16:25:47.313 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:30:05.506 00:00:10.370 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:30:32.293 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-10-25 16:26:47.310 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:31:05.913 00:00:10.393 TCP 23.104.0.1:50210 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:31:32.466 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-10-25 16:32:06.345 00:00:10.322 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:32:32.641 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58992 10 6452 1 2025-10-25 16:32:51.363 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:32:51.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:33:06.705 00:00:10.388 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:33:32.869 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-10-25 16:34:07.133 00:00:10.322 TCP 23.104.0.1:53950 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:34:33.102 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-10-25 16:35:07.495 00:00:10.365 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:35:33.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-10-25 16:31:47.314 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:36:07.910 00:00:10.364 TCP 23.104.0.1:37890 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:36:34.029 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 6452 1 2025-10-25 16:32:47.312 00:05:03.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:37:08.325 00:00:10.367 TCP 23.104.0.1:41798 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:37:34.204 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-10-25 16:37:51.247 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:37:50.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:38:08.745 00:00:10.367 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:38:34.408 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-10-25 16:39:09.160 00:00:10.322 TCP 23.104.0.1:40850 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:39:34.620 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59532 10 6452 1 2025-10-25 16:40:09.525 00:00:10.364 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:40:34.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59360 10 6452 1 2025-10-25 16:41:09.928 00:00:10.406 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:41:35.071 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 11 6504 1 2025-10-25 16:37:47.315 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:42:10.371 00:00:10.365 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:42:35.337 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-10-25 16:42:51.142 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:38:47.313 00:05:03.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:42:51.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:43:10.777 00:00:10.370 TCP 23.104.0.1:54996 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:43:35.548 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-10-25 16:44:11.186 00:00:10.328 TCP 23.104.0.1:36382 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:44:35.720 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-10-25 16:45:11.556 00:00:10.364 TCP 23.104.0.1:39914 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:45:35.890 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-10-25 16:46:11.957 00:00:10.371 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:46:36.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-25 16:47:12.366 00:00:10.360 TCP 23.104.0.1:38796 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:47:36.324 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-10-25 16:43:47.319 00:05:03.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:47:51.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:47:51.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:48:12.777 00:00:10.372 TCP 23.104.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:48:36.497 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46262 10 6452 1 2025-10-25 16:44:47.315 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:49:13.190 00:00:10.332 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:49:36.706 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-10-25 16:50:13.564 00:00:10.367 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:50:36.921 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52076 10 6452 1 2025-10-25 16:51:13.970 00:00:10.365 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:51:37.132 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-10-25 16:52:14.371 00:00:10.324 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:52:51.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:52:37.311 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-10-25 16:52:51.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:53:14.735 00:00:10.367 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:53:37.522 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 2025-10-25 16:49:47.320 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 16:54:15.145 00:00:10.374 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:54:37.737 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36030 10 6452 1 2025-10-25 16:50:47.316 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 16:55:15.550 00:00:10.367 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:55:37.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58130 10 6452 1 2025-10-25 16:56:15.954 00:00:17.786 TCP 23.104.0.1:36574 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:56:38.122 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-10-25 16:57:23.780 00:00:10.363 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:57:51.757 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 16:57:38.340 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-10-25 16:57:51.466 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 16:58:24.182 00:00:10.368 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-10-25 16:58:38.569 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-10-25 15:55:47 - 2025-10-25 16:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0010s Wall: 0.0021s flows/second: 76344.7 Runtime: 0.0022s