Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 18:59:13.471 00:00:10.361 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-10-13 18:59:23.076 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48220 10 6452 1 2025-10-13 19:00:13.871 00:00:10.366 TCP 23.104.0.1:46044 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:00:23.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48900 10 6452 1 2025-10-13 18:56:41.802 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 18:56:41.804 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:01:14.280 00:00:10.363 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:01:23.498 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34744 10 6452 1 2025-10-13 19:02:07.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:02:07.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:02:14.684 00:00:10.325 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:02:23.716 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41784 10 6452 1 2025-10-13 19:03:15.061 00:00:10.367 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:03:23.891 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-10-13 19:04:15.461 00:00:10.319 TCP 23.104.0.1:49304 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:04:24.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-10-13 19:05:15.828 00:00:10.374 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:05:24.322 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58598 10 6452 1 2025-10-13 19:06:16.238 00:00:10.378 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:06:24.499 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-10-13 19:02:41.802 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:02:41.805 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:07:07.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:07:07.107 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:07:16.645 00:00:10.364 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:07:24.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54788 10 6452 1 2025-10-13 19:08:17.052 00:00:10.362 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:08:24.923 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-10-13 19:09:17.454 00:00:10.366 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:09:25.141 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-10-13 19:10:17.863 00:00:10.375 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:10:25.360 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 10 6452 1 2025-10-13 19:11:18.277 00:00:10.374 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:11:25.574 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-10-13 19:12:07.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:12:07.064 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:12:18.710 00:00:10.378 TCP 23.104.0.1:59788 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:12:25.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50550 10 6452 1 2025-10-13 19:08:41.806 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:08:41.805 00:05:02.438 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:13:19.120 00:00:10.375 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:13:26.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44738 10 6452 1 2025-10-13 19:14:19.533 00:00:10.326 TCP 23.104.0.1:43026 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:14:26.244 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39734 10 6452 1 2025-10-13 19:15:19.895 00:00:10.375 TCP 23.104.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:15:26.471 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-10-13 19:16:20.309 00:00:10.367 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:16:26.695 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-10-13 19:17:07.325 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:17:07.265 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:17:20.711 00:00:10.328 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:17:26.882 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-10-13 19:18:21.105 00:00:10.371 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:18:27.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-10-13 19:14:41.805 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:14:41.808 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:19:21.530 00:00:10.367 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:19:27.340 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-10-13 19:20:21.935 00:00:10.381 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:20:27.563 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-10-13 19:21:22.349 00:00:10.364 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:21:27.789 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 10 6452 1 2025-10-13 19:22:07.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:22:07.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:22:22.754 00:00:10.417 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:22:28.012 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-10-13 19:23:23.214 00:00:10.364 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:23:28.229 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49924 10 6452 1 2025-10-13 19:24:23.611 00:00:10.371 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:24:28.416 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 2025-10-13 19:20:41.807 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:20:41.808 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:25:24.022 00:00:10.318 TCP 23.104.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:25:28.631 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 10 6452 1 2025-10-13 19:26:24.379 00:00:10.367 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:26:28.854 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56572 10 6452 1 2025-10-13 19:27:07.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:27:07.646 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:27:24.784 00:00:10.414 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:27:29.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-10-13 19:28:25.234 00:00:10.363 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:28:29.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-10-13 19:29:25.636 00:00:10.363 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:29:29.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 10 6452 1 2025-10-13 19:30:26.037 00:00:10.367 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:30:29.721 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-10-13 19:26:41.807 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:26:41.810 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:31:26.443 00:00:10.330 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:31:29.942 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49234 10 6452 1 2025-10-13 19:32:07.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:32:07.416 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:32:30.169 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-10-13 19:32:26.801 00:00:10.334 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:33:30.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33812 10 6452 1 2025-10-13 19:33:27.170 00:00:10.366 TCP 23.104.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:34:30.569 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-10-13 19:34:27.580 00:00:10.387 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:35:28.034 00:00:10.323 TCP 23.104.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:35:30.746 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49234 10 6452 1 2025-10-13 19:36:30.973 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:40356 10 6452 1 2025-10-13 19:36:28.393 00:00:10.364 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:32:41.811 00:05:02.438 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:32:41.813 00:05:02.433 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:37:07.822 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:37:07.687 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:37:28.794 00:00:10.373 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:37:31.174 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-10-13 19:38:31.383 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6452 1 2025-10-13 19:38:29.205 00:00:10.368 TCP 23.104.0.1:48092 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:39:31.593 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-10-13 19:39:29.609 00:00:10.367 TCP 23.104.0.1:37316 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:40:30.016 00:00:10.364 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:40:31.811 00:00:10.370 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-10-13 19:41:30.417 00:00:10.445 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 15 1926 1 2025-10-13 19:41:32.218 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 12 10369 1 2025-10-13 19:42:07.782 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:42:07.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:42:30.900 00:00:10.366 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:38:41.814 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:38:41.812 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:42:32.466 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40866 10 6452 1 2025-10-13 19:43:31.308 00:00:10.364 TCP 23.104.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:43:32.689 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-10-13 19:44:32.916 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58394 10 6452 1 2025-10-13 19:44:31.709 00:00:10.328 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:45:33.142 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-10-13 19:45:32.105 00:00:10.361 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:46:33.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43040 10 6452 1 2025-10-13 19:46:32.508 00:00:10.417 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:47:07.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:47:07.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:47:32.961 00:00:10.361 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:47:33.566 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-10-13 19:48:33.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-10-13 19:44:41.814 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:44:41.817 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:48:33.363 00:00:10.359 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:49:33.962 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:34298 12 6556 1 2025-10-13 19:49:33.762 00:00:10.328 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:50:34.206 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-10-13 19:50:34.129 00:00:10.360 TCP 23.104.0.1:40454 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:51:34.532 00:00:10.368 TCP 23.104.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:51:34.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-10-13 19:52:07.946 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:52:07.877 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:52:34.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-10-13 19:52:34.937 00:00:10.377 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:53:34.854 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-10-13 19:53:35.352 00:00:10.360 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:54:35.753 00:00:10.390 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:50:41.818 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 19:50:41.816 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 19:54:35.081 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-10-13 19:55:35.290 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59660 10 6452 1 2025-10-13 19:55:36.179 00:00:10.364 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:56:36.584 00:00:10.364 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:56:35.501 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-10-13 19:57:08.183 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 19:57:08.092 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 19:57:36.986 00:00:13.929 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 13 1611 1 2025-10-13 19:57:35.716 00:00:15.111 TCP 1.101.0.1:3000 -> 22.102.0.1:47016 11 6504 1 2025-10-13 19:58:40.950 00:00:10.364 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-10-13 19:58:40.866 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 Summary: total flows: 164, total bytes: 502944, total packets: 1583, avg bps: 1078, avg pps: 0, avg bpp: 317 Time window: 2025-10-13 18:56:41 - 2025-10-13 19:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0026s flows/second: 62499.2 Runtime: 0.0026s