Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 13:59:06.227 00:00:10.363 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-10-19 13:59:15.131 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34910 10 6452 1 2025-10-19 13:59:54.148 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 13:59:54.296 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:00:06.629 00:00:10.365 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:00:15.299 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-10-19 13:56:44.632 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 13:56:44.633 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:01:07.034 00:00:10.365 TCP 23.104.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:01:15.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-10-19 14:02:07.438 00:00:10.360 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:02:15.722 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52782 10 6452 1 2025-10-19 14:03:07.841 00:00:10.425 TCP 23.104.0.1:35644 -> 1.101.0.1:3000 15 1926 1 2025-10-19 14:03:15.941 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 12 10369 1 2025-10-19 14:04:08.309 00:00:10.370 TCP 23.104.0.1:58590 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:04:16.202 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-10-19 14:04:54.432 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:04:54.554 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:05:08.718 00:00:10.358 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:05:16.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-10-19 14:06:09.119 00:00:10.367 TCP 23.104.0.1:32930 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:06:16.627 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36190 10 6452 1 2025-10-19 14:02:44.632 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:02:44.635 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:07:09.525 00:00:10.356 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:07:16.808 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-10-19 14:08:09.921 00:00:10.414 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 15 1926 1 2025-10-19 14:08:17.069 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 12 10369 1 2025-10-19 14:09:10.377 00:00:10.378 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:09:17.272 00:00:11.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41270 10 6452 1 2025-10-19 14:09:54.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:09:54.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:10:10.793 00:00:10.367 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:10:18.476 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-10-19 14:11:11.196 00:00:10.326 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:11:18.697 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40744 10 6452 1 2025-10-19 14:12:11.579 00:00:10.362 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:12:18.918 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49574 10 6452 1 2025-10-19 14:08:44.636 00:05:02.617 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:08:44.633 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:13:11.981 00:00:10.371 TCP 23.104.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:13:19.160 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-10-19 14:14:12.393 00:00:10.386 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:14:19.375 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-10-19 14:14:54.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:14:54.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:15:12.821 00:00:10.325 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:15:19.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-10-19 14:16:13.185 00:00:10.364 TCP 23.104.0.1:33444 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:16:19.797 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-10-19 14:17:13.587 00:00:10.368 TCP 23.104.0.1:38782 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:17:20.012 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-10-19 14:18:13.993 00:00:10.367 TCP 23.104.0.1:48892 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:18:20.225 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47306 10 6452 1 2025-10-19 14:14:44.635 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:14:44.638 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:19:14.395 00:00:10.360 TCP 23.104.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:19:20.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 10 6452 1 2025-10-19 14:19:55.222 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:19:55.072 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:20:14.796 00:00:10.366 TCP 23.104.0.1:50592 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:20:20.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-10-19 14:21:15.206 00:00:10.323 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:21:20.870 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 10 6452 1 2025-10-19 14:22:15.566 00:00:10.359 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:22:21.072 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6452 1 2025-10-19 14:23:15.963 00:00:10.366 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:23:21.296 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-10-19 14:24:16.371 00:00:10.325 TCP 23.104.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:24:21.515 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-10-19 14:20:44.635 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:20:44.639 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:24:54.815 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:24:54.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:25:21.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50714 10 6452 1 2025-10-19 14:25:16.734 00:00:10.368 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:26:17.145 00:00:10.362 TCP 23.104.0.1:59144 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:26:21.907 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-10-19 14:27:17.562 00:00:10.364 TCP 23.104.0.1:53538 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:27:22.121 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-19 14:28:17.963 00:00:10.377 TCP 23.104.0.1:38364 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:28:22.302 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 10 6452 1 2025-10-19 14:29:18.379 00:00:10.367 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:29:22.519 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-10-19 14:29:54.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:29:54.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:30:18.784 00:00:10.728 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:30:22.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-10-19 14:26:44.641 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:26:44.640 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:31:19.549 00:00:10.366 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:31:22.915 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-10-19 14:32:19.957 00:00:10.321 TCP 23.104.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:32:23.125 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-10-19 14:33:20.313 00:00:10.328 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:33:23.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-10-19 14:34:20.679 00:00:10.372 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:34:23.551 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-10-19 14:34:54.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:34:54.844 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:35:21.109 00:00:10.329 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:35:23.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-10-19 14:36:21.474 00:00:10.370 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:36:23.983 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60364 10 6452 1 2025-10-19 14:32:44.642 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:32:44.641 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:37:21.878 00:00:10.327 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:37:24.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-10-19 14:38:22.240 00:00:10.368 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:38:24.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-10-19 14:39:22.654 00:00:10.370 TCP 23.104.0.1:54916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:39:24.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55250 10 6452 1 2025-10-19 14:39:55.172 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:39:55.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:40:24.849 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-10-19 14:40:23.090 00:00:10.363 TCP 23.104.0.1:41458 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:41:23.490 00:00:10.387 TCP 23.104.0.1:35076 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:41:25.086 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-10-19 14:42:23.902 00:00:10.370 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:42:25.271 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-10-19 14:38:44.642 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:38:44.645 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:43:25.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36686 10 6452 1 2025-10-19 14:43:24.308 00:00:10.370 TCP 23.104.0.1:60422 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:44:25.740 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-10-19 14:44:24.718 00:00:10.380 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:44:55.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:44:55.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:45:25.131 00:00:10.373 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:45:25.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-10-19 14:46:25.543 00:00:10.366 TCP 23.104.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:46:26.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-10-19 14:47:25.945 00:00:10.363 TCP 23.104.0.1:51566 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:47:26.406 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6452 1 2025-10-19 14:48:26.349 00:00:10.373 TCP 23.104.0.1:34404 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:48:26.577 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2025-10-19 14:44:44.645 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:44:44.643 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:49:26.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50332 10 6452 1 2025-10-19 14:49:26.758 00:00:10.334 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:49:55.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:49:55.094 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:50:27.129 00:00:10.363 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:50:27.008 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 10 6452 1 2025-10-19 14:51:27.191 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-10-19 14:51:27.536 00:00:10.325 TCP 23.104.0.1:35278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:52:27.408 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-10-19 14:52:27.900 00:00:10.327 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:53:28.270 00:00:10.362 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:53:27.627 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-10-19 14:54:28.674 00:00:10.364 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:54:27.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48950 10 6452 1 2025-10-19 14:50:44.647 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 14:50:44.644 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:54:55.310 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:54:55.060 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 14:55:28.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-10-19 14:55:29.096 00:00:10.361 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:56:29.495 00:00:10.351 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:56:28.299 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-10-19 14:57:28.510 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:58478 10 6452 1 2025-10-19 14:57:29.877 00:00:10.354 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:58:29.242 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:32836 12 10375 1 2025-10-19 14:58:30.264 00:00:10.438 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 511362, total packets: 1590, avg bps: 1100, avg pps: 0, avg bpp: 321 Time window: 2025-10-19 13:56:44 - 2025-10-19 14:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0028s flows/second: 57687.5 Runtime: 0.0029s