Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 22:58:41.746 00:00:10.364 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-10-20 22:59:03.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49680 10 6452 1 2025-10-20 22:59:42.156 00:00:10.366 TCP 23.104.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:00:04.177 00:00:13.566 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-10-20 23:00:33.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:00:33.951 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 22:55:47.977 00:05:57.260 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 22:56:45.234 00:05:02.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:00:42.562 00:00:10.366 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:01:07.805 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-10-20 23:01:42.966 00:00:10.365 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:02:08.044 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43228 10 6452 1 2025-10-20 23:02:43.370 00:00:10.365 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:03:08.232 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35210 10 6452 1 2025-10-20 23:03:43.774 00:00:10.328 TCP 23.104.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:04:08.450 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6452 1 2025-10-20 23:04:44.142 00:00:10.365 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:05:08.656 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 2025-10-20 23:05:34.104 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:05:34.263 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:05:44.545 00:00:10.367 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:06:08.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-10-20 23:01:47.979 00:05:57.260 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:02:45.235 00:05:02.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:06:44.951 00:00:10.336 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:07:09.114 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-10-20 23:07:45.324 00:00:10.368 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:08:09.335 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47558 10 6452 1 2025-10-20 23:08:45.732 00:00:10.363 TCP 23.104.0.1:55810 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:09:09.514 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6452 1 2025-10-20 23:09:46.137 00:00:10.364 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:10:09.801 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-10-20 23:10:34.276 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:10:33.997 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:10:46.538 00:00:10.370 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:11:10.029 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-10-20 23:11:46.950 00:00:10.367 TCP 23.104.0.1:40764 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:12:10.242 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 11 6492 1 2025-10-20 23:07:47.984 00:05:57.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:08:45.237 00:05:02.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:12:47.360 00:00:10.361 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:13:10.499 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-10-20 23:13:47.763 00:00:10.331 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:14:10.706 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-10-20 23:14:48.127 00:00:10.369 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:15:10.925 00:00:10.968 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-10-20 23:15:34.376 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:15:34.095 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:15:48.525 00:00:10.332 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:16:11.935 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-10-20 23:16:48.890 00:00:10.379 TCP 23.104.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:17:12.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-10-20 23:17:49.309 00:00:10.369 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:18:12.396 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-10-20 23:13:47.985 00:05:57.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:14:45.237 00:05:02.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:18:49.717 00:00:10.378 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:19:12.612 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-10-20 23:19:50.136 00:00:10.362 TCP 23.104.0.1:37850 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:20:12.850 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-10-20 23:20:34.315 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:20:34.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:20:50.536 00:00:10.371 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:21:13.080 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-10-20 23:21:50.948 00:00:10.334 TCP 23.104.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:22:13.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-10-20 23:22:51.319 00:00:10.432 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:23:13.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44034 10 6452 1 2025-10-20 23:23:51.788 00:00:10.320 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:24:13.728 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42888 10 6452 1 2025-10-20 23:19:47.986 00:05:57.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:20:45.239 00:05:02.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:24:52.148 00:00:10.367 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:25:13.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-10-20 23:25:34.269 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:25:34.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:25:52.557 00:00:10.620 TCP 23.104.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:26:14.178 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-10-20 23:26:53.218 00:00:10.363 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:27:14.347 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-10-20 23:27:53.620 00:00:10.425 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:28:14.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-10-20 23:28:54.110 00:00:10.327 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:29:14.731 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-10-20 23:29:54.476 00:00:10.361 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:30:14.946 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-10-20 23:30:34.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:30:34.499 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:25:47.988 00:05:57.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:26:45.240 00:05:02.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:30:54.871 00:00:10.367 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:31:15.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-10-20 23:31:55.278 00:00:10.366 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:32:15.382 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6452 1 2025-10-20 23:32:55.681 00:00:10.317 TCP 23.104.0.1:44822 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:33:15.594 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2025-10-20 23:33:56.045 00:00:10.362 TCP 23.104.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:34:15.814 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-10-20 23:34:56.441 00:00:10.359 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:35:16.037 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-10-20 23:35:34.725 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:35:34.845 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:35:56.838 00:00:10.392 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:36:16.253 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:54218 10 6452 1 2025-10-20 23:31:47.989 00:05:57.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:32:45.243 00:05:02.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:36:57.266 00:00:10.361 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:37:16.511 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-10-20 23:37:57.665 00:00:10.372 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:38:16.727 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58512 12 10369 1 2025-10-20 23:38:58.111 00:00:11.935 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 15 1926 1 2025-10-20 23:39:16.968 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-10-20 23:40:00.121 00:00:10.364 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:40:35.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:40:17.207 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 10 6452 1 2025-10-20 23:40:35.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:41:00.522 00:00:10.367 TCP 23.104.0.1:46656 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:41:17.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-10-20 23:42:00.928 00:00:10.388 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:42:17.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51410 10 6452 1 2025-10-20 23:37:47.993 00:05:57.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:38:45.244 00:05:02.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:43:01.358 00:00:10.362 TCP 23.104.0.1:49066 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:43:17.847 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 12 10375 1 2025-10-20 23:44:01.760 00:00:10.454 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 15 1926 1 2025-10-20 23:44:18.098 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49144 10 6452 1 2025-10-20 23:45:02.247 00:00:10.325 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:45:18.322 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-10-20 23:45:34.805 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:45:34.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:46:02.613 00:00:10.320 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:46:18.549 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-10-20 23:47:02.974 00:00:10.376 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:47:18.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-10-20 23:48:03.392 00:00:10.357 TCP 23.104.0.1:40906 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:48:18.979 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6452 1 2025-10-20 23:43:47.994 00:05:57.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:44:45.248 00:05:02.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:49:03.790 00:00:10.363 TCP 23.104.0.1:44596 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:49:19.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-10-20 23:50:04.192 00:00:10.359 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:50:19.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34746 10 6452 1 2025-10-20 23:50:35.062 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:50:35.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:51:04.592 00:00:10.375 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:51:19.639 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 10 6452 1 2025-10-20 23:52:05.008 00:00:10.362 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:52:19.835 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55926 10 6452 1 2025-10-20 23:53:05.411 00:00:10.364 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:53:20.067 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-10-20 23:54:05.812 00:00:10.334 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:54:20.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2025-10-20 23:49:47.996 00:05:57.257 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 23:50:45.249 00:05:02.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 23:55:06.183 00:00:10.366 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:55:20.466 00:00:10.513 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-10-20 23:55:34.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 23:55:35.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 23:56:06.585 00:00:10.365 TCP 23.104.0.1:54132 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:56:21.023 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-10-20 23:57:06.988 00:00:10.371 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:57:21.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58484 10 6452 1 2025-10-20 23:58:07.399 00:00:10.366 TCP 23.104.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-10-20 23:58:21.462 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 Summary: total flows: 164, total bytes: 507066, total packets: 1585, avg bps: 1077, avg pps: 0, avg bpp: 319 Time window: 2025-10-20 22:55:47 - 2025-10-20 23:58:31 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0033s Wall: 0.0029s flows/second: 56942.5 Runtime: 0.0029s