Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 11:58:50.504 00:00:11.024 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:59:18.695 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-10-11 11:59:51.567 00:00:10.367 TCP 23.104.0.1:54352 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:00:18.904 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34022 10 6452 1 2025-10-11 11:56:40.751 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:56:40.749 00:05:02.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:01:00.762 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:01:01.100 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:00:51.966 00:00:10.370 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:01:19.124 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58078 10 6452 1 2025-10-11 12:01:52.375 00:00:10.357 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:02:19.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-10-11 12:02:52.772 00:00:10.371 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:03:19.518 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-10-11 12:03:53.177 00:00:10.359 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:04:19.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-10-11 12:04:53.573 00:00:10.369 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:05:19.955 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-10-11 12:06:00.826 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:06:00.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:05:53.981 00:00:10.363 TCP 23.104.0.1:54378 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:06:20.210 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:42602 10 6452 1 2025-10-11 12:02:40.751 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:02:40.749 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:06:54.384 00:00:10.379 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:07:20.400 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6452 1 2025-10-11 12:07:54.805 00:00:10.369 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:08:20.610 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6452 1 2025-10-11 12:08:55.217 00:00:10.373 TCP 23.104.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:09:20.821 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6452 1 2025-10-11 12:09:55.630 00:00:10.335 TCP 23.104.0.1:39638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:10:21.054 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51196 10 6452 1 2025-10-11 12:11:01.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:11:00.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:10:56.019 00:00:10.366 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:11:21.228 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-10-11 12:11:56.421 00:00:10.367 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:12:21.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-10-11 12:08:40.752 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:08:40.753 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:12:56.826 00:00:10.365 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:13:21.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-10-11 12:13:57.228 00:00:10.375 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:14:21.880 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 10 6452 1 2025-10-11 12:14:57.639 00:00:10.367 TCP 23.104.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:15:22.103 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-10-11 12:16:00.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:16:01.039 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:15:58.050 00:00:10.363 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:16:22.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36968 10 6452 1 2025-10-11 12:16:58.456 00:00:10.364 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:17:22.487 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51676 10 6452 1 2025-10-11 12:17:58.863 00:00:10.367 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:18:22.655 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48490 10 6452 1 2025-10-11 12:14:40.755 00:05:02.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:14:40.753 00:05:02.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:18:59.265 00:00:10.367 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:19:22.826 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-10-11 12:19:59.672 00:00:10.365 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:20:23.042 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-10-11 12:21:01.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:21:01.342 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:21:00.096 00:00:10.358 TCP 23.104.0.1:48184 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:21:23.267 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-10-11 12:22:00.499 00:00:10.358 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:22:23.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57154 10 6452 1 2025-10-11 12:23:00.897 00:00:10.331 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:23:23.697 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-10-11 12:24:01.265 00:00:10.371 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:24:23.902 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-10-11 12:20:40.756 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:20:40.758 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:25:01.682 00:00:10.366 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:25:24.089 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-10-11 12:26:01.028 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:26:01.341 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:26:02.100 00:00:10.366 TCP 23.104.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:26:24.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56800 10 6452 1 2025-10-11 12:27:02.501 00:00:10.366 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:27:24.472 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 2025-10-11 12:28:02.904 00:00:10.365 TCP 23.104.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:28:24.686 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-10-11 12:29:03.308 00:00:10.367 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:29:24.905 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-10-11 12:30:03.713 00:00:10.371 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:30:25.113 00:00:10.887 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-10-11 12:26:40.758 00:05:02.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:26:40.761 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:31:01.442 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:31:01.290 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:31:04.124 00:00:10.366 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:31:26.036 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-10-11 12:32:04.521 00:00:10.323 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:32:26.250 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:43028 10 6452 1 2025-10-11 12:33:04.881 00:00:10.384 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:33:26.413 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-10-11 12:34:05.301 00:00:10.367 TCP 23.104.0.1:40138 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:34:26.638 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51848 10 6452 1 2025-10-11 12:35:05.710 00:00:10.361 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:35:26.857 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-10-11 12:36:01.494 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:36:01.635 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:36:06.112 00:00:10.367 TCP 23.104.0.1:44802 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:36:27.082 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55764 10 6452 1 2025-10-11 12:32:40.762 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:32:40.761 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:37:06.514 00:00:10.329 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:37:27.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6452 1 2025-10-11 12:38:06.884 00:00:10.378 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:38:27.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-10-11 12:39:07.302 00:00:10.366 TCP 23.104.0.1:34352 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:39:27.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49182 10 6452 1 2025-10-11 12:40:07.706 00:00:10.369 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:40:27.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44870 10 6452 1 2025-10-11 12:41:01.542 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:41:01.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:41:08.113 00:00:10.323 TCP 23.104.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:41:28.179 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-10-11 12:42:08.471 00:00:10.324 TCP 23.104.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:42:28.364 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-10-11 12:38:40.762 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:38:40.765 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:43:08.833 00:00:10.389 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:43:28.591 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52798 10 6452 1 2025-10-11 12:44:09.258 00:00:10.357 TCP 23.104.0.1:57782 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:44:28.768 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-10-11 12:45:09.657 00:00:10.365 TCP 23.104.0.1:46248 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:45:28.946 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-10-11 12:46:01.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:46:02.005 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:46:10.086 00:00:10.360 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:46:29.185 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-10-11 12:47:10.486 00:00:10.326 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:47:29.356 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-10-11 12:48:10.850 00:00:10.340 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:48:29.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55054 10 6452 1 2025-10-11 12:44:40.762 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:44:40.764 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:49:11.229 00:00:10.318 TCP 23.104.0.1:47528 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:49:29.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-10-11 12:50:11.581 00:00:10.362 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:50:30.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-10-11 12:51:01.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:51:01.759 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:51:11.981 00:00:10.365 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:51:30.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-10-11 12:52:12.384 00:00:10.361 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:52:30.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-10-11 12:53:12.787 00:00:10.361 TCP 23.104.0.1:38028 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:53:30.659 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-10-11 12:54:13.190 00:00:10.365 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:54:30.836 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-10-11 12:50:40.764 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 12:50:40.767 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 12:55:13.589 00:00:10.365 TCP 23.104.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:55:31.014 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56578 10 6452 1 2025-10-11 12:56:01.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 12:56:01.984 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 12:56:13.992 00:00:10.334 TCP 23.104.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:56:31.229 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45120 10 6452 1 2025-10-11 12:57:14.362 00:00:10.363 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:57:31.449 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6452 1 2025-10-11 12:58:14.759 00:00:10.388 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:58:31.626 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-10-11 11:56:40 - 2025-10-11 12:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0019s Wall: 0.0022s flows/second: 74139.5 Runtime: 0.0022s