Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 10:58:51.721 00:00:10.368 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-10-13 10:59:26.754 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 10 6452 1 2025-10-13 10:59:52.128 00:00:10.370 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:00:26.964 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-10-13 10:56:41.658 00:05:02.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 10:56:41.660 00:05:02.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:00:52.538 00:00:10.383 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:01:27.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-10-13 11:01:57.532 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:01:57.489 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:01:52.961 00:00:10.367 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:02:27.401 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-10-13 11:02:53.369 00:00:10.374 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:03:27.625 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-10-13 11:03:53.800 00:00:10.366 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:04:28.300 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-10-13 11:04:54.206 00:00:10.360 TCP 23.104.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:05:28.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54398 10 6452 1 2025-10-13 11:05:54.603 00:00:10.364 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:06:28.739 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-10-13 11:02:41.666 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:02:41.667 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:06:57.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:06:57.497 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:06:55.009 00:00:10.363 TCP 23.104.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:07:28.979 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35928 10 6452 1 2025-10-13 11:07:55.416 00:00:10.367 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:08:29.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-10-13 11:08:55.824 00:00:10.366 TCP 23.104.0.1:49702 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:09:29.415 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-10-13 11:09:56.233 00:00:10.367 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:10:29.590 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-10-13 11:10:56.643 00:00:10.325 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:11:29.805 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44888 10 6452 1 2025-10-13 11:11:58.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:11:58.685 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:11:57.005 00:00:10.367 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:12:30.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-10-13 11:08:41.670 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:08:41.667 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:12:57.410 00:00:10.323 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:13:30.255 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35586 10 6452 1 2025-10-13 11:13:57.770 00:00:10.370 TCP 23.104.0.1:57708 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:14:30.429 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-10-13 11:14:58.180 00:00:10.328 TCP 23.104.0.1:43750 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:15:30.600 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-10-13 11:15:58.545 00:00:10.326 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:16:30.823 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 12 6556 1 2025-10-13 11:16:57.723 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:16:57.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:16:58.904 00:00:10.366 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:17:31.068 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-10-13 11:17:59.309 00:00:10.364 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:18:31.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 10 6452 1 2025-10-13 11:14:41.669 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:14:41.672 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:18:59.714 00:00:10.374 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:19:31.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-10-13 11:20:00.122 00:00:10.353 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:20:31.702 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41046 10 6452 1 2025-10-13 11:21:00.494 00:00:10.368 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:21:31.919 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:39438 10 6452 1 2025-10-13 11:21:57.811 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:21:57.724 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:22:00.903 00:00:10.369 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:22:32.285 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-10-13 11:23:01.309 00:00:10.371 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:23:32.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43822 10 6452 1 2025-10-13 11:24:01.715 00:00:10.380 TCP 23.104.0.1:51168 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:20:41.671 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:24:32.714 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-10-13 11:20:41.669 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:25:02.132 00:00:10.371 TCP 23.104.0.1:55608 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:25:32.882 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56706 10 6452 1 2025-10-13 11:26:02.542 00:00:10.609 TCP 23.104.0.1:37866 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:26:33.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-10-13 11:26:58.097 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:26:57.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:27:03.187 00:00:10.365 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:27:33.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 2025-10-13 11:28:03.591 00:00:10.369 TCP 23.104.0.1:52844 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:28:33.505 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-10-13 11:29:03.995 00:00:10.366 TCP 23.104.0.1:42972 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:29:33.722 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34566 10 6452 1 2025-10-13 11:30:04.404 00:00:10.364 TCP 23.104.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:26:41.672 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:30:33.936 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:36690 10 6452 1 2025-10-13 11:26:41.670 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:31:04.806 00:00:10.364 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:31:34.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-10-13 11:31:58.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:31:57.952 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:32:05.211 00:00:10.369 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:32:34.411 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57586 10 6452 1 2025-10-13 11:33:05.629 00:00:10.362 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:33:34.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 10 6452 1 2025-10-13 11:34:06.033 00:00:10.368 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:34:34.852 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-10-13 11:35:06.446 00:00:10.363 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:35:35.039 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-10-13 11:36:06.848 00:00:10.383 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:36:35.264 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50550 10 6452 1 2025-10-13 11:32:41.673 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:32:41.675 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:36:58.031 00:00:00.000 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:36:58.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:37:07.268 00:00:10.364 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:37:35.490 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-10-13 11:38:07.672 00:00:10.373 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:38:36.156 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-10-13 11:39:08.107 00:00:10.364 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:39:36.370 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41772 10 6452 1 2025-10-13 11:40:08.512 00:00:10.324 TCP 23.104.0.1:56632 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:40:36.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-10-13 11:41:08.876 00:00:10.360 TCP 23.104.0.1:57892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:41:36.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-10-13 11:41:58.290 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:41:58.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:42:09.275 00:00:10.360 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:38:41.677 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:38:41.673 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:42:37.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-10-13 11:43:09.673 00:00:10.363 TCP 23.104.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:43:37.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-10-13 11:44:10.093 00:00:10.363 TCP 23.104.0.1:38888 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:44:37.427 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-10-13 11:45:10.497 00:00:10.372 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:45:37.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-10-13 11:46:10.904 00:00:10.397 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 15 1926 1 2025-10-13 11:46:37.838 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 12 10369 1 2025-10-13 11:46:58.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:46:58.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:47:11.343 00:00:10.413 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:47:38.092 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-10-13 11:48:11.795 00:00:10.364 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:44:41.676 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:44:41.677 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:48:38.267 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 10 6452 1 2025-10-13 11:49:12.199 00:00:10.872 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:49:38.486 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-10-13 11:50:13.110 00:00:10.367 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:50:38.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42566 10 6452 1 2025-10-13 11:51:13.513 00:00:10.333 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:51:38.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2025-10-13 11:51:58.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:51:58.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:52:13.876 00:00:10.367 TCP 23.104.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:52:39.096 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-10-13 11:53:14.281 00:00:10.370 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:53:39.271 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-10-13 11:54:14.690 00:00:10.373 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:50:41.676 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 11:50:41.678 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:54:39.485 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-10-13 11:55:15.107 00:00:10.324 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:55:39.699 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-13 11:56:15.467 00:00:10.364 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:56:40.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-10-13 11:56:58.674 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 11:56:58.310 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 11:57:15.869 00:00:10.328 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:57:40.396 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-10-13 11:58:16.258 00:00:10.366 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:58:40.605 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39182 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-13 10:56:41 - 2025-10-13 11:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0014s Wall: 0.0026s flows/second: 61908.5 Runtime: 0.0027s