Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 13:58:42.420 00:00:10.372 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-10-12 13:59:13.523 00:00:10.855 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-10-12 13:59:42.827 00:00:10.362 TCP 23.104.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:00:14.411 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-10-12 13:56:41.223 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 13:56:41.221 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:00:43.231 00:00:10.321 TCP 23.104.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:01:14.582 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-10-12 14:01:32.333 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:01:32.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:01:43.592 00:00:10.369 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:02:14.793 00:00:10.896 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-10-12 14:02:43.997 00:00:10.362 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:03:15.732 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-10-12 14:03:44.399 00:00:10.367 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:04:15.950 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-10-12 14:04:44.799 00:00:10.333 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:05:16.188 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-10-12 14:05:45.177 00:00:10.372 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:06:16.408 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-10-12 14:06:32.282 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:06:32.126 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:02:41.221 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:02:41.224 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:06:45.585 00:00:10.367 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:07:16.629 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-10-12 14:07:45.986 00:00:10.370 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:08:16.845 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-10-12 14:08:46.393 00:00:10.372 TCP 23.104.0.1:56134 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:09:17.087 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-10-12 14:09:46.797 00:00:10.376 TCP 23.104.0.1:50226 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:10:17.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-10-12 14:10:47.214 00:00:10.323 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:11:17.522 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-10-12 14:11:32.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:11:32.267 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:11:47.579 00:00:10.368 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:12:17.693 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55530 10 6452 1 2025-10-12 14:08:41.225 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:08:41.228 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:12:47.984 00:00:10.366 TCP 23.104.0.1:48896 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:13:17.910 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-10-12 14:13:48.388 00:00:10.320 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:14:18.105 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 10 6452 1 2025-10-12 14:14:48.753 00:00:10.375 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:15:18.325 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36220 10 6452 1 2025-10-12 14:15:49.168 00:00:10.610 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:16:18.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-10-12 14:16:32.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:16:32.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:16:49.821 00:00:10.364 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:17:18.746 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-10-12 14:17:50.225 00:00:10.365 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:18:18.917 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-10-12 14:14:41.228 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:14:41.230 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:18:50.629 00:00:10.362 TCP 23.104.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:19:19.715 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-10-12 14:19:51.030 00:00:10.365 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:20:19.937 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-10-12 14:20:51.431 00:00:10.366 TCP 23.104.0.1:40102 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:21:20.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-10-12 14:21:32.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:21:32.563 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:21:51.834 00:00:10.338 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:22:20.392 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44794 10 6452 1 2025-10-12 14:22:52.207 00:00:10.373 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:23:20.620 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60644 10 6452 1 2025-10-12 14:23:52.619 00:00:10.371 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:24:20.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-10-12 14:20:41.230 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:20:41.234 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:24:53.035 00:00:10.367 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:25:21.009 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6452 1 2025-10-12 14:25:53.448 00:00:10.375 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:26:21.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44976 10 6452 1 2025-10-12 14:26:32.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:26:32.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:26:53.873 00:00:10.366 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:27:21.392 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2025-10-12 14:27:54.280 00:00:10.366 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:28:21.595 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-10-12 14:28:54.681 00:00:10.367 TCP 23.104.0.1:48536 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:29:21.804 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-10-12 14:29:55.104 00:00:10.364 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:30:22.026 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6452 1 2025-10-12 14:26:41.235 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:26:41.231 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:30:55.504 00:00:10.368 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:31:33.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:31:22.199 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-10-12 14:31:33.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:31:55.906 00:00:10.371 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:32:22.412 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33934 10 6452 1 2025-10-12 14:32:56.311 00:00:10.365 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:33:22.588 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54910 10 6452 1 2025-10-12 14:33:56.709 00:00:10.378 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:34:22.808 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6452 1 2025-10-12 14:34:57.129 00:00:10.366 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:35:23.052 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56492 10 6452 1 2025-10-12 14:35:57.530 00:00:10.438 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 15 1926 1 2025-10-12 14:36:32.768 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:36:23.275 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 12 10369 1 2025-10-12 14:36:32.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:32:41.233 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:32:41.235 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:36:58.013 00:00:10.337 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:37:23.472 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-10-12 14:37:58.387 00:00:10.330 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:38:23.645 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35070 10 6452 1 2025-10-12 14:38:58.757 00:00:10.393 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:39:23.868 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54446 10 6452 1 2025-10-12 14:39:59.185 00:00:10.372 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:40:24.111 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-10-12 14:40:59.591 00:00:10.373 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:41:24.331 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57024 10 6452 1 2025-10-12 14:41:32.677 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:41:32.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:42:00.004 00:00:10.325 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:42:24.553 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-10-12 14:38:41.243 00:05:02.432 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:38:41.242 00:05:02.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:43:00.366 00:00:10.330 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:43:24.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-10-12 14:44:00.741 00:00:10.328 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:44:25.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39632 10 6452 1 2025-10-12 14:45:01.109 00:00:10.363 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:45:25.298 00:00:16.632 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-10-12 14:46:01.507 00:00:10.368 TCP 23.104.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:46:32.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:46:33.044 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:46:31.978 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-10-12 14:47:01.913 00:00:10.365 TCP 23.104.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:47:32.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-10-12 14:48:02.317 00:00:10.322 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:44:41.244 00:05:02.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:48:32.427 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-10-12 14:44:41.246 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:49:02.677 00:00:10.369 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:49:32.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-12 14:50:03.108 00:00:10.320 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:50:32.821 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51326 10 6452 1 2025-10-12 14:51:03.466 00:00:10.321 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:51:33.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:51:33.011 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:51:33.047 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-10-12 14:52:03.828 00:00:10.400 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:52:33.262 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-10-12 14:53:04.262 00:00:10.367 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:53:33.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-10-12 14:54:04.667 00:00:10.361 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:54:33.660 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-10-12 14:50:41.245 00:05:02.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 14:50:41.247 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 14:55:05.093 00:00:10.372 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:55:33.834 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 10 6452 1 2025-10-12 14:56:05.506 00:00:10.368 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:56:33.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 14:56:33.153 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 14:56:34.065 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42510 10 6452 1 2025-10-12 14:57:05.909 00:00:10.364 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:57:34.281 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-10-12 14:58:06.311 00:00:10.366 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-10-12 14:58:34.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-10-12 13:56:41 - 2025-10-12 14:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0017s Wall: 0.0021s flows/second: 77945.1 Runtime: 0.0021s