Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 11:59:00.856 00:00:10.327 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:59:51.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:59:40.938 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-10-19 11:59:52.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:00:01.225 00:00:10.368 TCP 23.104.0.1:54584 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:00:41.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-10-19 11:56:44.589 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:56:44.591 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:01:01.649 00:00:10.363 TCP 23.104.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:01:41.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-10-19 12:02:02.052 00:00:10.323 TCP 23.104.0.1:37126 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:02:41.612 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55338 10 6452 1 2025-10-19 12:03:02.419 00:00:10.327 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:03:41.841 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-10-19 12:04:02.784 00:00:10.369 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:04:51.955 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:04:51.883 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:04:42.012 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6452 1 2025-10-19 12:05:03.199 00:00:10.383 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:05:42.235 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-10-19 12:06:03.620 00:00:10.490 TCP 23.104.0.1:41184 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:02:44.592 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:02:44.595 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:06:42.453 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-10-19 12:07:04.151 00:00:10.368 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:07:42.690 00:00:10.837 TCP 1.101.0.1:3000 -> 22.102.0.1:46538 10 6452 1 2025-10-19 12:08:04.557 00:00:10.385 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:08:43.566 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-10-19 12:09:04.979 00:00:10.333 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:09:43.745 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-10-19 12:09:52.118 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:09:52.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:10:05.346 00:00:10.364 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:10:43.924 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-10-19 12:11:05.751 00:00:10.323 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:11:44.110 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-10-19 12:12:06.112 00:00:10.362 TCP 23.104.0.1:58502 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:08:44.595 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:08:44.598 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:12:44.344 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37912 10 6452 1 2025-10-19 12:13:06.521 00:00:10.368 TCP 23.104.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:13:44.519 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-10-19 12:14:06.931 00:00:10.393 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:14:52.173 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:14:52.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:14:44.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-10-19 12:15:07.363 00:00:10.365 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:15:44.955 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 12 6556 1 2025-10-19 12:16:07.765 00:00:10.372 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:16:45.192 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38482 10 6452 1 2025-10-19 12:17:08.174 00:00:10.324 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:17:45.404 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2025-10-19 12:18:08.533 00:00:10.377 TCP 23.104.0.1:34588 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:14:44.599 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:14:44.601 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:18:45.992 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49736 10 6452 1 2025-10-19 12:19:08.942 00:00:10.369 TCP 23.104.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:19:52.199 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:19:46.231 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-10-19 12:19:52.309 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:20:09.347 00:00:10.364 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:20:46.447 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39202 10 6452 1 2025-10-19 12:21:09.744 00:00:10.366 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:21:46.657 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44862 10 6452 1 2025-10-19 12:22:10.145 00:00:10.326 TCP 23.104.0.1:40382 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:22:46.880 00:00:10.951 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-10-19 12:23:10.510 00:00:10.368 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:23:47.873 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37424 10 6452 1 2025-10-19 12:24:10.913 00:00:10.372 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:20:44.602 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:24:52.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:20:44.599 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:24:52.352 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:24:48.076 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-10-19 12:25:11.317 00:00:10.775 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:25:48.251 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-10-19 12:26:12.132 00:00:10.362 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:26:48.469 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-10-19 12:27:12.539 00:00:10.374 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:27:48.685 00:00:12.626 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6452 1 2025-10-19 12:28:12.955 00:00:10.363 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:28:51.380 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6452 1 2025-10-19 12:29:13.359 00:00:10.361 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:29:52.651 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:29:52.655 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:29:51.562 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-10-19 12:30:13.764 00:00:10.380 TCP 23.104.0.1:51034 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:26:44.604 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:26:44.602 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:30:51.783 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33998 10 6452 1 2025-10-19 12:31:14.181 00:00:10.321 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:31:51.961 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57172 10 6452 1 2025-10-19 12:32:14.541 00:00:10.324 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:32:52.178 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-10-19 12:33:14.903 00:00:10.325 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:33:52.361 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-10-19 12:34:15.266 00:00:10.337 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:34:52.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:34:52.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:34:52.576 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53296 10 6452 1 2025-10-19 12:35:15.641 00:00:10.346 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:35:52.783 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 2025-10-19 12:36:16.045 00:00:10.360 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:32:44.605 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:32:44.604 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:36:52.996 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-10-19 12:37:16.443 00:00:10.363 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:37:53.220 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 12 10375 1 2025-10-19 12:38:16.842 00:00:10.462 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 15 1926 1 2025-10-19 12:38:53.514 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-10-19 12:39:17.346 00:00:10.363 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:39:52.787 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:39:52.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:39:53.732 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-10-19 12:40:17.750 00:00:10.362 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:40:53.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 12 6556 1 2025-10-19 12:41:18.150 00:00:10.364 TCP 23.104.0.1:58392 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:41:54.196 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-10-19 12:42:18.555 00:00:10.367 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:38:44.608 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:38:44.606 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:42:54.425 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-10-19 12:43:18.958 00:00:10.320 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:43:54.656 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-10-19 12:44:19.313 00:00:10.360 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:44:52.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:44:52.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:44:54.867 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35738 10 6452 1 2025-10-19 12:45:19.714 00:00:10.376 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:45:55.087 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:53510 11 6504 1 2025-10-19 12:46:20.129 00:00:10.369 TCP 23.104.0.1:59482 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:46:55.358 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-10-19 12:47:20.538 00:00:10.324 TCP 23.104.0.1:34820 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:47:55.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33886 10 6452 1 2025-10-19 12:48:20.897 00:00:10.371 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:44:44.607 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:44:44.610 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:48:55.751 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55100 10 6452 1 2025-10-19 12:49:21.306 00:00:10.363 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:49:52.943 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:49:52.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:49:55.963 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-10-19 12:50:21.714 00:00:10.372 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:50:56.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51364 10 6452 1 2025-10-19 12:51:22.128 00:00:10.370 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:51:56.397 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 2025-10-19 12:52:22.534 00:00:10.324 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:52:56.575 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-10-19 12:53:22.898 00:00:10.331 TCP 23.104.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:53:56.746 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-10-19 12:54:23.268 00:00:10.365 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:50:44.611 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 12:50:44.609 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 12:54:52.628 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 12:54:52.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 12:54:56.971 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-10-19 12:55:23.676 00:00:10.671 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:55:57.194 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-10-19 12:56:24.384 00:00:10.365 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:56:57.408 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-10-19 12:57:24.786 00:00:10.375 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-10-19 12:57:57.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-10-19 12:58:25.202 00:00:10.679 TCP 23.104.0.1:53716 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496498, total packets: 1573, avg bps: 1070, avg pps: 0, avg bpp: 315 Time window: 2025-10-19 11:56:44 - 2025-10-19 12:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0017s Wall: 0.0026s flows/second: 62044.8 Runtime: 0.0026s