Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 09:59:08.348 00:00:10.375 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-10-18 09:59:20.612 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 09:59:20.550 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 09:59:25.598 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45764 10 6452 1 2025-10-18 10:00:08.749 00:00:10.367 TCP 23.104.0.1:60608 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:00:25.830 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-10-18 09:56:44.095 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 09:56:44.101 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:01:09.150 00:00:10.364 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:01:26.011 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-10-18 10:02:09.553 00:00:10.368 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:02:26.228 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:36592 12 10375 1 2025-10-18 10:03:09.958 00:00:10.443 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 15 1926 1 2025-10-18 10:03:26.431 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-10-18 10:04:20.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:04:10.437 00:00:10.365 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:04:20.536 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:04:26.614 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-10-18 10:05:10.838 00:00:10.343 TCP 23.104.0.1:50628 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:05:26.787 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55810 10 6452 1 2025-10-18 10:06:11.215 00:00:10.551 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:06:27.002 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-10-18 10:02:44.101 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:02:44.098 00:05:02.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:07:11.807 00:00:10.365 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:07:27.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-10-18 10:08:12.210 00:00:10.365 TCP 23.104.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:08:27.349 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6452 1 2025-10-18 10:09:20.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:09:20.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:09:12.613 00:00:10.369 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:09:27.563 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-10-18 10:10:13.023 00:00:10.364 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:10:27.774 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-10-18 10:11:13.423 00:00:10.322 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:11:27.979 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-10-18 10:12:13.783 00:00:10.368 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:12:28.209 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-10-18 10:08:44.100 00:05:02.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:08:44.102 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:13:14.189 00:00:10.386 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:13:28.380 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45324 10 6452 1 2025-10-18 10:14:20.821 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:14:20.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:14:14.612 00:00:10.375 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:14:28.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2025-10-18 10:15:15.026 00:00:10.366 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:15:28.762 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-10-18 10:16:15.432 00:00:10.367 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:16:28.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50046 10 6452 1 2025-10-18 10:17:15.837 00:00:10.400 TCP 23.104.0.1:48988 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:17:29.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42116 10 6452 1 2025-10-18 10:18:16.275 00:00:10.363 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:18:29.385 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-10-18 10:14:44.110 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:14:44.112 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:19:20.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:19:20.983 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:19:16.681 00:00:10.383 TCP 23.104.0.1:33068 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:19:29.600 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-10-18 10:20:17.121 00:00:10.875 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:20:29.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-10-18 10:21:18.049 00:00:10.363 TCP 23.104.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:21:30.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-10-18 10:22:18.454 00:00:10.369 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:22:30.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-18 10:23:18.859 00:00:10.374 TCP 23.104.0.1:50144 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:23:30.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-10-18 10:24:21.170 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:24:21.040 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:24:19.269 00:00:10.364 TCP 23.104.0.1:41204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:24:30.672 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-10-18 10:20:44.113 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:20:44.111 00:05:02.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:25:19.673 00:00:10.359 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:25:30.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-10-18 10:26:20.099 00:00:10.360 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:26:31.120 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-10-18 10:27:20.500 00:00:10.363 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:27:31.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47456 10 6452 1 2025-10-18 10:28:20.906 00:00:10.364 TCP 23.104.0.1:48546 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:28:31.557 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 2025-10-18 10:29:21.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:29:20.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:29:21.314 00:00:10.359 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:29:31.727 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-10-18 10:30:21.717 00:00:10.371 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:30:31.900 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-10-18 10:26:44.121 00:05:02.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:26:44.123 00:05:02.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:31:22.130 00:00:10.364 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:31:32.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45280 10 6452 1 2025-10-18 10:32:22.536 00:00:10.363 TCP 23.104.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:32:32.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35528 10 6452 1 2025-10-18 10:33:22.936 00:00:10.331 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:33:32.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38272 10 6452 1 2025-10-18 10:34:21.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:34:21.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:34:23.309 00:00:10.365 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:34:32.728 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60748 10 6452 1 2025-10-18 10:35:23.715 00:00:10.367 TCP 23.104.0.1:53636 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:35:32.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-10-18 10:36:24.114 00:00:10.321 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:36:33.173 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-10-18 10:32:44.124 00:05:02.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:32:44.126 00:05:02.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:37:24.476 00:00:10.366 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:37:33.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-10-18 10:38:24.880 00:00:10.387 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:38:33.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6452 1 2025-10-18 10:39:21.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:39:21.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:39:25.307 00:00:10.362 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:39:33.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-10-18 10:40:25.709 00:00:10.461 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:40:33.981 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2025-10-18 10:41:26.211 00:00:10.371 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:41:34.205 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-10-18 10:42:26.618 00:00:10.441 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 15 1926 1 2025-10-18 10:42:34.417 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 12 10375 1 2025-10-18 10:38:44.132 00:05:02.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:38:44.135 00:05:02.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:43:27.105 00:00:10.361 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:43:34.660 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-10-18 10:44:21.246 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:44:21.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:44:27.510 00:00:10.327 TCP 23.104.0.1:48304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:44:34.878 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-10-18 10:45:27.883 00:00:10.389 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:45:35.076 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-10-18 10:46:28.310 00:00:10.423 TCP 23.104.0.1:56250 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:46:35.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-10-18 10:47:28.770 00:00:10.376 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:47:35.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-10-18 10:48:29.182 00:00:10.364 TCP 23.104.0.1:48184 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:44:44.136 00:05:02.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:48:35.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-10-18 10:44:44.133 00:05:02.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:49:21.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:49:21.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:49:29.590 00:00:10.360 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:49:36.113 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 10 6452 1 2025-10-18 10:50:29.987 00:00:10.327 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:50:36.333 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-10-18 10:51:30.351 00:00:10.322 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:51:36.509 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-10-18 10:52:30.709 00:00:10.322 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:52:36.722 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-10-18 10:53:31.103 00:00:10.359 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:53:36.933 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52594 10 6452 1 2025-10-18 10:54:21.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 10:54:21.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 10:54:31.504 00:00:10.371 TCP 23.104.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:50:44.136 00:05:02.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 10:54:37.162 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-10-18 10:50:44.139 00:05:02.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 10:55:31.909 00:00:10.366 TCP 23.104.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:55:37.376 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38210 10 6452 1 2025-10-18 10:56:32.317 00:00:10.368 TCP 23.104.0.1:57818 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:56:37.590 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 10 6452 1 2025-10-18 10:57:32.725 00:00:10.370 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:57:37.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35100 10 6452 1 2025-10-18 10:58:33.133 00:00:10.371 TCP 23.104.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-10-18 10:58:38.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1089, avg pps: 0, avg bpp: 320 Time window: 2025-10-18 09:56:44 - 2025-10-18 10:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0011s Wall: 0.0020s flows/second: 81106.7 Runtime: 0.0020s