Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 01:59:24.466 00:00:10.365 TCP 23.104.0.1:51518 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:59:39.325 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47670 10 6452 1 2025-10-15 02:00:24.870 00:00:10.364 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-10-15 01:56:42.430 00:05:02.470 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 01:56:42.427 00:05:02.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:00:39.541 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-10-15 02:01:25.271 00:00:10.320 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:01:39.760 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-10-15 02:02:25.629 00:00:10.361 TCP 23.104.0.1:38800 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:02:44.264 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:02:44.457 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:02:39.973 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-10-15 02:03:26.031 00:00:10.361 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:03:40.200 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-10-15 02:04:26.429 00:00:10.364 TCP 23.104.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:04:40.409 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 6452 1 2025-10-15 02:05:26.838 00:00:10.392 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:05:40.620 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35704 10 6452 1 2025-10-15 02:06:27.284 00:00:10.366 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:02:42.430 00:05:02.469 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:02:42.428 00:05:02.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:06:40.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44754 10 6452 1 2025-10-15 02:07:27.688 00:00:10.368 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:07:44.547 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:07:44.566 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:07:41.080 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-10-15 02:08:28.120 00:00:10.362 TCP 23.104.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:08:41.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-10-15 02:09:28.518 00:00:10.329 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:09:41.469 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:39602 10 6452 1 2025-10-15 02:10:28.885 00:00:10.378 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:10:41.770 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-10-15 02:11:29.301 00:00:10.409 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 15 1926 1 2025-10-15 02:11:41.982 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 12 10375 1 2025-10-15 02:12:29.765 00:00:10.751 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:12:44.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:08:42.431 00:05:02.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:12:44.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:08:42.428 00:05:02.476 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:12:42.242 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-10-15 02:13:30.560 00:00:10.376 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:13:42.417 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-10-15 02:14:30.974 00:00:10.404 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:14:42.627 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34662 10 6452 1 2025-10-15 02:15:31.400 00:00:10.326 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:15:42.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-10-15 02:16:31.769 00:00:10.373 TCP 23.104.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:16:43.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-10-15 02:17:44.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:17:44.584 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:17:32.183 00:00:10.372 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:17:43.289 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-10-15 02:14:42.435 00:05:02.469 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:18:32.600 00:00:10.367 TCP 23.104.0.1:44172 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:14:42.434 00:05:02.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:18:43.462 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-10-15 02:19:33.004 00:00:10.322 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:19:43.631 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-10-15 02:20:33.365 00:00:10.371 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:20:43.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-10-15 02:21:33.773 00:00:10.370 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:21:44.031 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41220 10 6452 1 2025-10-15 02:22:44.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:22:34.181 00:00:10.321 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:22:44.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:22:44.238 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40124 10 6452 1 2025-10-15 02:23:34.542 00:00:10.365 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:23:44.450 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-10-15 02:20:42.435 00:05:02.469 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:24:34.950 00:00:10.331 TCP 23.104.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:20:42.432 00:05:02.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:24:44.659 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-10-15 02:25:35.323 00:00:10.327 TCP 23.104.0.1:51214 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:25:44.878 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60630 10 6452 1 2025-10-15 02:26:35.683 00:00:10.367 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:26:45.102 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58086 10 6452 1 2025-10-15 02:27:45.844 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:27:36.111 00:00:10.368 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:27:45.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:27:45.316 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2025-10-15 02:28:36.518 00:00:10.366 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:28:45.534 00:00:10.423 TCP 1.101.0.1:3000 -> 22.102.0.1:36822 10 6452 1 2025-10-15 02:29:36.926 00:00:10.382 TCP 23.104.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:29:45.996 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 10 6452 1 2025-10-15 02:26:42.433 00:05:02.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:26:42.436 00:05:02.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:30:37.345 00:00:10.362 TCP 23.104.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:30:46.214 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-10-15 02:31:37.747 00:00:10.392 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:31:46.446 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6452 1 2025-10-15 02:32:44.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:32:44.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:32:38.177 00:00:10.362 TCP 23.104.0.1:57962 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:32:46.624 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-10-15 02:33:38.585 00:00:10.369 TCP 23.104.0.1:41946 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:33:46.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6452 1 2025-10-15 02:34:38.988 00:00:10.370 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:34:47.026 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35068 10 6452 1 2025-10-15 02:35:39.393 00:00:10.371 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:35:47.243 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-10-15 02:32:42.434 00:05:02.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:32:42.440 00:05:02.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:36:39.801 00:00:10.369 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:36:47.449 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-10-15 02:37:44.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:37:44.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:37:40.208 00:00:10.326 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:37:47.662 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39110 10 6452 1 2025-10-15 02:38:40.570 00:00:10.365 TCP 23.104.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:38:47.878 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-10-15 02:39:40.975 00:00:10.326 TCP 23.104.0.1:44708 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:39:48.100 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-10-15 02:40:41.339 00:00:10.368 TCP 23.104.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:40:48.284 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-10-15 02:41:41.741 00:00:10.324 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:41:48.502 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-10-15 02:42:45.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:38:42.437 00:05:02.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:42:45.224 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:38:42.440 00:05:02.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:42:42.118 00:00:10.366 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:42:48.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-10-15 02:43:42.527 00:00:10.371 TCP 23.104.0.1:57158 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:43:48.919 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-10-15 02:44:42.930 00:00:10.343 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:44:49.106 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 2025-10-15 02:45:43.310 00:00:10.377 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:45:49.276 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6452 1 2025-10-15 02:46:43.726 00:00:10.370 TCP 23.104.0.1:56608 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:46:49.446 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-10-15 02:47:45.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:47:45.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:47:44.134 00:00:10.361 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:47:49.670 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:53744 10 6452 1 2025-10-15 02:44:42.440 00:05:02.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:44:42.437 00:05:02.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:48:44.534 00:00:10.364 TCP 23.104.0.1:59452 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:48:49.937 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 10 6452 1 2025-10-15 02:49:44.943 00:00:10.327 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:49:50.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-10-15 02:50:45.308 00:00:10.369 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:50:50.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-10-15 02:51:45.716 00:00:10.367 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:51:50.560 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-10-15 02:52:45.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:52:45.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:52:46.121 00:00:10.371 TCP 23.104.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:52:50.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-10-15 02:53:46.543 00:00:10.365 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:53:50.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 10 6452 1 2025-10-15 02:50:42.445 00:05:02.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:50:42.443 00:05:02.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 02:54:46.946 00:00:10.374 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:54:51.177 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54242 10 6452 1 2025-10-15 02:55:47.363 00:00:10.320 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:55:51.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-10-15 02:56:47.724 00:00:10.373 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:56:51.565 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:58780 10 6452 1 2025-10-15 02:57:45.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 02:57:45.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 02:57:48.133 00:00:10.369 TCP 23.104.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:57:52.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33282 10 6452 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1075, avg pps: 0, avg bpp: 317 Time window: 2025-10-15 01:56:42 - 2025-10-15 02:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0017s Wall: 0.0027s flows/second: 59535.4 Runtime: 0.0027s