Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 19:58:41.970 00:00:10.340 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-10-17 19:59:03.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 19:59:03.616 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 19:59:33.205 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39776 10 6452 1 2025-10-17 19:59:42.343 00:00:10.327 TCP 23.104.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:00:33.427 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-10-17 19:56:43.756 00:05:02.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 19:56:43.758 00:05:02.627 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:00:42.707 00:00:10.955 TCP 23.104.0.1:37664 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:01:33.643 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-10-17 20:01:43.700 00:00:10.325 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:02:33.865 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 10 6452 1 2025-10-17 20:02:44.092 00:00:10.366 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:03:34.057 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-10-17 20:03:44.498 00:00:16.676 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:04:04.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:04:03.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:04:34.274 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-10-17 20:04:51.233 00:00:10.357 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:05:34.486 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46874 10 6452 1 2025-10-17 20:05:51.630 00:00:10.366 TCP 23.104.0.1:59232 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:06:34.695 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-10-17 20:02:43.758 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:02:43.760 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:06:52.035 00:00:10.722 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 15 1926 1 2025-10-17 20:07:34.910 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 12 10375 1 2025-10-17 20:07:52.797 00:00:10.363 TCP 23.104.0.1:57034 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:08:35.151 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-10-17 20:09:03.895 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:09:03.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:08:53.204 00:00:10.363 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:09:35.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-10-17 20:09:53.608 00:00:10.324 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:10:35.569 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6452 1 2025-10-17 20:10:53.975 00:00:10.375 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:11:35.775 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42568 10 6452 1 2025-10-17 20:11:54.387 00:00:10.363 TCP 23.104.0.1:39536 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:12:35.988 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-10-17 20:08:43.774 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:08:43.772 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:12:54.788 00:00:10.323 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:13:36.233 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-10-17 20:14:03.852 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:14:04.092 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:13:55.148 00:00:10.365 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:14:36.450 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-10-17 20:14:55.552 00:00:10.360 TCP 23.104.0.1:43158 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:15:36.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37550 10 6452 1 2025-10-17 20:15:55.952 00:00:10.370 TCP 23.104.0.1:38548 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:16:36.839 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-10-17 20:16:56.355 00:00:10.361 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:17:37.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-10-17 20:17:56.753 00:00:10.369 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:14:43.768 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:14:43.771 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:18:37.284 00:00:10.682 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-10-17 20:19:04.210 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:19:03.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:18:57.157 00:00:10.724 TCP 23.104.0.1:54454 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:19:38.026 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-10-17 20:19:57.921 00:00:10.374 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:20:38.239 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-10-17 20:20:58.334 00:00:10.372 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:21:38.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43144 10 6452 1 2025-10-17 20:21:58.764 00:00:10.369 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:22:38.667 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-10-17 20:22:59.168 00:00:10.368 TCP 23.104.0.1:52948 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:23:38.834 00:00:10.913 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-10-17 20:24:04.577 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:24:04.425 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:23:59.572 00:00:10.374 TCP 23.104.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:20:43.771 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:24:39.790 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-10-17 20:20:43.770 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:24:59.976 00:00:10.338 TCP 23.104.0.1:55522 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:25:39.960 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-10-17 20:26:00.351 00:00:10.330 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:26:40.138 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-10-17 20:27:00.718 00:00:10.381 TCP 23.104.0.1:39324 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:27:40.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60316 10 6452 1 2025-10-17 20:28:01.134 00:00:10.360 TCP 23.104.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:28:40.562 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-10-17 20:29:04.282 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:29:04.351 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:29:01.531 00:00:10.370 TCP 23.104.0.1:43558 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:29:40.763 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-10-17 20:30:01.938 00:00:10.341 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:26:43.773 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:26:43.775 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:30:40.977 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45486 10 6452 1 2025-10-17 20:31:02.316 00:00:10.370 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:31:41.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-10-17 20:32:02.720 00:00:10.327 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:32:41.417 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-10-17 20:33:03.111 00:00:10.374 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:33:41.627 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50610 10 6452 1 2025-10-17 20:34:04.356 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:34:04.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:34:03.519 00:00:10.388 TCP 23.104.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:34:41.832 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-10-17 20:35:03.950 00:00:10.380 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:35:42.008 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36030 10 6452 1 2025-10-17 20:36:04.368 00:00:10.367 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:32:43.773 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:32:43.775 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:36:42.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55446 10 6452 1 2025-10-17 20:37:04.773 00:00:10.374 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:37:42.439 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59858 10 6452 1 2025-10-17 20:38:05.185 00:00:10.411 TCP 23.104.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:38:42.674 00:00:11.317 TCP 1.101.0.1:3000 -> 22.102.0.1:35480 10 6452 1 2025-10-17 20:39:04.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:39:04.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:39:05.637 00:00:10.364 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:39:44.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-10-17 20:40:06.033 00:00:11.072 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:40:44.255 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58692 10 6452 1 2025-10-17 20:41:07.143 00:00:11.439 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:41:44.467 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-10-17 20:42:08.614 00:00:10.765 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:38:43.776 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:38:43.773 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:42:44.686 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-10-17 20:43:09.414 00:00:10.365 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:43:45.231 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44916 10 6452 1 2025-10-17 20:44:04.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:44:04.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:44:09.818 00:00:10.334 TCP 23.104.0.1:57240 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:44:45.448 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6452 1 2025-10-17 20:45:10.187 00:00:10.366 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:45:45.614 00:00:10.408 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-10-17 20:46:10.591 00:00:10.373 TCP 23.104.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:46:46.079 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46826 10 6452 1 2025-10-17 20:47:11.007 00:00:10.380 TCP 23.104.0.1:41650 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:47:46.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-17 20:48:11.449 00:00:10.424 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:44:43.776 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:44:43.779 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:48:46.506 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 10 6452 1 2025-10-17 20:49:04.851 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:49:04.808 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:49:11.913 00:00:10.361 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:49:46.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59988 10 6452 1 2025-10-17 20:50:12.319 00:00:10.574 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:50:46.930 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:37740 10 6452 1 2025-10-17 20:51:12.932 00:00:10.380 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:51:47.124 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-10-17 20:52:13.351 00:00:10.374 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:52:47.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57458 10 6452 1 2025-10-17 20:53:13.765 00:00:10.368 TCP 23.104.0.1:49256 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:53:47.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-10-17 20:54:04.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:54:04.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:54:14.172 00:00:10.368 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:50:43.779 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 20:50:43.781 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:54:47.784 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-10-17 20:55:14.582 00:00:10.370 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:55:47.998 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-10-17 20:56:14.990 00:00:10.686 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:56:48.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-10-17 20:57:15.713 00:00:10.381 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:57:48.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6452 1 2025-10-17 20:58:16.132 00:00:10.367 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-10-17 19:56:43 - 2025-10-17 20:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0024s User: 0.0024s Wall: 0.0041s flows/second: 39305.0 Runtime: 0.0042s