Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 05:59:06.199 00:00:15.314 TCP 23.104.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-10-12 05:59:20.747 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-10-12 06:00:11.572 00:00:10.365 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:00:20.919 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-10-12 05:56:41.088 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 05:56:41.085 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:01:22.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:01:11.975 00:00:10.369 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:01:22.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:01:21.112 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-10-12 06:02:12.384 00:00:10.368 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:02:21.287 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48172 10 6452 1 2025-10-12 06:03:12.791 00:00:10.365 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:03:21.463 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2025-10-12 06:04:13.204 00:00:10.327 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:04:21.701 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-10-12 06:05:13.564 00:00:10.363 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:05:21.918 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-10-12 06:06:22.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:06:22.246 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:06:13.971 00:00:10.368 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:06:22.135 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-10-12 06:02:41.089 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:02:41.086 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:07:14.383 00:00:10.365 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:07:22.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-10-12 06:08:14.785 00:00:10.320 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:08:22.547 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51540 12 6556 1 2025-10-12 06:09:15.145 00:00:10.379 TCP 23.104.0.1:55730 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:09:22.761 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48978 10 6452 1 2025-10-12 06:10:15.563 00:00:10.377 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:10:22.970 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-10-12 06:11:22.700 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:11:22.744 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:11:15.979 00:00:10.328 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:11:23.201 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-10-12 06:12:16.344 00:00:10.321 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:12:23.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-10-12 06:08:41.089 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:08:41.087 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:13:16.700 00:00:10.324 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:13:23.628 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6452 1 2025-10-12 06:14:17.097 00:00:10.373 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:14:23.841 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 12 6556 1 2025-10-12 06:15:17.504 00:00:10.331 TCP 23.104.0.1:45340 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:15:24.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6452 1 2025-10-12 06:16:22.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:16:22.733 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:16:17.873 00:00:10.364 TCP 23.104.0.1:50216 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:16:24.303 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-10-12 06:17:18.276 00:00:10.365 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:17:24.511 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-10-12 06:18:18.680 00:00:10.370 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:18:24.676 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-12 06:14:41.093 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:14:41.090 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:19:19.110 00:00:10.328 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:19:24.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-10-12 06:20:19.481 00:00:10.363 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:20:25.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-10-12 06:21:22.944 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:21:23.015 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:21:19.883 00:00:10.383 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:21:25.292 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-10-12 06:22:20.311 00:00:10.365 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:22:25.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58154 10 6452 1 2025-10-12 06:23:20.715 00:00:10.384 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:23:25.718 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-10-12 06:24:21.137 00:00:10.362 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:24:25.933 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-10-12 06:20:41.091 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:20:41.095 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:25:21.538 00:00:10.368 TCP 23.104.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:25:26.167 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-10-12 06:26:22.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:26:23.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:26:21.943 00:00:10.372 TCP 23.104.0.1:48566 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:26:26.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-10-12 06:27:22.349 00:00:10.359 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:27:26.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52132 10 6452 1 2025-10-12 06:28:22.750 00:00:10.335 TCP 23.104.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:28:26.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-10-12 06:29:23.125 00:00:10.370 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:29:27.040 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56418 10 6452 1 2025-10-12 06:30:23.530 00:00:10.332 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:30:27.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-10-12 06:26:41.094 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:26:41.092 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:31:23.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:31:23.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:31:23.910 00:00:10.366 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:31:27.430 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-10-12 06:32:24.313 00:00:10.369 TCP 23.104.0.1:54540 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:32:27.656 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-10-12 06:33:24.718 00:00:10.378 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:33:27.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-10-12 06:34:25.136 00:00:10.363 TCP 23.104.0.1:54434 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:34:28.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42980 10 6452 1 2025-10-12 06:35:25.536 00:00:10.324 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:35:28.315 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6452 1 2025-10-12 06:36:23.260 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:36:23.166 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:36:25.904 00:00:10.366 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:32:41.097 00:05:02.433 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:36:28.530 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-10-12 06:32:41.093 00:05:02.438 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:37:26.312 00:00:10.370 TCP 23.104.0.1:59024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:37:28.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-10-12 06:38:28.950 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-10-12 06:38:26.720 00:00:10.326 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:39:29.191 00:00:10.663 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-10-12 06:39:27.109 00:00:10.329 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:40:29.895 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-10-12 06:40:27.474 00:00:10.366 TCP 23.104.0.1:57218 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:41:22.992 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:41:23.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:41:27.881 00:00:10.389 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:41:30.114 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-10-12 06:42:30.292 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-10-12 06:42:28.305 00:00:10.430 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:38:41.096 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:38:41.095 00:05:02.438 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:43:30.742 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-10-12 06:43:28.770 00:00:10.368 TCP 23.104.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:44:30.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6452 1 2025-10-12 06:44:29.175 00:00:10.329 TCP 23.104.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:45:29.539 00:00:10.379 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:45:31.197 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41814 10 6452 1 2025-10-12 06:46:23.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:46:23.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:46:31.414 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55340 12 10369 1 2025-10-12 06:46:29.958 00:00:10.456 TCP 23.104.0.1:51100 -> 1.101.0.1:3000 15 1926 1 2025-10-12 06:47:31.619 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-10-12 06:47:30.444 00:00:10.365 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:48:30.844 00:00:10.384 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:44:41.098 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:48:31.831 00:00:10.791 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-10-12 06:44:41.096 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:49:31.265 00:00:10.324 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:49:32.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46452 10 6452 1 2025-10-12 06:50:31.626 00:00:10.325 TCP 23.104.0.1:40554 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:50:32.872 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-10-12 06:51:23.545 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:51:23.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:51:31.986 00:00:10.328 TCP 23.104.0.1:35222 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:51:33.094 00:00:10.635 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-10-12 06:52:32.351 00:00:10.373 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:52:33.768 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-10-12 06:53:33.940 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-10-12 06:53:32.760 00:00:10.372 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:54:34.129 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-10-12 06:50:41.098 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 06:54:33.173 00:00:10.763 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:50:41.100 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 06:55:34.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-10-12 06:55:33.976 00:00:10.374 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:56:23.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 06:56:23.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 06:56:34.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-10-12 06:56:34.390 00:00:10.366 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:57:34.797 00:00:10.367 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-10-12 06:57:34.736 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-10-12 06:58:34.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39288 10 6452 1 2025-10-12 06:58:35.202 00:00:10.363 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502892, total packets: 1582, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-10-12 05:56:41 - 2025-10-12 06:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0024s Wall: 0.0033s flows/second: 50260.5 Runtime: 0.0033s