Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 22:58:57.805 00:00:10.372 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 22:59:32.087 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48462 10 6452 1 2025-10-11 22:59:58.219 00:00:10.363 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-10-11 22:56:40.943 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:00:32.311 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44998 10 6452 1 2025-10-11 22:56:40.939 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:01:13.946 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:00:58.625 00:00:10.372 TCP 23.104.0.1:50246 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:01:13.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:01:32.554 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-10-11 23:01:59.053 00:00:10.364 TCP 23.104.0.1:55220 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:02:32.733 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-10-11 23:02:59.454 00:00:10.373 TCP 23.104.0.1:43724 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:03:32.971 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-10-11 23:03:59.871 00:00:10.363 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:04:33.212 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-10-11 23:05:00.271 00:00:10.368 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:05:33.436 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 10 6452 1 2025-10-11 23:06:00.674 00:00:10.365 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:06:14.099 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:06:14.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:06:33.654 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-10-11 23:02:40.940 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:02:40.943 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:07:01.099 00:00:10.367 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:07:33.864 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-10-11 23:08:01.507 00:00:10.370 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:08:34.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39004 10 6452 1 2025-10-11 23:09:01.916 00:00:10.327 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:09:34.308 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-10-11 23:10:02.296 00:00:10.369 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:10:34.493 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-10-11 23:11:14.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:11:14.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:11:02.700 00:00:10.331 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:11:34.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-10-11 23:12:03.092 00:00:10.365 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:12:34.916 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 10 6452 1 2025-10-11 23:08:40.942 00:05:02.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:08:40.945 00:05:02.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:13:03.494 00:00:10.359 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:13:35.138 00:00:10.831 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-10-11 23:14:03.894 00:00:10.369 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:14:36.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-10-11 23:15:04.299 00:00:10.365 TCP 23.104.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:15:36.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-10-11 23:16:14.374 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:16:04.701 00:00:10.364 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:16:14.292 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:16:36.436 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 10 6452 1 2025-10-11 23:17:05.108 00:00:10.320 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:17:36.653 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56798 10 6452 1 2025-10-11 23:18:05.467 00:00:10.357 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:18:36.862 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-10-11 23:14:40.942 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:14:40.945 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:19:05.862 00:00:10.366 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:19:37.043 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 12 6556 1 2025-10-11 23:20:06.268 00:00:10.372 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:20:37.258 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-10-11 23:21:14.271 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:21:14.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:21:06.677 00:00:10.373 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:21:37.429 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-10-11 23:22:07.105 00:00:10.365 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:22:37.651 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6452 1 2025-10-11 23:23:07.513 00:00:10.360 TCP 23.104.0.1:41226 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:23:37.870 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-10-11 23:24:07.910 00:00:10.359 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:20:40.946 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:20:40.943 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:24:38.091 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-10-11 23:25:08.309 00:00:10.365 TCP 23.104.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:25:38.305 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-10-11 23:26:14.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:26:14.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:26:08.713 00:00:10.369 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:26:38.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 10 6452 1 2025-10-11 23:27:09.122 00:00:10.383 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:27:38.733 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 12 6556 1 2025-10-11 23:28:09.548 00:00:10.362 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:28:38.956 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39366 10 6452 1 2025-10-11 23:29:09.946 00:00:10.328 TCP 23.104.0.1:54218 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:29:39.184 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-10-11 23:30:10.317 00:00:10.365 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:26:40.947 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:26:40.945 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:30:39.372 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45492 10 6452 1 2025-10-11 23:31:14.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:31:14.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:31:10.721 00:00:10.372 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:31:39.582 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-10-11 23:32:11.137 00:00:10.374 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:32:39.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-10-11 23:33:11.551 00:00:10.374 TCP 23.104.0.1:41604 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:33:40.032 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-10-11 23:34:11.962 00:00:10.367 TCP 23.104.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:34:40.245 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-10-11 23:35:12.363 00:00:10.366 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:35:40.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-10-11 23:36:14.494 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:36:14.438 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:36:12.766 00:00:10.374 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:32:40.948 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:32:40.949 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:36:40.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-10-11 23:37:13.178 00:00:10.370 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:37:40.882 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-10-11 23:38:13.584 00:00:10.368 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:38:41.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54434 10 6452 1 2025-10-11 23:39:13.988 00:00:10.369 TCP 23.104.0.1:40020 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:39:41.317 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-10-11 23:40:14.389 00:00:10.368 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:40:41.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 12 6556 1 2025-10-11 23:41:14.896 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:41:14.792 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:41:14.797 00:00:10.361 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:41:41.695 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-10-11 23:42:15.201 00:00:10.363 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:38:40.950 00:05:02.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:38:40.949 00:05:02.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:42:41.898 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-10-11 23:43:15.603 00:00:10.364 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:43:42.081 00:00:11.917 TCP 1.101.0.1:3000 -> 22.102.0.1:34578 10 6452 1 2025-10-11 23:44:16.010 00:00:10.325 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:44:44.056 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-10-11 23:45:16.371 00:00:10.322 TCP 23.104.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:45:44.226 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-10-11 23:46:14.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:46:14.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:46:16.728 00:00:10.369 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:46:44.443 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55504 10 6452 1 2025-10-11 23:47:17.137 00:00:10.366 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:47:44.618 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-10-11 23:48:17.537 00:00:10.366 TCP 23.104.0.1:42258 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:44:40.952 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:44:40.950 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:48:44.834 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-10-11 23:49:17.942 00:00:10.372 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:49:45.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-10-11 23:50:18.351 00:00:10.367 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:50:45.285 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57158 10 6452 1 2025-10-11 23:51:14.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:51:14.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:51:18.756 00:00:10.373 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:51:45.492 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43404 10 6452 1 2025-10-11 23:52:19.163 00:00:10.361 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:52:45.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-10-11 23:53:19.566 00:00:10.828 TCP 23.104.0.1:38044 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:53:45.873 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-10-11 23:54:20.429 00:00:10.364 TCP 23.104.0.1:52676 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:50:40.953 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 23:50:40.951 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 23:54:46.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34134 10 6452 1 2025-10-11 23:55:20.832 00:00:10.387 TCP 23.104.0.1:42600 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:55:46.293 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-10-11 23:56:15.166 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 23:56:15.262 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 23:56:21.264 00:00:10.378 TCP 23.104.0.1:38302 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:56:46.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-10-11 23:57:21.680 00:00:10.326 TCP 23.104.0.1:37398 -> 1.101.0.1:3000 11 1507 1 2025-10-11 23:57:46.740 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-10-11 23:58:22.050 00:00:10.369 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492208, total packets: 1568, avg bps: 1060, avg pps: 0, avg bpp: 313 Time window: 2025-10-11 22:56:40 - 2025-10-11 23:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0029s Wall: 0.0025s flows/second: 66208.7 Runtime: 0.0025s