Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 13:59:06.495 00:00:10.320 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 13:59:13.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-10-13 14:00:06.850 00:00:10.380 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:00:13.247 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-10-13 13:56:41.712 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 13:56:41.710 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:01:07.269 00:00:10.361 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:01:13.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 10 6452 1 2025-10-13 14:02:00.890 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:02:00.917 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:02:07.663 00:00:10.369 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:02:13.682 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-10-13 14:03:08.097 00:00:10.369 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:03:13.902 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-10-13 14:04:08.507 00:00:10.365 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:04:14.125 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-10-13 14:05:08.910 00:00:10.331 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:05:14.348 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-10-13 14:06:09.280 00:00:10.364 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:06:14.563 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6452 1 2025-10-13 14:02:41.713 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:02:41.711 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:07:00.805 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:07:00.737 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:07:09.682 00:00:10.364 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:07:14.786 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33258 10 6452 1 2025-10-13 14:08:10.105 00:00:10.363 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:08:14.977 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36428 10 6452 1 2025-10-13 14:09:10.507 00:00:10.369 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:09:15.219 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 10 6452 1 2025-10-13 14:10:10.910 00:00:10.367 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:10:15.440 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-10-13 14:11:11.313 00:00:10.320 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:11:15.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-10-13 14:12:01.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:12:01.077 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:12:11.675 00:00:10.380 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:12:15.833 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-10-13 14:08:41.714 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:08:41.717 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:13:16.084 00:00:10.756 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6452 1 2025-10-13 14:13:12.101 00:00:10.367 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:14:12.506 00:00:10.366 TCP 23.104.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:14:16.883 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-10-13 14:15:12.909 00:00:10.338 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:15:17.108 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45906 10 6452 1 2025-10-13 14:16:13.282 00:00:10.361 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:16:17.332 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-10-13 14:17:01.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:17:01.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:17:13.677 00:00:10.366 TCP 23.104.0.1:43028 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:17:17.553 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36496 10 6452 1 2025-10-13 14:18:14.103 00:00:10.368 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:18:17.720 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-10-13 14:14:41.718 00:05:02.449 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:14:41.721 00:05:02.444 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:19:14.506 00:00:10.366 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:19:17.941 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:60538 11 6504 1 2025-10-13 14:20:14.912 00:00:10.362 TCP 23.104.0.1:45732 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:20:18.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-10-13 14:21:15.311 00:00:10.323 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:21:18.465 00:00:10.781 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-10-13 14:22:01.565 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:22:01.445 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:22:15.675 00:00:10.372 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:22:19.283 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-10-13 14:23:16.105 00:00:10.361 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:23:19.459 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47792 10 6452 1 2025-10-13 14:24:16.503 00:00:10.366 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:24:19.677 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-10-13 14:20:41.721 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:20:41.720 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:25:16.910 00:00:10.369 TCP 23.104.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:25:19.897 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-10-13 14:26:20.120 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35816 10 6452 1 2025-10-13 14:26:17.321 00:00:10.367 TCP 23.104.0.1:47312 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:27:01.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:27:01.572 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:27:20.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-10-13 14:27:17.735 00:00:10.412 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:28:18.184 00:00:10.363 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:28:20.521 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-10-13 14:29:20.709 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-10-13 14:29:18.581 00:00:10.417 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:30:20.877 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-10-13 14:30:19.042 00:00:10.326 TCP 23.104.0.1:47842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:26:41.719 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:26:41.722 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:31:19.403 00:00:10.325 TCP 23.104.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:31:21.093 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56660 10 6452 1 2025-10-13 14:32:01.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:32:01.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:32:21.320 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46444 10 6452 1 2025-10-13 14:32:19.765 00:00:10.378 TCP 23.104.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:33:21.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-10-13 14:33:20.176 00:00:10.366 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:34:20.581 00:00:10.364 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:34:21.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-10-13 14:35:20.982 00:00:10.365 TCP 23.104.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:35:21.958 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-10-13 14:36:21.387 00:00:10.396 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 15 1926 1 2025-10-13 14:36:22.197 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 12 10375 1 2025-10-13 14:32:41.725 00:05:02.446 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:32:41.721 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:37:01.765 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:37:01.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:37:22.447 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-10-13 14:37:21.822 00:00:10.344 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:38:22.205 00:00:10.323 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:38:22.659 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-10-13 14:39:22.565 00:00:10.365 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:39:22.879 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-10-13 14:40:22.965 00:00:10.372 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:40:23.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39712 10 6452 1 2025-10-13 14:41:23.378 00:00:10.444 TCP 23.104.0.1:33578 -> 1.101.0.1:3000 15 1926 1 2025-10-13 14:41:23.317 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 12 10375 1 2025-10-13 14:42:01.839 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:42:01.985 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:42:23.523 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-10-13 14:42:23.869 00:00:10.372 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:38:41.724 00:05:02.446 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:38:41.722 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:43:24.273 00:00:10.358 TCP 23.104.0.1:48874 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:43:23.739 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-10-13 14:44:24.673 00:00:10.382 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:44:23.924 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43002 10 6452 1 2025-10-13 14:45:25.109 00:00:10.364 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:45:24.146 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-10-13 14:46:25.516 00:00:10.369 TCP 23.104.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:46:24.364 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60592 10 6452 1 2025-10-13 14:47:01.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:47:01.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:47:24.571 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-10-13 14:47:25.925 00:00:10.387 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:48:24.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54872 10 6452 1 2025-10-13 14:48:26.352 00:00:10.364 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:44:41.726 00:05:02.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:44:41.730 00:05:02.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:49:24.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-10-13 14:49:26.765 00:00:10.379 TCP 23.104.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:50:25.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6452 1 2025-10-13 14:50:27.180 00:00:10.326 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:51:25.439 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-10-13 14:51:27.540 00:00:10.363 TCP 23.104.0.1:53012 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:52:02.185 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:52:02.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:52:25.649 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:47958 10 6452 1 2025-10-13 14:52:27.943 00:00:10.378 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:53:26.221 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-10-13 14:53:28.355 00:00:10.368 TCP 23.104.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:54:26.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51532 10 6452 1 2025-10-13 14:54:28.763 00:00:10.329 TCP 23.104.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:50:41.732 00:05:02.442 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 14:50:41.729 00:05:02.447 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 14:55:26.610 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-10-13 14:55:29.133 00:00:10.367 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:56:26.828 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48562 10 6452 1 2025-10-13 14:56:29.540 00:00:10.325 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:57:01.973 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 14:57:02.099 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 14:57:29.903 00:00:10.369 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-13 14:57:27.015 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-10-13 14:58:27.226 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-10-13 14:58:30.311 00:00:10.367 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1090, avg pps: 0, avg bpp: 319 Time window: 2025-10-13 13:56:41 - 2025-10-13 14:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0021s flows/second: 77804.1 Runtime: 0.0021s