Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 18:58:57.505 00:00:10.387 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:59:24.368 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50302 10 6452 1 2025-10-16 18:59:57.942 00:00:10.376 TCP 23.104.0.1:38718 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:00:24.576 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41336 10 6452 1 2025-10-16 18:56:43.255 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:56:43.252 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:00:58.355 00:00:10.368 TCP 23.104.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:01:24.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-10-16 19:01:58.764 00:00:10.334 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:02:25.017 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-10-16 19:02:59.139 00:00:10.330 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:03:25.188 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-10-16 19:03:34.153 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:03:33.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:03:59.526 00:00:10.364 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:04:25.405 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6452 1 2025-10-16 19:04:59.927 00:00:10.387 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:05:25.580 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-10-16 19:06:00.356 00:00:10.380 TCP 23.104.0.1:52840 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:06:25.794 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-10-16 19:02:43.257 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:02:43.254 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:07:00.776 00:00:10.370 TCP 23.104.0.1:60392 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:07:25.996 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-10-16 19:08:01.184 00:00:10.368 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:08:26.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39970 10 6452 1 2025-10-16 19:08:33.754 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:08:33.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:09:01.593 00:00:10.364 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:09:26.386 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-10-16 19:10:01.999 00:00:10.367 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:10:26.591 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 11 6504 1 2025-10-16 19:11:02.406 00:00:10.372 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:11:26.857 00:00:10.317 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-10-16 19:12:02.816 00:00:10.365 TCP 23.104.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:12:27.212 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44780 10 6452 1 2025-10-16 19:08:43.258 00:05:02.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:08:43.255 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:13:03.222 00:00:10.364 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:13:33.662 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:13:33.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:13:27.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-10-16 19:14:03.625 00:00:10.362 TCP 23.104.0.1:44036 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:14:27.649 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6452 1 2025-10-16 19:15:04.031 00:00:10.364 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 12 1559 1 2025-10-16 19:15:27.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6452 1 2025-10-16 19:16:04.432 00:00:10.364 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:16:28.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60708 10 6452 1 2025-10-16 19:17:04.838 00:00:10.379 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:17:28.318 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-10-16 19:18:05.255 00:00:10.360 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:18:33.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:18:33.958 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:18:28.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-10-16 19:14:43.257 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:14:43.259 00:05:02.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:19:05.657 00:00:10.362 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:19:28.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44864 10 6452 1 2025-10-16 19:20:06.073 00:00:10.322 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:20:28.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 12 6556 1 2025-10-16 19:21:06.435 00:00:10.326 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:21:29.187 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37140 10 6452 1 2025-10-16 19:22:06.801 00:00:10.372 TCP 23.104.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:22:29.411 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-10-16 19:23:07.209 00:00:10.329 TCP 23.104.0.1:33482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:23:34.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:23:33.925 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:23:29.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-10-16 19:24:07.584 00:00:10.373 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:24:29.835 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40692 10 6452 1 2025-10-16 19:20:43.261 00:05:02.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:20:43.259 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:25:07.992 00:00:10.372 TCP 23.104.0.1:57708 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:25:30.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-10-16 19:26:08.405 00:00:10.369 TCP 23.104.0.1:50158 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:26:30.292 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-10-16 19:27:08.814 00:00:10.367 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:27:30.515 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51464 10 6452 1 2025-10-16 19:28:09.218 00:00:10.322 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:28:34.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:28:34.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:28:30.710 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 11 6504 1 2025-10-16 19:29:09.577 00:00:10.359 TCP 23.104.0.1:37552 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:29:30.986 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:49236 10 6452 1 2025-10-16 19:30:09.978 00:00:10.365 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:30:31.768 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50550 10 6452 1 2025-10-16 19:26:43.259 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:26:43.261 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:31:10.381 00:00:10.363 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:31:31.982 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51176 10 6452 1 2025-10-16 19:32:10.783 00:00:10.439 TCP 23.104.0.1:40170 -> 1.101.0.1:3000 15 1926 1 2025-10-16 19:32:32.213 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 12 10369 1 2025-10-16 19:33:11.261 00:00:10.368 TCP 23.104.0.1:39338 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:33:34.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:33:34.280 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:33:32.450 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55092 10 6452 1 2025-10-16 19:34:11.664 00:00:10.334 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:34:32.661 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-10-16 19:35:12.058 00:00:10.365 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:35:32.829 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48274 10 6452 1 2025-10-16 19:36:12.464 00:00:10.375 TCP 23.104.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:32:43.263 00:05:02.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:36:33.000 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-10-16 19:32:43.261 00:05:02.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:37:12.902 00:00:10.376 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:37:33.211 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-10-16 19:38:13.313 00:00:10.366 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:38:34.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:38:34.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:38:33.386 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40082 12 6556 1 2025-10-16 19:39:13.725 00:00:10.369 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:39:33.594 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-10-16 19:40:14.129 00:00:10.326 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:40:33.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 10 6452 1 2025-10-16 19:41:14.494 00:00:10.324 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:41:34.029 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60808 10 6452 1 2025-10-16 19:42:14.860 00:00:10.373 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:42:34.237 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43560 10 6452 1 2025-10-16 19:38:43.261 00:05:02.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:38:43.265 00:05:02.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:43:15.270 00:00:10.364 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:43:34.607 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:43:34.625 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:43:34.417 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39284 10 6452 1 2025-10-16 19:44:15.671 00:00:10.370 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:44:34.658 00:00:10.354 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-10-16 19:45:16.147 00:00:10.364 TCP 23.104.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:45:35.079 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-10-16 19:46:16.551 00:00:10.373 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:46:35.260 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-10-16 19:47:16.960 00:00:10.369 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:47:35.474 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-10-16 19:48:17.361 00:00:10.376 TCP 23.104.0.1:43892 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:48:34.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:48:34.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:48:35.643 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-10-16 19:44:43.266 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:44:43.268 00:05:02.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:49:17.767 00:00:10.386 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:49:35.871 00:00:10.740 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-10-16 19:50:18.188 00:00:10.366 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:50:36.650 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-10-16 19:51:18.592 00:00:10.369 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:51:36.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48622 10 6452 1 2025-10-16 19:52:18.997 00:00:10.364 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:52:37.103 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-10-16 19:53:19.401 00:00:10.327 TCP 23.104.0.1:58632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:53:34.736 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:53:34.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:53:37.323 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-10-16 19:54:19.774 00:00:10.389 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:50:43.269 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 19:50:43.270 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:54:37.537 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-10-16 19:55:20.194 00:00:10.362 TCP 23.104.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:55:37.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-10-16 19:56:20.594 00:00:10.362 TCP 23.104.0.1:52786 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:56:38.004 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 12 10369 1 2025-10-16 19:57:20.993 00:00:10.436 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 15 1926 1 2025-10-16 19:57:38.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2025-10-16 19:58:34.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 19:58:21.464 00:00:10.917 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:58:34.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 19:58:38.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32802 10 6452 1 Summary: total flows: 164, total bytes: 507384, total packets: 1591, avg bps: 1089, avg pps: 0, avg bpp: 318 Time window: 2025-10-16 18:56:43 - 2025-10-16 19:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0026s flows/second: 62171.5 Runtime: 0.0027s