Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 01:59:05.452 00:00:10.326 TCP 23.104.0.1:49702 -> 1.101.0.1:3000 11 1507 1 2025-10-13 01:59:17.034 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-10-13 02:00:05.816 00:00:10.364 TCP 23.104.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:00:17.242 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6452 1 2025-10-13 01:56:41.481 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 01:56:41.477 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:01:06.222 00:00:10.361 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:01:17.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-10-13 02:01:46.510 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:01:46.284 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:02:06.621 00:00:10.362 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:02:17.629 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-10-13 02:03:07.021 00:00:10.327 TCP 23.104.0.1:51666 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:03:17.844 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-10-13 02:04:07.386 00:00:10.360 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:04:18.087 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-10-13 02:05:07.783 00:00:10.363 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:05:18.324 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 10 6452 1 2025-10-13 02:06:08.183 00:00:10.362 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:06:18.586 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55520 10 6452 1 2025-10-13 02:06:46.647 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:02:41.479 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:06:46.712 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:02:41.481 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:07:08.585 00:00:10.361 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:07:18.762 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-10-13 02:08:08.989 00:00:10.323 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:08:18.977 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-10-13 02:09:09.354 00:00:10.363 TCP 23.104.0.1:47056 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:09:19.226 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-10-13 02:10:09.758 00:00:10.378 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:10:19.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-10-13 02:11:10.176 00:00:10.362 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:11:19.647 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47584 10 6452 1 2025-10-13 02:11:46.700 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:11:46.760 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:12:10.578 00:00:10.363 TCP 23.104.0.1:34166 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:12:19.860 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-10-13 02:08:41.483 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:08:41.480 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:13:10.977 00:00:10.366 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:13:20.087 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-10-13 02:14:11.382 00:00:10.325 TCP 23.104.0.1:40040 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:14:20.307 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-10-13 02:15:11.745 00:00:10.364 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:15:20.531 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-10-13 02:16:12.153 00:00:10.358 TCP 23.104.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:16:20.745 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-10-13 02:16:46.781 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:16:46.851 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:17:12.550 00:00:10.370 TCP 23.104.0.1:51518 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:17:20.972 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6452 1 2025-10-13 02:18:12.960 00:00:10.364 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:18:21.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-10-13 02:14:41.482 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:14:41.485 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:19:13.365 00:00:10.366 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:19:21.417 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-10-13 02:20:13.770 00:00:10.866 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:20:21.635 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-10-13 02:21:14.674 00:00:10.372 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:21:21.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-10-13 02:21:46.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:21:46.987 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:22:15.120 00:00:10.364 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:22:22.028 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-10-13 02:23:15.526 00:00:10.326 TCP 23.104.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:23:22.302 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-10-13 02:24:15.894 00:00:10.382 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:24:22.523 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54476 10 6452 1 2025-10-13 02:20:41.484 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:20:41.482 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:25:16.328 00:00:10.374 TCP 23.104.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:25:22.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32956 10 6452 1 2025-10-13 02:26:16.742 00:00:10.321 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:26:22.946 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43134 10 6452 1 2025-10-13 02:26:47.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:26:46.979 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:27:17.110 00:00:10.369 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:27:23.187 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-10-13 02:28:17.535 00:00:10.324 TCP 23.104.0.1:51352 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:28:23.406 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35816 10 6452 1 2025-10-13 02:29:17.897 00:00:10.369 TCP 23.104.0.1:44964 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:29:23.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35822 10 6452 1 2025-10-13 02:30:18.305 00:00:10.369 TCP 23.104.0.1:44608 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:30:23.856 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 11 6504 1 2025-10-13 02:26:41.484 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:26:41.487 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:31:18.713 00:00:10.332 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:31:24.152 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6452 1 2025-10-13 02:31:47.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:31:47.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:32:19.099 00:00:10.363 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:32:24.363 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 2025-10-13 02:33:19.500 00:00:10.362 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:33:24.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42058 10 6452 1 2025-10-13 02:34:19.901 00:00:10.370 TCP 23.104.0.1:41328 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:34:24.795 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-10-13 02:35:20.312 00:00:10.326 TCP 23.104.0.1:57362 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:35:25.002 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43406 10 6452 1 2025-10-13 02:36:20.676 00:00:10.360 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:36:25.221 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-10-13 02:32:41.484 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:32:41.486 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:36:47.293 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:36:47.017 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:37:21.099 00:00:10.365 TCP 23.104.0.1:52456 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:37:25.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-10-13 02:38:21.499 00:00:10.323 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:38:25.645 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-13 02:39:21.861 00:00:10.369 TCP 23.104.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:39:26.033 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59456 10 6452 1 2025-10-13 02:40:26.242 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48804 10 6452 1 2025-10-13 02:40:22.268 00:00:10.340 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:41:22.648 00:00:10.910 TCP 23.104.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:41:26.410 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57530 10 6452 1 2025-10-13 02:41:47.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:41:47.436 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:42:26.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-10-13 02:42:23.597 00:00:10.365 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:38:41.486 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:38:41.489 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:43:26.842 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-10-13 02:43:23.999 00:00:10.366 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:44:24.406 00:00:10.326 TCP 23.104.0.1:50126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:44:27.015 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-10-13 02:45:24.769 00:00:10.372 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:45:27.226 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-10-13 02:46:25.177 00:00:10.323 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:46:27.452 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45630 10 6452 1 2025-10-13 02:46:47.754 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:46:47.327 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:47:25.535 00:00:10.363 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:47:27.673 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-10-13 02:48:25.939 00:00:10.342 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:48:27.899 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-10-13 02:44:41.498 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:44:41.497 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:49:26.318 00:00:10.365 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:49:28.123 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-10-13 02:50:28.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-10-13 02:50:26.730 00:00:10.369 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:51:28.559 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46778 10 6452 1 2025-10-13 02:51:27.137 00:00:10.364 TCP 23.104.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:51:47.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:51:47.653 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:52:27.542 00:00:10.364 TCP 23.104.0.1:55442 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:52:28.779 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-10-13 02:53:27.945 00:00:10.369 TCP 23.104.0.1:59868 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:53:28.951 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46868 10 6452 1 2025-10-13 02:54:28.351 00:00:10.360 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:50:41.499 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 02:54:29.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-10-13 02:50:41.497 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 02:55:29.383 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-10-13 02:55:28.749 00:00:10.390 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:56:29.180 00:00:10.365 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:56:29.641 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35866 10 6452 1 2025-10-13 02:56:47.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 02:56:47.677 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 02:57:29.852 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51914 10 6452 1 2025-10-13 02:57:29.583 00:00:10.366 TCP 23.104.0.1:33782 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:58:30.089 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-10-13 02:58:29.985 00:00:10.379 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-10-13 01:56:41 - 2025-10-13 02:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0027s flows/second: 60540.9 Runtime: 0.0027s