Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 05:58:56.538 00:00:10.365 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:59:15.448 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:59:15.577 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:59:10.308 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-10-18 05:59:56.952 00:00:10.371 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:00:10.479 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34234 10 6452 1 2025-10-18 05:56:43.992 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:56:43.990 00:05:02.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:00:57.359 00:00:10.324 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:01:10.683 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60334 10 6452 1 2025-10-18 06:01:57.722 00:00:10.372 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:02:10.896 00:00:12.762 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-10-18 06:02:58.134 00:00:10.360 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:03:13.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-10-18 06:03:58.533 00:00:10.322 TCP 23.104.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:04:15.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:04:15.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:04:13.939 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-10-18 06:04:58.894 00:00:11.025 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:05:14.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-10-18 06:05:59.958 00:00:10.365 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:06:14.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43570 10 6452 1 2025-10-18 06:02:44.002 00:05:02.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:02:44.004 00:05:02.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:07:00.363 00:00:10.363 TCP 23.104.0.1:33370 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:07:14.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47432 10 6452 1 2025-10-18 06:08:00.760 00:00:10.328 TCP 23.104.0.1:54544 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:08:14.848 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-10-18 06:09:01.123 00:00:10.364 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:09:15.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:09:15.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:09:15.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-10-18 06:10:01.523 00:00:10.363 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:10:15.248 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-10-18 06:11:01.931 00:00:10.349 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:11:15.419 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-10-18 06:12:02.322 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:12:15.637 00:00:18.439 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-10-18 06:08:44.027 00:05:02.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:08:44.030 00:05:02.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:13:02.734 00:00:10.407 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 15 1926 1 2025-10-18 06:13:24.113 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 12 10369 1 2025-10-18 06:14:15.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:14:15.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:14:03.180 00:00:10.364 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:14:24.321 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-10-18 06:15:03.587 00:00:10.367 TCP 23.104.0.1:35292 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:15:24.534 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41068 10 6452 1 2025-10-18 06:16:03.992 00:00:10.337 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:16:24.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-10-18 06:17:04.376 00:00:10.320 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:17:24.964 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-10-18 06:18:04.743 00:00:10.320 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:18:25.797 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52924 10 6452 1 2025-10-18 06:14:44.038 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:14:44.035 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:19:16.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:19:05.109 00:00:10.328 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:19:16.059 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:19:26.016 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-10-18 06:20:05.476 00:00:10.364 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:20:26.227 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-10-18 06:21:05.880 00:00:10.363 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:21:26.444 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 10 6452 1 2025-10-18 06:22:06.284 00:00:10.367 TCP 23.104.0.1:54346 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:22:26.624 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-18 06:23:06.694 00:00:10.363 TCP 23.104.0.1:35850 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:23:26.838 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-10-18 06:24:16.517 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:24:16.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:24:07.105 00:00:10.640 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:24:27.030 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-10-18 06:20:44.039 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:20:44.038 00:05:02.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:25:07.782 00:00:11.091 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:25:27.244 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50946 10 6452 1 2025-10-18 06:26:08.915 00:00:10.369 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:26:27.410 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-10-18 06:27:09.320 00:00:10.370 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:27:27.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-10-18 06:28:09.728 00:00:10.370 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:28:27.796 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-10-18 06:29:16.397 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:29:16.253 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:29:10.135 00:00:10.366 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:29:28.013 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-10-18 06:30:10.535 00:00:10.361 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:30:28.278 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-10-18 06:26:44.041 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:26:44.040 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:31:10.932 00:00:10.381 TCP 23.104.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:31:28.453 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-10-18 06:32:11.355 00:00:10.338 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:32:28.660 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-10-18 06:33:11.728 00:00:10.377 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:33:28.879 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-10-18 06:34:16.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:34:16.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:34:12.145 00:00:10.365 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:34:29.133 00:00:14.377 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-10-18 06:35:12.550 00:00:10.322 TCP 23.104.0.1:40394 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:35:33.558 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39748 10 6452 1 2025-10-18 06:36:12.907 00:00:10.366 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:36:33.784 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60106 10 6452 1 2025-10-18 06:32:44.038 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:32:44.042 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:37:13.310 00:00:12.882 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:37:34.016 00:00:10.873 TCP 1.101.0.1:3000 -> 22.102.0.1:38410 10 6452 1 2025-10-18 06:38:16.234 00:00:10.370 TCP 23.104.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:38:34.928 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-10-18 06:39:16.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:39:16.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:39:16.643 00:00:10.359 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:39:35.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49860 10 6452 1 2025-10-18 06:40:17.051 00:00:10.363 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:40:35.342 00:00:10.876 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-10-18 06:41:17.453 00:00:10.364 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:41:36.255 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-10-18 06:42:17.861 00:00:10.377 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:42:36.473 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-10-18 06:38:44.044 00:05:02.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:38:44.042 00:05:02.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:43:18.288 00:00:10.362 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:43:36.689 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-10-18 06:44:16.746 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:44:16.768 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:44:18.690 00:00:10.329 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:44:36.904 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49526 10 6452 1 2025-10-18 06:45:19.063 00:00:10.364 TCP 23.104.0.1:47854 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:45:37.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-10-18 06:46:19.472 00:00:10.373 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:46:37.342 00:00:10.911 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 11 6504 1 2025-10-18 06:47:19.883 00:00:10.391 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:47:38.304 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-10-18 06:48:20.311 00:00:10.365 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:44:44.047 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:48:38.531 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-10-18 06:44:44.045 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:49:16.841 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:49:16.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:49:20.715 00:00:10.369 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:49:38.770 00:00:10.575 TCP 1.101.0.1:3000 -> 22.102.0.1:39170 10 6452 1 2025-10-18 06:50:21.127 00:00:10.369 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:50:39.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-10-18 06:51:21.534 00:00:10.368 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:51:39.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-10-18 06:52:21.942 00:00:10.371 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:52:39.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-10-18 06:53:22.354 00:00:10.363 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:53:40.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-10-18 06:54:16.868 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 06:54:16.532 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 06:54:22.756 00:00:10.385 TCP 23.104.0.1:37104 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:50:44.050 00:05:02.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 06:50:44.048 00:05:02.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 06:54:40.238 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-10-18 06:55:23.183 00:00:11.810 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 13 1611 1 2025-10-18 06:55:40.449 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33904 10 6452 1 2025-10-18 06:56:25.034 00:00:10.363 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:56:40.625 00:00:10.601 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-10-18 06:57:25.428 00:00:10.368 TCP 23.104.0.1:48242 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:57:41.264 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-10-18 06:58:25.834 00:00:10.341 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 06:58:41.435 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 Summary: total flows: 164, total bytes: 502840, total packets: 1581, avg bps: 1079, avg pps: 0, avg bpp: 318 Time window: 2025-10-18 05:56:43 - 2025-10-18 06:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0016s Wall: 0.0022s flows/second: 73505.6 Runtime: 0.0023s