Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 02:59:36.470 00:00:10.369 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-10-12 02:59:40.632 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-10-12 02:55:43.427 00:05:57.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 02:55:43.426 00:05:57.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:00:40.856 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-10-12 03:00:36.874 00:00:10.362 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:01:18.705 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:01:18.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:01:37.275 00:00:10.323 TCP 23.104.0.1:55690 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:01:41.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-10-12 03:02:37.637 00:00:10.364 TCP 23.104.0.1:57078 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:02:41.312 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-10-12 03:03:38.045 00:00:10.393 TCP 23.104.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:03:41.537 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50704 10 6452 1 2025-10-12 03:04:41.756 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55184 10 6452 1 2025-10-12 03:04:38.451 00:00:10.323 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:05:38.817 00:00:10.363 TCP 23.104.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:05:41.974 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 13 6608 1 2025-10-12 03:06:18.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:06:18.983 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:01:43.437 00:05:57.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:01:43.440 00:05:57.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:06:39.222 00:00:10.368 TCP 23.104.0.1:46278 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:06:42.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-10-12 03:07:39.630 00:00:10.367 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:07:42.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52550 10 6452 1 2025-10-12 03:08:40.037 00:00:10.368 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:08:42.648 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-10-12 03:09:40.438 00:00:10.364 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:09:42.860 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45226 10 6452 1 2025-10-12 03:10:40.841 00:00:10.409 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 15 1926 1 2025-10-12 03:10:43.091 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 12 10375 1 2025-10-12 03:11:19.050 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:11:19.111 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:11:41.292 00:00:10.364 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:11:43.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 10 6452 1 2025-10-12 03:07:43.441 00:05:57.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:07:43.443 00:05:57.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:12:41.695 00:00:10.336 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:12:43.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-10-12 03:13:42.105 00:00:10.366 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:13:43.756 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58192 10 6452 1 2025-10-12 03:14:42.509 00:00:10.378 TCP 23.104.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:14:43.971 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-10-12 03:15:44.207 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50224 10 6452 1 2025-10-12 03:15:42.929 00:00:10.331 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:16:19.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:16:19.258 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:16:44.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-10-12 03:16:43.295 00:00:10.321 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:17:44.636 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60076 10 6452 1 2025-10-12 03:17:43.656 00:00:10.329 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:13:43.449 00:05:57.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:13:43.452 00:05:57.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:18:44.022 00:00:10.369 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:18:44.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-10-12 03:19:45.085 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-10-12 03:19:44.433 00:00:10.458 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:20:44.930 00:00:10.383 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:20:45.294 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35500 10 6452 1 2025-10-12 03:21:19.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:21:19.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:21:45.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-10-12 03:21:45.349 00:00:10.326 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:22:45.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-10-12 03:22:45.710 00:00:10.325 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:23:45.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6452 1 2025-10-12 03:23:46.100 00:00:10.328 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:19:43.453 00:05:57.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:19:43.453 00:05:57.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:24:46.111 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-10-12 03:24:46.464 00:00:10.372 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:25:46.341 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-10-12 03:25:46.874 00:00:10.359 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:26:19.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:26:19.515 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:26:46.544 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 10 6452 1 2025-10-12 03:26:47.271 00:00:10.366 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:27:46.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-10-12 03:27:47.674 00:00:10.368 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:28:46.982 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-10-12 03:28:48.100 00:00:10.365 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:29:48.503 00:00:10.373 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:29:47.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-10-12 03:25:43.458 00:05:57.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:25:43.456 00:05:57.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:30:47.422 00:00:10.812 TCP 1.101.0.1:3000 -> 22.102.0.1:46658 10 6452 1 2025-10-12 03:30:48.914 00:00:10.365 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:31:19.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:31:19.421 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:31:48.279 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-10-12 03:31:49.316 00:00:10.367 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:32:49.731 00:00:10.373 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:32:48.452 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47754 10 6452 1 2025-10-12 03:33:48.675 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47296 10 6452 1 2025-10-12 03:33:50.138 00:00:10.333 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:34:50.508 00:00:10.366 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:34:48.843 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-10-12 03:35:50.909 00:00:10.367 TCP 23.104.0.1:44276 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:35:49.025 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-10-12 03:36:19.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:36:19.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:31:43.460 00:05:57.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:31:43.457 00:05:57.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:36:51.314 00:00:10.368 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:36:49.191 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-10-12 03:37:49.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-10-12 03:37:51.721 00:00:10.378 TCP 23.104.0.1:47580 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:38:49.627 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-10-12 03:38:52.130 00:00:10.363 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:39:49.838 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45138 10 6452 1 2025-10-12 03:39:52.531 00:00:10.371 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:40:50.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-10-12 03:40:52.945 00:00:10.378 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:41:19.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:41:19.490 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:41:50.295 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-10-12 03:41:53.349 00:00:10.370 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:37:43.461 00:05:57.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:37:43.457 00:05:57.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:42:50.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-10-12 03:42:53.764 00:00:10.399 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:43:50.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-12 03:43:54.190 00:00:10.323 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:44:50.942 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-10-12 03:44:54.554 00:00:10.362 TCP 23.104.0.1:45564 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:45:51.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-10-12 03:45:54.962 00:00:10.367 TCP 23.104.0.1:48784 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:46:19.799 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:46:19.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:46:51.382 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6452 1 2025-10-12 03:46:55.365 00:00:10.369 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:47:51.594 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49866 10 6452 1 2025-10-12 03:47:55.768 00:00:10.327 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:43:43.460 00:05:57.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:43:43.462 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-10-12 03:48:51.802 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-10-12 03:48:56.132 00:00:10.365 TCP 23.104.0.1:50946 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:49:52.027 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-10-12 03:49:56.534 00:00:10.368 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:50:52.244 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43938 10 6452 1 2025-10-12 03:50:56.937 00:00:10.336 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:51:19.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:51:19.703 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:51:52.474 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-10-12 03:51:57.313 00:00:10.325 TCP 23.104.0.1:36466 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:52:52.644 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54154 10 6452 1 2025-10-12 03:52:57.684 00:00:10.365 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:53:52.859 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-10-12 03:53:58.099 00:00:10.363 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:49:43.463 00:05:57.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:50:41.050 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 03:54:53.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-10-12 03:54:58.501 00:00:10.366 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:55:53.299 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-10-12 03:55:58.932 00:00:10.374 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:56:20.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 03:56:19.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 03:56:53.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-10-12 03:56:59.348 00:00:10.362 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:57:53.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33520 10 6452 1 2025-10-12 03:57:59.753 00:00:10.319 TCP 23.104.0.1:47436 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494939, total packets: 1561, avg bps: 1056, avg pps: 0, avg bpp: 317 Time window: 2025-10-12 02:55:43 - 2025-10-12 03:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0010s Wall: 0.0035s flows/second: 45957.2 Runtime: 0.0035s