Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 15:59:31.722 00:00:10.325 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:59:33.321 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-10-16 16:00:32.105 00:00:10.367 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-10-16 15:56:43.199 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:00:33.530 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40574 10 6452 1 2025-10-16 15:56:43.196 00:05:02.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:01:33.742 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-10-16 16:01:32.508 00:00:10.370 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:02:32.914 00:00:10.364 TCP 23.104.0.1:34760 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:02:33.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6452 1 2025-10-16 16:03:30.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:03:30.126 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:03:33.316 00:00:10.374 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:03:34.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-10-16 16:04:34.347 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-10-16 16:04:33.725 00:00:10.368 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:05:34.132 00:00:10.331 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:05:34.517 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-10-16 16:02:43.200 00:05:02.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:06:34.498 00:00:10.362 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:06:34.732 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34478 10 6452 1 2025-10-16 16:02:43.198 00:05:02.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:07:34.900 00:00:19.504 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:07:34.956 00:00:19.358 TCP 1.101.0.1:3000 -> 22.102.0.1:51880 10 6452 1 2025-10-16 16:08:30.326 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:08:30.087 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:08:44.445 00:00:10.330 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:08:44.362 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-10-16 16:09:44.819 00:00:10.363 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:09:44.587 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-10-16 16:10:44.801 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-10-16 16:10:45.220 00:00:10.362 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:11:45.019 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35652 10 6452 1 2025-10-16 16:11:45.621 00:00:10.322 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:08:43.201 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:08:43.198 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:12:45.243 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-10-16 16:12:45.978 00:00:10.326 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:13:30.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:13:30.578 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:13:45.472 00:00:11.480 TCP 1.101.0.1:3000 -> 22.102.0.1:47344 10 6452 1 2025-10-16 16:13:46.338 00:00:10.708 TCP 23.104.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:14:47.039 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:40434 10 6452 1 2025-10-16 16:14:47.110 00:00:10.371 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:15:47.406 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36730 10 6452 1 2025-10-16 16:15:47.510 00:00:10.366 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:16:47.913 00:00:10.361 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:16:47.573 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-10-16 16:17:47.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2025-10-16 16:17:48.314 00:00:10.324 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:18:30.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:18:30.494 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:14:43.200 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:14:43.202 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:18:48.006 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-10-16 16:18:48.679 00:00:10.365 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:19:48.226 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-10-16 16:19:49.100 00:00:10.368 TCP 23.104.0.1:32786 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:20:48.446 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35526 10 6452 1 2025-10-16 16:20:49.507 00:00:10.357 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:21:49.904 00:00:10.371 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:21:48.660 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-10-16 16:22:48.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-10-16 16:22:50.310 00:00:10.363 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:23:30.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:23:30.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:23:49.102 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-10-16 16:23:50.710 00:00:10.373 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:20:43.200 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:20:43.203 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:24:49.310 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-10-16 16:24:51.125 00:00:10.364 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:25:49.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-10-16 16:25:51.526 00:00:10.363 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:26:49.733 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 12 10369 1 2025-10-16 16:26:51.921 00:00:10.459 TCP 23.104.0.1:51950 -> 1.101.0.1:3000 15 1926 1 2025-10-16 16:27:49.946 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 12 6556 1 2025-10-16 16:27:52.419 00:00:10.363 TCP 23.104.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:28:30.223 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:28:30.654 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:28:50.192 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42228 10 6452 1 2025-10-16 16:28:52.820 00:00:10.364 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:29:50.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6452 1 2025-10-16 16:29:53.222 00:00:10.366 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:26:43.201 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:26:43.204 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:30:50.632 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60618 10 6452 1 2025-10-16 16:30:53.624 00:00:10.324 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:31:50.812 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-10-16 16:31:53.980 00:00:10.370 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:32:50.994 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-16 16:32:54.386 00:00:10.328 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:33:30.578 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:33:30.728 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:33:51.181 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-10-16 16:33:54.755 00:00:10.378 TCP 23.104.0.1:47266 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:34:51.396 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-10-16 16:34:55.165 00:00:10.326 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:35:51.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-10-16 16:35:55.529 00:00:10.369 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:32:43.211 00:05:02.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:32:43.213 00:05:02.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:36:51.825 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 12 10369 1 2025-10-16 16:36:55.938 00:00:10.510 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 15 1926 1 2025-10-16 16:37:56.489 00:00:10.359 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:37:52.034 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-10-16 16:38:30.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:38:30.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:38:52.212 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-10-16 16:38:56.887 00:00:10.344 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:39:52.379 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42012 10 6452 1 2025-10-16 16:39:57.270 00:00:10.325 TCP 23.104.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:40:52.554 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:45994 10 6452 1 2025-10-16 16:40:57.632 00:00:10.685 TCP 23.104.0.1:47398 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:41:52.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60478 10 6452 1 2025-10-16 16:41:58.351 00:00:10.362 TCP 23.104.0.1:45978 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:38:43.213 00:05:02.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:38:43.209 00:05:02.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:42:53.024 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-10-16 16:42:58.759 00:00:10.331 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:43:30.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:43:30.719 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:43:53.237 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-16 16:43:59.124 00:00:10.325 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:44:53.458 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-10-16 16:44:59.485 00:00:10.369 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:45:53.965 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45434 12 6556 1 2025-10-16 16:45:59.897 00:00:10.376 TCP 23.104.0.1:37998 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:46:54.191 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-10-16 16:47:00.312 00:00:10.366 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:47:54.407 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-10-16 16:48:00.714 00:00:10.375 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:48:31.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:48:31.052 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:44:43.214 00:05:02.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:44:43.211 00:05:02.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:48:54.629 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-10-16 16:49:01.128 00:00:10.372 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:49:54.799 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-10-16 16:50:01.525 00:00:10.326 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:50:55.139 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-10-16 16:51:01.894 00:00:10.328 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:51:55.349 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-10-16 16:52:02.256 00:00:10.366 TCP 23.104.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:52:55.565 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-10-16 16:53:02.675 00:00:10.361 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:53:31.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 16:53:31.000 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:53:55.777 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-10-16 16:54:03.098 00:00:10.362 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:50:43.211 00:05:02.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 16:50:43.214 00:05:02.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 16:54:55.996 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51204 10 6452 1 2025-10-16 16:55:03.500 00:00:10.369 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:55:56.228 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 10 6452 1 2025-10-16 16:56:03.909 00:00:10.327 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:56:56.447 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37250 10 6452 1 2025-10-16 16:57:04.279 00:00:10.365 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:57:56.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58518 10 6452 1 2025-10-16 16:58:04.682 00:00:10.369 TCP 23.104.0.1:48942 -> 1.101.0.1:3000 11 1507 1 2025-10-16 16:58:31.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 16:58:31.199 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 499269, total packets: 1567, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-10-16 15:56:43 - 2025-10-16 16:58:31 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 78073.9 Runtime: 0.0021s