Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 14:59:30.717 00:00:10.389 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:59:27.448 00:00:10.364 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-10-13 15:00:27.856 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-10-13 15:00:31.139 00:00:10.375 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:56:41.735 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:56:41.733 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:01:28.098 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 12 10369 1 2025-10-13 15:01:31.548 00:00:10.444 TCP 23.104.0.1:57182 -> 1.101.0.1:3000 15 1926 1 2025-10-13 15:02:02.302 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:02:02.353 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:02:28.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-10-13 15:02:32.031 00:00:10.338 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:03:28.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 10 6452 1 2025-10-13 15:03:32.415 00:00:10.365 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:04:28.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-10-13 15:04:32.820 00:00:10.327 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:05:28.933 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6452 1 2025-10-13 15:05:33.185 00:00:10.364 TCP 23.104.0.1:50706 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:06:29.147 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-10-13 15:06:33.584 00:00:10.374 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:02:41.737 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:02:41.735 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:07:02.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:07:02.175 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:07:29.358 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-10-13 15:07:34.001 00:00:10.323 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:08:29.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-10-13 15:08:34.358 00:00:10.364 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:09:29.742 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:33570 10 6452 1 2025-10-13 15:09:34.765 00:00:10.364 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:10:30.064 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6452 1 2025-10-13 15:10:35.168 00:00:10.371 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:11:30.272 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-10-13 15:11:35.582 00:00:10.330 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:12:02.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:12:02.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:12:30.483 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60602 10 6452 1 2025-10-13 15:08:41.736 00:05:02.447 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:08:41.739 00:05:02.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:12:35.948 00:00:10.373 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:13:30.702 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-10-13 15:13:36.355 00:00:10.368 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:14:30.930 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-10-13 15:14:36.765 00:00:10.379 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:15:31.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-10-13 15:15:37.195 00:00:10.367 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:16:31.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-10-13 15:16:37.596 00:00:10.364 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:17:02.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:17:02.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:17:31.611 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33922 10 6452 1 2025-10-13 15:17:37.999 00:00:10.364 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:18:31.832 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6452 1 2025-10-13 15:14:41.738 00:05:02.447 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:14:41.741 00:05:02.442 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:18:38.397 00:00:10.367 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:19:32.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-10-13 15:19:38.801 00:00:10.365 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:20:32.291 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46152 10 6452 1 2025-10-13 15:20:39.203 00:00:10.371 TCP 23.104.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:21:32.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-10-13 15:21:39.611 00:00:10.322 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:22:02.561 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:22:02.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:22:32.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-10-13 15:22:39.972 00:00:10.364 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:23:32.948 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-10-13 15:23:40.375 00:00:10.370 TCP 23.104.0.1:38286 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:20:41.743 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:24:33.192 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-10-13 15:20:41.741 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:24:40.781 00:00:10.370 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:25:33.373 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-10-13 15:25:41.190 00:00:10.361 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:26:33.582 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-10-13 15:26:41.593 00:00:10.366 TCP 23.104.0.1:54452 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:27:02.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:27:02.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:27:33.793 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-10-13 15:27:41.994 00:00:10.320 TCP 23.104.0.1:38780 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:28:34.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-13 15:28:42.353 00:00:10.365 TCP 23.104.0.1:42078 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:29:34.240 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-10-13 15:29:42.757 00:00:10.718 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:26:41.742 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:30:34.448 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-10-13 15:26:41.745 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:30:43.519 00:00:10.366 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:31:34.621 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57716 12 10375 1 2025-10-13 15:31:43.921 00:00:10.450 TCP 23.104.0.1:44632 -> 1.101.0.1:3000 15 1926 1 2025-10-13 15:32:02.996 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:32:02.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:32:34.859 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-10-13 15:32:44.411 00:00:10.370 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:33:35.086 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50770 10 6452 1 2025-10-13 15:33:44.819 00:00:10.334 TCP 23.104.0.1:57672 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:34:35.264 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-10-13 15:34:45.192 00:00:10.368 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:35:35.444 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-10-13 15:35:45.594 00:00:10.368 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:32:41.744 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:36:35.623 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58692 10 6452 1 2025-10-13 15:32:41.746 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:36:46.001 00:00:10.325 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:37:02.793 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:37:02.889 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:37:35.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-10-13 15:37:46.366 00:00:10.360 TCP 23.104.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:38:36.086 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-10-13 15:38:46.764 00:00:10.336 TCP 23.104.0.1:34030 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:39:36.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-10-13 15:39:47.142 00:00:10.371 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:40:36.471 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36626 10 6452 1 2025-10-13 15:40:47.547 00:00:10.364 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:41:36.692 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-10-13 15:41:47.945 00:00:10.375 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:42:03.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:42:03.251 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:38:41.747 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:38:41.746 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:42:36.914 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-10-13 15:42:48.354 00:00:10.364 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:43:37.105 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56110 10 6452 1 2025-10-13 15:43:48.759 00:00:10.332 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:44:37.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-10-13 15:44:49.129 00:00:10.374 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:45:37.530 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33320 10 6452 1 2025-10-13 15:45:49.547 00:00:10.365 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:46:37.751 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-10-13 15:46:49.957 00:00:10.368 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:47:03.036 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:47:02.848 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:47:37.934 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-10-13 15:47:50.363 00:00:10.363 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:44:41.750 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:44:41.745 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:48:38.125 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-10-13 15:48:50.763 00:00:10.369 TCP 23.104.0.1:58008 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:49:38.349 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-10-13 15:49:51.176 00:00:10.359 TCP 23.104.0.1:34480 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:50:38.563 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-10-13 15:50:51.569 00:00:10.326 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:51:38.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43746 10 6452 1 2025-10-13 15:52:03.345 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:51:51.934 00:00:10.373 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:52:03.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:52:39.011 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-10-13 15:52:52.348 00:00:10.360 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:53:39.230 00:00:10.354 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-10-13 15:53:52.745 00:00:10.377 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:50:41.749 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 15:50:41.748 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 15:54:39.633 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-10-13 15:54:53.159 00:00:10.366 TCP 23.104.0.1:57914 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:55:39.854 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-10-13 15:55:53.564 00:00:10.372 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:56:40.087 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-10-13 15:56:53.972 00:00:10.374 TCP 23.104.0.1:51394 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:57:03.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 15:57:03.036 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 15:57:40.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-10-13 15:57:54.386 00:00:10.321 TCP 23.104.0.1:33806 -> 1.101.0.1:3000 11 1507 1 2025-10-13 15:58:40.529 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1084, avg pps: 0, avg bpp: 321 Time window: 2025-10-13 14:56:41 - 2025-10-13 15:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0010s Wall: 0.0032s flows/second: 51338.3 Runtime: 0.0032s