Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 00:58:45.966 00:00:10.367 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-10-12 00:59:12.393 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37158 10 6452 1 2025-10-12 00:59:46.373 00:00:10.388 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:00:12.611 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-10-12 00:56:40.978 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 00:56:40.975 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:00:46.790 00:00:10.364 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:01:16.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:01:16.447 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:01:12.829 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-10-12 01:01:47.195 00:00:10.371 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:02:13.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39320 10 6452 1 2025-10-12 01:02:47.607 00:00:10.371 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:03:13.300 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-10-12 01:03:48.011 00:00:10.378 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:04:13.530 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-10-12 01:04:48.417 00:00:10.367 TCP 23.104.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:05:13.745 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-10-12 01:05:48.818 00:00:10.370 TCP 23.104.0.1:43626 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:06:16.388 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:06:16.307 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:06:13.972 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:48630 10 6452 1 2025-10-12 01:02:40.980 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:02:40.978 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:06:49.225 00:00:10.323 TCP 23.104.0.1:38780 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:07:14.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56846 10 6452 1 2025-10-12 01:07:49.590 00:00:10.368 TCP 23.104.0.1:38894 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:08:14.442 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-10-12 01:08:49.996 00:00:10.360 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:09:14.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-10-12 01:09:50.396 00:00:10.364 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:10:14.881 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 2025-10-12 01:10:50.798 00:00:10.365 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:11:16.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:11:17.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:11:15.116 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56864 10 6452 1 2025-10-12 01:11:51.196 00:00:10.363 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:12:15.346 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47052 10 6452 1 2025-10-12 01:08:40.982 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:08:40.979 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:12:51.596 00:00:10.375 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:13:15.525 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56980 10 6452 1 2025-10-12 01:13:52.016 00:00:10.364 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:14:15.736 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-10-12 01:14:52.420 00:00:10.366 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:15:15.943 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40598 10 6452 1 2025-10-12 01:15:52.822 00:00:10.372 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:16:16.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:16:16.927 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:16:16.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-10-12 01:16:53.226 00:00:10.370 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:17:16.400 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 10 6452 1 2025-10-12 01:17:53.639 00:00:10.385 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:18:16.621 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-10-12 01:14:40.982 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:14:40.985 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:18:54.093 00:00:10.368 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:19:16.845 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-10-12 01:19:54.503 00:00:10.369 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:20:17.073 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-10-12 01:20:54.910 00:00:10.413 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 15 1926 1 2025-10-12 01:21:16.896 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:21:16.909 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:21:17.281 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 12 10375 1 2025-10-12 01:21:55.358 00:00:10.598 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:22:17.481 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-10-12 01:22:56.003 00:00:10.357 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:23:17.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-10-12 01:23:56.398 00:00:10.362 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:24:17.907 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-10-12 01:20:40.984 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:20:40.986 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:24:56.803 00:00:10.621 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:25:18.087 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-10-12 01:25:57.462 00:00:10.365 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:26:16.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:26:16.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:26:18.260 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-10-12 01:26:57.865 00:00:10.371 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:27:18.477 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-10-12 01:27:58.269 00:00:10.324 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:28:18.695 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-10-12 01:28:58.631 00:00:10.321 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:29:18.925 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42164 10 6452 1 2025-10-12 01:29:59.017 00:00:10.988 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:30:19.142 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45574 10 6452 1 2025-10-12 01:26:40.986 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:26:40.990 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:31:00.049 00:00:10.362 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:31:16.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:31:17.069 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:31:19.354 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-10-12 01:32:00.457 00:00:10.362 TCP 23.104.0.1:44288 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:32:19.574 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46726 10 6452 1 2025-10-12 01:33:00.860 00:00:10.377 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:33:19.783 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33648 10 6452 1 2025-10-12 01:34:01.275 00:00:10.365 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:34:20.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-10-12 01:35:01.675 00:00:10.462 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:35:20.229 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-10-12 01:36:02.178 00:00:10.363 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:36:17.234 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:36:17.018 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:36:20.444 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-10-12 01:32:40.990 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:32:40.986 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:37:02.578 00:00:10.364 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:37:20.626 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-10-12 01:38:02.982 00:00:10.369 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:38:20.818 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-10-12 01:39:03.390 00:00:10.360 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:39:21.080 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-10-12 01:40:03.790 00:00:10.668 TCP 23.104.0.1:50604 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:40:21.319 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-10-12 01:41:04.491 00:00:10.370 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:41:17.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:41:17.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:41:21.555 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-10-12 01:42:04.896 00:00:10.373 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:42:21.774 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-10-12 01:38:40.988 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:38:40.992 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:43:05.302 00:00:10.327 TCP 23.104.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:43:22.000 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-10-12 01:44:05.667 00:00:10.324 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:44:22.195 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-10-12 01:45:06.029 00:00:10.364 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:45:22.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52436 10 6452 1 2025-10-12 01:46:06.434 00:00:10.323 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:46:17.200 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:46:17.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:46:22.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44854 10 6452 1 2025-10-12 01:47:06.796 00:00:10.340 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:47:22.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6452 1 2025-10-12 01:48:07.176 00:00:10.364 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:48:23.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47110 10 6452 1 2025-10-12 01:44:40.991 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:44:40.989 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:49:07.577 00:00:10.366 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:49:23.295 00:00:10.289 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-10-12 01:50:07.984 00:00:10.372 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:50:23.623 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 10 6452 1 2025-10-12 01:51:17.405 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:51:08.401 00:00:10.369 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:51:17.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:51:23.858 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 10 6452 1 2025-10-12 01:52:08.807 00:00:10.366 TCP 23.104.0.1:55320 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:52:24.091 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-10-12 01:53:09.209 00:00:10.366 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:53:24.307 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60598 10 6452 1 2025-10-12 01:54:09.608 00:00:10.363 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:54:24.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-10-12 01:50:40.988 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 01:50:40.992 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:55:10.017 00:00:10.324 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:55:24.761 00:00:10.464 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6452 1 2025-10-12 01:56:17.716 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 01:56:17.501 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 01:56:10.381 00:00:10.364 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:56:25.270 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33278 10 6452 1 2025-10-12 01:57:10.784 00:00:10.325 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:57:25.479 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6452 1 2025-10-12 01:58:11.157 00:00:10.364 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:58:25.695 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-10-12 00:56:40 - 2025-10-12 01:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0026s flows/second: 63368.6 Runtime: 0.0026s