Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 16:58:42.264 00:00:10.367 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-10-15 16:59:22.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36174 10 6452 1 2025-10-15 16:59:42.671 00:00:10.365 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:00:22.246 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-10-15 16:56:42.694 00:05:02.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 16:56:42.696 00:05:02.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:00:43.099 00:00:10.366 TCP 23.104.0.1:55938 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:01:22.416 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-10-15 17:01:43.505 00:00:10.364 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:02:22.590 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-10-15 17:02:43.907 00:00:10.369 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:03:02.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:03:02.189 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:03:22.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33124 10 6452 1 2025-10-15 17:03:44.315 00:00:10.334 TCP 23.104.0.1:49604 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:04:23.037 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-10-15 17:04:44.689 00:00:10.369 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:05:23.246 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-10-15 17:05:45.107 00:00:10.371 TCP 23.104.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:06:23.496 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-10-15 17:02:42.695 00:05:02.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:02:42.698 00:05:02.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:06:45.514 00:00:10.371 TCP 23.104.0.1:42972 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:07:23.709 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-10-15 17:07:45.922 00:00:10.374 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:08:02.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:08:02.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:08:23.926 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-10-15 17:08:46.333 00:00:10.363 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:09:24.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-10-15 17:09:46.734 00:00:10.366 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:10:24.336 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6452 1 2025-10-15 17:10:47.137 00:00:10.365 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:11:24.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40200 10 6452 1 2025-10-15 17:11:47.542 00:00:10.363 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:12:24.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2025-10-15 17:08:42.698 00:05:02.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:08:42.695 00:05:02.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:12:47.943 00:00:10.379 TCP 23.104.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:13:02.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:13:02.690 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:13:24.935 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-10-15 17:13:48.366 00:00:10.368 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:14:25.121 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-10-15 17:14:48.770 00:00:10.377 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:15:25.332 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-10-15 17:15:49.188 00:00:10.325 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:16:25.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53336 10 6452 1 2025-10-15 17:16:49.549 00:00:10.361 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:17:25.756 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-10-15 17:17:49.948 00:00:10.369 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:18:02.452 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:18:02.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:18:25.965 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-10-15 17:14:42.697 00:05:02.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:14:42.700 00:05:02.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:18:50.356 00:00:10.361 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:19:26.188 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-10-15 17:19:50.757 00:00:10.378 TCP 23.104.0.1:60304 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:20:26.361 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38044 10 6452 1 2025-10-15 17:20:51.176 00:00:10.326 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:21:26.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-10-15 17:21:51.536 00:00:16.101 TCP 23.104.0.1:33168 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:22:26.808 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-10-15 17:23:02.808 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:23:02.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:22:57.671 00:00:10.321 TCP 23.104.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:23:27.030 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-10-15 17:23:58.032 00:00:10.363 TCP 23.104.0.1:37536 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:24:27.236 00:00:11.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-10-15 17:20:42.699 00:05:02.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:20:42.701 00:05:02.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:24:58.434 00:00:10.369 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:25:28.415 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-10-15 17:25:58.838 00:00:10.386 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:26:28.581 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-10-15 17:26:59.261 00:00:10.365 TCP 23.104.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:27:28.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38414 10 6452 1 2025-10-15 17:28:02.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:28:03.058 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:27:59.667 00:00:10.324 TCP 23.104.0.1:45438 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:28:28.967 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2025-10-15 17:29:00.034 00:00:10.361 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:29:29.192 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33180 10 6452 1 2025-10-15 17:30:00.439 00:00:10.331 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:30:29.405 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-10-15 17:26:42.703 00:05:02.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:26:42.699 00:05:02.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:31:00.809 00:00:10.366 TCP 23.104.0.1:54716 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:31:29.635 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35588 10 6452 1 2025-10-15 17:32:01.218 00:00:10.324 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:32:29.810 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:55340 13 6608 1 2025-10-15 17:33:02.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:33:03.238 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:33:01.584 00:00:10.386 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:33:30.028 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42590 10 6452 1 2025-10-15 17:34:02.009 00:00:10.320 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:34:30.241 00:00:20.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51818 10 6452 1 2025-10-15 17:35:02.368 00:00:10.328 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:35:40.494 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57548 10 6452 1 2025-10-15 17:36:02.738 00:00:10.380 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:32:42.703 00:05:02.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:32:42.701 00:05:02.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:36:40.704 00:00:10.745 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-10-15 17:37:03.146 00:00:10.365 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:37:41.493 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-10-15 17:38:03.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:38:03.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:38:03.552 00:00:11.034 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:38:41.663 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-10-15 17:39:04.622 00:00:11.079 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:39:41.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-10-15 17:40:05.741 00:00:10.362 TCP 23.104.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:40:42.074 00:00:10.726 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 10 6452 1 2025-10-15 17:41:06.138 00:00:10.368 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:41:42.844 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-10-15 17:42:06.544 00:00:10.363 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:38:42.705 00:05:02.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:38:42.708 00:05:02.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:42:43.080 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-10-15 17:43:03.250 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:43:03.190 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:43:06.944 00:00:10.372 TCP 23.104.0.1:58042 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:43:43.293 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40398 10 6452 1 2025-10-15 17:44:07.353 00:00:10.366 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:44:43.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-10-15 17:45:07.752 00:00:10.368 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:45:43.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-10-15 17:46:08.155 00:00:10.371 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:46:43.929 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-10-15 17:47:08.557 00:00:10.365 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:47:44.168 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-10-15 17:48:03.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:48:03.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:48:08.959 00:00:10.368 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:44:42.707 00:05:02.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:44:42.709 00:05:02.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:48:44.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 2025-10-15 17:49:09.367 00:00:10.369 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:49:44.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56840 10 6452 1 2025-10-15 17:50:09.767 00:00:10.374 TCP 23.104.0.1:54826 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:50:45.089 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-10-15 17:51:10.175 00:00:10.366 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 12 1559 1 2025-10-15 17:51:45.313 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-10-15 17:52:10.579 00:00:10.379 TCP 23.104.0.1:56320 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:52:45.537 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-10-15 17:53:03.467 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:53:03.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:53:10.982 00:00:10.371 TCP 23.104.0.1:34100 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:53:45.753 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-10-15 17:54:11.390 00:00:10.374 TCP 23.104.0.1:35598 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:50:42.709 00:05:02.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 17:50:42.712 00:05:02.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:54:45.963 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-10-15 17:55:11.802 00:00:10.340 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:55:46.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6452 1 2025-10-15 17:56:12.179 00:00:10.374 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:56:46.394 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 10 6452 1 2025-10-15 17:57:12.594 00:00:10.332 TCP 23.104.0.1:45620 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:57:46.622 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53472 10 6452 1 2025-10-15 17:58:03.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 17:58:03.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 17:58:12.964 00:00:10.381 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1063, avg pps: 0, avg bpp: 314 Time window: 2025-10-15 16:56:42 - 2025-10-15 17:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0025s flows/second: 63948.3 Runtime: 0.0026s