Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 12:59:01.174 00:00:10.369 TCP 23.104.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:59:41.128 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6452 1 2025-10-16 13:00:01.579 00:00:10.362 TCP 23.104.0.1:35364 -> 1.101.0.1:3000 11 1507 1 2025-10-16 12:56:43.133 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 12:56:43.131 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:00:41.845 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-10-16 13:01:01.977 00:00:10.329 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:01:42.090 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2025-10-16 13:02:02.343 00:00:10.374 TCP 23.104.0.1:37586 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:02:42.341 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-10-16 13:03:02.757 00:00:10.379 TCP 23.104.0.1:57196 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:03:26.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:03:26.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:03:42.558 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-10-16 13:04:03.172 00:00:10.366 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:04:42.770 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-10-16 13:05:03.576 00:00:10.365 TCP 23.104.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:05:42.989 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49866 10 6452 1 2025-10-16 13:06:03.975 00:00:10.363 TCP 23.104.0.1:60518 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:02:43.136 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:02:43.135 00:05:02.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:06:43.222 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51172 10 6452 1 2025-10-16 13:07:04.376 00:00:10.366 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:07:43.435 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-10-16 13:08:04.784 00:00:10.369 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:08:26.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:08:26.613 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:08:43.612 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47142 10 6452 1 2025-10-16 13:09:05.191 00:00:10.366 TCP 23.104.0.1:50790 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:09:43.778 00:00:10.694 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-10-16 13:10:05.592 00:00:10.370 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:10:44.506 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48616 10 6452 1 2025-10-16 13:11:05.997 00:00:10.366 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:11:44.674 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53482 10 6452 1 2025-10-16 13:12:06.401 00:00:10.361 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:08:43.138 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:08:43.136 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:12:44.858 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 10 6452 1 2025-10-16 13:13:06.799 00:00:10.341 TCP 23.104.0.1:46042 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:13:26.661 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:13:26.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:13:45.098 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35278 10 6452 1 2025-10-16 13:14:07.177 00:00:10.319 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:14:45.267 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-10-16 13:15:07.537 00:00:10.364 TCP 23.104.0.1:35920 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:15:45.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-10-16 13:16:07.941 00:00:10.334 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:16:45.705 00:00:10.391 TCP 1.101.0.1:3000 -> 22.102.0.1:46808 10 6452 1 2025-10-16 13:17:08.314 00:00:10.365 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:17:46.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-10-16 13:18:08.717 00:00:10.378 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:18:26.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:18:26.577 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:14:43.139 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:14:43.139 00:05:02.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:18:46.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-10-16 13:19:09.145 00:00:10.372 TCP 23.104.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:19:46.552 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-10-16 13:20:09.548 00:00:10.365 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:20:46.766 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-10-16 13:21:09.951 00:00:10.366 TCP 23.104.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:21:46.939 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-10-16 13:22:10.353 00:00:10.364 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:22:47.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48710 10 6452 1 2025-10-16 13:23:10.756 00:00:10.390 TCP 23.104.0.1:60272 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:23:26.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:23:26.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:23:47.357 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6452 1 2025-10-16 13:24:11.178 00:00:10.364 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:20:43.138 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:20:43.141 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:24:47.578 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-10-16 13:25:11.582 00:00:10.363 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:25:47.861 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-10-16 13:26:11.985 00:00:10.366 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:26:48.043 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-10-16 13:27:12.388 00:00:10.364 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:27:48.256 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-10-16 13:28:12.787 00:00:10.322 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:28:26.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:28:27.005 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:28:48.478 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-10-16 13:29:13.146 00:00:10.362 TCP 23.104.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:29:48.718 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-10-16 13:30:13.548 00:00:10.393 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:26:43.139 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:26:43.142 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:30:48.938 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-10-16 13:31:13.979 00:00:10.364 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:31:49.187 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-10-16 13:32:14.387 00:00:10.364 TCP 23.104.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:32:49.365 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53998 10 6452 1 2025-10-16 13:33:26.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:33:14.789 00:00:10.363 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:33:27.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:33:49.586 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-10-16 13:34:15.194 00:00:10.368 TCP 23.104.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:34:49.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-10-16 13:35:15.599 00:00:10.374 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:35:50.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-10-16 13:36:16.016 00:00:10.365 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:32:43.140 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:32:43.144 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:36:50.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-10-16 13:37:16.424 00:00:10.330 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:37:50.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6452 1 2025-10-16 13:38:27.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:38:16.795 00:00:10.368 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:38:27.175 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:38:50.671 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45414 10 6452 1 2025-10-16 13:39:17.199 00:00:10.319 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:39:50.862 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-10-16 13:40:17.556 00:00:10.323 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:40:51.090 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-10-16 13:41:17.920 00:00:10.371 TCP 23.104.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:41:51.310 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34856 10 6452 1 2025-10-16 13:42:18.331 00:00:10.325 TCP 23.104.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:38:43.147 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:38:43.146 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:42:51.528 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-16 13:43:18.693 00:00:10.370 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:43:27.436 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:43:27.641 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:43:51.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46924 10 6452 1 2025-10-16 13:44:19.103 00:00:10.368 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:44:51.969 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36250 10 6452 1 2025-10-16 13:45:19.506 00:00:10.368 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:45:52.209 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-10-16 13:46:19.907 00:00:19.598 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:46:52.432 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40264 10 6452 1 2025-10-16 13:47:29.556 00:00:10.316 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:47:52.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50898 10 6452 1 2025-10-16 13:48:27.396 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:48:27.240 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:48:29.912 00:00:10.364 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:44:43.148 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:44:43.150 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:48:52.857 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-10-16 13:49:30.316 00:00:10.366 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:49:53.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-16 13:50:30.719 00:00:10.370 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:50:53.283 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-10-16 13:51:31.131 00:00:10.363 TCP 23.104.0.1:58798 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:51:53.496 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38978 10 6452 1 2025-10-16 13:52:31.531 00:00:10.365 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:52:53.711 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46624 10 6452 1 2025-10-16 13:53:27.250 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:53:27.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:53:31.933 00:00:10.380 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:53:53.932 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-10-16 13:50:43.148 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 13:50:43.151 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 13:54:32.351 00:00:10.362 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:54:54.189 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-10-16 13:55:32.753 00:00:10.377 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:55:54.407 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-10-16 13:56:33.172 00:00:10.442 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 15 1926 1 2025-10-16 13:56:54.636 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 12 10369 1 2025-10-16 13:57:33.659 00:00:10.367 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-10-16 13:57:54.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-10-16 13:58:27.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 13:58:27.549 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 13:58:34.094 00:00:10.367 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496232, total packets: 1568, avg bps: 1066, avg pps: 0, avg bpp: 316 Time window: 2025-10-16 12:56:43 - 2025-10-16 13:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0018s flows/second: 89803.2 Runtime: 0.0018s