Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 01:59:01.468 00:00:10.362 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-10-17 01:59:16.010 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34432 10 6452 1 2025-10-17 02:00:01.869 00:00:10.365 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:00:16.229 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-10-17 01:56:43.427 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 01:56:43.430 00:05:02.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:01:02.272 00:00:10.377 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:01:16.440 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-10-17 02:02:02.692 00:00:10.327 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:02:16.639 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-10-17 02:03:03.059 00:00:10.363 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:03:16.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-10-17 02:03:42.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:03:42.177 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:04:03.461 00:00:10.363 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:04:17.041 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 10 6452 1 2025-10-17 02:05:03.856 00:00:10.374 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:05:17.258 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-10-17 02:06:04.266 00:00:10.365 TCP 23.104.0.1:40956 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:06:17.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-10-17 02:02:43.433 00:05:02.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:02:43.431 00:05:02.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:07:04.665 00:00:10.443 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 15 1926 1 2025-10-17 02:07:17.675 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 12 10375 1 2025-10-17 02:08:05.146 00:00:10.366 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:08:17.913 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35898 10 6452 1 2025-10-17 02:08:42.340 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:08:42.116 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:09:05.548 00:00:10.365 TCP 23.104.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:09:18.126 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-10-17 02:10:05.947 00:00:10.523 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:10:18.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45068 10 6452 1 2025-10-17 02:11:06.507 00:00:10.364 TCP 23.104.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:11:18.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-10-17 02:12:06.910 00:00:10.363 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:12:18.720 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54522 10 6452 1 2025-10-17 02:08:43.434 00:05:02.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:08:43.431 00:05:02.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:13:07.311 00:00:10.514 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:13:18.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-10-17 02:13:42.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:13:42.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:14:07.863 00:00:10.373 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:14:19.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-10-17 02:15:08.273 00:00:10.441 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:15:19.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-10-17 02:16:08.757 00:00:10.379 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:16:19.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6452 1 2025-10-17 02:17:09.171 00:00:10.376 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:17:19.835 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36278 10 6452 1 2025-10-17 02:18:09.587 00:00:10.362 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:18:20.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-10-17 02:18:42.628 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:14:43.434 00:05:02.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:18:42.608 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:14:43.437 00:05:02.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:19:09.987 00:00:10.375 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:19:20.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49290 10 6452 1 2025-10-17 02:20:10.401 00:00:10.322 TCP 23.104.0.1:36822 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:20:20.503 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59652 10 6452 1 2025-10-17 02:21:10.770 00:00:10.331 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:21:20.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-10-17 02:22:11.148 00:00:10.375 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:22:20.926 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52796 10 6452 1 2025-10-17 02:23:11.562 00:00:10.367 TCP 23.104.0.1:36454 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:23:21.139 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-10-17 02:23:43.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:23:43.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:24:11.965 00:00:10.378 TCP 23.104.0.1:47796 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:24:21.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-10-17 02:20:43.435 00:05:02.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:20:43.438 00:05:02.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:25:12.382 00:00:10.325 TCP 23.104.0.1:35872 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:25:21.564 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-10-17 02:26:12.750 00:00:10.377 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:26:21.747 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-10-17 02:27:13.171 00:00:10.367 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:27:21.983 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57330 10 6452 1 2025-10-17 02:28:13.571 00:00:10.585 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:28:22.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6452 1 2025-10-17 02:28:42.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:28:42.517 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:29:14.197 00:00:10.361 TCP 23.104.0.1:40080 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:29:22.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48632 10 6452 1 2025-10-17 02:30:14.595 00:00:10.378 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:30:22.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-10-17 02:26:43.442 00:05:02.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:26:43.439 00:05:02.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:31:15.012 00:00:10.321 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:31:22.851 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-10-17 02:32:15.370 00:00:10.366 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:32:23.082 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6452 1 2025-10-17 02:33:15.775 00:00:10.368 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:33:23.290 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-10-17 02:33:42.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:33:42.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:34:16.183 00:00:10.363 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:34:23.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38258 10 6452 1 2025-10-17 02:35:16.582 00:00:10.370 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:35:23.674 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 11 6504 1 2025-10-17 02:36:16.989 00:00:14.449 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:36:23.899 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-10-17 02:32:43.444 00:05:02.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:32:43.446 00:05:02.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:37:21.472 00:00:10.360 TCP 23.104.0.1:41894 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:37:24.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-10-17 02:38:21.876 00:00:10.326 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:38:24.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40068 10 6452 1 2025-10-17 02:38:43.064 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:38:43.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:39:22.240 00:00:10.367 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:39:24.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40638 10 6452 1 2025-10-17 02:40:24.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-10-17 02:40:22.646 00:00:10.368 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:41:23.063 00:00:10.375 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:41:24.960 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57780 10 6452 1 2025-10-17 02:42:25.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54400 10 6452 1 2025-10-17 02:42:23.471 00:00:10.370 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:38:43.446 00:05:02.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:38:43.448 00:05:02.545 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:43:23.878 00:00:10.373 TCP 23.104.0.1:52972 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:43:25.388 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-10-17 02:43:43.014 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:43:42.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:44:25.594 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 10 6452 1 2025-10-17 02:44:24.297 00:00:10.321 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:45:24.659 00:00:10.366 TCP 23.104.0.1:55228 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:45:25.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-10-17 02:46:25.076 00:00:10.364 TCP 23.104.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:46:26.034 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-10-17 02:47:26.241 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-10-17 02:47:25.483 00:00:10.367 TCP 23.104.0.1:32994 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:48:26.504 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6452 1 2025-10-17 02:48:25.896 00:00:10.379 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:44:43.449 00:05:02.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:48:43.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:48:43.153 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:44:43.446 00:05:02.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:49:26.316 00:00:10.366 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:49:26.679 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-10-17 02:50:26.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-10-17 02:50:26.734 00:00:10.407 TCP 23.104.0.1:41846 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:51:27.115 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2025-10-17 02:51:27.181 00:00:10.362 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:52:27.585 00:00:10.323 TCP 23.104.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:52:27.282 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-10-17 02:53:27.950 00:00:10.367 TCP 23.104.0.1:59380 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:53:27.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34702 10 6452 1 2025-10-17 02:53:43.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 02:53:42.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:54:27.718 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2025-10-17 02:54:28.354 00:00:10.362 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:50:43.450 00:05:02.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 02:50:43.447 00:05:02.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:55:27.906 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-10-17 02:55:28.758 00:00:10.375 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:56:29.173 00:00:10.368 TCP 23.104.0.1:59596 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:56:28.117 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-17 02:57:29.579 00:00:10.364 TCP 23.104.0.1:60096 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:57:28.326 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-17 02:58:28.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-10-17 02:58:29.982 00:00:10.366 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-10-17 02:58:43.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 02:58:43.289 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-17 01:56:43 - 2025-10-17 02:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0022s Wall: 0.0024s flows/second: 69784.5 Runtime: 0.0024s