Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 10:59:25.136 00:00:10.416 TCP 23.104.0.1:51810 -> 1.101.0.1:3000 11 1507 1 2025-10-12 10:59:33.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46652 10 6452 1 2025-10-12 11:00:25.595 00:00:10.363 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:00:33.329 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60716 10 6452 1 2025-10-12 10:56:41.169 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 10:56:41.172 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:01:28.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:01:28.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:01:26.004 00:00:10.358 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:01:33.555 00:00:10.521 TCP 1.101.0.1:3000 -> 22.102.0.1:33410 12 6556 1 2025-10-12 11:02:26.399 00:00:10.372 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:02:34.115 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-10-12 11:03:26.807 00:00:10.331 TCP 23.104.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:03:34.343 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55932 10 6452 1 2025-10-12 11:04:27.179 00:00:10.326 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:04:34.563 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-10-12 11:05:27.540 00:00:10.371 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:05:34.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-10-12 11:06:29.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:06:28.930 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:06:27.946 00:00:10.388 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:02:41.171 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:02:41.169 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:06:34.991 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6452 1 2025-10-12 11:07:28.370 00:00:10.381 TCP 23.104.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:07:35.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35842 10 6452 1 2025-10-12 11:08:28.804 00:00:10.368 TCP 23.104.0.1:52258 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:08:35.393 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6452 1 2025-10-12 11:09:29.208 00:00:10.356 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:09:35.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51580 10 6452 1 2025-10-12 11:10:29.601 00:00:10.323 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:10:35.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-10-12 11:11:28.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:11:28.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:11:29.962 00:00:10.721 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:11:35.995 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-10-12 11:12:30.714 00:00:10.384 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:08:41.172 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:12:36.186 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59810 10 6452 1 2025-10-12 11:08:41.171 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:13:31.137 00:00:10.365 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:13:36.424 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-10-12 11:14:31.541 00:00:10.365 TCP 23.104.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:14:36.637 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-10-12 11:15:31.944 00:00:10.376 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:15:36.811 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-10-12 11:16:28.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:16:28.872 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:16:32.357 00:00:10.366 TCP 23.104.0.1:57244 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:16:37.031 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-10-12 11:17:32.762 00:00:10.370 TCP 23.104.0.1:50844 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:17:37.241 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37906 10 6452 1 2025-10-12 11:14:41.169 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:18:33.172 00:00:10.362 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:14:41.173 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:18:37.454 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-10-12 11:19:33.571 00:00:10.416 TCP 23.104.0.1:60544 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:19:37.629 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32958 10 6452 1 2025-10-12 11:20:34.028 00:00:10.370 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:20:37.842 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-10-12 11:21:28.553 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:21:28.800 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:21:34.437 00:00:10.381 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:21:38.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-10-12 11:22:34.858 00:00:10.374 TCP 23.104.0.1:58590 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:22:38.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37858 10 6452 1 2025-10-12 11:23:35.274 00:00:10.364 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:23:38.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-10-12 11:24:35.679 00:00:10.325 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:20:41.173 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:20:41.170 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:24:38.726 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-10-12 11:25:36.036 00:00:10.364 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:25:38.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-10-12 11:26:28.939 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:26:28.804 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:26:36.440 00:00:10.367 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:26:39.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6452 1 2025-10-12 11:27:39.394 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-10-12 11:27:36.845 00:00:10.381 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:28:37.262 00:00:10.370 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:28:39.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42220 10 6452 1 2025-10-12 11:29:37.672 00:00:10.362 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:29:39.834 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6452 1 2025-10-12 11:26:41.173 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:26:41.176 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:30:40.012 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6452 1 2025-10-12 11:30:38.095 00:00:10.330 TCP 23.104.0.1:37968 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:31:29.080 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:31:29.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:31:38.471 00:00:10.865 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:31:40.243 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6452 1 2025-10-12 11:32:40.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54498 10 6452 1 2025-10-12 11:32:39.377 00:00:10.373 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:33:40.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-10-12 11:33:39.784 00:00:10.365 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:34:40.190 00:00:10.369 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:34:40.839 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45174 10 6452 1 2025-10-12 11:35:41.068 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35840 10 6452 1 2025-10-12 11:35:40.593 00:00:10.367 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:36:29.043 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:36:29.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:32:41.174 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:32:41.177 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:36:40.998 00:00:10.327 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:36:41.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-10-12 11:37:41.446 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-10-12 11:37:41.362 00:00:10.324 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:38:41.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37832 10 6452 1 2025-10-12 11:38:41.721 00:00:10.367 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:39:41.869 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-10-12 11:39:42.128 00:00:10.369 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:40:42.540 00:00:10.365 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:40:42.110 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-10-12 11:41:29.587 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:41:29.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:41:42.941 00:00:10.378 TCP 23.104.0.1:45536 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:41:42.282 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-12 11:38:41.178 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:38:41.181 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:42:42.497 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-10-12 11:42:43.357 00:00:10.370 TCP 23.104.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:43:43.764 00:00:10.329 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:43:42.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49526 10 6452 1 2025-10-12 11:44:42.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-12 11:44:44.137 00:00:10.565 TCP 23.104.0.1:57856 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:45:44.739 00:00:10.323 TCP 23.104.0.1:32994 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:45:43.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-10-12 11:46:29.389 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:46:29.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:46:45.108 00:00:10.356 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:46:43.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 10 6452 1 2025-10-12 11:47:43.527 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 10 6452 1 2025-10-12 11:47:45.506 00:00:10.326 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:44:41.182 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:44:41.178 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:48:43.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-10-12 11:48:45.873 00:00:10.365 TCP 23.104.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:49:46.276 00:00:10.362 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:49:43.909 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-10-12 11:50:44.127 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59868 10 6452 1 2025-10-12 11:50:46.684 00:00:10.371 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:51:29.573 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:51:29.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:51:44.343 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-10-12 11:51:47.104 00:00:10.364 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:52:44.566 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-10-12 11:52:47.510 00:00:10.689 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:53:45.149 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-10-12 11:53:48.245 00:00:10.328 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:50:41.180 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 11:50:41.183 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 11:54:45.355 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-10-12 11:54:48.610 00:00:10.371 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:55:45.572 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-10-12 11:55:49.023 00:00:10.324 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:56:29.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 11:56:29.743 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 11:56:45.783 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-10-12 11:56:49.387 00:00:10.366 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-10-12 11:57:45.955 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:53630 10 6452 1 2025-10-12 11:57:49.790 00:00:10.353 TCP 23.104.0.1:51998 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490493, total packets: 1553, avg bps: 1066, avg pps: 0, avg bpp: 315 Time window: 2025-10-12 10:56:41 - 2025-10-12 11:58:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 80354.5 Runtime: 0.0020s