Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 15:58:44.093 00:00:10.333 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-10-18 15:59:08.220 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-10-18 15:59:27.760 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 15:59:27.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 15:59:44.464 00:00:10.380 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:00:08.452 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-10-18 15:56:44.223 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 15:56:44.224 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:00:44.882 00:00:10.378 TCP 23.104.0.1:57748 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:01:08.639 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-10-18 16:01:45.300 00:00:10.364 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:02:08.851 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-10-18 16:02:45.702 00:00:10.362 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:03:09.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6452 1 2025-10-18 16:03:46.106 00:00:10.943 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:04:09.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-10-18 16:04:28.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:04:27.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:04:47.105 00:00:10.359 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:05:09.500 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 6452 1 2025-10-18 16:05:47.505 00:00:10.366 TCP 23.104.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:06:09.710 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 10 6452 1 2025-10-18 16:02:44.224 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:02:44.225 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:06:47.910 00:00:10.372 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:07:09.921 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44994 10 6452 1 2025-10-18 16:07:48.322 00:00:10.365 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:08:10.131 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 10 6452 1 2025-10-18 16:08:48.725 00:00:10.370 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:09:10.307 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-10-18 16:09:27.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:09:27.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:09:49.127 00:00:10.366 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:10:10.514 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35492 10 6452 1 2025-10-18 16:10:49.524 00:00:10.324 TCP 23.104.0.1:39020 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:11:10.727 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6452 1 2025-10-18 16:11:49.894 00:00:10.372 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:12:10.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-10-18 16:08:44.230 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:08:44.228 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:12:50.305 00:00:10.366 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:13:11.170 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-10-18 16:13:50.711 00:00:10.387 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:14:11.389 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-10-18 16:14:28.024 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:14:27.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:14:51.142 00:00:10.364 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:15:11.599 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-10-18 16:15:51.544 00:00:10.363 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:16:11.816 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-10-18 16:16:51.949 00:00:10.324 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:17:12.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-10-18 16:17:52.313 00:00:10.358 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:18:12.255 00:00:10.899 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-10-18 16:14:44.232 00:05:02.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:14:44.230 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:18:52.714 00:00:10.378 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:19:13.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-10-18 16:19:28.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:19:28.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:19:53.133 00:00:10.363 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:20:13.408 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-10-18 16:20:53.538 00:00:10.371 TCP 23.104.0.1:39904 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:21:13.636 00:00:10.833 TCP 1.101.0.1:3000 -> 22.102.0.1:55446 11 6504 1 2025-10-18 16:21:53.947 00:00:10.367 TCP 23.104.0.1:44200 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:22:14.503 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-10-18 16:22:54.355 00:00:10.362 TCP 23.104.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:23:14.726 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-10-18 16:23:54.759 00:00:10.371 TCP 23.104.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:24:14.953 00:00:11.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 2025-10-18 16:24:28.239 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:24:28.062 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:20:44.233 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:20:44.229 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:24:55.171 00:00:10.363 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:25:16.185 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 10 6452 1 2025-10-18 16:25:55.574 00:00:10.323 TCP 23.104.0.1:43954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:26:16.398 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-10-18 16:26:55.940 00:00:10.383 TCP 23.104.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:27:16.612 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-10-18 16:27:56.367 00:00:10.364 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:28:16.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-10-18 16:28:56.771 00:00:10.365 TCP 23.104.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:29:28.631 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:29:17.066 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-10-18 16:29:28.561 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:29:57.191 00:00:10.371 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:30:17.277 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-10-18 16:26:44.233 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:26:44.232 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:30:57.602 00:00:10.373 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:31:17.489 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51692 10 6452 1 2025-10-18 16:31:58.016 00:00:10.319 TCP 23.104.0.1:42046 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:32:17.699 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6452 1 2025-10-18 16:32:58.378 00:00:10.323 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:33:17.874 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-10-18 16:33:58.739 00:00:10.364 TCP 23.104.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:34:28.352 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:34:28.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:34:18.100 00:00:18.024 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-10-18 16:34:59.166 00:00:10.363 TCP 23.104.0.1:42122 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:35:26.161 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2025-10-18 16:35:59.568 00:00:10.364 TCP 23.104.0.1:52566 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:36:26.387 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-10-18 16:32:44.232 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:32:44.234 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:36:59.969 00:00:10.374 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:37:26.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-10-18 16:38:00.379 00:00:11.156 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:38:26.778 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6452 1 2025-10-18 16:39:01.570 00:00:10.420 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:39:28.404 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:39:28.690 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:39:26.957 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 12 6556 1 2025-10-18 16:40:02.031 00:00:10.367 TCP 23.104.0.1:40764 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:40:27.178 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51590 10 6452 1 2025-10-18 16:41:02.436 00:00:10.368 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:41:27.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-10-18 16:42:02.841 00:00:10.393 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:42:27.618 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-10-18 16:38:44.232 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:38:44.235 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:43:03.273 00:00:14.116 TCP 23.104.0.1:59420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:43:27.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-10-18 16:44:07.435 00:00:10.366 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:44:28.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:44:28.806 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:44:28.060 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-10-18 16:45:07.840 00:00:10.395 TCP 23.104.0.1:40236 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:45:28.269 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36756 10 6452 1 2025-10-18 16:46:08.270 00:00:10.368 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:46:28.486 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-10-18 16:47:08.678 00:00:10.369 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:47:28.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-10-18 16:48:09.107 00:00:10.365 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:48:28.903 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-10-18 16:44:44.234 00:05:02.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:44:44.236 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:49:09.509 00:00:10.368 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:49:28.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:49:28.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:49:29.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-10-18 16:50:09.914 00:00:10.367 TCP 23.104.0.1:34162 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:50:29.324 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-10-18 16:51:10.316 00:00:10.367 TCP 23.104.0.1:53584 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:51:29.555 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-10-18 16:52:10.717 00:00:10.324 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:52:29.776 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-10-18 16:53:11.105 00:00:11.098 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:53:30.019 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-10-18 16:54:12.238 00:00:10.369 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:54:28.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:54:28.627 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:54:30.237 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-10-18 16:50:44.234 00:05:02.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 16:50:44.236 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:55:12.646 00:00:10.363 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:55:30.458 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53272 10 6452 1 2025-10-18 16:56:13.057 00:00:10.366 TCP 23.104.0.1:52986 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:56:30.667 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-10-18 16:57:13.467 00:00:10.363 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:57:30.881 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55058 10 6452 1 2025-10-18 16:58:13.868 00:00:10.329 TCP 23.104.0.1:48378 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:58:31.100 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6452 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-10-18 15:56:44 - 2025-10-18 16:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0019s Wall: 0.0025s flows/second: 65231.5 Runtime: 0.0025s