Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 04:59:25.148 00:00:10.363 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-10-14 04:59:41.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39878 10 6452 1 2025-10-14 05:00:25.556 00:00:10.361 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-10-14 04:56:41.983 00:05:02.469 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 04:56:41.986 00:05:02.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:00:41.903 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-10-14 05:01:25.955 00:00:10.370 TCP 23.104.0.1:52494 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:01:42.100 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45484 10 6452 1 2025-10-14 05:02:19.370 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:02:19.183 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:02:26.366 00:00:10.322 TCP 23.104.0.1:52576 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:02:42.272 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-10-14 05:03:26.730 00:00:10.369 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:03:42.485 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-10-14 05:04:27.138 00:00:10.362 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:04:42.698 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-10-14 05:05:27.540 00:00:10.365 TCP 23.104.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:05:42.914 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-10-14 05:06:27.949 00:00:10.367 TCP 23.104.0.1:40224 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:02:41.985 00:05:02.468 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:02:41.988 00:05:02.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:06:43.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-10-14 05:07:19.231 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:07:19.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:07:28.356 00:00:10.362 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:07:43.347 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-10-14 05:08:28.756 00:00:10.333 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:08:43.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-10-14 05:09:29.134 00:00:10.360 TCP 23.104.0.1:46974 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:09:43.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-10-14 05:10:29.535 00:00:10.319 TCP 23.104.0.1:48958 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:10:43.990 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-10-14 05:11:29.891 00:00:10.375 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:11:44.225 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-10-14 05:12:19.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:12:18.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:08:41.986 00:05:02.469 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:12:30.308 00:00:10.415 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:08:41.989 00:05:02.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:12:44.445 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53784 10 6452 1 2025-10-14 05:13:30.784 00:00:10.376 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:13:44.662 00:00:10.354 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-10-14 05:14:31.200 00:00:10.367 TCP 23.104.0.1:50946 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:14:45.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 10 6452 1 2025-10-14 05:15:31.602 00:00:10.368 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:15:45.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38640 10 6452 1 2025-10-14 05:16:32.016 00:00:10.375 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:16:45.503 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-10-14 05:17:19.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:17:19.381 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:17:32.431 00:00:10.532 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:17:45.675 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-10-14 05:18:33.007 00:00:10.359 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:14:41.990 00:05:02.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:14:41.989 00:05:02.467 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:18:45.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-10-14 05:19:33.407 00:00:10.367 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:19:46.111 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-10-14 05:20:33.811 00:00:10.361 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:20:46.341 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-10-14 05:21:34.210 00:00:10.403 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 15 1926 1 2025-10-14 05:21:46.551 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 12 10369 1 2025-10-14 05:22:19.293 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:22:19.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:22:34.659 00:00:10.366 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:22:46.789 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54036 10 6452 1 2025-10-14 05:23:35.091 00:00:10.358 TCP 23.104.0.1:45330 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:23:47.002 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-10-14 05:24:35.490 00:00:10.365 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:20:41.990 00:05:02.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:20:41.990 00:05:02.467 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:24:47.215 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 2025-10-14 05:25:35.902 00:00:10.368 TCP 23.104.0.1:44200 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:25:47.442 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-10-14 05:26:36.310 00:00:10.444 TCP 23.104.0.1:51584 -> 1.101.0.1:3000 15 1926 1 2025-10-14 05:26:47.670 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:45798 12 10369 1 2025-10-14 05:27:19.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:27:19.639 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:27:36.792 00:00:10.363 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:27:47.869 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-10-14 05:28:37.195 00:00:10.369 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:28:48.091 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43686 10 6452 1 2025-10-14 05:29:37.599 00:00:10.340 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:29:48.264 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6452 1 2025-10-14 05:26:41.992 00:05:02.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:26:41.989 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:30:37.976 00:00:10.370 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:30:48.478 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-10-14 05:31:38.378 00:00:10.330 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:31:49.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58182 10 6452 1 2025-10-14 05:32:19.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:32:19.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:32:38.749 00:00:10.361 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:32:49.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50242 10 6452 1 2025-10-14 05:33:39.151 00:00:10.366 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:33:49.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52064 10 6452 1 2025-10-14 05:34:39.557 00:00:10.369 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:34:49.736 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-10-14 05:35:39.964 00:00:10.369 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:35:49.960 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6452 1 2025-10-14 05:32:41.993 00:05:02.472 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:32:41.996 00:05:02.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:36:40.366 00:00:10.365 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:36:50.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-10-14 05:37:19.783 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:37:20.101 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:37:40.770 00:00:10.370 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:37:50.407 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-10-14 05:38:41.183 00:00:10.329 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:38:50.630 00:00:10.511 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-10-14 05:39:41.559 00:00:10.364 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:39:51.190 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-10-14 05:40:41.960 00:00:10.366 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:40:51.409 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6452 1 2025-10-14 05:41:42.367 00:00:10.361 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:41:51.697 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38848 10 6452 1 2025-10-14 05:42:19.828 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:42:19.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:38:41.993 00:05:02.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:38:41.995 00:05:02.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:42:42.765 00:00:10.372 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:42:51.919 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-10-14 05:43:43.178 00:00:10.322 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:43:52.102 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39138 10 6452 1 2025-10-14 05:44:43.535 00:00:10.325 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:44:52.318 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-10-14 05:45:43.904 00:00:10.328 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:45:52.493 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 12 10375 1 2025-10-14 05:46:44.273 00:00:10.435 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 15 1926 1 2025-10-14 05:46:52.742 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 10 6452 1 2025-10-14 05:47:19.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:47:19.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:47:44.748 00:00:10.367 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:47:52.962 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 12 6556 1 2025-10-14 05:44:41.996 00:05:02.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:44:41.998 00:05:02.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:48:45.155 00:00:10.363 TCP 23.104.0.1:43108 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:48:53.221 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-10-14 05:49:45.559 00:00:10.369 TCP 23.104.0.1:54506 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:49:53.940 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-10-14 05:50:45.962 00:00:10.367 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:50:54.186 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38058 10 6452 1 2025-10-14 05:51:46.367 00:00:10.363 TCP 23.104.0.1:49812 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:51:54.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42596 10 6452 1 2025-10-14 05:52:20.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:52:19.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:52:46.777 00:00:10.372 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:52:54.584 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6452 1 2025-10-14 05:53:47.189 00:00:10.323 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:53:54.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 12 6556 1 2025-10-14 05:50:41.997 00:05:02.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 05:50:42.000 00:05:02.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 05:54:47.552 00:00:10.362 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:54:55.043 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-10-14 05:55:47.958 00:00:10.370 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:55:55.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-10-14 05:56:48.363 00:00:10.361 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:56:55.474 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-10-14 05:57:20.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 05:57:20.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 05:57:48.767 00:00:10.377 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-10-14 05:57:55.686 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 Summary: total flows: 162, total bytes: 503611, total packets: 1573, avg bps: 1093, avg pps: 0, avg bpp: 320 Time window: 2025-10-14 04:56:41 - 2025-10-14 05:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0017s Wall: 0.0029s flows/second: 56346.1 Runtime: 0.0029s