Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 09:58:43.112 00:00:10.366 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-10-15 09:59:23.860 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-10-15 09:59:43.509 00:00:10.363 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:00:24.095 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-10-15 09:56:42.568 00:05:02.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 09:56:42.566 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:00:43.907 00:00:10.374 TCP 23.104.0.1:48552 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:01:24.304 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34738 10 6452 1 2025-10-15 10:01:44.318 00:00:10.371 TCP 23.104.0.1:43322 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:02:24.517 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-10-15 10:02:54.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:02:54.186 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:02:44.723 00:00:10.332 TCP 23.104.0.1:36272 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:03:24.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58824 10 6452 1 2025-10-15 10:03:45.104 00:00:10.371 TCP 23.104.0.1:46918 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:04:24.957 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54470 12 6556 1 2025-10-15 10:04:45.511 00:00:10.366 TCP 23.104.0.1:44252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:05:25.197 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-10-15 10:05:45.918 00:00:10.378 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:06:25.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-10-15 10:02:42.568 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:02:42.567 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:06:46.336 00:00:10.364 TCP 23.104.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:07:25.632 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46118 10 6452 1 2025-10-15 10:07:53.823 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:07:54.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:07:46.740 00:00:10.365 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:08:25.806 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-10-15 10:08:47.145 00:00:10.326 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:09:26.035 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-10-15 10:09:47.508 00:00:10.365 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:10:26.257 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-10-15 10:10:47.912 00:00:10.367 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:11:26.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-10-15 10:11:48.320 00:00:10.324 TCP 23.104.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:12:26.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-10-15 10:08:42.568 00:05:02.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:08:42.570 00:05:02.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:12:54.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:12:54.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:12:48.682 00:00:10.364 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:13:26.857 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60698 10 6452 1 2025-10-15 10:13:49.100 00:00:10.364 TCP 23.104.0.1:58532 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:14:27.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-10-15 10:14:49.504 00:00:10.367 TCP 23.104.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:15:27.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-10-15 10:15:49.910 00:00:10.377 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:16:27.510 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59068 10 6452 1 2025-10-15 10:16:50.322 00:00:10.363 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:17:27.682 00:00:10.586 TCP 1.101.0.1:3000 -> 22.102.0.1:42316 10 6452 1 2025-10-15 10:17:54.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:17:54.128 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:17:50.726 00:00:10.381 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:18:28.310 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-10-15 10:14:42.569 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:14:42.571 00:05:02.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:18:51.143 00:00:10.365 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:19:28.490 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-10-15 10:19:51.549 00:00:10.363 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:20:28.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6452 1 2025-10-15 10:20:51.953 00:00:10.328 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:21:28.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-10-15 10:21:52.319 00:00:10.369 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:22:29.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-10-15 10:22:54.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:22:54.583 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:22:52.726 00:00:10.380 TCP 23.104.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:23:29.345 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-10-15 10:23:53.141 00:00:10.368 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:24:29.559 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-10-15 10:20:42.572 00:05:02.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:20:42.577 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:24:53.548 00:00:10.371 TCP 23.104.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:25:29.789 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6452 1 2025-10-15 10:25:53.956 00:00:10.366 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:26:29.997 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6452 1 2025-10-15 10:26:54.363 00:00:10.356 TCP 23.104.0.1:47868 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:27:30.177 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-10-15 10:27:54.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:27:54.641 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:27:54.760 00:00:10.386 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:28:30.352 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-10-15 10:28:55.174 00:00:10.367 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:29:30.570 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-10-15 10:29:55.578 00:00:10.375 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:30:30.743 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 6452 1 2025-10-15 10:26:42.573 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:26:42.577 00:05:02.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:30:55.995 00:00:10.366 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:31:30.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-10-15 10:31:56.401 00:00:10.342 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:32:31.175 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37744 10 6452 1 2025-10-15 10:32:54.598 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:32:54.590 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:32:56.785 00:00:10.370 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:33:31.386 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-10-15 10:33:57.194 00:00:10.368 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:34:31.607 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6452 1 2025-10-15 10:34:57.594 00:00:10.364 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:35:31.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-10-15 10:35:58.005 00:00:10.374 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:32:42.577 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:32:42.574 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:36:32.036 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-10-15 10:36:58.417 00:00:10.364 TCP 23.104.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:37:32.251 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-10-15 10:37:54.700 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:37:54.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:37:58.822 00:00:10.326 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:38:32.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-10-15 10:38:59.187 00:00:10.383 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:39:32.642 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55716 10 6452 1 2025-10-15 10:39:59.610 00:00:10.363 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:40:32.861 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-10-15 10:41:00.011 00:00:10.362 TCP 23.104.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:41:33.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48754 10 6452 1 2025-10-15 10:42:00.413 00:00:10.378 TCP 23.104.0.1:39740 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:42:33.296 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-10-15 10:38:42.576 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:38:42.580 00:05:02.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:42:54.890 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:42:54.522 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:43:00.827 00:00:10.362 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:43:33.463 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-10-15 10:44:01.232 00:00:10.366 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:44:33.641 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 2025-10-15 10:45:01.638 00:00:10.497 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:45:33.857 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6452 1 2025-10-15 10:46:02.177 00:00:10.443 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 15 1926 1 2025-10-15 10:46:34.095 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:39000 12 10375 1 2025-10-15 10:47:02.660 00:00:10.367 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:47:34.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-10-15 10:47:55.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:47:55.340 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:48:03.087 00:00:10.362 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:44:42.581 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:44:42.578 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:48:34.513 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33492 10 6452 1 2025-10-15 10:49:03.486 00:00:10.364 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:49:34.729 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-10-15 10:50:03.888 00:00:10.336 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:50:34.905 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50696 10 6452 1 2025-10-15 10:51:04.262 00:00:10.368 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:51:35.117 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-10-15 10:52:04.665 00:00:10.365 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:52:35.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-10-15 10:52:54.936 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:52:54.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:53:05.088 00:00:10.358 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:53:35.502 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 10 6452 1 2025-10-15 10:54:05.492 00:00:10.367 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:50:42.582 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 10:54:35.723 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-10-15 10:50:42.580 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 10:55:05.903 00:00:10.323 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:55:35.900 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-10-15 10:56:06.263 00:00:10.445 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 15 1926 1 2025-10-15 10:56:36.132 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 12 10369 1 2025-10-15 10:57:06.757 00:00:10.333 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:57:36.385 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-10-15 10:57:55.054 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 10:57:54.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 10:58:07.130 00:00:10.366 TCP 23.104.0.1:47626 -> 1.101.0.1:3000 11 1507 1 2025-10-15 10:58:36.989 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51818 10 6452 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-10-15 09:56:42 - 2025-10-15 10:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0010s User: 0.0039s Wall: 0.0028s flows/second: 58072.3 Runtime: 0.0028s