Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 17:58:46.664 00:00:10.371 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:59:11.409 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-10-19 17:59:59.268 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:59:59.202 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:59:47.094 00:00:10.366 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:00:11.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-10-19 17:56:44.692 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:56:44.690 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:00:47.500 00:00:10.364 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:01:11.840 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50290 10 6452 1 2025-10-19 18:01:47.906 00:00:10.373 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:02:12.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-10-19 18:02:48.315 00:00:10.320 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:03:12.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6452 1 2025-10-19 18:03:48.680 00:00:10.374 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:04:12.499 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-10-19 18:04:59.095 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:04:49.099 00:00:10.363 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:04:59.119 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:05:12.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-10-19 18:05:49.501 00:00:10.372 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:06:12.934 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55622 10 6452 1 2025-10-19 18:02:44.692 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:02:44.695 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:06:49.911 00:00:10.367 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:07:13.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-10-19 18:07:50.318 00:00:10.323 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:08:13.389 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-10-19 18:08:50.677 00:00:10.371 TCP 23.104.0.1:42444 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:09:13.578 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-10-19 18:09:59.249 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:09:51.105 00:00:10.363 TCP 23.104.0.1:50680 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:09:59.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:10:13.815 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-10-19 18:10:51.509 00:00:10.363 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:11:13.988 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-10-19 18:11:51.910 00:00:10.368 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:12:14.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-10-19 18:08:44.698 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:08:44.697 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:12:52.314 00:00:10.366 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:13:14.395 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-10-19 18:13:52.720 00:00:10.340 TCP 23.104.0.1:47052 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:14:14.612 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-10-19 18:14:59.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:14:59.546 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:14:53.121 00:00:10.372 TCP 23.104.0.1:47566 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:15:14.783 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51370 10 6452 1 2025-10-19 18:15:53.537 00:00:10.367 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:16:15.003 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-10-19 18:16:53.948 00:00:10.370 TCP 23.104.0.1:37756 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:17:15.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-10-19 18:17:54.353 00:00:10.363 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:18:15.355 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-10-19 18:14:44.701 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:14:44.704 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:18:54.754 00:00:10.377 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:19:15.577 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-10-19 18:19:59.506 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:19:59.585 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:19:55.170 00:00:10.374 TCP 23.104.0.1:34918 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:20:15.797 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-10-19 18:20:55.586 00:00:10.364 TCP 23.104.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:21:16.023 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-10-19 18:21:55.999 00:00:10.362 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:22:16.242 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-10-19 18:22:56.401 00:00:10.363 TCP 23.104.0.1:39222 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:23:16.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52746 10 6452 1 2025-10-19 18:23:56.803 00:00:10.373 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:24:16.669 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-10-19 18:20:44.704 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:20:44.706 00:05:02.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:24:59.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:24:59.653 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:24:57.211 00:00:10.325 TCP 23.104.0.1:47610 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:25:16.887 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-10-19 18:25:57.573 00:00:10.331 TCP 23.104.0.1:53344 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:26:17.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-10-19 18:26:57.941 00:00:10.376 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:27:17.287 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-10-19 18:27:58.356 00:00:10.365 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:28:17.503 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-10-19 18:28:58.755 00:00:10.389 TCP 23.104.0.1:49664 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:29:17.666 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46020 10 6452 1 2025-10-19 18:29:59.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:29:59.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:29:59.180 00:00:10.372 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:30:17.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-10-19 18:26:44.708 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:26:44.705 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:30:59.586 00:00:10.367 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:31:18.073 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 11 6504 1 2025-10-19 18:31:59.991 00:00:10.359 TCP 23.104.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:32:18.367 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-10-19 18:33:00.390 00:00:10.327 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:33:18.626 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53822 10 6452 1 2025-10-19 18:34:00.751 00:00:10.359 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:34:18.855 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-10-19 18:34:59.659 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:34:59.764 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:35:01.149 00:00:10.370 TCP 23.104.0.1:33264 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:35:19.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57056 10 6452 1 2025-10-19 18:36:19.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-10-19 18:36:01.559 00:00:26.784 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:32:44.709 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:32:44.712 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:37:19.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-10-19 18:37:18.379 00:00:10.323 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:38:18.741 00:00:10.327 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:38:19.735 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-10-19 18:39:19.906 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 12 6556 1 2025-10-19 18:39:19.107 00:00:10.790 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:39:59.895 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:40:00.133 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:40:20.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-10-19 18:40:19.930 00:00:10.385 TCP 23.104.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:41:20.353 00:00:10.367 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:41:20.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42606 10 6452 1 2025-10-19 18:42:20.756 00:00:10.812 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:42:20.558 00:00:10.865 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-10-19 18:38:44.712 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:38:44.710 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:43:21.459 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-10-19 18:43:21.606 00:00:10.369 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:44:21.673 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46668 10 6452 1 2025-10-19 18:44:22.017 00:00:10.319 TCP 23.104.0.1:60434 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:45:00.031 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:45:00.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:45:21.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-10-19 18:45:22.377 00:00:10.321 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:46:22.084 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-10-19 18:46:22.739 00:00:10.366 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:47:22.256 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-10-19 18:47:23.147 00:00:10.364 TCP 23.104.0.1:59028 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:48:23.550 00:00:10.439 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 15 1926 1 2025-10-19 18:48:22.421 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33492 12 10369 1 2025-10-19 18:44:44.713 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:44:44.711 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:49:24.028 00:00:10.368 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:49:22.659 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-10-19 18:50:00.030 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:49:59.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:50:24.430 00:00:10.372 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:50:22.876 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-10-19 18:51:24.833 00:00:10.353 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:51:23.106 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-10-19 18:52:25.226 00:00:10.366 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:52:23.285 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 10 6452 1 2025-10-19 18:53:23.487 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-10-19 18:53:25.631 00:00:10.363 TCP 23.104.0.1:57394 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:54:26.031 00:00:10.375 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:54:23.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 10 6452 1 2025-10-19 18:50:44.711 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 18:50:44.714 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:55:00.166 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 18:54:59.928 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 18:55:26.437 00:00:10.367 TCP 23.104.0.1:45160 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:55:23.923 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-10-19 18:56:24.137 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 10 6452 1 2025-10-19 18:56:26.842 00:00:10.394 TCP 23.104.0.1:48686 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:57:24.376 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57222 10 6452 1 2025-10-19 18:57:27.274 00:00:10.365 TCP 23.104.0.1:42146 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:58:24.607 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34306 10 6452 1 2025-10-19 18:58:27.677 00:00:10.368 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502840, total packets: 1581, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-19 17:56:44 - 2025-10-19 18:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0022s flows/second: 75267.1 Runtime: 0.0022s