Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 07:58:55.198 00:00:10.655 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:58:57.315 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 10 6452 1 2025-10-15 07:59:55.890 00:00:10.344 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:59:57.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59638 10 6452 1 2025-10-15 07:56:42.529 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:56:42.528 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:00:56.298 00:00:10.325 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:00:57.804 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-10-15 08:01:56.660 00:00:10.367 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:01:57.997 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57448 10 6452 1 2025-10-15 08:02:51.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:02:51.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:02:57.078 00:00:10.329 TCP 23.104.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:02:58.227 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56804 10 6452 1 2025-10-15 08:03:57.441 00:00:10.363 TCP 23.104.0.1:58584 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:03:58.447 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55270 10 6452 1 2025-10-15 08:04:57.840 00:00:10.398 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:04:58.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35826 10 6452 1 2025-10-15 08:05:58.279 00:00:10.370 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:05:58.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-10-15 08:02:42.530 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:02:42.529 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:06:58.690 00:00:10.364 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:06:59.107 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-10-15 08:07:51.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:07:51.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:07:59.107 00:00:10.370 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:07:59.320 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-10-15 08:08:59.532 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-10-15 08:08:59.516 00:00:10.359 TCP 23.104.0.1:43738 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:09:59.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54194 10 6452 1 2025-10-15 08:09:59.915 00:00:10.362 TCP 23.104.0.1:54684 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:10:59.954 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39492 10 6452 1 2025-10-15 08:11:00.318 00:00:10.321 TCP 23.104.0.1:53530 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:12:00.676 00:00:10.320 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:12:00.186 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45062 10 6452 1 2025-10-15 08:08:42.528 00:05:02.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:08:42.531 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:12:51.808 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:12:51.814 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:13:01.033 00:00:10.372 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:13:00.358 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-10-15 08:14:01.443 00:00:10.378 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:14:00.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-10-15 08:15:00.748 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36560 10 6452 1 2025-10-15 08:15:01.864 00:00:10.493 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:16:00.960 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 12 6556 1 2025-10-15 08:16:02.391 00:00:10.320 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:17:01.186 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51574 10 6452 1 2025-10-15 08:17:02.751 00:00:10.326 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:17:51.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:17:51.860 00:00:00.053 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:18:01.395 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-10-15 08:18:03.115 00:00:10.367 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:14:42.533 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:14:42.531 00:05:02.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:19:01.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6452 1 2025-10-15 08:19:03.520 00:00:10.366 TCP 23.104.0.1:51650 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:20:01.823 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59588 10 6452 1 2025-10-15 08:20:03.928 00:00:10.370 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:21:02.038 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43038 10 6452 1 2025-10-15 08:21:04.337 00:00:10.323 TCP 23.104.0.1:58518 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:22:04.700 00:00:10.366 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:22:02.212 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 6452 1 2025-10-15 08:22:51.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:22:52.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:23:02.385 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-10-15 08:23:05.110 00:00:10.331 TCP 23.104.0.1:56080 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:24:02.596 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-10-15 08:24:05.482 00:00:10.364 TCP 23.104.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:20:42.532 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:20:42.535 00:05:02.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:25:02.787 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33816 10 6452 1 2025-10-15 08:25:05.882 00:00:10.325 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:26:03.006 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34610 10 6452 1 2025-10-15 08:26:06.250 00:00:10.364 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:27:03.223 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-10-15 08:27:06.659 00:00:10.372 TCP 23.104.0.1:33626 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:27:51.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:27:52.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:28:03.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-10-15 08:28:07.104 00:00:10.363 TCP 23.104.0.1:55892 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:29:03.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-10-15 08:29:07.503 00:00:10.326 TCP 23.104.0.1:42364 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:30:03.870 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-10-15 08:30:07.870 00:00:10.327 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:26:42.534 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:26:42.536 00:05:02.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:31:04.068 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-10-15 08:31:08.239 00:00:10.328 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:32:04.279 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49850 10 6452 1 2025-10-15 08:32:08.597 00:00:10.362 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:32:51.989 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:32:52.066 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:33:04.503 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-15 08:33:08.997 00:00:10.363 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:34:04.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34986 10 6452 1 2025-10-15 08:34:09.399 00:00:10.362 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:35:04.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41520 10 6452 1 2025-10-15 08:35:09.803 00:00:10.325 TCP 23.104.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:36:05.169 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-10-15 08:36:10.166 00:00:10.366 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:32:42.540 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:32:42.536 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:37:05.340 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-10-15 08:37:10.564 00:00:10.326 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:37:52.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:37:52.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:38:05.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-10-15 08:38:10.926 00:00:10.390 TCP 23.104.0.1:43680 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:39:05.730 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-10-15 08:39:11.350 00:00:10.370 TCP 23.104.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:40:05.940 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-10-15 08:40:11.753 00:00:10.379 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:41:06.127 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-10-15 08:41:12.167 00:00:10.363 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:42:06.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-10-15 08:42:12.571 00:00:10.372 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:38:42.540 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:38:42.542 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:42:52.249 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:42:52.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:43:06.514 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-10-15 08:43:12.983 00:00:10.367 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:44:06.741 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-10-15 08:44:13.383 00:00:10.316 TCP 23.104.0.1:34470 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:45:06.922 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-10-15 08:45:13.741 00:00:10.362 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:46:07.149 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49960 10 6452 1 2025-10-15 08:46:14.140 00:00:10.373 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:47:07.357 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6452 1 2025-10-15 08:47:14.550 00:00:10.363 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:47:52.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:47:52.536 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:48:07.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42670 10 6452 1 2025-10-15 08:48:14.950 00:00:10.366 TCP 23.104.0.1:41846 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:44:42.546 00:05:02.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:44:42.545 00:05:02.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:49:07.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60168 10 6452 1 2025-10-15 08:49:15.355 00:00:10.365 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:50:07.997 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-10-15 08:50:15.755 00:00:10.330 TCP 23.104.0.1:42092 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:51:08.217 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 12 10369 1 2025-10-15 08:51:16.126 00:00:10.436 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 15 1926 1 2025-10-15 08:52:08.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49144 10 6452 1 2025-10-15 08:52:16.609 00:00:10.368 TCP 23.104.0.1:37666 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:52:52.723 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:52:52.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:53:08.666 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34040 10 6452 1 2025-10-15 08:53:17.011 00:00:10.356 TCP 23.104.0.1:50664 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:54:08.883 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-10-15 08:54:17.405 00:00:10.360 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:50:42.547 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 08:50:42.549 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 08:55:09.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-10-15 08:55:17.803 00:00:10.364 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:56:09.323 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-10-15 08:56:18.206 00:00:10.364 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:57:09.494 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6452 1 2025-10-15 08:57:18.607 00:00:10.366 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 11 1507 1 2025-10-15 08:57:52.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 08:57:52.590 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 08:58:09.710 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-10-15 08:58:19.014 00:00:10.365 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1085, avg pps: 0, avg bpp: 318 Time window: 2025-10-15 07:56:42 - 2025-10-15 08:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0023s Wall: 0.0024s flows/second: 68362.7 Runtime: 0.0024s