Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 05:58:48.306 00:00:10.363 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:59:09.255 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-10-13 05:59:48.708 00:00:10.366 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:00:09.462 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-10-13 05:56:41.546 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:56:41.545 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:00:49.128 00:00:10.320 TCP 23.104.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:01:09.676 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-10-13 06:01:51.521 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:01:51.512 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:01:49.493 00:00:10.375 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:02:09.886 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44302 10 6452 1 2025-10-13 06:02:49.908 00:00:10.617 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:03:10.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2025-10-13 06:03:50.566 00:00:10.357 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:04:10.325 00:00:10.847 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-10-13 06:04:50.965 00:00:10.373 TCP 23.104.0.1:54640 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:05:11.206 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-10-13 06:05:51.377 00:00:10.373 TCP 23.104.0.1:33444 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:06:11.378 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-10-13 06:02:41.545 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:02:41.548 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:06:51.436 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:06:51.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:06:51.793 00:00:10.366 TCP 23.104.0.1:59272 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:07:11.594 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 10 6452 1 2025-10-13 06:07:52.201 00:00:10.374 TCP 23.104.0.1:35322 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:08:11.807 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48750 10 6452 1 2025-10-13 06:08:52.612 00:00:10.366 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:09:12.038 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6452 1 2025-10-13 06:09:53.014 00:00:10.367 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:10:12.259 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-10-13 06:10:53.415 00:00:10.365 TCP 23.104.0.1:60682 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:11:12.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47504 10 6452 1 2025-10-13 06:11:51.504 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:11:51.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:11:53.819 00:00:10.374 TCP 23.104.0.1:40598 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:12:12.697 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43236 10 6452 1 2025-10-13 06:08:41.544 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:08:41.549 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:12:54.225 00:00:10.368 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:13:12.873 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-10-13 06:13:54.627 00:00:10.367 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:14:13.088 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2025-10-13 06:14:55.034 00:00:10.363 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:15:13.262 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60164 10 6452 1 2025-10-13 06:15:55.438 00:00:10.937 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:16:13.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-10-13 06:16:51.671 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:16:51.603 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:16:56.413 00:00:10.361 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:17:13.649 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 10 6452 1 2025-10-13 06:17:56.818 00:00:10.359 TCP 23.104.0.1:53600 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:18:13.891 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45778 10 6452 1 2025-10-13 06:14:41.550 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:14:41.552 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:18:57.218 00:00:10.365 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:19:14.127 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:51356 10 6452 1 2025-10-13 06:19:57.625 00:00:10.362 TCP 23.104.0.1:46576 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:20:14.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-10-13 06:20:58.022 00:00:10.359 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:21:14.549 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6452 1 2025-10-13 06:21:52.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:21:52.011 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:21:58.422 00:00:10.411 TCP 23.104.0.1:33394 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:22:14.771 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-10-13 06:22:58.873 00:00:10.329 TCP 23.104.0.1:43704 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:23:14.950 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39782 10 6452 1 2025-10-13 06:23:59.237 00:00:10.367 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:24:15.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45064 10 6452 1 2025-10-13 06:20:41.560 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:20:41.558 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:24:59.646 00:00:10.362 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:25:15.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-10-13 06:26:00.059 00:00:10.363 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:26:15.615 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-10-13 06:26:51.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:26:51.805 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:27:00.465 00:00:10.364 TCP 23.104.0.1:41006 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:27:15.833 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41184 10 6452 1 2025-10-13 06:28:00.870 00:00:10.367 TCP 23.104.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:28:16.004 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6452 1 2025-10-13 06:29:01.278 00:00:10.366 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:29:16.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43232 10 6452 1 2025-10-13 06:30:01.681 00:00:10.333 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:30:16.422 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37280 10 6452 1 2025-10-13 06:26:41.558 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:26:41.561 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:31:02.057 00:00:10.365 TCP 23.104.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:31:16.630 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-10-13 06:31:51.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:31:52.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:32:02.458 00:00:10.336 TCP 23.104.0.1:58334 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:32:16.838 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-10-13 06:33:02.842 00:00:10.389 TCP 23.104.0.1:44258 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:33:17.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-10-13 06:34:03.276 00:00:10.445 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:34:17.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-10-13 06:35:03.763 00:00:10.373 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:35:17.427 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-10-13 06:36:04.173 00:00:10.368 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:36:17.643 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-10-13 06:32:41.561 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:32:41.563 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:36:52.153 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:36:52.018 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:37:04.577 00:00:10.329 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:37:17.852 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-10-13 06:38:04.939 00:00:10.385 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:38:18.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 10 6452 1 2025-10-13 06:39:05.366 00:00:10.323 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:39:18.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46718 10 6452 1 2025-10-13 06:40:05.726 00:00:10.325 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:40:18.510 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56428 10 6452 1 2025-10-13 06:41:06.104 00:00:10.365 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:41:18.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-10-13 06:41:52.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:41:52.268 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:42:06.511 00:00:10.328 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:42:18.904 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-10-13 06:38:41.561 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:38:41.563 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:43:06.878 00:00:10.365 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:43:19.118 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-10-13 06:44:07.283 00:00:10.364 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:44:19.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-10-13 06:45:07.684 00:00:10.360 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:45:19.540 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-10-13 06:46:08.103 00:00:10.402 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 15 1926 1 2025-10-13 06:46:19.752 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 12 10375 1 2025-10-13 06:46:52.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:46:52.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:47:08.542 00:00:10.322 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:47:19.995 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-10-13 06:48:08.905 00:00:10.370 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:48:20.214 00:00:11.278 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 10 6452 1 2025-10-13 06:44:41.563 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:44:41.566 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:49:09.312 00:00:10.368 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:49:21.534 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45434 10 6452 1 2025-10-13 06:50:09.717 00:00:10.375 TCP 23.104.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:50:21.743 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-10-13 06:51:10.130 00:00:10.325 TCP 23.104.0.1:43654 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:51:21.913 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-10-13 06:51:52.407 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:51:52.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:52:10.495 00:00:10.374 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:52:22.123 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6452 1 2025-10-13 06:53:10.909 00:00:10.366 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:53:22.300 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53234 10 6452 1 2025-10-13 06:54:11.315 00:00:10.381 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:54:22.511 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41118 10 6452 1 2025-10-13 06:50:41.565 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:50:41.568 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 06:55:11.737 00:00:10.374 TCP 23.104.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:55:22.721 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-10-13 06:56:12.152 00:00:10.325 TCP 23.104.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:56:22.931 00:00:11.257 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-10-13 06:56:52.343 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 06:56:52.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 06:57:12.512 00:00:10.375 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:57:24.227 00:00:11.239 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 10 6452 1 2025-10-13 06:58:12.924 00:00:10.388 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:58:25.507 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-10-13 05:56:41 - 2025-10-13 06:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0011s Wall: 0.0025s flows/second: 66614.9 Runtime: 0.0025s