Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 19:58:52.936 00:00:10.375 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:59:13.965 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 12 6765 1 2025-10-14 19:59:53.352 00:00:10.363 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:00:14.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6661 1 2025-10-14 19:56:42.328 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:56:42.332 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:00:53.750 00:00:10.368 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:01:14.460 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6661 1 2025-10-14 20:01:54.152 00:00:10.371 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:02:14.633 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6661 1 2025-10-14 20:02:37.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:02:37.355 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:02:54.555 00:00:10.368 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:03:14.812 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49740 10 6661 1 2025-10-14 20:03:54.959 00:00:10.363 TCP 23.104.0.1:39962 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:04:15.037 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6661 1 2025-10-14 20:04:55.363 00:00:10.323 TCP 23.104.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:05:15.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6661 1 2025-10-14 20:05:55.727 00:00:10.373 TCP 23.104.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:06:15.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6661 1 2025-10-14 20:02:42.331 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:02:42.333 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:06:56.139 00:00:10.368 TCP 23.104.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:07:15.678 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6661 1 2025-10-14 20:07:37.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:07:37.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:07:56.541 00:00:10.322 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:08:15.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6661 1 2025-10-14 20:08:56.903 00:00:10.366 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:09:16.111 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42226 10 6661 1 2025-10-14 20:09:57.310 00:00:10.320 TCP 23.104.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:10:16.276 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6661 1 2025-10-14 20:10:57.667 00:00:10.362 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:11:16.497 00:00:10.935 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6661 1 2025-10-14 20:11:58.093 00:00:10.371 TCP 23.104.0.1:44324 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:12:17.471 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 10 6661 1 2025-10-14 20:12:37.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:12:37.357 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:08:42.334 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:08:42.331 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:12:58.496 00:00:10.370 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:13:17.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46946 10 6661 1 2025-10-14 20:13:58.909 00:00:10.324 TCP 23.104.0.1:33200 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:14:17.871 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6661 1 2025-10-14 20:14:59.270 00:00:10.372 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:15:18.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6661 1 2025-10-14 20:15:59.675 00:00:10.360 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:16:18.314 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6661 1 2025-10-14 20:17:00.095 00:00:10.364 TCP 23.104.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:17:18.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6661 1 2025-10-14 20:17:37.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:17:37.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:18:00.500 00:00:10.366 TCP 23.104.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:18:18.748 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6661 1 2025-10-14 20:14:42.336 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:14:42.333 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:19:00.906 00:00:10.340 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:19:18.918 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6661 1 2025-10-14 20:20:01.284 00:00:10.365 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:20:19.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56724 10 6661 1 2025-10-14 20:21:01.686 00:00:10.326 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:21:19.422 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6661 1 2025-10-14 20:22:02.059 00:00:10.366 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:22:19.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6661 1 2025-10-14 20:22:37.490 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:22:37.697 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:23:02.465 00:00:10.323 TCP 23.104.0.1:43020 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:23:19.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6661 1 2025-10-14 20:24:02.826 00:00:10.373 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:24:20.025 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6661 1 2025-10-14 20:20:42.338 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:20:42.336 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:25:03.236 00:00:10.730 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:25:20.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6661 1 2025-10-14 20:26:04.008 00:00:10.364 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:26:20.409 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6661 1 2025-10-14 20:27:04.410 00:00:10.366 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:27:20.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56996 10 6661 1 2025-10-14 20:27:37.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:27:37.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:28:04.816 00:00:10.367 TCP 23.104.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:28:20.829 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 11 6701 1 2025-10-14 20:29:05.221 00:00:10.363 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:29:21.053 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6661 1 2025-10-14 20:30:05.622 00:00:10.372 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:30:21.275 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59336 10 6661 1 2025-10-14 20:26:42.338 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:26:42.337 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:31:06.023 00:00:10.437 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 15 1926 1 2025-10-14 20:31:21.490 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37608 12 10375 1 2025-10-14 20:32:06.501 00:00:10.360 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:32:21.740 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-10-14 20:32:37.685 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:32:37.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:33:06.906 00:00:10.364 TCP 23.104.0.1:43544 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:33:21.955 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-10-14 20:34:07.308 00:00:10.364 TCP 23.104.0.1:44856 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:34:22.145 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6452 1 2025-10-14 20:35:07.714 00:00:10.492 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:35:22.359 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60802 10 6452 1 2025-10-14 20:36:08.245 00:00:10.322 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:36:22.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 10 6452 1 2025-10-14 20:32:42.339 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:32:42.336 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:37:08.604 00:00:10.327 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:37:22.749 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-10-14 20:37:37.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:37:37.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:38:08.971 00:00:10.367 TCP 23.104.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:38:22.988 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-10-14 20:39:09.378 00:00:10.363 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:39:23.216 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38816 10 6452 1 2025-10-14 20:40:09.779 00:00:10.331 TCP 23.104.0.1:54118 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:40:23.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6452 1 2025-10-14 20:41:10.144 00:00:10.366 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:41:23.607 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55706 10 6452 1 2025-10-14 20:42:10.549 00:00:10.322 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:42:37.857 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:42:23.826 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-10-14 20:42:37.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:38:42.338 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:38:42.340 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:43:10.910 00:00:10.360 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:43:24.062 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-10-14 20:44:11.307 00:00:10.362 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:44:24.274 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-10-14 20:45:11.712 00:00:10.374 TCP 23.104.0.1:50708 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:45:24.493 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33544 10 6452 1 2025-10-14 20:46:12.129 00:00:10.362 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:46:24.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41520 10 6452 1 2025-10-14 20:47:12.545 00:00:10.363 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:47:37.969 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:47:24.925 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46822 10 6452 1 2025-10-14 20:47:38.049 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:48:12.949 00:00:10.336 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:48:25.141 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-10-14 20:44:42.342 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:44:42.341 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:49:13.329 00:00:10.357 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:49:25.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-10-14 20:50:13.734 00:00:10.322 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:50:25.566 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-10-14 20:51:14.106 00:00:10.364 TCP 23.104.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:51:25.737 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-10-14 20:52:14.515 00:00:10.363 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:52:25.955 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 12 6556 1 2025-10-14 20:52:37.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:52:38.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:53:14.926 00:00:10.389 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:53:26.200 00:00:10.669 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-10-14 20:54:15.357 00:00:10.365 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:54:26.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52080 10 6452 1 2025-10-14 20:50:42.342 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:50:42.343 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 20:55:15.760 00:00:10.330 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:55:27.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48858 10 6452 1 2025-10-14 20:56:16.133 00:00:10.360 TCP 23.104.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:56:27.342 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-10-14 20:57:16.534 00:00:10.319 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:57:38.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 20:57:27.557 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34392 10 6452 1 2025-10-14 20:57:38.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 20:58:16.895 00:00:10.375 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:58:27.784 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 Summary: total flows: 164, total bytes: 509626, total packets: 1583, avg bps: 1097, avg pps: 0, avg bpp: 321 Time window: 2025-10-14 19:56:42 - 2025-10-14 20:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0010s Wall: 0.0014s flows/second: 116964.1 Runtime: 0.0014s