Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 12:58:56.540 00:00:10.361 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-10-15 12:59:11.451 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42366 10 6452 1 2025-10-15 12:59:56.940 00:00:10.372 TCP 23.104.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:00:11.665 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-10-15 12:56:42.622 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 12:56:42.620 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:00:57.351 00:00:10.317 TCP 23.104.0.1:41668 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:01:11.840 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-10-15 13:01:57.706 00:00:10.361 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:02:12.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-10-15 13:02:57.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:02:57.658 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:02:58.114 00:00:10.326 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:03:12.297 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-10-15 13:03:58.475 00:00:10.362 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:04:12.505 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-10-15 13:04:58.878 00:00:10.740 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:05:12.680 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 12 6556 1 2025-10-15 13:05:59.664 00:00:10.362 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:06:12.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60612 10 6452 1 2025-10-15 13:02:42.624 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:02:42.620 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:07:00.095 00:00:10.361 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:07:13.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49250 10 6452 1 2025-10-15 13:07:57.379 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:07:57.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:08:00.497 00:00:10.365 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:08:13.323 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-10-15 13:09:00.903 00:00:10.368 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:09:13.539 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-10-15 13:10:01.311 00:00:10.380 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:10:13.752 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-10-15 13:11:01.732 00:00:10.372 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:11:13.968 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-10-15 13:12:02.136 00:00:10.371 TCP 23.104.0.1:33224 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:12:14.195 00:00:11.041 TCP 1.101.0.1:3000 -> 22.102.0.1:39852 10 6452 1 2025-10-15 13:08:42.623 00:05:02.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:08:42.627 00:05:02.532 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:12:57.842 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:12:57.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:13:02.544 00:00:10.364 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:13:15.278 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59938 10 6452 1 2025-10-15 13:14:02.947 00:00:10.368 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:14:15.487 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-10-15 13:15:03.350 00:00:10.376 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:15:15.700 00:00:10.525 TCP 1.101.0.1:3000 -> 22.102.0.1:37994 12 6556 1 2025-10-15 13:16:03.765 00:00:10.382 TCP 23.104.0.1:34966 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:16:16.260 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52052 10 6452 1 2025-10-15 13:17:04.180 00:00:10.367 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:17:16.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-10-15 13:17:58.021 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:17:57.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:18:04.585 00:00:10.367 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:18:16.700 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54016 10 6452 1 2025-10-15 13:14:42.624 00:05:02.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:14:42.626 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:19:04.993 00:00:10.373 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:19:16.873 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50790 10 6452 1 2025-10-15 13:20:05.396 00:00:10.367 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:20:17.075 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-10-15 13:21:05.798 00:00:10.437 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 15 1926 1 2025-10-15 13:21:17.290 00:00:10.512 TCP 1.101.0.1:3000 -> 22.102.0.1:44974 12 10375 1 2025-10-15 13:22:06.280 00:00:10.328 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:22:17.846 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 12 6556 1 2025-10-15 13:22:58.251 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:22:57.988 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:23:06.642 00:00:10.371 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:23:18.070 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56840 10 6452 1 2025-10-15 13:24:07.059 00:00:10.619 TCP 23.104.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:24:18.244 00:00:10.859 TCP 1.101.0.1:3000 -> 22.102.0.1:57054 10 6452 1 2025-10-15 13:20:42.630 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:20:42.626 00:05:02.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:25:07.718 00:00:10.369 TCP 23.104.0.1:46486 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:25:19.141 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33250 10 6452 1 2025-10-15 13:26:08.126 00:00:10.372 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:26:19.346 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-10-15 13:27:08.537 00:00:10.366 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:27:19.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35352 10 6452 1 2025-10-15 13:27:58.073 00:00:00.058 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:27:58.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:28:08.943 00:00:10.332 TCP 23.104.0.1:56844 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:28:19.782 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38666 10 6452 1 2025-10-15 13:29:09.322 00:00:10.363 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:29:19.953 00:00:11.021 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 12 6556 1 2025-10-15 13:30:09.723 00:00:10.371 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:30:21.013 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34968 10 6452 1 2025-10-15 13:26:42.629 00:05:02.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:26:42.627 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:31:10.141 00:00:10.440 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 15 1926 1 2025-10-15 13:31:21.224 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 12 10375 1 2025-10-15 13:32:10.622 00:00:10.365 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:32:21.435 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56050 11 6492 1 2025-10-15 13:32:58.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:32:58.119 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:33:11.025 00:00:10.361 TCP 23.104.0.1:38398 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:33:21.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-10-15 13:34:11.428 00:00:10.364 TCP 23.104.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:34:21.861 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 10 6452 1 2025-10-15 13:35:11.835 00:00:10.384 TCP 23.104.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:35:22.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-10-15 13:36:12.264 00:00:10.368 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:36:22.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-10-15 13:32:42.631 00:05:02.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:32:42.629 00:05:02.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:37:12.668 00:00:10.705 TCP 23.104.0.1:37478 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:37:22.526 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42328 10 6452 1 2025-10-15 13:37:58.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:37:58.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:38:13.390 00:00:10.366 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:38:22.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-10-15 13:39:13.794 00:00:10.365 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:39:22.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-10-15 13:40:14.196 00:00:10.362 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:40:23.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6452 1 2025-10-15 13:41:14.601 00:00:10.360 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:41:23.391 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-10-15 13:42:15.003 00:00:10.324 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:42:23.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 10 6452 1 2025-10-15 13:38:42.633 00:05:02.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:38:42.629 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:42:58.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:42:58.627 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:43:15.367 00:00:10.365 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:43:23.819 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-10-15 13:44:15.769 00:00:10.370 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:44:23.989 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:49912 10 6452 1 2025-10-15 13:45:16.175 00:00:10.325 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:45:24.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-10-15 13:46:16.535 00:00:10.363 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:46:24.566 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6452 1 2025-10-15 13:47:16.940 00:00:10.327 TCP 23.104.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:47:24.747 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-10-15 13:47:58.146 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:47:58.540 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:48:17.304 00:00:10.363 TCP 23.104.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:48:24.962 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47674 12 6556 1 2025-10-15 13:44:42.630 00:05:02.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:44:42.640 00:05:02.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:49:17.703 00:00:10.371 TCP 23.104.0.1:51958 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:49:25.190 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-10-15 13:50:18.111 00:00:10.374 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:50:25.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-10-15 13:51:18.520 00:00:10.365 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:51:25.578 00:00:10.605 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-10-15 13:52:18.922 00:00:10.343 TCP 23.104.0.1:42360 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:52:26.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-15 13:52:58.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:52:58.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:53:19.305 00:00:10.323 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:53:26.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45636 10 6452 1 2025-10-15 13:54:19.668 00:00:10.363 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:54:26.665 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-10-15 13:50:42.631 00:05:02.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 13:50:42.634 00:05:02.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 13:55:20.101 00:00:10.359 TCP 23.104.0.1:57742 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:55:26.882 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-10-15 13:56:20.502 00:00:10.368 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:56:27.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-10-15 13:57:20.907 00:00:10.366 TCP 23.104.0.1:48222 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:57:27.316 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-10-15 13:57:58.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 13:57:58.722 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 13:58:21.310 00:00:10.369 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-10-15 13:58:27.528 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 Summary: total flows: 164, total bytes: 507592, total packets: 1595, avg bps: 1093, avg pps: 0, avg bpp: 318 Time window: 2025-10-15 12:56:42 - 2025-10-15 13:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0021s flows/second: 78398.2 Runtime: 0.0021s