Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 00:58:57.464 00:00:10.362 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:59:23.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 2025-10-15 00:59:57.864 00:00:10.547 TCP 23.104.0.1:35656 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:00:23.566 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-10-15 00:56:42.416 00:05:02.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:56:42.420 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:00:58.449 00:00:10.779 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:01:23.776 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-10-15 01:01:59.266 00:00:10.368 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:02:23.986 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52740 10 6452 1 2025-10-15 01:02:43.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:02:43.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:02:59.667 00:00:10.370 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:03:24.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-10-15 01:04:00.106 00:00:10.364 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:04:24.419 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-10-15 01:05:00.513 00:00:10.373 TCP 23.104.0.1:43362 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:05:24.633 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57624 10 6452 1 2025-10-15 01:06:00.932 00:00:10.457 TCP 23.104.0.1:46298 -> 1.101.0.1:3000 15 1926 1 2025-10-15 01:06:24.849 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:59240 12 10369 1 2025-10-15 01:02:42.420 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:02:42.416 00:05:02.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:07:01.428 00:00:10.326 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:07:25.101 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-10-15 01:07:43.273 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:07:43.575 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:08:01.796 00:00:10.372 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:08:25.275 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58050 10 6452 1 2025-10-15 01:09:02.207 00:00:10.369 TCP 23.104.0.1:36340 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:09:25.453 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-10-15 01:10:02.614 00:00:10.363 TCP 23.104.0.1:56692 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:10:25.653 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 10 6452 1 2025-10-15 01:11:03.016 00:00:10.321 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:11:25.870 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-10-15 01:12:03.379 00:00:10.367 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:12:26.096 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41538 10 6452 1 2025-10-15 01:12:43.139 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:08:42.419 00:05:02.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:12:43.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:08:42.420 00:05:02.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:13:03.787 00:00:10.372 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:13:26.313 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-10-15 01:14:04.198 00:00:10.392 TCP 23.104.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:14:26.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-10-15 01:15:04.628 00:00:10.322 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:15:26.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-10-15 01:16:04.989 00:00:10.379 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:16:26.943 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:40548 10 6452 1 2025-10-15 01:17:05.405 00:00:10.693 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:17:43.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:17:27.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-10-15 01:17:43.521 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:18:06.138 00:00:10.368 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:18:27.343 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-10-15 01:14:42.421 00:05:02.455 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:14:42.420 00:05:02.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:19:06.541 00:00:10.368 TCP 23.104.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:19:27.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6452 1 2025-10-15 01:20:06.948 00:00:10.368 TCP 23.104.0.1:49730 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:20:27.726 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6452 1 2025-10-15 01:21:07.354 00:00:10.362 TCP 23.104.0.1:37716 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:21:27.936 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 10 6452 1 2025-10-15 01:22:07.757 00:00:10.385 TCP 23.104.0.1:44490 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:22:28.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-10-15 01:22:43.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:22:43.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:23:08.179 00:00:10.377 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:23:28.339 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-10-15 01:24:08.593 00:00:10.370 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:24:28.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6452 1 2025-10-15 01:20:42.420 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:20:42.423 00:05:02.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:25:08.995 00:00:10.366 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:25:28.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-10-15 01:26:09.404 00:00:10.368 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:26:28.979 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45182 10 6452 1 2025-10-15 01:27:09.810 00:00:10.366 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:27:29.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45650 10 6452 1 2025-10-15 01:27:43.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:27:43.709 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:28:10.215 00:00:10.369 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:28:29.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-10-15 01:29:10.626 00:00:10.327 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:29:29.641 00:00:10.925 TCP 1.101.0.1:3000 -> 22.102.0.1:56148 10 6452 1 2025-10-15 01:30:10.995 00:00:10.364 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:30:30.602 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-10-15 01:26:42.420 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:26:42.423 00:05:02.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:31:11.399 00:00:11.027 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:31:30.814 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-10-15 01:32:12.451 00:00:10.360 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:32:31.039 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-10-15 01:32:43.732 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:32:43.876 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:33:12.855 00:00:10.379 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:33:31.249 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-10-15 01:34:13.272 00:00:10.364 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:34:31.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-10-15 01:35:13.673 00:00:10.365 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:35:31.639 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57272 10 6452 1 2025-10-15 01:36:14.099 00:00:10.443 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 15 1926 1 2025-10-15 01:36:31.850 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 12 10375 1 2025-10-15 01:32:42.421 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:32:42.423 00:05:02.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:37:14.574 00:00:10.362 TCP 23.104.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:37:43.698 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:37:32.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-10-15 01:37:43.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:38:14.982 00:00:10.363 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:38:32.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-10-15 01:39:15.390 00:00:10.328 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:39:32.506 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-10-15 01:40:15.751 00:00:10.395 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:40:32.719 00:00:10.726 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-10-15 01:41:16.175 00:00:10.369 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:41:33.486 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42922 10 6452 1 2025-10-15 01:42:16.578 00:00:10.370 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:42:44.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:38:42.424 00:05:02.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:42:43.905 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:42:33.692 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-10-15 01:38:42.422 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:43:16.983 00:00:10.365 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:43:33.915 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51046 10 6452 1 2025-10-15 01:44:17.384 00:00:10.366 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:44:34.096 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 2025-10-15 01:45:17.787 00:00:10.585 TCP 23.104.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:45:34.313 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6452 1 2025-10-15 01:46:18.409 00:00:10.440 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 15 1926 1 2025-10-15 01:46:34.527 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 12 10375 1 2025-10-15 01:47:18.887 00:00:10.381 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:47:44.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:47:34.778 00:00:12.118 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-10-15 01:47:43.842 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:48:19.306 00:00:10.374 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:44:42.426 00:05:02.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:44:42.424 00:05:02.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:48:36.944 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-10-15 01:49:19.719 00:00:10.373 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:49:37.172 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40688 10 6452 1 2025-10-15 01:50:20.130 00:00:10.373 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:50:37.382 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-10-15 01:51:20.536 00:00:10.365 TCP 23.104.0.1:49978 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:51:37.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43356 10 6452 1 2025-10-15 01:52:20.936 00:00:10.341 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:52:44.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:52:44.042 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:52:37.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-10-15 01:53:21.314 00:00:10.362 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:53:38.030 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42696 10 6452 1 2025-10-15 01:54:21.715 00:00:10.373 TCP 23.104.0.1:59918 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:50:42.429 00:05:02.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:50:42.427 00:05:02.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 01:54:38.239 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-10-15 01:55:22.130 00:00:11.080 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:55:38.461 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-10-15 01:56:23.254 00:00:10.365 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:56:38.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42702 10 6452 1 2025-10-15 01:57:23.651 00:00:10.366 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:57:44.072 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 01:57:44.180 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 01:57:38.895 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6452 1 2025-10-15 01:58:24.063 00:00:10.361 TCP 23.104.0.1:59452 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:58:39.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 Summary: total flows: 164, total bytes: 511368, total packets: 1590, avg bps: 1097, avg pps: 0, avg bpp: 321 Time window: 2025-10-15 00:56:42 - 2025-10-15 01:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 76994.2 Runtime: 0.0021s