Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 02:59:00.992 00:00:10.325 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-10-18 02:59:12.189 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 02:59:12.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 02:59:16.075 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-10-18 03:00:01.356 00:00:10.360 TCP 23.104.0.1:45932 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:00:16.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35940 10 6452 1 2025-10-18 02:56:43.961 00:05:02.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 02:56:43.951 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:01:01.750 00:00:10.383 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:01:16.516 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6452 1 2025-10-18 03:02:02.173 00:00:10.365 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:02:16.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-10-18 03:03:02.582 00:00:10.367 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:03:16.972 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-10-18 03:04:11.848 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:04:12.016 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:04:02.986 00:00:10.370 TCP 23.104.0.1:53540 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:04:17.205 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 2025-10-18 03:05:03.392 00:00:10.367 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:05:17.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57074 10 6452 1 2025-10-18 03:06:03.797 00:00:10.366 TCP 23.104.0.1:47366 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:06:17.652 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-10-18 03:02:43.944 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:02:43.941 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:07:04.204 00:00:15.772 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:07:17.839 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-10-18 03:08:10.059 00:00:10.362 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:08:18.073 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56666 10 6452 1 2025-10-18 03:09:12.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:09:12.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:09:10.463 00:00:10.329 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:09:18.253 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-10-18 03:10:10.837 00:00:10.385 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:10:18.461 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-10-18 03:11:11.259 00:00:10.363 TCP 23.104.0.1:34418 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:11:18.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-10-18 03:12:11.660 00:00:10.325 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:12:18.865 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-10-18 03:08:43.943 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:08:43.945 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:13:12.027 00:00:10.364 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:13:19.108 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2025-10-18 03:14:12.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:14:12.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:14:12.425 00:00:10.385 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:14:19.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45830 10 6452 1 2025-10-18 03:15:12.823 00:00:10.365 TCP 23.104.0.1:35774 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:15:19.545 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-10-18 03:16:13.228 00:00:10.323 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:16:19.768 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59258 10 6452 1 2025-10-18 03:17:13.587 00:00:10.438 TCP 23.104.0.1:37036 -> 1.101.0.1:3000 15 1926 1 2025-10-18 03:17:19.978 00:00:10.897 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 12 10375 1 2025-10-18 03:18:14.089 00:00:10.371 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:18:20.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-10-18 03:14:43.946 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:14:43.942 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:19:12.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:19:12.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:19:14.495 00:00:10.369 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:19:21.128 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-10-18 03:20:14.904 00:00:10.367 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:20:21.342 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-10-18 03:21:15.308 00:00:10.325 TCP 23.104.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:21:21.561 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41160 10 6452 1 2025-10-18 03:22:15.672 00:00:10.363 TCP 23.104.0.1:47576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:22:21.776 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-10-18 03:23:16.098 00:00:10.365 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:23:21.951 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 11 6504 1 2025-10-18 03:24:12.589 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:24:12.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:24:16.499 00:00:10.369 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:24:22.237 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-10-18 03:20:43.946 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:20:43.947 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:25:16.903 00:00:16.927 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:25:22.440 00:00:11.387 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-10-18 03:26:23.868 00:00:10.378 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:26:23.865 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-10-18 03:27:24.284 00:00:10.372 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:27:24.087 00:00:10.284 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-10-18 03:28:24.692 00:00:10.333 TCP 23.104.0.1:57922 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:28:24.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39852 10 6452 1 2025-10-18 03:29:12.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:29:12.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:29:24.624 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-10-18 03:29:25.060 00:00:10.324 TCP 23.104.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:30:25.423 00:00:10.367 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:30:24.841 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-18 03:26:43.947 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:26:43.945 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:31:25.825 00:00:10.366 TCP 23.104.0.1:44214 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:31:25.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-10-18 03:32:26.224 00:00:10.400 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 15 1926 1 2025-10-18 03:32:25.292 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 12 10375 1 2025-10-18 03:33:25.538 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-10-18 03:33:26.663 00:00:10.783 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:34:12.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:34:12.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:34:25.747 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36586 10 6452 1 2025-10-18 03:34:27.484 00:00:10.366 TCP 23.104.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:35:25.958 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53794 10 6452 1 2025-10-18 03:35:27.892 00:00:10.373 TCP 23.104.0.1:58274 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:36:28.308 00:00:10.361 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:36:26.177 00:00:11.104 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 10 6452 1 2025-10-18 03:32:43.947 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:32:43.949 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:37:28.707 00:00:10.361 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:37:27.321 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-10-18 03:38:27.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-10-18 03:38:29.106 00:00:10.328 TCP 23.104.0.1:51054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:39:12.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:39:13.020 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:39:29.467 00:00:10.369 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:39:27.762 00:00:10.625 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-10-18 03:40:29.874 00:00:10.365 TCP 23.104.0.1:38354 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:40:28.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-10-18 03:41:28.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 10 6452 1 2025-10-18 03:41:30.274 00:00:10.365 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:42:28.859 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-10-18 03:42:30.680 00:00:10.381 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:38:43.950 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:38:43.948 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:43:31.111 00:00:10.330 TCP 23.104.0.1:41418 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:43:29.081 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-10-18 03:44:12.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:44:12.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:44:29.252 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-10-18 03:44:31.477 00:00:10.367 TCP 23.104.0.1:33022 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:45:29.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-10-18 03:45:31.884 00:00:10.385 TCP 23.104.0.1:51942 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:46:29.631 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-10-18 03:46:32.310 00:00:10.361 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:47:29.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51846 10 6452 1 2025-10-18 03:47:32.710 00:00:10.378 TCP 23.104.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:48:30.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34280 10 6452 1 2025-10-18 03:48:33.129 00:00:10.370 TCP 23.104.0.1:59468 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:44:43.950 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:44:43.953 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:49:13.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:49:12.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:49:30.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-10-18 03:49:33.541 00:00:10.369 TCP 23.104.0.1:54980 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:50:30.474 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-10-18 03:50:33.952 00:00:10.376 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:51:30.663 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-10-18 03:51:34.361 00:00:10.333 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:52:30.847 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-10-18 03:52:34.733 00:00:10.368 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:53:31.080 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-10-18 03:53:35.143 00:00:10.370 TCP 23.104.0.1:47072 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:54:13.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 03:54:13.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 03:54:31.255 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-10-18 03:50:43.952 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 03:54:35.560 00:00:10.338 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:50:43.949 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 03:55:31.467 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-10-18 03:55:35.937 00:00:10.379 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:56:31.674 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 10 6452 1 2025-10-18 03:56:36.357 00:00:10.362 TCP 23.104.0.1:55656 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:57:36.761 00:00:11.141 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:57:31.845 00:00:15.920 TCP 1.101.0.1:3000 -> 22.102.0.1:52988 10 6452 1 2025-10-18 03:58:37.943 00:00:10.380 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-10-18 03:58:37.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52880 10 6452 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-10-18 02:56:43 - 2025-10-18 03:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0045s User: 0.0009s Wall: 0.0017s flows/second: 96178.1 Runtime: 0.0017s