Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 22:58:55.417 00:00:10.366 TCP 23.104.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-10-13 22:59:19.664 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35856 10 6452 1 2025-10-13 22:59:55.822 00:00:10.373 TCP 23.104.0.1:51678 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:00:19.872 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53364 10 6452 1 2025-10-13 22:56:41.872 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 22:56:41.868 00:05:02.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:00:56.237 00:00:10.377 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:01:20.096 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-10-13 23:02:11.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:01:56.664 00:00:10.378 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:02:11.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:02:20.305 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-10-13 23:02:57.102 00:00:10.368 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:03:20.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-10-13 23:03:57.513 00:00:10.328 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:04:20.732 00:00:10.769 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-10-13 23:04:57.876 00:00:10.329 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:05:21.540 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-10-13 23:05:58.242 00:00:10.441 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:06:21.717 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 12 10375 1 2025-10-13 23:02:41.872 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:02:41.872 00:05:02.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:06:58.723 00:00:10.383 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:07:11.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:07:11.997 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:07:21.964 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56140 10 6452 1 2025-10-13 23:07:59.132 00:00:10.365 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:08:22.189 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-10-13 23:08:59.543 00:00:10.378 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:09:22.403 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-10-13 23:09:59.960 00:00:10.363 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:10:22.579 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-10-13 23:11:00.363 00:00:10.359 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:11:22.794 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-10-13 23:12:00.761 00:00:10.373 TCP 23.104.0.1:35558 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:12:12.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:12:12.057 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:12:22.992 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 12 6544 1 2025-10-13 23:08:41.873 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:08:41.876 00:05:02.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:13:01.169 00:00:10.329 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:13:23.213 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-10-13 23:14:01.536 00:00:10.687 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:14:23.386 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-10-13 23:15:02.263 00:00:10.367 TCP 23.104.0.1:42460 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:15:23.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-10-13 23:16:02.668 00:00:10.644 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:16:23.775 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-10-13 23:17:12.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:17:12.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:17:03.348 00:00:10.328 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:17:23.951 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:51860 10 6452 1 2025-10-13 23:18:03.708 00:00:10.367 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:18:24.138 00:00:10.989 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-10-13 23:14:41.875 00:05:02.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:14:41.878 00:05:02.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:19:04.110 00:00:10.366 TCP 23.104.0.1:54684 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:19:25.166 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40702 10 6452 1 2025-10-13 23:20:04.513 00:00:10.542 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:20:25.382 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-10-13 23:21:05.105 00:00:10.368 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:21:25.553 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-10-13 23:22:12.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:22:12.228 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:22:05.509 00:00:10.382 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:22:25.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-10-13 23:23:05.928 00:00:10.397 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:23:25.980 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-10-13 23:24:06.366 00:00:10.339 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:24:26.211 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-10-13 23:20:41.875 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:20:41.874 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:25:06.742 00:00:10.324 TCP 23.104.0.1:51684 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:25:26.595 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39726 10 6452 1 2025-10-13 23:26:07.107 00:00:10.367 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:26:26.814 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-10-13 23:27:12.478 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:27:12.126 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:27:07.510 00:00:10.340 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:27:26.987 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-10-13 23:28:07.888 00:00:10.325 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:28:27.210 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:57788 10 6452 1 2025-10-13 23:29:08.255 00:00:10.366 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:29:27.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-10-13 23:30:08.659 00:00:10.361 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:30:27.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45120 10 6452 1 2025-10-13 23:26:41.877 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:26:41.875 00:05:02.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:31:09.089 00:00:10.402 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:31:27.831 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:59216 12 10375 1 2025-10-13 23:32:12.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:32:12.266 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:32:09.534 00:00:10.367 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:32:28.045 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6452 1 2025-10-13 23:33:09.938 00:00:10.374 TCP 23.104.0.1:38102 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:33:28.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-10-13 23:34:10.357 00:00:10.329 TCP 23.104.0.1:59784 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:34:28.432 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43860 10 6452 1 2025-10-13 23:35:10.722 00:00:10.377 TCP 23.104.0.1:43962 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:35:28.641 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-10-13 23:36:11.133 00:00:10.367 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:36:28.853 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-10-13 23:32:41.876 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:32:41.878 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:37:12.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:37:12.155 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:37:11.532 00:00:10.366 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:37:29.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-10-13 23:38:11.938 00:00:10.378 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:38:29.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-10-13 23:39:12.353 00:00:10.368 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:39:29.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6452 1 2025-10-13 23:40:12.767 00:00:10.373 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:40:29.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-10-13 23:41:13.183 00:00:10.433 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 15 1926 1 2025-10-13 23:41:29.928 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 12 10584 1 2025-10-13 23:42:12.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:42:12.613 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:42:13.665 00:00:10.364 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:42:30.194 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6661 1 2025-10-13 23:38:41.881 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:38:41.878 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:43:14.095 00:00:10.361 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:43:30.413 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6661 1 2025-10-13 23:44:14.495 00:00:10.364 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:44:30.584 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6661 1 2025-10-13 23:45:14.902 00:00:10.366 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:45:30.806 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6661 1 2025-10-13 23:46:15.315 00:00:10.374 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:46:30.977 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6661 1 2025-10-13 23:47:12.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:47:12.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:47:15.728 00:00:10.374 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:47:31.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6661 1 2025-10-13 23:48:16.143 00:00:10.368 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:44:41.882 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:48:31.425 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40604 10 6661 1 2025-10-13 23:44:41.881 00:05:02.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:49:16.544 00:00:10.325 TCP 23.104.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:49:31.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6661 1 2025-10-13 23:50:16.906 00:00:10.330 TCP 23.104.0.1:43438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:50:31.863 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6661 1 2025-10-13 23:51:17.272 00:00:10.329 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:51:32.065 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42552 10 6661 1 2025-10-13 23:52:12.746 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:52:12.811 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:52:17.638 00:00:10.364 TCP 23.104.0.1:52446 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:52:32.278 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6661 1 2025-10-13 23:53:18.064 00:00:10.367 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:53:32.503 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6661 1 2025-10-13 23:54:18.468 00:00:10.362 TCP 23.104.0.1:57646 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:50:41.884 00:05:02.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 23:54:32.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6661 1 2025-10-13 23:50:41.883 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:55:18.866 00:00:10.365 TCP 23.104.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:55:32.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50126 10 6661 1 2025-10-13 23:56:19.273 00:00:10.365 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:56:33.112 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36776 10 6661 1 2025-10-13 23:57:13.301 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 23:57:12.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 23:57:19.692 00:00:10.369 TCP 23.104.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:57:33.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6661 1 2025-10-13 23:58:20.123 00:00:10.329 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:58:33.540 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6661 1 Summary: total flows: 164, total bytes: 515228, total packets: 1592, avg bps: 1107, avg pps: 0, avg bpp: 323 Time window: 2025-10-13 22:56:41 - 2025-10-13 23:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0017s Wall: 0.0026s flows/second: 63892.4 Runtime: 0.0026s