Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 15:59:04.839 00:00:10.355 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:59:20.534 00:00:10.354 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-10-14 16:00:05.239 00:00:10.391 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:00:20.927 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59900 10 6452 1 2025-10-14 15:56:42.251 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:56:42.254 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:01:05.667 00:00:10.464 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 15 1926 1 2025-10-14 16:01:21.172 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 12 10369 1 2025-10-14 16:02:06.169 00:00:10.375 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:02:21.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59750 10 6452 1 2025-10-14 16:02:32.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:02:32.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:03:06.587 00:00:10.333 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:03:21.620 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55994 10 6452 1 2025-10-14 16:04:06.964 00:00:10.342 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:04:21.834 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-10-14 16:05:07.350 00:00:10.326 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:05:22.006 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:41922 10 6452 1 2025-10-14 16:06:07.716 00:00:10.377 TCP 23.104.0.1:55410 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:06:22.343 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56868 10 6452 1 2025-10-14 16:02:42.256 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:02:42.255 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:07:08.132 00:00:10.324 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:07:32.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:07:22.573 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-10-14 16:07:32.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:08:08.493 00:00:10.368 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:08:22.780 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43030 10 6452 1 2025-10-14 16:09:08.905 00:00:10.368 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:09:22.989 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-10-14 16:10:09.310 00:00:10.368 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:10:23.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43602 10 6452 1 2025-10-14 16:11:09.715 00:00:10.371 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:11:23.415 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6452 1 2025-10-14 16:12:10.126 00:00:10.369 TCP 23.104.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:12:23.584 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48858 10 6452 1 2025-10-14 16:12:32.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:12:32.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:08:42.258 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:08:42.254 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:13:10.531 00:00:10.365 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:13:23.759 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54512 10 6452 1 2025-10-14 16:14:10.933 00:00:10.379 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:14:23.978 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2025-10-14 16:15:11.354 00:00:10.364 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:15:24.198 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-10-14 16:16:11.760 00:00:10.371 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:16:24.382 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-10-14 16:17:12.171 00:00:11.072 TCP 23.104.0.1:48386 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:17:32.426 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:17:24.596 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-10-14 16:17:32.617 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:18:13.279 00:00:10.364 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:18:24.813 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-10-14 16:14:42.255 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:14:42.258 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:19:13.681 00:00:10.374 TCP 23.104.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:19:24.988 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6452 1 2025-10-14 16:20:14.105 00:00:10.366 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:20:25.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-10-14 16:21:14.508 00:00:10.327 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:21:25.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-10-14 16:22:14.876 00:00:10.363 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:22:25.649 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-10-14 16:22:33.145 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:22:33.164 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:23:15.275 00:00:10.376 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:23:25.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-10-14 16:24:15.688 00:00:10.366 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:24:26.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-10-14 16:20:42.259 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:20:42.257 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:25:16.102 00:00:10.361 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:25:26.321 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44070 10 6452 1 2025-10-14 16:26:16.502 00:00:10.368 TCP 23.104.0.1:34758 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:26:26.526 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-10-14 16:27:16.906 00:00:10.368 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:27:26.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37608 10 6452 1 2025-10-14 16:27:32.914 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:27:32.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:28:17.316 00:00:10.362 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:28:26.949 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-10-14 16:29:17.722 00:00:10.376 TCP 23.104.0.1:42724 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:29:27.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51710 10 6452 1 2025-10-14 16:30:18.136 00:00:10.364 TCP 23.104.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:30:27.349 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6452 1 2025-10-14 16:26:42.265 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:26:42.268 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:31:18.542 00:00:10.373 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:31:27.557 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-10-14 16:32:18.965 00:00:10.386 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:32:32.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:32:32.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:32:27.764 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-10-14 16:33:19.392 00:00:10.364 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:33:27.940 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-10-14 16:34:19.796 00:00:10.366 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:34:28.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-10-14 16:35:20.197 00:00:10.371 TCP 23.104.0.1:58472 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:35:28.385 00:00:10.481 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-10-14 16:36:20.610 00:00:10.329 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:32:42.268 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:36:28.904 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-10-14 16:32:42.266 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:37:20.981 00:00:10.375 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:37:33.024 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:37:33.063 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:37:29.123 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-10-14 16:38:21.392 00:00:10.368 TCP 23.104.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:38:29.463 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58094 10 6452 1 2025-10-14 16:39:21.797 00:00:10.364 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:39:29.673 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55472 10 6452 1 2025-10-14 16:40:22.200 00:00:10.366 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:40:29.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-10-14 16:41:22.604 00:00:10.373 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:41:30.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-10-14 16:42:33.123 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:42:33.011 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:42:23.014 00:00:10.358 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:42:30.334 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-10-14 16:38:42.266 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:38:42.270 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:43:23.409 00:00:10.370 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:43:30.507 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-10-14 16:44:23.814 00:00:10.333 TCP 23.104.0.1:43208 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:44:30.731 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-10-14 16:45:24.187 00:00:10.365 TCP 23.104.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:45:30.951 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59544 12 6556 1 2025-10-14 16:46:24.588 00:00:10.365 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:46:31.182 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-10-14 16:47:24.988 00:00:10.368 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:47:33.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:47:33.090 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:47:31.371 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-10-14 16:48:25.393 00:00:11.040 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:48:31.585 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-10-14 16:44:42.271 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:44:42.268 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:49:26.475 00:00:10.323 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:49:31.801 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-10-14 16:50:26.837 00:00:10.381 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:50:32.026 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45952 10 6452 1 2025-10-14 16:51:27.256 00:00:10.361 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:51:32.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37104 10 6452 1 2025-10-14 16:52:33.416 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:52:33.106 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:52:27.657 00:00:10.370 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:52:32.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48630 10 6452 1 2025-10-14 16:53:28.099 00:00:10.322 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:53:32.679 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58132 10 6452 1 2025-10-14 16:54:28.463 00:00:10.327 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:50:42.273 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 16:54:32.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6452 1 2025-10-14 16:50:42.275 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 16:55:28.831 00:00:10.392 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:55:33.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-10-14 16:56:29.257 00:00:10.361 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:56:33.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60630 10 6452 1 2025-10-14 16:57:33.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 16:57:33.519 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 16:57:29.660 00:00:10.367 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:57:33.543 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6452 1 2025-10-14 16:58:30.096 00:00:10.364 TCP 23.104.0.1:34116 -> 1.101.0.1:3000 11 1507 1 2025-10-14 16:58:33.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-10-14 15:56:42 - 2025-10-14 16:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0022s Wall: 0.0028s flows/second: 57789.3 Runtime: 0.0029s