Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 12:59:15.181 00:00:10.369 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:59:31.836 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-10-11 13:00:15.593 00:00:10.365 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-10-11 12:56:40.768 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:00:32.074 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-10-11 12:56:40.765 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:01:01.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:01:02.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:01:16.000 00:00:10.360 TCP 23.104.0.1:43222 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:01:32.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-10-11 13:02:16.401 00:00:10.329 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:02:32.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-10-11 13:03:16.766 00:00:10.379 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:03:32.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 2025-10-11 13:04:17.183 00:00:10.362 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:04:32.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-10-11 13:05:17.588 00:00:10.368 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:05:33.109 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-10-11 13:06:02.285 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:06:02.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:06:18.005 00:00:10.387 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:02:40.770 00:05:02.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:06:33.321 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:34116 10 6452 1 2025-10-11 13:02:40.767 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:07:18.436 00:00:10.373 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:07:33.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-10-11 13:08:18.873 00:00:10.323 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:08:33.984 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6452 1 2025-10-11 13:09:19.235 00:00:10.361 TCP 23.104.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:09:34.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48536 10 6452 1 2025-10-11 13:10:19.632 00:00:10.368 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:10:34.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-10-11 13:11:02.250 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:11:02.297 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:11:20.036 00:00:10.327 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:11:34.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-10-11 13:12:20.402 00:00:10.327 TCP 23.104.0.1:60740 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:12:34.849 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-10-11 13:08:40.768 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:08:40.771 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:13:20.765 00:00:10.331 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:13:35.041 00:00:10.714 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-10-11 13:14:21.138 00:00:10.324 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:14:35.796 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-10-11 13:15:21.499 00:00:10.367 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:15:36.014 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-10-11 13:16:02.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:16:02.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:16:21.899 00:00:10.339 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:16:36.240 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-10-11 13:17:22.277 00:00:10.363 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:17:36.456 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6452 1 2025-10-11 13:18:22.676 00:00:10.329 TCP 23.104.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:14:40.775 00:05:02.361 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:14:40.773 00:05:02.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:18:36.676 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52924 10 6452 1 2025-10-11 13:19:23.070 00:00:10.367 TCP 23.104.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:19:36.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43480 10 6452 1 2025-10-11 13:20:23.477 00:00:10.400 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:20:37.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34872 10 6452 1 2025-10-11 13:21:03.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:21:03.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:21:23.916 00:00:10.328 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:21:37.289 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-10-11 13:22:24.283 00:00:10.358 TCP 23.104.0.1:53782 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:22:37.500 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-10-11 13:23:24.681 00:00:10.364 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:23:37.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6452 1 2025-10-11 13:24:25.107 00:00:10.366 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:20:40.776 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:20:40.774 00:05:02.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:24:37.885 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-10-11 13:25:25.518 00:00:10.364 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:25:38.105 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-10-11 13:26:02.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:26:02.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:26:25.920 00:00:10.383 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:26:38.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-10-11 13:27:26.343 00:00:10.322 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:27:38.537 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6452 1 2025-10-11 13:28:26.713 00:00:10.376 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:28:38.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57510 10 6452 1 2025-10-11 13:29:27.135 00:00:10.389 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:29:38.927 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-10-11 13:30:27.566 00:00:10.365 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:26:40.780 00:05:02.361 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:26:40.777 00:05:02.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:30:39.168 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-10-11 13:31:02.759 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:31:02.534 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:31:27.973 00:00:10.366 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:31:39.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 10 6452 1 2025-10-11 13:32:28.378 00:00:10.372 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:32:39.591 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40470 10 6452 1 2025-10-11 13:33:28.786 00:00:10.361 TCP 23.104.0.1:49366 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:33:39.801 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60792 10 6452 1 2025-10-11 13:34:29.188 00:00:10.358 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:34:40.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-10-11 13:35:29.588 00:00:10.442 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 15 1926 1 2025-10-11 13:35:40.251 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57524 12 10375 1 2025-10-11 13:36:02.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:36:02.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:36:30.098 00:00:10.338 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:32:40.778 00:05:02.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:32:40.780 00:05:02.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:36:40.493 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-10-11 13:37:30.476 00:00:10.368 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:37:40.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-10-11 13:38:30.882 00:00:10.383 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:38:40.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-10-11 13:39:31.304 00:00:10.368 TCP 23.104.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:39:41.111 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-10-11 13:40:31.712 00:00:10.365 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:40:41.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57702 10 6452 1 2025-10-11 13:41:02.895 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:41:02.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:41:32.112 00:00:10.363 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:41:41.522 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-10-11 13:38:40.781 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:42:32.517 00:00:10.364 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:38:40.779 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:42:41.734 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-10-11 13:43:32.917 00:00:10.379 TCP 23.104.0.1:43174 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:43:41.948 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58120 10 6452 1 2025-10-11 13:44:33.334 00:00:10.367 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:44:42.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-10-11 13:45:33.737 00:00:10.440 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 15 1926 1 2025-10-11 13:45:42.391 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 12 10369 1 2025-10-11 13:46:02.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:46:02.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:46:34.213 00:00:10.368 TCP 23.104.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:46:42.640 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-10-11 13:47:34.618 00:00:10.365 TCP 23.104.0.1:41672 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:47:42.855 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41804 10 6452 1 2025-10-11 13:44:40.780 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:44:40.783 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:48:35.021 00:00:10.872 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:48:43.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40314 10 6452 1 2025-10-11 13:49:35.931 00:00:10.373 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:49:43.301 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-10-11 13:50:36.345 00:00:10.365 TCP 23.104.0.1:58996 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:50:43.697 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:37742 10 6452 1 2025-10-11 13:51:02.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:51:02.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:51:36.745 00:00:10.323 TCP 23.104.0.1:41796 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:51:44.514 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-10-11 13:52:37.106 00:00:10.365 TCP 23.104.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:52:44.683 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52256 10 6452 1 2025-10-11 13:53:37.505 00:00:10.326 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:53:44.904 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46400 10 6452 1 2025-10-11 13:50:40.784 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:50:40.782 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 13:54:37.866 00:00:10.372 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:54:45.116 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-10-11 13:55:38.275 00:00:10.360 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:55:45.291 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42256 10 6452 1 2025-10-11 13:56:02.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 13:56:03.171 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 13:56:38.675 00:00:10.376 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:56:45.504 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-10-11 13:57:39.103 00:00:10.361 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:57:45.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45958 10 6452 1 2025-10-11 13:58:39.514 00:00:10.375 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500574, total packets: 1574, avg bps: 1073, avg pps: 0, avg bpp: 318 Time window: 2025-10-11 12:56:40 - 2025-10-11 13:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0059s User: 0.0000s Wall: 0.0025s flows/second: 66421.0 Runtime: 0.0025s