Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 14:59:06.716 00:00:10.381 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:59:34.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40196 10 6452 1 2025-10-12 15:00:07.122 00:00:10.365 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:56:41.250 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:00:34.918 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-10-12 14:56:41.247 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:01:07.526 00:00:10.363 TCP 23.104.0.1:52576 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:01:33.284 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:01:33.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:01:35.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41364 10 6452 1 2025-10-12 15:02:07.924 00:00:10.384 TCP 23.104.0.1:38966 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:02:35.346 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-10-12 15:03:08.344 00:00:10.368 TCP 23.104.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:03:35.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-10-12 15:04:08.749 00:00:10.366 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:04:35.783 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-10-12 15:05:09.152 00:00:10.379 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:05:35.965 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36962 10 6452 1 2025-10-12 15:06:09.568 00:00:10.442 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 15 1926 1 2025-10-12 15:06:33.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:06:33.723 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:02:41.251 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:06:36.204 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 12 10375 1 2025-10-12 15:02:41.248 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:07:10.052 00:00:10.363 TCP 23.104.0.1:38294 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:07:36.440 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-10-12 15:08:10.453 00:00:10.367 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:08:36.658 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40618 10 6452 1 2025-10-12 15:09:10.858 00:00:10.380 TCP 23.104.0.1:57644 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:09:36.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-10-12 15:10:11.273 00:00:10.368 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:10:37.081 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-10-12 15:11:11.678 00:00:10.452 TCP 23.104.0.1:34646 -> 1.101.0.1:3000 15 1926 1 2025-10-12 15:11:33.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:11:33.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:11:37.254 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 12 10375 1 2025-10-12 15:12:12.163 00:00:10.370 TCP 23.104.0.1:60020 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:08:41.253 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:08:41.255 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:12:37.516 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-10-12 15:13:12.570 00:00:10.369 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:13:37.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 12 6556 1 2025-10-12 15:14:12.975 00:00:10.367 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:14:37.938 00:00:10.328 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6452 1 2025-10-12 15:15:13.378 00:00:10.365 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:15:38.303 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54510 10 6452 1 2025-10-12 15:16:13.786 00:00:10.367 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:16:33.811 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:16:33.691 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:16:38.472 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44042 10 6452 1 2025-10-12 15:17:14.198 00:00:10.326 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:17:38.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-10-12 15:18:14.559 00:00:10.363 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:14:41.260 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:14:41.257 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:18:38.911 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48208 10 6452 1 2025-10-12 15:19:14.960 00:00:10.369 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:19:39.124 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-10-12 15:20:15.365 00:00:10.397 TCP 23.104.0.1:51038 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:20:39.312 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53744 10 6452 1 2025-10-12 15:21:15.785 00:00:10.425 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:21:33.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:21:33.561 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:21:39.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52992 10 6452 1 2025-10-12 15:22:16.252 00:00:10.321 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:22:39.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32902 10 6452 1 2025-10-12 15:23:16.616 00:00:10.357 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:23:39.969 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2025-10-12 15:24:17.014 00:00:10.358 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:20:41.260 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:20:41.258 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:24:40.195 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-10-12 15:25:17.408 00:00:10.366 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:25:40.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-10-12 15:26:17.813 00:00:10.361 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:26:34.678 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:26:34.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:26:40.621 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-10-12 15:27:18.216 00:00:10.385 TCP 23.104.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:27:40.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-10-12 15:28:18.651 00:00:10.375 TCP 23.104.0.1:47624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:28:41.059 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-10-12 15:29:19.089 00:00:10.364 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:29:41.272 00:00:11.088 TCP 1.101.0.1:3000 -> 22.102.0.1:59928 10 6452 1 2025-10-12 15:30:19.501 00:00:10.365 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:26:41.262 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:26:41.259 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:30:42.398 00:00:10.981 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-10-12 15:31:19.903 00:00:10.372 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:31:34.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:31:34.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:31:43.421 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-10-12 15:32:20.312 00:00:10.364 TCP 23.104.0.1:46768 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:32:43.598 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 10 6452 1 2025-10-12 15:33:20.715 00:00:10.325 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:33:43.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-10-12 15:34:21.110 00:00:10.322 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:34:43.978 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-10-12 15:35:21.471 00:00:10.362 TCP 23.104.0.1:45680 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:35:44.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49302 10 6452 1 2025-10-12 15:36:33.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:36:21.883 00:00:10.374 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:36:34.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:32:41.262 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:32:41.260 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:36:44.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 10 6452 1 2025-10-12 15:37:22.295 00:00:10.363 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:37:44.616 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-10-12 15:38:22.700 00:00:10.404 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:38:44.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-10-12 15:39:23.144 00:00:10.363 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:39:45.086 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46004 10 6452 1 2025-10-12 15:40:23.550 00:00:10.362 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:40:45.259 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-10-12 15:41:34.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:41:23.950 00:00:10.389 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:41:34.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:41:45.476 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-10-12 15:42:24.377 00:00:10.323 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:38:41.265 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:38:41.264 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:42:45.657 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-10-12 15:43:24.738 00:00:10.372 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:43:45.864 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-10-12 15:44:25.151 00:00:10.363 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:44:46.085 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34546 10 6452 1 2025-10-12 15:45:25.561 00:00:10.320 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:45:46.254 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-10-12 15:46:25.922 00:00:10.393 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:46:34.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:46:34.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:46:46.424 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 10 6452 1 2025-10-12 15:47:26.357 00:00:10.369 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:47:46.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6452 1 2025-10-12 15:44:41.264 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:48:26.761 00:00:10.375 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:44:41.267 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:48:46.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54326 10 6452 1 2025-10-12 15:49:27.184 00:00:10.366 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:49:47.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-10-12 15:50:27.579 00:00:10.366 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:50:47.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-10-12 15:51:34.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:51:34.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:51:27.984 00:00:10.330 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:51:47.519 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-10-12 15:52:28.349 00:00:10.361 TCP 23.104.0.1:51376 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:52:47.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-10-12 15:53:28.752 00:00:10.375 TCP 23.104.0.1:54674 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:53:47.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-10-12 15:50:41.265 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 15:54:29.165 00:00:10.366 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:50:41.268 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:54:48.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-10-12 15:55:29.573 00:00:10.364 TCP 23.104.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:55:48.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-10-12 15:56:34.276 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 15:56:34.487 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 15:56:29.979 00:00:10.362 TCP 23.104.0.1:44596 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:56:48.559 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-10-12 15:57:30.379 00:00:10.325 TCP 23.104.0.1:39398 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:57:48.727 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-10-12 15:58:30.743 00:00:10.333 TCP 23.104.0.1:52010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500684, total packets: 1576, avg bps: 1076, avg pps: 0, avg bpp: 317 Time window: 2025-10-12 14:56:41 - 2025-10-12 15:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0023s flows/second: 70598.1 Runtime: 0.0023s