Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 17:58:46.352 00:00:10.364 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:59:09.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-10-13 17:59:46.759 00:00:10.385 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:00:09.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54212 10 6452 1 2025-10-13 17:56:41.785 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:56:41.783 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:00:47.175 00:00:10.364 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:01:09.971 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46776 12 6556 1 2025-10-13 18:01:47.575 00:00:10.379 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:02:06.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:02:05.992 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:02:10.193 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-10-13 18:02:47.989 00:00:10.383 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:03:10.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-10-13 18:03:48.395 00:00:10.360 TCP 23.104.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:04:10.581 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-10-13 18:04:48.789 00:00:10.344 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:05:10.800 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35154 10 6452 1 2025-10-13 18:05:49.175 00:00:10.362 TCP 23.104.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:06:11.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-10-13 18:02:41.788 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:02:41.786 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:06:49.572 00:00:10.326 TCP 23.104.0.1:51762 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:07:05.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:07:05.997 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:07:11.252 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-10-13 18:07:49.937 00:00:10.377 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:08:11.423 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39582 10 6452 1 2025-10-13 18:08:50.352 00:00:10.365 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:09:11.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-10-13 18:09:50.755 00:00:10.372 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:10:11.820 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-10-13 18:10:51.164 00:00:10.366 TCP 23.104.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:11:12.079 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-10-13 18:11:51.561 00:00:10.364 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:12:05.989 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:12:06.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:12:12.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6452 1 2025-10-13 18:08:41.789 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:08:41.788 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:12:51.967 00:00:10.365 TCP 23.104.0.1:50906 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:13:12.509 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33110 10 6452 1 2025-10-13 18:13:52.371 00:00:10.371 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:14:12.680 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-10-13 18:14:52.781 00:00:10.330 TCP 23.104.0.1:49580 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:15:12.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 10 6452 1 2025-10-13 18:15:53.149 00:00:10.367 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:16:13.109 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 2025-10-13 18:17:06.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:16:53.558 00:00:10.368 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:17:06.092 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:17:13.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-10-13 18:17:53.968 00:00:10.378 TCP 23.104.0.1:37596 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:18:13.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-10-13 18:14:41.789 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:14:41.792 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:18:54.384 00:00:10.362 TCP 23.104.0.1:60078 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:19:13.721 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-10-13 18:19:54.784 00:00:10.887 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:20:13.894 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-10-13 18:20:55.707 00:00:10.325 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:21:14.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52850 10 6452 1 2025-10-13 18:22:06.273 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:21:56.097 00:00:10.363 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:22:06.226 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:22:14.338 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6452 1 2025-10-13 18:22:56.501 00:00:10.367 TCP 23.104.0.1:40344 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:23:14.555 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54034 10 6452 1 2025-10-13 18:23:56.906 00:00:10.368 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:24:14.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-10-13 18:20:41.793 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:20:41.789 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:24:57.315 00:00:10.365 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:25:14.957 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-10-13 18:25:57.715 00:00:11.137 TCP 23.104.0.1:60494 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:26:15.137 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-10-13 18:27:06.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:27:06.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:26:58.887 00:00:10.374 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:27:15.350 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-10-13 18:27:59.300 00:00:10.365 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:28:15.575 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-10-13 18:28:59.704 00:00:10.370 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:29:15.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-10-13 18:30:00.113 00:00:10.321 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:30:15.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34274 10 6452 1 2025-10-13 18:26:41.794 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:26:41.797 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:31:00.468 00:00:11.249 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:31:16.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39810 10 6452 1 2025-10-13 18:32:06.383 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:32:06.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:32:01.751 00:00:10.378 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:32:16.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-10-13 18:33:02.169 00:00:10.361 TCP 23.104.0.1:45492 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:33:16.646 00:00:10.577 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6452 1 2025-10-13 18:34:02.570 00:00:10.371 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:34:17.259 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-10-13 18:35:02.978 00:00:10.371 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:35:17.486 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-10-13 18:36:03.385 00:00:10.369 TCP 23.104.0.1:47686 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:36:17.702 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 10 6452 1 2025-10-13 18:32:41.799 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:32:41.796 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:37:06.451 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:37:06.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:37:03.797 00:00:10.329 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:37:17.919 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-10-13 18:38:04.165 00:00:10.641 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:38:18.133 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 10 6452 1 2025-10-13 18:39:04.854 00:00:10.376 TCP 23.104.0.1:47986 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:39:18.356 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-10-13 18:40:05.268 00:00:10.335 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:40:18.573 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-10-13 18:41:05.680 00:00:10.368 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:41:18.786 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-10-13 18:42:06.655 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:42:06.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:42:06.104 00:00:10.365 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:42:19.013 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-10-13 18:38:41.799 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:38:41.797 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:43:06.508 00:00:10.364 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:43:19.238 00:00:10.536 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-10-13 18:44:06.913 00:00:10.946 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:44:19.811 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48830 10 6452 1 2025-10-13 18:45:07.897 00:00:10.370 TCP 23.104.0.1:57354 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:45:20.036 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-10-13 18:46:08.310 00:00:10.325 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:46:20.254 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-10-13 18:47:06.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:47:06.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:47:08.672 00:00:10.329 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:47:20.468 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 2025-10-13 18:48:09.040 00:00:10.370 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:48:20.683 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-10-13 18:44:41.801 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:44:41.799 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:49:09.444 00:00:10.364 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:49:20.912 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-10-13 18:50:09.849 00:00:10.381 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:50:21.142 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-10-13 18:51:10.280 00:00:10.398 TCP 23.104.0.1:37198 -> 1.101.0.1:3000 15 1926 1 2025-10-13 18:51:21.355 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 12 10369 1 2025-10-13 18:52:06.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:52:06.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:52:10.721 00:00:10.321 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:52:21.596 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6452 1 2025-10-13 18:53:11.105 00:00:10.317 TCP 23.104.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:53:21.815 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43152 10 6452 1 2025-10-13 18:54:11.463 00:00:10.326 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:54:22.064 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-10-13 18:50:41.803 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 18:50:41.799 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:55:11.825 00:00:10.363 TCP 23.104.0.1:59796 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:55:22.276 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6452 1 2025-10-13 18:56:12.229 00:00:10.367 TCP 23.104.0.1:42912 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:56:22.497 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-10-13 18:57:06.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 18:57:06.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 18:57:12.634 00:00:10.367 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:57:22.672 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34146 10 6452 1 2025-10-13 18:58:13.035 00:00:10.364 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:58:22.854 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-13 17:56:41 - 2025-10-13 18:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0019s Wall: 0.0028s flows/second: 57726.2 Runtime: 0.0029s