Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 14:59:01.606 00:00:10.317 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-16 14:59:20.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-10-16 15:00:01.963 00:00:10.337 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:00:20.814 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34654 10 6452 1 2025-10-16 14:56:43.175 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 14:56:43.177 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:01:02.335 00:00:10.712 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:01:20.984 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:34206 10 6452 1 2025-10-16 15:02:03.109 00:00:10.322 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:02:21.172 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-10-16 15:03:03.472 00:00:10.361 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:03:29.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:03:21.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-10-16 15:03:29.053 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:04:03.872 00:00:10.363 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:04:21.563 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-10-16 15:05:04.276 00:00:10.364 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:05:21.773 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-10-16 15:06:04.679 00:00:10.376 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:06:21.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42038 12 6556 1 2025-10-16 15:02:43.178 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:02:43.175 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:07:05.103 00:00:10.323 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:07:22.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-10-16 15:08:05.466 00:00:10.360 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:08:28.943 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:08:28.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:08:22.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-10-16 15:09:05.864 00:00:10.369 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:09:22.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-10-16 15:10:06.274 00:00:10.324 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:10:22.823 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-10-16 15:11:06.632 00:00:10.364 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:11:23.050 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-10-16 15:12:07.036 00:00:10.365 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:12:23.261 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-10-16 15:08:43.180 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:08:43.178 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:13:07.434 00:00:10.374 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:13:28.737 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:13:29.100 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:13:23.473 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2025-10-16 15:14:07.848 00:00:10.337 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:14:23.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-10-16 15:15:08.224 00:00:10.361 TCP 23.104.0.1:46840 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:15:23.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-10-16 15:16:08.618 00:00:10.366 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:16:24.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58094 10 6452 1 2025-10-16 15:17:09.024 00:00:10.382 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:17:24.324 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-10-16 15:18:09.444 00:00:10.365 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:18:29.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:18:29.159 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:18:24.497 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-10-16 15:14:43.179 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:14:43.182 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:19:09.854 00:00:10.382 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:19:24.668 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 11 6504 1 2025-10-16 15:20:10.284 00:00:10.370 TCP 23.104.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:20:24.937 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 2025-10-16 15:21:10.693 00:00:10.370 TCP 23.104.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:21:25.135 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6452 1 2025-10-16 15:22:11.110 00:00:10.844 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 15 1926 1 2025-10-16 15:22:25.310 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 12 10375 1 2025-10-16 15:23:11.994 00:00:10.362 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:23:29.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:23:29.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:23:25.550 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46580 10 6452 1 2025-10-16 15:24:12.397 00:00:10.366 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:24:25.774 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47228 10 6452 1 2025-10-16 15:20:43.182 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:20:43.185 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:25:12.794 00:00:10.403 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:25:25.944 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:53402 11 6504 1 2025-10-16 15:26:13.235 00:00:10.321 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:26:26.225 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50942 10 6452 1 2025-10-16 15:27:13.594 00:00:10.377 TCP 23.104.0.1:53610 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:27:26.438 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-10-16 15:28:14.012 00:00:10.366 TCP 23.104.0.1:44390 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:28:29.531 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:28:29.547 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:28:26.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-10-16 15:29:14.414 00:00:10.324 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:29:26.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-10-16 15:30:14.775 00:00:10.366 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:30:27.053 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-10-16 15:26:43.193 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:26:43.191 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:31:15.181 00:00:10.365 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:31:27.282 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 10 6452 1 2025-10-16 15:32:15.585 00:00:10.366 TCP 23.104.0.1:53966 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:32:27.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-10-16 15:33:15.989 00:00:10.369 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:33:29.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:33:29.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:33:27.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58050 10 6452 1 2025-10-16 15:34:16.392 00:00:10.365 TCP 23.104.0.1:43628 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:34:27.927 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-10-16 15:35:16.796 00:00:10.334 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:35:28.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-10-16 15:36:17.167 00:00:10.368 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:36:28.345 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6452 1 2025-10-16 15:32:43.193 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:32:43.191 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:37:17.575 00:00:10.317 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:37:28.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-10-16 15:38:29.641 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:38:17.933 00:00:10.377 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:38:29.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:38:28.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-10-16 15:39:18.350 00:00:10.360 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:39:28.983 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:54818 10 6452 1 2025-10-16 15:40:18.749 00:00:10.379 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:40:29.223 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51650 10 6452 1 2025-10-16 15:41:19.168 00:00:10.376 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:41:29.444 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-10-16 15:42:19.587 00:00:10.439 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 15 1926 1 2025-10-16 15:42:29.662 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 12 10375 1 2025-10-16 15:38:43.194 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:38:43.191 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:43:29.696 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:43:20.094 00:00:10.336 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:43:29.722 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:43:29.910 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-10-16 15:44:20.473 00:00:10.364 TCP 23.104.0.1:45648 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:44:30.122 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-10-16 15:45:20.878 00:00:10.374 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:45:30.331 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-10-16 15:46:21.291 00:00:10.365 TCP 23.104.0.1:45386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:46:30.552 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 11 6492 1 2025-10-16 15:47:21.701 00:00:10.331 TCP 23.104.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:47:30.815 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-16 15:48:29.908 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:48:29.901 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:48:22.097 00:00:10.367 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:48:30.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-10-16 15:44:43.195 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:44:43.193 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:49:22.509 00:00:10.369 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:49:31.208 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-10-16 15:50:22.929 00:00:10.618 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:50:31.427 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-10-16 15:51:23.589 00:00:10.366 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:51:31.599 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41482 10 6452 1 2025-10-16 15:52:23.990 00:00:10.358 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:52:31.821 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34976 10 6452 1 2025-10-16 15:53:29.618 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:53:30.013 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:53:24.388 00:00:10.365 TCP 23.104.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:53:32.058 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-10-16 15:54:24.795 00:00:10.362 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:50:43.197 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 15:54:32.278 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-10-16 15:50:43.195 00:05:02.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 15:55:25.191 00:00:15.292 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:55:32.489 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-10-16 15:56:30.557 00:00:10.361 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:56:32.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38844 10 6452 1 2025-10-16 15:57:30.956 00:00:10.367 TCP 23.104.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:57:32.927 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-10-16 15:58:29.966 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 15:58:29.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 15:58:31.360 00:00:10.326 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:58:33.158 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48830 10 6452 1 Summary: total flows: 164, total bytes: 507280, total packets: 1589, avg bps: 1090, avg pps: 0, avg bpp: 319 Time window: 2025-10-16 14:56:43 - 2025-10-16 15:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0029s Wall: 0.0024s flows/second: 67883.7 Runtime: 0.0024s