Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 04:59:02.744 00:00:10.402 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-10-20 04:59:30.436 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45032 10 6452 1 2025-10-20 05:00:12.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:00:03.184 00:00:10.371 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:00:12.370 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:00:30.611 00:00:12.780 TCP 1.101.0.1:3000 -> 22.102.0.1:35908 10 6452 1 2025-10-20 04:56:44.909 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 04:56:44.911 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:01:03.605 00:00:10.370 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:01:33.428 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53012 10 6452 1 2025-10-20 05:02:04.017 00:00:10.334 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:02:33.610 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-10-20 05:03:04.387 00:00:10.436 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 15 1926 1 2025-10-20 05:03:33.818 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 12 10369 1 2025-10-20 05:04:04.862 00:00:10.373 TCP 23.104.0.1:52604 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:04:34.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-10-20 05:05:12.558 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:05:12.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:05:05.278 00:00:10.371 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:05:34.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34328 10 6452 1 2025-10-20 05:06:05.691 00:00:10.363 TCP 23.104.0.1:50510 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:02:44.912 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:06:34.521 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-10-20 05:02:44.909 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:07:06.106 00:00:10.365 TCP 23.104.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:07:34.743 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-10-20 05:08:06.512 00:00:10.369 TCP 23.104.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:08:34.966 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2025-10-20 05:09:06.923 00:00:10.389 TCP 23.104.0.1:42184 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:09:35.184 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58450 10 6452 1 2025-10-20 05:10:12.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:10:12.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:10:07.351 00:00:10.366 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:10:35.408 00:00:10.926 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-10-20 05:11:07.760 00:00:10.379 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:11:36.373 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52136 10 6452 1 2025-10-20 05:12:08.176 00:00:10.364 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:12:36.581 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-10-20 05:08:44.913 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:08:44.910 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:13:08.580 00:00:10.363 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:13:36.792 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-10-20 05:14:08.979 00:00:10.624 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:14:37.015 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6452 1 2025-10-20 05:15:12.609 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:15:12.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:15:09.648 00:00:10.911 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:15:37.233 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-10-20 05:16:10.596 00:00:10.322 TCP 23.104.0.1:47774 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:16:37.452 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-10-20 05:17:10.959 00:00:10.364 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:17:37.677 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-10-20 05:18:11.366 00:00:10.363 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:14:44.917 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:18:37.885 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-10-20 05:14:44.914 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:19:11.774 00:00:10.372 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:19:38.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34200 10 6452 1 2025-10-20 05:20:12.700 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:20:12.608 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:20:12.178 00:00:10.369 TCP 23.104.0.1:43544 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:20:38.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-10-20 05:21:12.581 00:00:10.373 TCP 23.104.0.1:47932 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:21:38.544 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6452 1 2025-10-20 05:22:12.989 00:00:10.328 TCP 23.104.0.1:51350 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:22:38.762 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43690 10 6452 1 2025-10-20 05:23:13.350 00:00:10.369 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:23:38.981 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-10-20 05:24:13.756 00:00:10.398 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:20:44.913 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:24:39.200 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42064 10 6452 1 2025-10-20 05:20:44.915 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:25:12.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:25:12.956 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:25:14.193 00:00:10.359 TCP 23.104.0.1:40236 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:25:39.419 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-10-20 05:26:14.598 00:00:10.356 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:26:39.668 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54620 10 6452 1 2025-10-20 05:27:14.995 00:00:10.320 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:27:39.880 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-10-20 05:28:15.356 00:00:10.325 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:28:40.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39870 10 6452 1 2025-10-20 05:29:15.724 00:00:10.379 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:29:40.468 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55634 10 6452 1 2025-10-20 05:30:13.092 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:30:13.045 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:30:16.147 00:00:10.378 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:26:44.917 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:30:40.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-10-20 05:26:44.916 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:31:16.573 00:00:10.367 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:31:40.852 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33154 10 6452 1 2025-10-20 05:32:16.982 00:00:10.363 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:32:41.084 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-10-20 05:33:17.384 00:00:10.366 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:33:41.269 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-10-20 05:34:17.787 00:00:10.388 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:34:41.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46704 10 6452 1 2025-10-20 05:35:12.925 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:35:13.019 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:35:18.217 00:00:10.371 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:35:41.698 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-10-20 05:36:18.630 00:00:10.363 TCP 23.104.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:32:44.917 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:32:44.920 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:36:41.917 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-10-20 05:37:19.034 00:00:10.363 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:37:42.165 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-10-20 05:38:19.438 00:00:10.323 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:38:42.339 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-10-20 05:39:19.800 00:00:10.339 TCP 23.104.0.1:45826 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:39:42.552 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:50104 10 6452 1 2025-10-20 05:40:13.065 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:40:13.278 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:40:20.178 00:00:10.368 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:40:42.742 00:00:10.887 TCP 1.101.0.1:3000 -> 22.102.0.1:57080 10 6452 1 2025-10-20 05:41:20.582 00:00:10.365 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:41:43.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47092 10 6452 1 2025-10-20 05:42:20.985 00:00:10.368 TCP 23.104.0.1:52150 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:38:44.918 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:38:44.921 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:42:43.885 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-10-20 05:43:21.387 00:00:10.366 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:43:44.078 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 10 6452 1 2025-10-20 05:44:21.798 00:00:10.368 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:44:44.651 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6452 1 2025-10-20 05:45:13.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:45:13.246 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:45:22.202 00:00:10.362 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:45:44.868 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-10-20 05:46:22.602 00:00:10.359 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:46:45.098 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53636 10 6452 1 2025-10-20 05:47:22.995 00:00:10.366 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:47:45.318 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-10-20 05:48:23.401 00:00:10.364 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:44:44.925 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:44:44.921 00:05:02.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:48:45.541 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-10-20 05:49:23.805 00:00:10.384 TCP 23.104.0.1:59528 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:49:45.765 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44442 10 6452 1 2025-10-20 05:50:13.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:50:13.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:50:24.234 00:00:10.364 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:50:45.987 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-10-20 05:51:24.640 00:00:10.345 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:51:46.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-10-20 05:52:25.056 00:00:10.502 TCP 23.104.0.1:50888 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:52:46.395 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-10-20 05:53:25.613 00:00:10.367 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:53:46.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-10-20 05:54:26.020 00:00:10.365 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:50:44.922 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:50:44.926 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 05:54:46.827 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-10-20 05:55:13.405 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 05:55:13.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 05:55:26.427 00:00:10.370 TCP 23.104.0.1:33642 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:55:47.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-10-20 05:56:26.831 00:00:10.383 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:56:47.296 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-10-20 05:57:27.257 00:00:10.375 TCP 23.104.0.1:41672 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:57:47.514 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6452 1 2025-10-20 05:58:27.668 00:00:10.360 TCP 23.104.0.1:42548 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496232, total packets: 1568, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-10-20 04:56:44 - 2025-10-20 05:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0053s User: 0.0009s Wall: 0.0025s flows/second: 64327.4 Runtime: 0.0025s