Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 11:59:25.771 00:00:10.383 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:59:26.242 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 10 6452 1 2025-10-14 12:00:26.192 00:00:10.367 TCP 23.104.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:00:26.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-10-14 11:56:42.183 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:56:42.179 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:01:26.667 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-10-14 12:01:26.596 00:00:10.357 TCP 23.104.0.1:47410 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:02:27.595 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:02:27.511 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:02:26.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-10-14 12:02:26.991 00:00:10.364 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:03:27.395 00:00:10.367 TCP 23.104.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:03:27.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38166 10 6452 1 2025-10-14 12:04:27.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33430 10 6452 1 2025-10-14 12:04:27.802 00:00:10.367 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:05:27.510 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:48030 10 6452 1 2025-10-14 12:05:28.207 00:00:10.365 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:06:27.970 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 12 10375 1 2025-10-14 12:02:42.182 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:06:28.611 00:00:10.445 TCP 23.104.0.1:42800 -> 1.101.0.1:3000 15 1926 1 2025-10-14 12:02:42.185 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:07:27.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:07:27.445 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:07:28.232 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48602 10 6452 1 2025-10-14 12:07:29.119 00:00:10.360 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:08:29.516 00:00:10.364 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:08:28.445 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35592 10 6452 1 2025-10-14 12:09:28.662 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-10-14 12:09:29.920 00:00:10.380 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:10:28.839 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-10-14 12:10:30.340 00:00:10.325 TCP 23.104.0.1:33822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:11:30.703 00:00:10.363 TCP 23.104.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:11:29.021 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-10-14 12:12:27.722 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:12:27.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:12:29.249 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-10-14 12:08:42.183 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:12:31.110 00:00:10.364 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:08:42.187 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:13:29.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6452 1 2025-10-14 12:13:31.512 00:00:10.374 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:14:29.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-10-14 12:14:31.926 00:00:10.392 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:15:29.901 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-10-14 12:15:32.357 00:00:10.367 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:16:30.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-10-14 12:16:32.765 00:00:10.380 TCP 23.104.0.1:56738 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:17:27.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:17:28.177 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:17:30.296 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-10-14 12:17:33.189 00:00:10.369 TCP 23.104.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:18:30.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-10-14 12:18:33.590 00:00:10.366 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:14:42.190 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:14:42.188 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:19:30.756 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-10-14 12:19:33.991 00:00:10.325 TCP 23.104.0.1:33280 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:20:30.968 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48276 10 6452 1 2025-10-14 12:20:34.360 00:00:10.370 TCP 23.104.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:21:31.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 10 6452 1 2025-10-14 12:21:34.776 00:00:10.371 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:22:27.783 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:22:27.951 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:22:31.426 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6452 1 2025-10-14 12:22:35.181 00:00:10.364 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:23:31.638 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6452 1 2025-10-14 12:23:35.585 00:00:10.379 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:24:31.852 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-10-14 12:20:42.190 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:24:36.007 00:00:10.366 TCP 23.104.0.1:55338 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:20:42.193 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:25:36.408 00:00:10.371 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:25:32.078 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-10-14 12:26:32.245 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 12 10369 1 2025-10-14 12:26:36.815 00:00:10.406 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 15 1926 1 2025-10-14 12:27:28.201 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:27:28.053 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:27:32.484 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-10-14 12:27:37.268 00:00:10.413 TCP 23.104.0.1:43548 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:28:32.697 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-10-14 12:28:37.724 00:00:10.673 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:29:33.366 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38798 10 6452 1 2025-10-14 12:29:38.451 00:00:10.367 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:26:42.190 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:30:33.581 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-10-14 12:26:42.193 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:30:38.857 00:00:10.368 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:31:33.796 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-10-14 12:31:39.265 00:00:10.365 TCP 23.104.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:32:28.188 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:32:27.985 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:32:34.010 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-10-14 12:32:39.674 00:00:10.378 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:33:34.205 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48742 10 6452 1 2025-10-14 12:33:40.098 00:00:10.374 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:34:34.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-10-14 12:34:40.505 00:00:10.368 TCP 23.104.0.1:41010 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:35:34.622 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38064 10 6452 1 2025-10-14 12:35:40.907 00:00:10.324 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:32:42.196 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:36:34.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47308 10 6452 1 2025-10-14 12:32:42.193 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:36:41.272 00:00:10.321 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:37:28.150 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:37:27.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:37:35.000 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-10-14 12:37:41.633 00:00:10.364 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:38:35.228 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-10-14 12:38:42.036 00:00:10.322 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:39:35.450 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-10-14 12:39:42.399 00:00:10.367 TCP 23.104.0.1:48278 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:40:35.675 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-10-14 12:40:42.808 00:00:10.358 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:41:35.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-10-14 12:41:43.210 00:00:10.360 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:42:28.261 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:42:28.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:38:42.197 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:38:42.194 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:42:36.116 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38416 10 6452 1 2025-10-14 12:42:43.612 00:00:10.331 TCP 23.104.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:43:36.332 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56810 10 6452 1 2025-10-14 12:43:43.982 00:00:10.368 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:44:36.512 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60938 10 6452 1 2025-10-14 12:44:44.380 00:00:10.367 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:45:36.736 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-10-14 12:45:44.783 00:00:10.368 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:46:36.974 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-10-14 12:46:45.191 00:00:10.369 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:47:28.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:47:28.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:47:37.172 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-10-14 12:47:45.594 00:00:10.367 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:44:42.198 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:44:42.196 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:48:37.385 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35524 10 6452 1 2025-10-14 12:48:45.996 00:00:10.363 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:49:37.595 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-10-14 12:49:46.393 00:00:10.319 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:50:37.801 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-10-14 12:50:46.755 00:00:10.361 TCP 23.104.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:51:37.985 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 10 6452 1 2025-10-14 12:51:47.147 00:00:10.368 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:52:28.404 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:52:28.566 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:52:38.219 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42134 10 6452 1 2025-10-14 12:52:47.557 00:00:10.363 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:53:38.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-10-14 12:53:47.960 00:00:10.375 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:50:42.199 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 12:50:42.197 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:54:38.645 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33330 10 6452 1 2025-10-14 12:54:48.374 00:00:10.364 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:55:38.851 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-10-14 12:55:48.775 00:00:10.595 TCP 23.104.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:56:39.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37302 10 6452 1 2025-10-14 12:56:49.407 00:00:10.325 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:57:28.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 12:57:28.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 12:57:39.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-10-14 12:57:49.773 00:00:10.372 TCP 23.104.0.1:48716 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:58:39.501 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1084, avg pps: 0, avg bpp: 321 Time window: 2025-10-14 11:56:42 - 2025-10-14 12:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0019s Wall: 0.0021s flows/second: 76739.4 Runtime: 0.0021s