Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 03:58:54.347 00:00:10.360 TCP 23.104.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:59:41.322 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-17 03:59:54.748 00:00:10.321 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:56:43.462 00:05:02.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:56:43.465 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:00:41.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-10-17 04:00:55.115 00:00:10.367 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:01:41.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43022 10 6452 1 2025-10-17 04:01:55.519 00:00:10.328 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:02:41.918 00:00:11.266 TCP 1.101.0.1:3000 -> 22.102.0.1:59820 10 6452 1 2025-10-17 04:02:55.883 00:00:10.392 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:03:44.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:03:44.634 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:03:43.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-10-17 04:03:56.308 00:00:10.805 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:04:43.438 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-10-17 04:04:57.148 00:00:10.346 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:05:43.652 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47678 10 6452 1 2025-10-17 04:05:57.533 00:00:10.375 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:02:43.466 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:02:43.465 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:06:43.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34640 10 6452 1 2025-10-17 04:06:57.950 00:00:10.365 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:07:44.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-10-17 04:07:58.352 00:00:10.364 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:08:45.122 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:08:44.892 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:08:44.254 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-10-17 04:08:58.765 00:00:10.378 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:09:44.491 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-10-17 04:09:59.175 00:00:10.363 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:10:44.713 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39500 10 6452 1 2025-10-17 04:10:59.574 00:00:10.322 TCP 23.104.0.1:34826 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:11:44.942 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 2025-10-17 04:11:59.936 00:00:10.380 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:08:43.469 00:05:02.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:08:43.472 00:05:02.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:12:45.169 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-10-17 04:13:00.357 00:00:10.317 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:13:44.910 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:13:44.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:13:45.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-10-17 04:14:00.712 00:00:10.374 TCP 23.104.0.1:60868 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:14:45.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-10-17 04:15:01.121 00:00:18.393 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:15:45.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-10-17 04:16:09.546 00:00:10.366 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:16:45.971 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-10-17 04:17:09.951 00:00:10.370 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:17:46.193 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48376 10 6452 1 2025-10-17 04:18:10.356 00:00:10.367 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:18:44.993 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:14:43.473 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:18:44.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:14:43.471 00:05:02.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:18:46.361 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35288 10 6452 1 2025-10-17 04:19:10.756 00:00:10.390 TCP 23.104.0.1:40598 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:19:46.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48280 10 6452 1 2025-10-17 04:20:11.182 00:00:10.357 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:20:46.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54212 10 6452 1 2025-10-17 04:21:11.573 00:00:10.366 TCP 23.104.0.1:42260 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:21:47.001 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-10-17 04:22:11.976 00:00:10.371 TCP 23.104.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:22:47.172 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59062 10 6452 1 2025-10-17 04:23:12.388 00:00:10.360 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:23:44.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:23:45.044 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:23:47.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46108 10 6452 1 2025-10-17 04:24:12.786 00:00:10.325 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:20:43.474 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:20:43.471 00:05:02.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:24:47.605 00:00:10.717 TCP 1.101.0.1:3000 -> 22.102.0.1:36816 10 6452 1 2025-10-17 04:25:13.147 00:00:10.374 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:25:48.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-10-17 04:26:13.553 00:00:10.386 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:26:48.572 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-10-17 04:27:13.982 00:00:10.367 TCP 23.104.0.1:42438 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:27:48.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 10 6452 1 2025-10-17 04:28:14.387 00:00:10.372 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:28:45.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:28:45.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:28:49.004 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33226 10 6452 1 2025-10-17 04:29:14.803 00:00:10.380 TCP 23.104.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:29:49.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37586 10 6452 1 2025-10-17 04:30:15.222 00:00:10.368 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:26:43.474 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:26:43.473 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:30:49.432 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-10-17 04:31:15.632 00:00:11.158 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:31:49.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-10-17 04:32:16.851 00:00:10.383 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:32:49.824 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-10-17 04:33:17.269 00:00:10.366 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:33:45.109 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:33:45.299 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:33:50.065 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-10-17 04:34:17.673 00:00:10.363 TCP 23.104.0.1:59566 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:34:50.242 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-10-17 04:35:18.107 00:00:10.365 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:35:50.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49702 10 6452 1 2025-10-17 04:36:18.517 00:00:10.328 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:32:43.475 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:32:43.478 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:36:50.624 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40736 10 6452 1 2025-10-17 04:37:18.906 00:00:10.365 TCP 23.104.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:37:50.798 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52152 10 6452 1 2025-10-17 04:38:19.311 00:00:10.417 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:38:45.216 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:38:45.253 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:38:51.005 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34180 10 6452 1 2025-10-17 04:39:19.771 00:00:10.369 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:39:51.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-10-17 04:40:20.181 00:00:10.365 TCP 23.104.0.1:43084 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:40:51.408 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40698 10 6452 1 2025-10-17 04:41:20.583 00:00:10.365 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:41:51.585 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43424 10 6452 1 2025-10-17 04:42:20.988 00:00:10.366 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:38:43.481 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:38:43.477 00:05:02.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:42:51.818 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37816 10 6452 1 2025-10-17 04:43:21.394 00:00:10.324 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:43:45.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:43:45.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:43:51.989 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-10-17 04:44:21.755 00:00:11.088 TCP 23.104.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:44:52.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-10-17 04:45:22.885 00:00:10.336 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:45:52.425 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-10-17 04:46:23.257 00:00:10.360 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:46:52.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-10-17 04:47:23.658 00:00:10.911 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:47:52.856 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-10-17 04:48:24.607 00:00:10.370 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:44:43.479 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:48:45.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:48:45.475 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:44:43.478 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:48:53.076 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 11 6504 1 2025-10-17 04:49:25.011 00:00:10.372 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:49:53.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40916 10 6452 1 2025-10-17 04:50:25.417 00:00:10.364 TCP 23.104.0.1:59562 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:50:53.554 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-10-17 04:51:25.821 00:00:10.365 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:51:53.727 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-10-17 04:52:26.222 00:00:10.365 TCP 23.104.0.1:38408 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:52:53.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45600 10 6452 1 2025-10-17 04:53:26.627 00:00:10.370 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:53:45.537 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:53:45.594 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 04:53:54.115 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6452 1 2025-10-17 04:54:27.050 00:00:10.326 TCP 23.104.0.1:54242 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:50:43.480 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 04:50:43.481 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:54:54.338 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-10-17 04:55:27.415 00:00:10.323 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:55:54.552 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-10-17 04:56:27.781 00:00:10.332 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:56:54.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-10-17 04:57:28.163 00:00:10.379 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:57:54.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-10-17 04:58:28.584 00:00:10.369 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:58:45.542 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 04:58:45.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 491948, total packets: 1563, avg bps: 1057, avg pps: 0, avg bpp: 314 Time window: 2025-10-17 03:56:43 - 2025-10-17 04:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0000s Wall: 0.0023s flows/second: 70561.6 Runtime: 0.0023s