Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 13:58:50.063 00:00:10.364 TCP 23.104.0.1:53616 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:59:25.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:59:25.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:59:18.856 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-10-18 13:59:50.470 00:00:10.323 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:00:19.081 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-10-18 13:56:44.196 00:05:02.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:56:44.195 00:05:02.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:00:50.831 00:00:10.661 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:01:19.290 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-10-18 14:01:51.531 00:00:10.365 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:02:19.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-10-18 14:02:51.934 00:00:10.379 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:03:19.717 00:00:18.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6452 1 2025-10-18 14:03:52.353 00:00:10.365 TCP 23.104.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:04:25.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:04:25.540 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:04:27.903 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39392 10 6452 1 2025-10-18 14:04:52.754 00:00:11.029 TCP 23.104.0.1:45316 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:05:28.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-10-18 14:05:53.823 00:00:10.566 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:06:28.343 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 10 6452 1 2025-10-18 14:02:44.198 00:05:02.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:02:44.195 00:05:02.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:06:54.428 00:00:10.362 TCP 23.104.0.1:54272 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:07:28.551 00:00:10.672 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-10-18 14:07:54.836 00:00:10.393 TCP 23.104.0.1:40480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:08:29.262 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-10-18 14:08:55.269 00:00:10.367 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:09:25.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:09:25.333 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:09:29.481 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-10-18 14:09:55.675 00:00:10.380 TCP 23.104.0.1:49716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:10:29.692 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58046 10 6452 1 2025-10-18 14:10:56.104 00:00:10.364 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:11:29.903 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-10-18 14:11:56.515 00:00:10.407 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:12:30.117 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-10-18 14:08:44.196 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:08:44.198 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:12:56.961 00:00:10.370 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:13:30.327 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-10-18 14:13:57.366 00:00:10.323 TCP 23.104.0.1:33820 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:14:25.632 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:14:25.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:14:30.492 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-10-18 14:14:57.729 00:00:10.987 TCP 23.104.0.1:51998 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:15:30.704 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6452 1 2025-10-18 14:15:58.754 00:00:10.378 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:16:30.908 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-10-18 14:16:59.169 00:00:10.363 TCP 23.104.0.1:38226 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:17:31.120 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-10-18 14:17:59.570 00:00:10.370 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:18:31.338 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-10-18 14:14:44.200 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:14:44.197 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:18:59.975 00:00:10.378 TCP 23.104.0.1:33262 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:19:25.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:19:25.985 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:19:31.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-10-18 14:20:00.385 00:00:10.365 TCP 23.104.0.1:44548 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:20:31.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54746 10 6452 1 2025-10-18 14:21:00.789 00:00:10.368 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:21:31.996 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-10-18 14:22:01.199 00:00:10.366 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:22:32.178 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-10-18 14:23:01.604 00:00:10.363 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:23:32.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-10-18 14:24:02.010 00:00:10.362 TCP 23.104.0.1:55882 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:24:25.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:24:25.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:24:32.601 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-10-18 14:20:44.199 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:20:44.200 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:25:02.414 00:00:10.322 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:25:32.811 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-10-18 14:26:02.775 00:00:10.381 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:26:33.065 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-10-18 14:27:03.196 00:00:10.363 TCP 23.104.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:27:33.297 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:48732 12 10375 1 2025-10-18 14:28:03.601 00:00:10.446 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 15 1926 1 2025-10-18 14:28:33.579 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-10-18 14:29:04.118 00:00:10.369 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:29:26.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:29:25.936 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:29:33.790 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-10-18 14:30:04.524 00:00:10.365 TCP 23.104.0.1:41430 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:26:44.200 00:05:02.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:30:34.009 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60762 10 6452 1 2025-10-18 14:26:44.198 00:05:02.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:31:04.928 00:00:10.375 TCP 23.104.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:31:34.193 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-10-18 14:32:05.338 00:00:10.320 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:32:34.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-10-18 14:33:05.697 00:00:10.369 TCP 23.104.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:33:34.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-10-18 14:34:06.107 00:00:10.364 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:34:26.244 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:34:26.262 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:34:34.830 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-10-18 14:35:06.512 00:00:10.369 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:35:35.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-10-18 14:36:06.921 00:00:10.381 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:36:35.286 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55606 10 6452 1 2025-10-18 14:32:44.205 00:05:02.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:32:44.208 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:37:07.338 00:00:10.864 TCP 23.104.0.1:45072 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:37:35.506 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-10-18 14:38:08.243 00:00:10.331 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:38:35.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 10 6452 1 2025-10-18 14:39:08.613 00:00:10.364 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:39:26.561 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:39:26.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:39:35.936 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-10-18 14:40:09.018 00:00:10.366 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:40:36.181 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-10-18 14:41:09.421 00:00:10.503 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:41:36.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55374 10 6452 1 2025-10-18 14:42:09.961 00:00:10.366 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:42:36.607 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-10-18 14:38:44.205 00:05:02.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:38:44.202 00:05:02.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:43:10.364 00:00:10.321 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:43:36.786 00:00:10.689 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-10-18 14:44:10.721 00:00:10.365 TCP 23.104.0.1:53626 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:44:26.229 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:44:26.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:44:37.514 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-10-18 14:45:11.126 00:00:10.322 TCP 23.104.0.1:58028 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:45:37.684 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-10-18 14:46:11.487 00:00:10.756 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:46:37.904 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-10-18 14:47:12.279 00:00:10.364 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:47:38.128 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51816 10 6452 1 2025-10-18 14:48:12.686 00:00:10.323 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:44:44.208 00:05:02.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:48:38.352 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39108 10 6452 1 2025-10-18 14:44:44.205 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:49:26.493 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:49:13.047 00:00:10.366 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:49:26.434 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:49:38.578 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-10-18 14:50:13.452 00:00:10.360 TCP 23.104.0.1:37188 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:50:38.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49632 10 6452 1 2025-10-18 14:51:13.853 00:00:10.332 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:51:39.046 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6452 1 2025-10-18 14:52:14.222 00:00:10.365 TCP 23.104.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:52:39.264 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-10-18 14:53:14.627 00:00:10.366 TCP 23.104.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:53:39.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-10-18 14:54:26.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 14:54:15.031 00:00:10.365 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:54:26.511 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 14:50:44.209 00:05:02.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 14:54:39.658 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56064 10 6452 1 2025-10-18 14:50:44.207 00:05:02.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 14:55:15.435 00:00:10.335 TCP 23.104.0.1:54378 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:55:39.868 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-10-18 14:56:15.820 00:00:10.362 TCP 23.104.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:56:40.102 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-10-18 14:57:16.223 00:00:10.365 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:57:40.313 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-10-18 14:58:16.624 00:00:10.372 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-10-18 14:58:40.482 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1079, avg pps: 0, avg bpp: 318 Time window: 2025-10-18 13:56:44 - 2025-10-18 14:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0011s Wall: 0.0016s flows/second: 104921.6 Runtime: 0.0016s