Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 01:59:11.572 00:00:10.325 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-10-12 01:59:25.911 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6452 1 2025-10-12 02:00:11.936 00:00:10.366 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:00:26.476 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-10-12 01:56:40.993 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 01:56:40.989 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:01:17.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:01:17.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:01:12.340 00:00:10.362 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:01:26.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-10-12 02:02:12.745 00:00:10.322 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:02:26.862 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47794 10 6452 1 2025-10-12 02:03:13.110 00:00:10.324 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:03:27.103 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-10-12 02:04:13.471 00:00:10.369 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:04:27.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37896 10 6452 1 2025-10-12 02:05:13.871 00:00:10.326 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:05:27.543 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-10-12 02:06:17.603 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:06:17.561 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:06:14.236 00:00:10.367 TCP 23.104.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:06:27.756 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-10-12 02:02:40.991 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:02:40.993 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:07:14.646 00:00:10.364 TCP 23.104.0.1:38116 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:07:27.974 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37504 10 6452 1 2025-10-12 02:08:15.063 00:00:10.366 TCP 23.104.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:08:28.203 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-10-12 02:09:15.469 00:00:10.366 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:09:28.418 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-10-12 02:10:15.874 00:00:10.326 TCP 23.104.0.1:51622 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:10:28.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33576 10 6452 1 2025-10-12 02:11:18.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:11:18.503 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:11:16.244 00:00:10.324 TCP 23.104.0.1:36754 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:11:28.848 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2025-10-12 02:12:16.609 00:00:10.366 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:12:29.079 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38044 10 6452 1 2025-10-12 02:08:40.994 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:08:40.991 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:13:17.015 00:00:10.357 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:13:29.313 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-10-12 02:14:17.405 00:00:10.371 TCP 23.104.0.1:37188 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:14:29.529 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-10-12 02:15:17.814 00:00:10.372 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:15:29.745 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:53202 12 10369 1 2025-10-12 02:16:18.189 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:16:17.780 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:16:18.222 00:00:10.456 TCP 23.104.0.1:50884 -> 1.101.0.1:3000 15 1926 1 2025-10-12 02:16:30.002 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-10-12 02:17:18.717 00:00:10.359 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:17:30.355 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-10-12 02:18:19.112 00:00:10.362 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:18:30.568 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6452 1 2025-10-12 02:14:40.992 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:14:40.993 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:19:19.513 00:00:10.364 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:19:30.792 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-10-12 02:20:19.911 00:00:10.362 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:20:31.040 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53286 10 6452 1 2025-10-12 02:21:17.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:21:18.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:21:20.312 00:00:10.369 TCP 23.104.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:21:31.216 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-10-12 02:22:20.721 00:00:10.333 TCP 23.104.0.1:52088 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:22:31.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-10-12 02:23:21.111 00:00:10.337 TCP 23.104.0.1:37672 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:23:31.641 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-10-12 02:24:21.491 00:00:10.324 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:20:40.992 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:24:31.860 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56452 10 6452 1 2025-10-12 02:20:40.995 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:25:21.859 00:00:10.375 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:25:32.087 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58510 10 6452 1 2025-10-12 02:26:18.061 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:26:18.046 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:26:22.274 00:00:10.368 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:26:32.311 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-10-12 02:27:22.683 00:00:10.329 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:27:32.527 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-10-12 02:28:23.049 00:00:10.399 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:28:32.745 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-10-12 02:29:23.486 00:00:10.369 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:29:32.984 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-10-12 02:30:23.892 00:00:10.381 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:26:40.996 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:30:33.211 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-10-12 02:26:40.994 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:31:18.516 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:31:18.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:31:24.314 00:00:10.364 TCP 23.104.0.1:38210 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:31:33.386 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-10-12 02:32:24.716 00:00:10.377 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:32:33.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-10-12 02:33:25.128 00:00:10.367 TCP 23.104.0.1:56328 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:33:33.819 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-10-12 02:34:25.539 00:00:10.360 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:34:33.990 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-10-12 02:35:25.943 00:00:10.447 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 15 1926 1 2025-10-12 02:35:34.169 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 12 10375 1 2025-10-12 02:36:18.284 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:36:17.971 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:36:26.435 00:00:10.378 TCP 23.104.0.1:40480 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:32:40.996 00:05:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-10-12 02:36:34.414 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 10 6452 1 2025-10-12 02:32:40.995 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:37:26.853 00:00:10.384 TCP 23.104.0.1:54862 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:37:34.977 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42534 10 6452 1 2025-10-12 02:38:27.276 00:00:10.329 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:38:35.196 00:00:10.796 TCP 1.101.0.1:3000 -> 22.102.0.1:43500 10 6452 1 2025-10-12 02:39:27.640 00:00:10.366 TCP 23.104.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:39:36.046 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-10-12 02:40:28.050 00:00:10.374 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:40:36.258 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2025-10-12 02:41:18.398 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:41:18.444 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:41:28.471 00:00:10.368 TCP 23.104.0.1:45620 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:41:36.426 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35838 10 6452 1 2025-10-12 02:42:28.872 00:00:10.326 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:37:43.419 00:05:57.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:42:36.644 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 12 6556 1 2025-10-12 02:38:40.997 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:43:29.236 00:00:10.436 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:43:36.865 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-10-12 02:44:29.710 00:00:10.364 TCP 23.104.0.1:58242 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:44:37.046 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-10-12 02:45:30.112 00:00:10.363 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:45:37.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-10-12 02:46:18.454 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:46:18.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:46:30.510 00:00:10.367 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:46:37.439 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-10-12 02:47:30.918 00:00:10.365 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:47:37.661 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-10-12 02:48:31.320 00:00:10.359 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:43:43.422 00:05:57.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:44:40.999 00:05:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-10-12 02:48:37.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2025-10-12 02:49:31.717 00:00:10.369 TCP 23.104.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:49:38.103 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50696 10 6452 1 2025-10-12 02:50:32.130 00:00:10.366 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:50:38.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-10-12 02:51:18.566 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:51:18.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:51:32.533 00:00:11.007 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:51:38.494 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-10-12 02:52:33.577 00:00:10.360 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:52:38.715 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-10-12 02:53:33.978 00:00:10.371 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:53:38.933 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-10-12 02:49:43.424 00:05:57.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 02:49:43.425 00:05:57.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:54:34.386 00:00:10.369 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:54:39.144 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42136 10 6452 1 2025-10-12 02:55:34.790 00:00:10.444 TCP 23.104.0.1:34914 -> 1.101.0.1:3000 15 1926 1 2025-10-12 02:55:39.352 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:46916 12 10375 1 2025-10-12 02:56:18.898 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 02:56:18.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 02:56:35.274 00:00:10.324 TCP 23.104.0.1:41070 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:56:39.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51654 10 6452 1 2025-10-12 02:57:35.640 00:00:10.365 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:57:40.160 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55184 10 6452 1 2025-10-12 02:58:36.061 00:00:10.367 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:58:40.373 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 Summary: total flows: 164, total bytes: 511349, total packets: 1590, avg bps: 1096, avg pps: 0, avg bpp: 321 Time window: 2025-10-12 01:56:40 - 2025-10-12 02:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0000s Wall: 0.0027s flows/second: 60402.7 Runtime: 0.0027s