Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 16:58:57.240 00:00:10.360 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:59:07.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-10-12 16:59:57.641 00:00:10.357 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:00:07.295 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-10-12 16:56:41.280 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:56:41.284 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:00:58.047 00:00:10.371 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:01:07.523 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-10-12 17:01:36.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:01:36.435 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:01:58.451 00:00:10.362 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:02:07.742 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-10-12 17:02:58.853 00:00:10.370 TCP 23.104.0.1:44444 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:03:07.970 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-12 17:03:59.266 00:00:10.322 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:04:08.198 00:00:10.386 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-10-12 17:04:59.625 00:00:10.374 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:05:08.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-10-12 17:06:00.059 00:00:10.365 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:06:08.837 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-10-12 17:06:35.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:06:35.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:02:41.285 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:02:41.282 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:07:00.459 00:00:10.375 TCP 23.104.0.1:36850 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:07:09.076 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-10-12 17:08:00.870 00:00:10.328 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:08:09.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-12 17:09:01.237 00:00:10.851 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:09:09.504 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34780 10 6452 1 2025-10-12 17:10:02.125 00:00:10.364 TCP 23.104.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:10:09.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-10-12 17:11:02.523 00:00:10.441 TCP 23.104.0.1:57210 -> 1.101.0.1:3000 15 1926 1 2025-10-12 17:11:09.892 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 12 10375 1 2025-10-12 17:11:36.050 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:11:36.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:12:03.005 00:00:10.371 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:12:10.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-10-12 17:08:41.284 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:08:41.286 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:13:03.435 00:00:10.368 TCP 23.104.0.1:43946 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:13:10.758 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-10-12 17:14:03.843 00:00:10.385 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:14:10.975 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38910 10 6452 1 2025-10-12 17:15:04.269 00:00:10.365 TCP 23.104.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:15:11.197 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-10-12 17:16:04.670 00:00:10.359 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:16:11.411 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-10-12 17:16:36.013 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:16:35.787 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:17:05.099 00:00:10.366 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:17:11.624 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-10-12 17:18:05.507 00:00:10.363 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:18:11.840 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-10-12 17:14:41.287 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:14:41.284 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:19:05.912 00:00:10.331 TCP 23.104.0.1:47020 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:19:12.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-10-12 17:20:06.276 00:00:10.375 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:20:12.241 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-10-12 17:21:06.689 00:00:10.330 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:21:12.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39432 10 6452 1 2025-10-12 17:21:36.235 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:21:36.106 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:22:07.062 00:00:10.423 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:22:12.658 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-10-12 17:23:07.528 00:00:10.318 TCP 23.104.0.1:58242 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:23:12.867 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-10-12 17:24:07.884 00:00:10.372 TCP 23.104.0.1:57836 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:24:13.091 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-10-12 17:20:41.289 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:20:41.286 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:25:08.294 00:00:10.362 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:25:13.262 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-10-12 17:26:08.697 00:00:10.370 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:26:13.475 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-10-12 17:26:36.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:26:36.477 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:27:09.114 00:00:10.324 TCP 23.104.0.1:45194 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:27:13.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-10-12 17:28:09.479 00:00:10.357 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:28:13.897 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-10-12 17:29:09.874 00:00:10.363 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:29:14.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46274 10 6452 1 2025-10-12 17:30:10.277 00:00:10.383 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:30:14.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-10-12 17:26:41.289 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:26:41.288 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:31:10.710 00:00:10.320 TCP 23.104.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:31:14.542 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37528 10 6452 1 2025-10-12 17:31:36.413 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:31:36.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:32:11.099 00:00:10.362 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:32:14.761 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56032 10 6452 1 2025-10-12 17:33:11.507 00:00:10.325 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:33:14.978 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 10 6452 1 2025-10-12 17:34:11.876 00:00:10.367 TCP 23.104.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:34:15.203 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-10-12 17:35:15.418 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47756 10 6452 1 2025-10-12 17:35:12.279 00:00:10.362 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:36:12.684 00:00:10.370 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:36:15.639 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40616 10 6452 1 2025-10-12 17:36:36.388 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:36:36.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:32:41.289 00:05:02.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:32:41.291 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:37:13.112 00:00:10.321 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:37:15.864 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-10-12 17:38:13.473 00:00:10.366 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:38:16.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-10-12 17:39:13.877 00:00:10.347 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:39:16.304 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 6452 1 2025-10-12 17:40:16.519 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35446 10 6452 1 2025-10-12 17:40:14.260 00:00:10.389 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:41:16.738 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-12 17:41:14.681 00:00:10.381 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:41:36.634 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:41:36.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:42:15.107 00:00:10.366 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:42:16.945 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-10-12 17:38:41.291 00:05:02.432 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:38:41.290 00:05:02.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:43:15.508 00:00:10.361 TCP 23.104.0.1:41560 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:43:17.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-10-12 17:44:15.909 00:00:10.373 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:44:17.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-10-12 17:45:16.317 00:00:10.370 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:45:17.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-10-12 17:46:16.720 00:00:10.376 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:46:17.815 00:00:10.778 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-10-12 17:46:36.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:46:36.561 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:47:17.129 00:00:10.330 TCP 23.104.0.1:44652 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:47:18.631 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-10-12 17:48:17.494 00:00:10.319 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:48:18.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37554 10 6452 1 2025-10-12 17:44:41.289 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:44:41.292 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:49:19.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-10-12 17:49:17.851 00:00:10.380 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:50:19.298 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-10-12 17:50:18.266 00:00:10.366 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:51:18.671 00:00:10.364 TCP 23.104.0.1:36264 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:51:19.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-10-12 17:51:36.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:51:36.923 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:52:19.692 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35426 10 6452 1 2025-10-12 17:52:19.099 00:00:10.373 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:53:19.864 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-10-12 17:53:19.510 00:00:11.034 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:54:20.578 00:00:10.368 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:54:20.501 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-10-12 17:50:41.293 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:50:41.290 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 17:55:20.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-10-12 17:55:20.983 00:00:10.369 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:56:20.883 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-10-12 17:56:36.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 17:56:21.391 00:00:10.360 TCP 23.104.0.1:50908 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:56:36.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 17:57:21.114 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-10-12 17:57:21.796 00:00:10.362 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:58:21.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-10-12 17:58:22.200 00:00:10.365 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-12 16:56:41 - 2025-10-12 17:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0012s Wall: 0.0024s flows/second: 69636.1 Runtime: 0.0024s