Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 18:58:47.183 00:00:10.368 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:59:36.908 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-10-12 18:59:47.590 00:00:10.368 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:56:41.322 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:56:41.324 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:00:37.093 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-10-12 19:00:47.996 00:00:10.397 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:01:38.258 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:01:38.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:01:37.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6452 1 2025-10-12 19:01:48.431 00:00:10.369 TCP 23.104.0.1:49052 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:02:37.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-10-12 19:02:48.844 00:00:10.346 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:03:37.730 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48854 10 6452 1 2025-10-12 19:03:49.223 00:00:10.367 TCP 23.104.0.1:60910 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:04:37.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-10-12 19:04:49.625 00:00:11.035 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:05:38.144 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-10-12 19:05:50.700 00:00:10.363 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:06:38.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:06:38.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:02:41.326 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:02:41.323 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:06:38.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-10-12 19:06:51.112 00:00:10.364 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:07:38.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-10-12 19:07:51.512 00:00:10.372 TCP 23.104.0.1:60092 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:08:38.784 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-10-12 19:08:51.919 00:00:10.382 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:09:39.000 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-10-12 19:09:52.341 00:00:10.370 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:10:39.211 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36968 10 6452 1 2025-10-12 19:10:52.746 00:00:10.391 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:11:38.469 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:11:38.140 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:11:39.390 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33130 10 6452 1 2025-10-12 19:11:53.176 00:00:10.365 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:08:41.333 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:08:41.331 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:12:39.606 00:00:10.631 TCP 1.101.0.1:3000 -> 22.102.0.1:34300 10 6452 1 2025-10-12 19:12:53.572 00:00:10.365 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:13:40.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-10-12 19:13:53.976 00:00:10.329 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:14:40.506 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:42176 10 6452 1 2025-10-12 19:14:54.339 00:00:10.327 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:15:40.712 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-10-12 19:15:54.702 00:00:10.367 TCP 23.104.0.1:46410 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:16:38.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:16:38.415 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:16:40.933 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 2025-10-12 19:16:55.111 00:00:10.361 TCP 23.104.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:17:41.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-10-12 19:17:55.511 00:00:19.032 TCP 23.104.0.1:45670 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:14:41.334 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:14:41.333 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:18:41.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-10-12 19:19:04.583 00:00:10.363 TCP 23.104.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:19:41.550 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52826 10 6452 1 2025-10-12 19:20:04.985 00:00:10.365 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:20:41.722 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-10-12 19:21:05.395 00:00:10.437 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 15 1926 1 2025-10-12 19:21:38.283 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:21:38.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:21:41.933 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 12 10369 1 2025-10-12 19:22:05.874 00:00:10.364 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:22:42.153 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-10-12 19:23:06.277 00:00:10.366 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:23:42.369 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43800 10 6452 1 2025-10-12 19:24:06.683 00:00:10.326 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:20:41.335 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:20:41.336 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:24:42.580 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-10-12 19:25:07.047 00:00:10.362 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:25:42.795 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-10-12 19:26:07.455 00:00:10.364 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:26:38.507 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:26:38.477 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:26:42.965 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 12 6556 1 2025-10-12 19:27:07.859 00:00:10.375 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:27:43.198 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45698 10 6452 1 2025-10-12 19:28:08.270 00:00:10.363 TCP 23.104.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:28:43.409 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-10-12 19:29:08.672 00:00:10.363 TCP 23.104.0.1:60136 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:29:43.580 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 11 6504 1 2025-10-12 19:30:09.103 00:00:10.364 TCP 23.104.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:26:41.339 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:26:41.337 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:30:43.810 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 12 10375 1 2025-10-12 19:31:09.511 00:00:10.441 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 15 1926 1 2025-10-12 19:31:38.810 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:31:38.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:31:44.077 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-10-12 19:32:09.990 00:00:10.370 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:32:44.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-10-12 19:33:10.395 00:00:10.363 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:33:44.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57734 10 6452 1 2025-10-12 19:34:10.856 00:00:10.335 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:34:44.732 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60254 10 6452 1 2025-10-12 19:35:11.229 00:00:10.321 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:35:44.945 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-10-12 19:36:11.583 00:00:10.366 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:36:38.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:32:41.338 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:36:38.682 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:32:41.336 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:36:45.169 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-10-12 19:37:11.988 00:00:10.372 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:37:45.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 2025-10-12 19:38:12.401 00:00:10.365 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:38:45.603 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-10-12 19:39:12.807 00:00:10.367 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:39:45.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 10 6452 1 2025-10-12 19:40:13.217 00:00:10.369 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:40:46.040 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-10-12 19:41:13.626 00:00:10.362 TCP 23.104.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:41:38.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:41:38.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:41:46.388 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-10-12 19:42:14.025 00:00:10.363 TCP 23.104.0.1:60506 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:38:41.341 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:38:41.339 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:42:46.560 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-10-12 19:43:14.429 00:00:10.366 TCP 23.104.0.1:44074 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:43:46.737 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-10-12 19:44:14.833 00:00:10.383 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:44:46.953 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45574 10 6452 1 2025-10-12 19:45:15.255 00:00:10.364 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:45:47.186 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-10-12 19:46:15.664 00:00:10.426 TCP 23.104.0.1:34754 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:46:39.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:46:39.116 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:46:47.402 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-10-12 19:47:16.125 00:00:10.361 TCP 23.104.0.1:60412 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:47:47.572 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-12 19:48:16.527 00:00:10.324 TCP 23.104.0.1:49398 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:44:41.343 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:44:41.341 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:48:47.742 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-10-12 19:49:16.894 00:00:10.376 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:49:47.955 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-10-12 19:50:17.309 00:00:10.324 TCP 23.104.0.1:58112 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:50:48.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-10-12 19:51:17.669 00:00:10.365 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:51:39.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:51:39.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:51:48.405 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-10-12 19:52:18.100 00:00:10.371 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:52:48.576 00:00:10.820 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-10-12 19:53:18.498 00:00:10.369 TCP 23.104.0.1:34716 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:53:49.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50100 10 6452 1 2025-10-12 19:54:18.906 00:00:10.370 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:50:41.342 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:50:41.345 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 19:54:49.642 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-10-12 19:55:19.315 00:00:10.365 TCP 23.104.0.1:47030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:55:49.860 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43548 10 6452 1 2025-10-12 19:56:19.720 00:00:10.376 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:56:39.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 19:56:39.238 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 19:56:50.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-10-12 19:57:20.131 00:00:10.364 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:57:50.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43192 10 6452 1 2025-10-12 19:58:20.535 00:00:10.371 TCP 23.104.0.1:59752 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500730, total packets: 1577, avg bps: 1079, avg pps: 0, avg bpp: 317 Time window: 2025-10-12 18:56:41 - 2025-10-12 19:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0020s Wall: 0.0029s flows/second: 55556.0 Runtime: 0.0030s