Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 06:58:51.258 00:00:10.608 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:59:02.962 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:59338 10 6452 1 2025-10-19 06:59:45.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:59:45.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:59:51.906 00:00:10.326 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:00:03.229 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-10-19 06:56:44.511 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:56:44.509 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:00:52.267 00:00:10.364 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:01:03.449 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-10-19 07:01:52.669 00:00:10.364 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:02:03.672 00:00:15.312 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-10-19 07:02:53.099 00:00:10.364 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:03:09.046 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-10-19 07:03:53.508 00:00:10.369 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:04:09.264 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-10-19 07:04:45.996 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:04:46.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:04:53.910 00:00:10.363 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:05:09.443 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42828 10 6452 1 2025-10-19 07:05:54.313 00:00:10.330 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:06:09.665 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-10-19 07:02:44.511 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:02:44.512 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:06:54.669 00:00:10.339 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:07:09.888 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-10-19 07:07:55.033 00:00:10.321 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:08:10.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60262 10 6452 1 2025-10-19 07:08:55.394 00:00:10.370 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:09:10.324 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47574 10 6452 1 2025-10-19 07:09:45.952 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:09:46.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:09:55.801 00:00:10.365 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:10:10.532 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57774 10 6452 1 2025-10-19 07:10:56.207 00:00:10.360 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:11:10.738 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51484 10 6452 1 2025-10-19 07:11:56.606 00:00:10.384 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:12:10.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 12 6556 1 2025-10-19 07:08:44.514 00:05:02.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:08:44.512 00:05:02.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:12:57.030 00:00:10.516 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:13:11.186 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-10-19 07:13:57.588 00:00:10.370 TCP 23.104.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:14:11.356 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-10-19 07:14:46.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:14:46.324 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:14:58.007 00:00:10.363 TCP 23.104.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:15:11.578 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-10-19 07:15:58.408 00:00:10.361 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:16:11.766 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-10-19 07:16:58.808 00:00:10.898 TCP 23.104.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:17:11.981 00:00:25.921 TCP 1.101.0.1:3000 -> 22.102.0.1:34228 10 6452 1 2025-10-19 07:17:59.744 00:00:10.366 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:18:27.944 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-10-19 07:14:44.512 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:14:44.515 00:05:02.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:19:00.149 00:00:10.339 TCP 23.104.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:19:28.177 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-10-19 07:19:45.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:19:46.276 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:20:00.521 00:00:10.367 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:20:28.348 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-10-19 07:21:00.927 00:00:10.391 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:21:28.558 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58840 10 6452 1 2025-10-19 07:22:01.352 00:00:10.382 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:22:28.733 00:00:10.813 TCP 1.101.0.1:3000 -> 22.102.0.1:36454 10 6452 1 2025-10-19 07:23:01.778 00:00:10.368 TCP 23.104.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:23:29.577 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 6452 1 2025-10-19 07:24:02.183 00:00:10.328 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:24:29.797 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-10-19 07:24:46.494 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:24:46.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:20:44.516 00:05:02.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:20:44.512 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:25:02.548 00:00:10.324 TCP 23.104.0.1:56976 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:25:29.977 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46588 10 6452 1 2025-10-19 07:26:02.909 00:00:10.328 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:26:30.213 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-10-19 07:27:03.274 00:00:10.321 TCP 23.104.0.1:50478 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:27:30.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-10-19 07:28:03.632 00:00:10.451 TCP 23.104.0.1:48244 -> 1.101.0.1:3000 15 1926 1 2025-10-19 07:28:30.652 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 12 10375 1 2025-10-19 07:29:04.122 00:00:10.361 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:29:30.896 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-10-19 07:29:46.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:29:46.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:30:04.524 00:00:10.323 TCP 23.104.0.1:53786 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:30:31.117 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-10-19 07:26:44.519 00:05:02.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:26:44.516 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:31:04.886 00:00:10.378 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:31:31.333 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-10-19 07:32:05.298 00:00:10.364 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:32:31.559 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-10-19 07:33:05.696 00:00:10.363 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:33:31.734 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-10-19 07:34:06.104 00:00:10.360 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:34:46.584 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:34:31.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-10-19 07:34:46.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:35:06.506 00:00:10.362 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:35:32.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-10-19 07:36:06.910 00:00:10.369 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:36:32.386 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51710 10 6452 1 2025-10-19 07:32:44.519 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:32:44.517 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:37:07.315 00:00:10.368 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:37:32.610 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-10-19 07:38:07.719 00:00:10.367 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:38:32.790 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-10-19 07:39:08.124 00:00:10.365 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:39:33.173 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-10-19 07:39:46.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:39:46.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:40:08.527 00:00:10.369 TCP 23.104.0.1:49696 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:40:33.402 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-10-19 07:41:08.933 00:00:10.379 TCP 23.104.0.1:54364 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:41:33.570 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6452 1 2025-10-19 07:42:09.350 00:00:10.376 TCP 23.104.0.1:33280 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:38:44.521 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:42:33.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-10-19 07:38:44.519 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:43:09.810 00:00:10.369 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:43:34.003 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-10-19 07:44:10.228 00:00:10.362 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:44:46.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:44:46.801 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:44:34.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-10-19 07:45:10.630 00:00:10.324 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:45:34.393 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:47794 10 6452 1 2025-10-19 07:46:10.997 00:00:10.368 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:46:35.250 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41812 10 6452 1 2025-10-19 07:47:11.403 00:00:10.367 TCP 23.104.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:47:35.473 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-10-19 07:48:11.806 00:00:10.369 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:48:35.686 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-10-19 07:44:44.522 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:44:44.519 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:49:12.222 00:00:10.363 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:49:35.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-10-19 07:49:46.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:49:46.766 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:50:12.623 00:00:10.362 TCP 23.104.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:50:36.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6452 1 2025-10-19 07:51:13.021 00:00:10.364 TCP 23.104.0.1:60052 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:51:36.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-10-19 07:52:13.423 00:00:10.374 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:52:36.535 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-10-19 07:53:13.834 00:00:10.392 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:53:36.711 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45526 10 6452 1 2025-10-19 07:54:14.250 00:00:10.368 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:54:46.855 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 07:54:46.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 07:50:44.522 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 07:50:44.520 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 07:54:36.928 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60920 10 6452 1 2025-10-19 07:55:14.662 00:00:10.372 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:55:37.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-10-19 07:56:15.097 00:00:10.370 TCP 23.104.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:56:37.389 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48024 10 6452 1 2025-10-19 07:57:15.503 00:00:10.366 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:57:37.608 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-10-19 07:58:15.906 00:00:10.369 TCP 23.104.0.1:55178 -> 1.101.0.1:3000 11 1507 1 2025-10-19 07:58:37.834 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-10-19 06:56:44 - 2025-10-19 07:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 78060.1 Runtime: 0.0021s