Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 19:59:02.542 00:00:10.376 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-10-15 19:59:14.352 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-10-15 20:00:02.951 00:00:10.369 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:00:14.528 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-10-15 19:56:42.757 00:05:02.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 19:56:42.754 00:05:02.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:01:03.364 00:00:10.363 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:01:14.748 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 12 10375 1 2025-10-15 20:02:03.764 00:00:10.446 TCP 23.104.0.1:60304 -> 1.101.0.1:3000 15 1926 1 2025-10-15 20:02:15.011 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-10-15 20:03:06.067 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:03:05.851 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:03:04.247 00:00:10.327 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:03:15.227 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39286 10 6452 1 2025-10-15 20:04:04.609 00:00:10.499 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:04:15.415 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-10-15 20:05:05.144 00:00:10.362 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:05:15.638 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53508 10 6452 1 2025-10-15 20:06:05.542 00:00:10.366 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:06:15.860 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-10-15 20:02:42.756 00:05:02.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:02:42.760 00:05:02.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:07:05.941 00:00:10.375 TCP 23.104.0.1:44514 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:07:16.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-10-15 20:08:06.157 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:08:06.109 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:08:06.351 00:00:10.368 TCP 23.104.0.1:36822 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:08:16.319 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41186 10 6452 1 2025-10-15 20:09:06.759 00:00:10.381 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:09:16.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-10-15 20:10:07.171 00:00:10.676 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:10:16.764 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:57530 10 6452 1 2025-10-15 20:11:07.885 00:00:10.336 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:11:17.208 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-10-15 20:12:08.258 00:00:10.367 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:12:17.431 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-10-15 20:08:42.761 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:08:42.763 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:13:06.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:13:06.360 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:13:08.663 00:00:10.366 TCP 23.104.0.1:49852 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:13:17.656 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-10-15 20:14:09.091 00:00:10.335 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:14:17.836 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-10-15 20:15:09.467 00:00:10.369 TCP 23.104.0.1:45040 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:15:18.071 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-10-15 20:16:09.873 00:00:10.326 TCP 23.104.0.1:57158 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:16:18.292 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-10-15 20:17:10.241 00:00:10.371 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:17:18.517 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-10-15 20:18:06.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:18:06.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:18:10.650 00:00:10.323 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:18:18.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-10-15 20:14:42.763 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:14:42.764 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:19:11.018 00:00:10.367 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:19:18.970 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-10-15 20:20:11.423 00:00:10.364 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:20:19.154 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-10-15 20:21:11.825 00:00:10.365 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:21:19.371 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6452 1 2025-10-15 20:22:12.226 00:00:10.325 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:22:19.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-10-15 20:23:06.550 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:23:06.728 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:23:12.593 00:00:10.365 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:23:19.790 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-10-15 20:24:12.996 00:00:10.366 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:24:20.008 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-10-15 20:20:42.763 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:20:42.765 00:05:02.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:25:13.399 00:00:10.369 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:25:20.184 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6452 1 2025-10-15 20:26:13.800 00:00:10.437 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 15 1926 1 2025-10-15 20:26:20.360 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 12 10369 1 2025-10-15 20:27:14.279 00:00:10.366 TCP 23.104.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:27:20.603 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-10-15 20:28:06.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:28:06.467 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:28:14.689 00:00:10.454 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:28:20.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-10-15 20:29:15.181 00:00:10.359 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:29:21.043 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-10-15 20:30:15.582 00:00:10.358 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:30:21.273 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-10-15 20:26:42.766 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:26:42.767 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:31:15.983 00:00:10.376 TCP 23.104.0.1:48794 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:31:21.539 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-10-15 20:32:16.399 00:00:10.326 TCP 23.104.0.1:35468 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:32:21.749 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47014 10 6452 1 2025-10-15 20:33:06.770 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:33:06.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:33:16.763 00:00:10.366 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:33:21.974 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-10-15 20:34:17.167 00:00:10.363 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:34:22.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-10-15 20:35:17.579 00:00:10.366 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:35:22.436 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-10-15 20:36:17.991 00:00:10.370 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:36:22.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-10-15 20:32:42.770 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:32:42.766 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:37:18.433 00:00:10.364 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:37:22.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-10-15 20:38:06.903 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:38:07.134 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:38:18.837 00:00:10.369 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:38:23.067 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-10-15 20:39:19.244 00:00:10.326 TCP 23.104.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:39:23.272 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43390 10 6452 1 2025-10-15 20:40:19.611 00:00:10.364 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:40:23.487 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6452 1 2025-10-15 20:41:20.012 00:00:10.364 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:41:23.667 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49968 10 6452 1 2025-10-15 20:42:20.416 00:00:10.380 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:42:23.893 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51236 10 6452 1 2025-10-15 20:38:42.767 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:38:42.770 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:43:06.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:43:06.560 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:43:20.834 00:00:10.390 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:43:24.112 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6452 1 2025-10-15 20:44:21.263 00:00:10.361 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:44:24.343 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-10-15 20:45:21.662 00:00:10.367 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:45:24.550 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38888 10 6452 1 2025-10-15 20:46:24.774 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6452 1 2025-10-15 20:46:22.099 00:00:10.365 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:47:24.986 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6452 1 2025-10-15 20:47:22.503 00:00:10.371 TCP 23.104.0.1:60598 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:48:06.659 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:48:06.896 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:48:22.908 00:00:10.366 TCP 23.104.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:48:25.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-10-15 20:44:42.773 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:44:42.772 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:49:25.394 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6452 1 2025-10-15 20:49:23.313 00:00:10.364 TCP 23.104.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:50:23.719 00:00:10.383 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:50:25.611 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-10-15 20:51:25.832 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34208 10 6452 1 2025-10-15 20:51:24.139 00:00:10.363 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:52:24.539 00:00:10.360 TCP 23.104.0.1:57460 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:52:26.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-10-15 20:53:06.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:53:07.019 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:53:24.943 00:00:10.374 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:53:26.294 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-10-15 20:54:25.349 00:00:10.372 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:54:26.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-10-15 20:50:42.774 00:05:02.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 20:50:42.773 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 20:55:25.761 00:00:10.386 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:55:26.737 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 10 6452 1 2025-10-15 20:56:26.959 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-10-15 20:56:26.185 00:00:10.956 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:57:27.144 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41028 10 6452 1 2025-10-15 20:57:27.180 00:00:10.368 TCP 23.104.0.1:42546 -> 1.101.0.1:3000 11 1507 1 2025-10-15 20:58:07.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 20:58:07.024 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 20:58:27.359 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6452 1 2025-10-15 20:58:27.587 00:00:10.325 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1091, avg pps: 0, avg bpp: 320 Time window: 2025-10-15 19:56:42 - 2025-10-15 20:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0031s Wall: 0.0024s flows/second: 67964.2 Runtime: 0.0024s