Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 16:59:14.248 00:00:10.366 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-18 16:59:28.793 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 16:59:28.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 16:59:31.310 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6452 1 2025-10-18 17:00:14.663 00:00:10.380 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:00:31.742 00:00:10.617 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-10-18 16:56:44.237 00:05:02.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 16:56:44.235 00:05:02.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:01:15.095 00:00:10.325 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:01:32.398 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-10-18 17:02:15.468 00:00:10.376 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:02:33.013 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43036 10 6452 1 2025-10-18 17:03:15.884 00:00:10.490 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 17 2241 1 2025-10-18 17:03:33.223 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 14 14298 1 2025-10-18 17:04:16.405 00:00:10.371 TCP 23.104.0.1:49518 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:04:28.981 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:04:28.915 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:04:33.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6452 1 2025-10-18 17:05:16.813 00:00:10.623 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:05:33.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-10-18 17:06:17.474 00:00:10.360 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:06:33.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35092 10 6452 1 2025-10-18 17:02:44.246 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:02:44.249 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:07:17.880 00:00:10.377 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:07:34.139 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-10-18 17:08:18.299 00:00:10.322 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:08:34.365 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-10-18 17:09:29.154 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:09:29.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:09:18.664 00:00:10.367 TCP 23.104.0.1:48146 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:09:34.578 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-10-18 17:10:19.093 00:00:10.328 TCP 23.104.0.1:60482 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:10:34.819 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-10-18 17:11:19.456 00:00:10.372 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:11:34.989 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48096 10 6452 1 2025-10-18 17:12:19.866 00:00:10.373 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:08:44.250 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:12:35.229 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53120 10 6452 1 2025-10-18 17:08:44.247 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:13:20.276 00:00:10.326 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:13:35.462 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-10-18 17:14:29.080 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:14:29.408 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:14:20.642 00:00:10.322 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:14:35.688 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-10-18 17:15:21.002 00:00:10.363 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:15:35.908 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-10-18 17:16:21.404 00:00:10.367 TCP 23.104.0.1:48426 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:16:36.132 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6452 1 2025-10-18 17:17:21.810 00:00:10.361 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:17:36.356 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58256 10 6452 1 2025-10-18 17:18:22.213 00:00:10.322 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:18:36.582 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-10-18 17:14:44.250 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:14:44.248 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:19:29.492 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:19:29.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:19:22.574 00:00:10.361 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:19:36.753 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-10-18 17:20:22.973 00:00:10.366 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:20:36.926 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41138 10 6452 1 2025-10-18 17:21:23.381 00:00:10.364 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:21:37.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54366 10 6452 1 2025-10-18 17:22:23.784 00:00:10.369 TCP 23.104.0.1:34892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:22:37.314 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57406 10 6452 1 2025-10-18 17:23:24.191 00:00:10.374 TCP 23.104.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:23:37.542 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-10-18 17:24:29.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:24:29.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:24:24.604 00:00:10.370 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:24:37.710 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-10-18 17:20:44.249 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:20:44.252 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:25:25.011 00:00:10.367 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:25:37.926 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-10-18 17:26:25.415 00:00:10.377 TCP 23.104.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:26:38.146 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6452 1 2025-10-18 17:27:25.834 00:00:10.385 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:27:38.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55058 10 6452 1 2025-10-18 17:28:26.262 00:00:10.370 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:28:38.566 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-10-18 17:29:29.527 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:29:29.940 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:29:26.675 00:00:10.367 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:29:38.735 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44702 10 6452 1 2025-10-18 17:30:27.095 00:00:10.368 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:26:44.250 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:30:38.951 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 12 6556 1 2025-10-18 17:26:44.254 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:31:27.500 00:00:18.837 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:31:39.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-10-18 17:32:36.405 00:00:10.363 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:32:39.414 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:41920 10 6452 1 2025-10-18 17:33:39.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-10-18 17:33:36.802 00:00:10.336 TCP 23.104.0.1:49898 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:34:29.727 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:34:29.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:34:37.178 00:00:10.324 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:34:39.927 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44630 10 6452 1 2025-10-18 17:35:37.544 00:00:10.364 TCP 23.104.0.1:38348 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:35:40.143 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58306 10 6452 1 2025-10-18 17:32:44.250 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:36:37.947 00:00:10.327 TCP 23.104.0.1:50804 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:32:44.254 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:36:40.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-10-18 17:37:38.313 00:00:10.362 TCP 23.104.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:37:40.516 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-10-18 17:38:38.714 00:00:10.327 TCP 23.104.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:38:40.731 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-10-18 17:39:29.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:39:29.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:39:39.105 00:00:10.363 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:39:40.946 00:00:10.803 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-10-18 17:40:39.505 00:00:10.367 TCP 23.104.0.1:52610 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:40:41.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-10-18 17:41:39.912 00:00:10.363 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:41:42.002 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48102 10 6452 1 2025-10-18 17:42:40.319 00:00:10.397 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 15 1926 1 2025-10-18 17:38:44.254 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:38:44.252 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:42:42.217 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 12 10375 1 2025-10-18 17:43:40.757 00:00:10.367 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:43:42.470 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43424 10 6452 1 2025-10-18 17:44:30.253 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:44:30.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:44:41.164 00:00:10.367 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:44:42.642 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-10-18 17:45:41.571 00:00:10.364 TCP 23.104.0.1:37060 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:45:42.827 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-10-18 17:46:41.973 00:00:10.368 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:46:43.067 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-10-18 17:47:42.385 00:00:10.365 TCP 23.104.0.1:56524 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:47:43.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 10 6452 1 2025-10-18 17:44:44.254 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:44:44.258 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:48:42.797 00:00:10.337 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:48:43.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-10-18 17:49:29.774 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:49:29.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:49:43.710 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-10-18 17:49:43.179 00:00:10.368 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:50:43.589 00:00:10.370 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:50:43.929 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39004 10 6452 1 2025-10-18 17:51:44.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57384 10 6452 1 2025-10-18 17:51:43.995 00:00:10.380 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:52:44.415 00:00:10.362 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:52:44.320 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 10 6452 1 2025-10-18 17:53:44.546 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34970 10 6452 1 2025-10-18 17:53:44.819 00:00:10.328 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:54:29.908 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:54:30.255 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:50:44.259 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:50:44.256 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 17:54:45.186 00:00:10.363 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:54:44.720 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44476 10 6452 1 2025-10-18 17:55:44.935 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-10-18 17:55:45.588 00:00:10.365 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:56:45.984 00:00:10.369 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:56:45.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-10-18 17:57:46.391 00:00:10.374 TCP 23.104.0.1:34060 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:57:45.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40272 10 6452 1 Summary: total flows: 162, total bytes: 503415, total packets: 1569, avg bps: 1096, avg pps: 0, avg bpp: 320 Time window: 2025-10-18 16:56:44 - 2025-10-18 17:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0018s Wall: 0.0022s flows/second: 73172.2 Runtime: 0.0022s