Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 06:59:13.347 00:00:10.368 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-13 06:59:25.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-10-13 07:00:13.753 00:00:10.366 TCP 23.104.0.1:42934 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:00:25.943 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:51190 10 6452 1 2025-10-13 06:56:41.567 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 06:56:41.570 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:01:14.158 00:00:10.323 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:01:26.195 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-10-13 07:01:52.369 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:01:52.578 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:02:14.517 00:00:10.321 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:02:26.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-10-13 07:03:14.874 00:00:10.358 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:03:26.627 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-10-13 07:04:15.265 00:00:10.363 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:04:26.851 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-10-13 07:05:15.665 00:00:10.326 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:05:27.030 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-10-13 07:06:16.031 00:00:10.367 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:06:27.212 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-10-13 07:02:41.571 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:02:41.568 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:06:52.521 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:06:52.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:07:16.431 00:00:10.365 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:07:27.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46666 10 6452 1 2025-10-13 07:08:16.834 00:00:10.390 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:08:27.640 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33840 10 6452 1 2025-10-13 07:09:17.256 00:00:10.365 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:09:27.824 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34116 10 6452 1 2025-10-13 07:10:17.659 00:00:10.322 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:10:28.065 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-10-13 07:11:18.028 00:00:10.365 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:11:28.572 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43482 10 6452 1 2025-10-13 07:11:52.879 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:11:52.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:12:18.431 00:00:10.359 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:12:28.783 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-10-13 07:08:41.571 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:08:41.574 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:13:18.833 00:00:10.381 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:13:28.997 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-10-13 07:14:19.255 00:00:10.376 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:14:29.619 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-10-13 07:15:19.664 00:00:10.366 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:15:29.823 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-10-13 07:16:20.096 00:00:10.328 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:16:30.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-10-13 07:16:53.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:16:52.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:17:20.471 00:00:10.366 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:17:30.249 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39172 10 6452 1 2025-10-13 07:18:20.872 00:00:10.329 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:14:41.574 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:18:30.464 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-10-13 07:14:41.572 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:19:21.236 00:00:10.376 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:19:30.685 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-10-13 07:20:21.655 00:00:10.365 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:20:30.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-10-13 07:21:22.074 00:00:10.323 TCP 23.104.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:21:31.088 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37952 10 6452 1 2025-10-13 07:21:52.935 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:21:52.642 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:22:22.436 00:00:10.366 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:22:31.325 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45346 10 6452 1 2025-10-13 07:23:22.836 00:00:10.388 TCP 23.104.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:23:31.552 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36754 10 6452 1 2025-10-13 07:24:23.261 00:00:10.361 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:24:31.781 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-10-13 07:20:41.574 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:20:41.577 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:25:23.658 00:00:10.360 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:25:32.031 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60320 10 6452 1 2025-10-13 07:26:24.083 00:00:10.448 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 15 1926 1 2025-10-13 07:26:32.206 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 12 10375 1 2025-10-13 07:26:53.001 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:26:53.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:27:24.566 00:00:10.906 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:27:32.453 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-10-13 07:28:25.512 00:00:10.363 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:28:32.684 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59276 10 6452 1 2025-10-13 07:29:25.911 00:00:10.367 TCP 23.104.0.1:58632 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:29:32.865 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-10-13 07:30:26.349 00:00:10.366 TCP 23.104.0.1:32992 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:30:33.039 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-10-13 07:26:41.576 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:26:41.579 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:31:26.749 00:00:10.377 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:31:33.256 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 10 6452 1 2025-10-13 07:31:53.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:31:53.060 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:32:27.166 00:00:10.362 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:32:33.479 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-10-13 07:33:27.569 00:00:10.364 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:33:33.700 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-10-13 07:34:27.971 00:00:10.419 TCP 23.104.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:34:33.926 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-10-13 07:35:28.429 00:00:10.328 TCP 23.104.0.1:58840 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:35:34.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-10-13 07:36:28.797 00:00:10.444 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 15 1926 1 2025-10-13 07:32:41.578 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:36:34.385 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 12 10375 1 2025-10-13 07:32:41.577 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:36:53.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:36:53.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:37:29.281 00:00:10.363 TCP 23.104.0.1:52060 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:37:34.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-10-13 07:38:29.684 00:00:10.327 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:38:34.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6452 1 2025-10-13 07:39:30.057 00:00:10.368 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:39:35.078 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-10-13 07:40:30.463 00:00:10.361 TCP 23.104.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:40:35.252 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45912 10 6452 1 2025-10-13 07:41:30.856 00:00:10.375 TCP 23.104.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:41:35.462 00:00:10.683 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 10 6452 1 2025-10-13 07:41:53.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:41:53.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:42:31.268 00:00:10.324 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:38:41.581 00:05:02.447 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:38:41.578 00:05:02.452 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:42:36.183 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-10-13 07:43:31.630 00:00:10.366 TCP 23.104.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:43:36.353 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-10-13 07:44:32.057 00:00:10.325 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:44:36.568 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-10-13 07:45:36.793 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-10-13 07:45:32.424 00:00:10.369 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:46:32.827 00:00:10.364 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:46:37.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2025-10-13 07:46:53.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:46:53.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:47:33.225 00:00:10.332 TCP 23.104.0.1:45702 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:47:37.225 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-10-13 07:48:33.600 00:00:10.374 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:44:41.581 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:44:41.579 00:05:02.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:48:37.397 00:00:15.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-10-13 07:49:34.010 00:00:10.541 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:49:42.622 00:00:10.872 TCP 1.101.0.1:3000 -> 22.102.0.1:47690 10 6452 1 2025-10-13 07:50:34.592 00:00:10.323 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:50:43.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56836 10 6452 1 2025-10-13 07:51:34.957 00:00:10.420 TCP 23.104.0.1:33300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:51:43.753 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 10 6452 1 2025-10-13 07:51:53.632 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:51:53.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:52:35.420 00:00:10.364 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:52:43.977 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-10-13 07:53:35.828 00:00:10.421 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:53:44.225 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52582 10 6452 1 2025-10-13 07:50:41.590 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 07:50:41.592 00:05:02.446 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 07:54:36.287 00:00:10.364 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:54:44.444 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-10-13 07:55:36.691 00:00:10.362 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:55:44.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-10-13 07:56:37.102 00:00:10.368 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:56:53.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 07:56:53.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 07:56:44.877 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-10-13 07:57:37.507 00:00:10.323 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-10-13 07:57:45.104 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-10-13 07:58:37.870 00:00:10.367 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500580, total packets: 1574, avg bps: 1074, avg pps: 0, avg bpp: 318 Time window: 2025-10-13 06:56:41 - 2025-10-13 07:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0023s flows/second: 72315.6 Runtime: 0.0023s