Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 10:59:01.382 00:00:10.366 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-10-14 10:59:12.572 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6452 1 2025-10-14 11:00:01.795 00:00:10.361 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:00:12.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-10-14 10:56:42.168 00:05:02.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 10:56:42.165 00:05:02.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:01:02.192 00:00:10.369 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:01:12.966 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-10-14 11:02:02.600 00:00:10.360 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:02:26.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:02:13.202 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37074 10 6452 1 2025-10-14 11:02:26.062 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:03:03.003 00:00:10.361 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:03:13.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58712 10 6452 1 2025-10-14 11:04:03.401 00:00:10.324 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:04:13.639 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48430 10 6452 1 2025-10-14 11:05:03.767 00:00:10.368 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:05:13.850 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60944 10 6452 1 2025-10-14 11:06:04.173 00:00:10.392 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 15 1926 1 2025-10-14 11:06:14.079 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59760 12 10375 1 2025-10-14 11:02:42.169 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:02:42.167 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:07:04.603 00:00:10.361 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:07:14.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-10-14 11:07:26.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:07:26.356 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:08:05.004 00:00:10.359 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:08:14.527 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44082 10 6452 1 2025-10-14 11:09:05.404 00:00:10.363 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:09:14.756 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-10-14 11:10:05.803 00:00:10.362 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:10:14.935 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-10-14 11:11:06.204 00:00:10.363 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:11:15.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-10-14 11:12:06.610 00:00:10.325 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:12:26.518 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:12:26.511 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:12:15.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-10-14 11:08:42.167 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:08:42.169 00:05:02.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:13:06.975 00:00:10.370 TCP 23.104.0.1:43072 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:13:15.544 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38358 10 6452 1 2025-10-14 11:14:07.382 00:00:10.321 TCP 23.104.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:14:15.709 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-10-14 11:15:07.744 00:00:10.366 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:15:15.880 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-10-14 11:16:08.149 00:00:10.363 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:16:16.093 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-10-14 11:17:08.549 00:00:10.366 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:17:16.309 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55116 10 6452 1 2025-10-14 11:17:26.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:17:26.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:18:08.948 00:00:10.373 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:18:16.528 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 10 6452 1 2025-10-14 11:14:42.172 00:05:02.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:14:42.168 00:05:02.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:19:09.358 00:00:10.367 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:19:16.747 00:00:10.381 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-10-14 11:20:09.762 00:00:10.376 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:20:17.169 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-10-14 11:21:10.185 00:00:10.360 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:21:17.381 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-10-14 11:22:10.589 00:00:10.364 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:22:26.741 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:22:26.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:22:17.604 00:00:10.563 TCP 1.101.0.1:3000 -> 22.102.0.1:32870 10 6452 1 2025-10-14 11:23:11.016 00:00:10.372 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:23:18.209 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52170 11 6775 1 2025-10-14 11:24:11.429 00:00:10.365 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:24:18.418 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-10-14 11:20:42.172 00:05:02.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:20:42.168 00:05:02.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:25:11.835 00:00:10.470 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:25:18.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-10-14 11:26:12.347 00:00:10.363 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:26:18.857 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40812 10 6452 1 2025-10-14 11:27:26.739 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:27:12.750 00:00:10.357 TCP 23.104.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:27:26.857 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:27:19.092 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-10-14 11:28:13.142 00:00:10.371 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:28:19.314 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-10-14 11:29:13.548 00:00:10.368 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:29:19.557 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-10-14 11:30:13.959 00:00:10.365 TCP 23.104.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:30:19.765 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-10-14 11:26:42.170 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:26:42.173 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:31:14.366 00:00:10.330 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:31:19.982 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42962 10 6452 1 2025-10-14 11:32:14.737 00:00:10.366 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:32:26.836 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:32:20.209 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-10-14 11:32:27.107 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:33:15.141 00:00:10.358 TCP 23.104.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:33:20.378 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-10-14 11:34:15.536 00:00:10.362 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:34:20.590 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6452 1 2025-10-14 11:35:15.941 00:00:10.385 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:35:20.765 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33836 10 6452 1 2025-10-14 11:36:16.359 00:00:10.364 TCP 23.104.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:36:20.986 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-10-14 11:32:42.171 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:32:42.174 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:37:26.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:37:26.763 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:37:16.755 00:00:10.338 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:37:21.218 00:00:10.828 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-10-14 11:38:17.124 00:00:10.329 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:38:22.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2025-10-14 11:39:17.488 00:00:10.324 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:39:22.310 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-10-14 11:40:17.855 00:00:10.380 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:40:22.481 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 10 6452 1 2025-10-14 11:41:18.270 00:00:10.366 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:41:22.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48512 10 6452 1 2025-10-14 11:42:27.029 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:42:18.671 00:00:10.380 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:42:27.144 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:42:22.907 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-10-14 11:38:42.173 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:38:42.176 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:43:19.111 00:00:10.367 TCP 23.104.0.1:41158 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:43:23.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32966 10 6452 1 2025-10-14 11:44:19.516 00:00:10.362 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:44:23.295 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-10-14 11:45:19.915 00:00:10.374 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:45:23.505 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-10-14 11:46:20.336 00:00:10.316 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:46:23.679 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49124 10 6452 1 2025-10-14 11:47:27.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:47:27.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:47:20.690 00:00:10.363 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:47:23.896 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-10-14 11:48:21.103 00:00:10.368 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:48:24.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-10-14 11:44:42.176 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:44:42.174 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:49:21.508 00:00:10.364 TCP 23.104.0.1:53298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:49:24.321 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-10-14 11:50:24.494 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-10-14 11:50:21.912 00:00:10.378 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 12 1559 1 2025-10-14 11:51:24.706 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-10-14 11:51:22.332 00:00:10.435 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:52:27.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:52:27.271 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:52:24.917 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59944 10 6452 1 2025-10-14 11:52:22.815 00:00:10.369 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:53:25.127 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-10-14 11:53:23.217 00:00:10.362 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:54:25.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-10-14 11:54:23.622 00:00:10.369 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:50:42.179 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 11:50:42.177 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 11:55:25.506 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-10-14 11:55:24.046 00:00:10.459 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:56:24.542 00:00:10.364 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:56:25.681 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6452 1 2025-10-14 11:57:27.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 11:57:27.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 11:57:24.945 00:00:10.374 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-10-14 11:57:25.850 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-10-14 11:58:26.031 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34714 10 6452 1 2025-10-14 11:58:25.360 00:00:10.362 TCP 23.104.0.1:35710 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503065, total packets: 1580, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-14 10:56:42 - 2025-10-14 11:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 73403.7 Runtime: 0.0023s