Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 23:59:20.491 00:00:10.370 TCP 23.104.0.1:42796 -> 1.101.0.1:3000 11 1507 1 2025-10-13 23:59:33.756 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35638 10 6661 1 2025-10-14 00:00:20.902 00:00:10.372 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:00:33.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6661 1 2025-10-13 23:56:41.884 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 23:56:41.885 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:01:21.309 00:00:10.373 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:01:34.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6661 1 2025-10-14 00:02:13.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:02:13.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:02:21.720 00:00:10.526 TCP 23.104.0.1:59402 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:02:34.396 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6661 1 2025-10-14 00:03:22.282 00:00:10.325 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:03:34.567 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6661 1 2025-10-14 00:04:22.648 00:00:10.366 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:04:34.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6661 1 2025-10-14 00:05:23.057 00:00:10.367 TCP 23.104.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:05:34.987 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6661 1 2025-10-14 00:06:23.463 00:00:10.317 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:06:35.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6661 1 2025-10-14 00:02:41.884 00:05:02.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:02:41.886 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:07:12.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:07:13.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:07:23.817 00:00:10.326 TCP 23.104.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:07:35.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6661 1 2025-10-14 00:08:24.188 00:00:10.359 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:08:35.637 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33196 10 6661 1 2025-10-14 00:09:24.586 00:00:10.771 TCP 23.104.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:09:35.812 00:00:10.780 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6661 1 2025-10-14 00:10:25.399 00:00:10.368 TCP 23.104.0.1:55242 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:10:36.632 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36074 10 6661 1 2025-10-14 00:11:25.804 00:00:10.377 TCP 23.104.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:11:36.847 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6661 1 2025-10-14 00:12:13.249 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:12:13.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:12:26.219 00:00:10.367 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:08:41.889 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:08:41.887 00:05:02.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:12:37.030 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6661 1 2025-10-14 00:13:26.624 00:00:10.366 TCP 23.104.0.1:38580 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:13:37.244 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6661 1 2025-10-14 00:14:27.029 00:00:10.364 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:14:37.454 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6661 1 2025-10-14 00:15:27.430 00:00:10.356 TCP 23.104.0.1:40194 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:15:37.676 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6661 1 2025-10-14 00:16:27.828 00:00:10.386 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:16:37.914 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:38744 10 6661 1 2025-10-14 00:17:13.057 00:00:00.067 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:17:13.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:17:28.253 00:00:10.362 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:17:38.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45426 10 6661 1 2025-10-14 00:14:41.887 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:18:28.656 00:00:10.370 TCP 23.104.0.1:33022 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:14:41.891 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:18:38.315 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6661 1 2025-10-14 00:19:29.091 00:00:10.365 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:19:38.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6661 1 2025-10-14 00:20:29.492 00:00:10.322 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:20:38.745 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:49632 10 6661 1 2025-10-14 00:21:29.854 00:00:10.384 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:21:38.987 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6661 1 2025-10-14 00:22:13.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:22:13.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:22:30.274 00:00:10.538 TCP 23.104.0.1:60622 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:22:39.220 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6661 1 2025-10-14 00:23:30.843 00:00:10.366 TCP 23.104.0.1:41054 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:23:39.396 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6661 1 2025-10-14 00:24:31.238 00:00:10.370 TCP 23.104.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:20:41.890 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:20:41.892 00:05:02.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:24:39.618 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6661 1 2025-10-14 00:25:31.646 00:00:10.367 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:25:39.841 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60196 10 6661 1 2025-10-14 00:26:32.053 00:00:10.325 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:26:40.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60952 10 6661 1 2025-10-14 00:27:13.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:27:13.732 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:27:32.418 00:00:10.367 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:27:40.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6661 1 2025-10-14 00:28:32.823 00:00:10.362 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:28:40.503 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6661 1 2025-10-14 00:29:33.223 00:00:10.364 TCP 23.104.0.1:44148 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:29:40.664 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6661 1 2025-10-14 00:26:41.890 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:30:33.621 00:00:10.363 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:26:41.894 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:30:40.871 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6661 1 2025-10-14 00:31:34.026 00:00:10.360 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:31:41.100 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6661 1 2025-10-14 00:32:13.701 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:32:13.459 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:32:34.425 00:00:10.364 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:32:41.267 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6661 1 2025-10-14 00:33:34.828 00:00:10.381 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:33:41.446 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40242 10 6661 1 2025-10-14 00:34:35.243 00:00:10.368 TCP 23.104.0.1:44268 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:34:41.619 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6661 1 2025-10-14 00:35:35.658 00:00:10.365 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:35:41.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 10 6661 1 2025-10-14 00:32:41.893 00:05:02.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:36:36.062 00:00:10.321 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:32:41.895 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:36:42.007 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 10 6661 1 2025-10-14 00:37:13.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:37:13.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:37:36.420 00:00:10.366 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:37:42.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6661 1 2025-10-14 00:38:36.825 00:00:10.364 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:38:42.393 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6661 1 2025-10-14 00:39:37.229 00:00:10.365 TCP 23.104.0.1:41168 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:39:42.610 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40752 10 6661 1 2025-10-14 00:40:37.632 00:00:10.372 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:40:42.779 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6661 1 2025-10-14 00:41:38.050 00:00:10.366 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:41:42.989 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52830 10 6661 1 2025-10-14 00:42:14.020 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:42:13.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:38:41.894 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:38:41.896 00:05:02.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:42:38.455 00:00:10.368 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:42:43.167 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6661 1 2025-10-14 00:43:38.862 00:00:10.372 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:43:43.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6661 1 2025-10-14 00:44:39.272 00:00:10.368 TCP 23.104.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:44:43.557 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 10 6661 1 2025-10-14 00:45:39.675 00:00:10.366 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:45:43.770 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37720 10 6661 1 2025-10-14 00:46:40.105 00:00:10.364 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:46:43.990 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 10 6661 1 2025-10-14 00:47:14.298 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:47:13.955 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:47:40.513 00:00:10.323 TCP 23.104.0.1:60750 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:47:44.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6661 1 2025-10-14 00:44:41.897 00:05:02.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:44:41.894 00:05:02.465 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:48:40.874 00:00:10.323 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:48:44.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6661 1 2025-10-14 00:49:41.235 00:00:10.362 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:49:44.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6661 1 2025-10-14 00:50:41.634 00:00:10.323 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:50:44.848 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6661 1 2025-10-14 00:51:41.995 00:00:10.393 TCP 23.104.0.1:38744 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:51:45.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6661 1 2025-10-14 00:52:14.009 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:52:13.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:52:45.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 10 6661 1 2025-10-14 00:52:42.426 00:00:10.376 TCP 23.104.0.1:53088 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:53:45.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54290 10 6661 1 2025-10-14 00:53:42.829 00:00:10.363 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:50:41.898 00:05:02.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 00:50:41.895 00:05:02.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:54:45.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6661 1 2025-10-14 00:54:43.234 00:00:10.373 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:55:45.939 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6661 1 2025-10-14 00:55:43.643 00:00:10.365 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:56:44.049 00:00:10.366 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:56:46.174 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6661 1 2025-10-14 00:57:14.118 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 00:57:14.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 00:57:44.457 00:00:10.362 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:57:46.360 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6661 1 Summary: total flows: 162, total bytes: 502720, total packets: 1551, avg bps: 1094, avg pps: 0, avg bpp: 324 Time window: 2025-10-13 23:56:41 - 2025-10-14 00:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0020s User: 0.0030s Wall: 0.0026s flows/second: 62189.0 Runtime: 0.0026s