Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 19:59:22.416 00:00:10.324 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:59:38.692 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-10-16 20:00:22.779 00:00:10.366 TCP 23.104.0.1:42460 -> 1.101.0.1:3000 11 1507 1 2025-10-16 19:56:43.275 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 19:56:43.271 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:00:38.862 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-10-16 20:01:23.183 00:00:10.370 TCP 23.104.0.1:48936 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:01:39.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55536 10 6452 1 2025-10-16 20:02:23.591 00:00:10.330 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:02:39.296 00:00:10.796 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-10-16 20:03:34.984 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:03:34.895 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:03:23.961 00:00:10.368 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:03:40.128 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47002 10 6452 1 2025-10-16 20:04:24.362 00:00:10.370 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:04:40.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-10-16 20:05:24.770 00:00:10.381 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:05:40.549 00:00:10.778 TCP 1.101.0.1:3000 -> 22.102.0.1:60472 10 6452 1 2025-10-16 20:06:25.188 00:00:10.357 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:02:43.276 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:02:43.275 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:06:41.364 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-10-16 20:07:25.586 00:00:10.365 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:07:41.576 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-10-16 20:08:25.991 00:00:10.377 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:08:35.030 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:08:34.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:08:41.801 00:00:10.370 TCP 1.101.0.1:3000 -> 22.102.0.1:38108 10 6452 1 2025-10-16 20:09:26.408 00:00:10.329 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:09:42.211 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47196 10 6452 1 2025-10-16 20:10:26.772 00:00:10.370 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:10:42.429 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-10-16 20:11:27.184 00:00:10.365 TCP 23.104.0.1:55028 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:11:42.620 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-10-16 20:12:27.606 00:00:10.329 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:08:43.274 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:08:43.277 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:12:42.846 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40106 10 6452 1 2025-10-16 20:13:35.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:13:35.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:13:27.970 00:00:10.377 TCP 23.104.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:13:43.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50860 10 6452 1 2025-10-16 20:14:28.386 00:00:11.040 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:14:43.296 00:00:11.248 TCP 1.101.0.1:3000 -> 22.102.0.1:45710 10 6452 1 2025-10-16 20:15:29.466 00:00:10.369 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:15:44.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-10-16 20:16:29.870 00:00:10.365 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:16:44.805 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-10-16 20:17:30.273 00:00:10.869 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:17:44.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-10-16 20:18:35.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:18:35.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:18:31.174 00:00:10.365 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:14:43.279 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:14:43.276 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:18:45.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-10-16 20:19:31.575 00:00:10.329 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:19:45.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6452 1 2025-10-16 20:20:31.938 00:00:10.741 TCP 23.104.0.1:44912 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:20:45.637 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 10 6452 1 2025-10-16 20:21:32.717 00:00:10.378 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:21:45.860 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:47844 14 10479 1 2025-10-16 20:22:33.133 00:00:10.398 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 15 1926 1 2025-10-16 20:22:46.115 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-10-16 20:23:35.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:23:35.089 00:00:00.053 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:23:33.577 00:00:10.364 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:23:46.293 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-10-16 20:20:43.280 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:24:33.982 00:00:10.377 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:20:43.277 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:24:46.505 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39958 10 6452 1 2025-10-16 20:25:34.398 00:00:10.320 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:25:46.733 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37302 10 6452 1 2025-10-16 20:26:34.760 00:00:10.899 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:26:46.960 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 12 6556 1 2025-10-16 20:27:35.702 00:00:10.366 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:27:47.186 00:00:12.085 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-10-16 20:28:35.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:28:35.469 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:28:36.106 00:00:10.334 TCP 23.104.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:28:49.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49452 10 6452 1 2025-10-16 20:29:36.542 00:00:10.364 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:29:49.520 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-10-16 20:26:43.278 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:26:43.281 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:30:36.943 00:00:10.376 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:30:49.695 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6452 1 2025-10-16 20:31:37.356 00:00:10.364 TCP 23.104.0.1:52144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:31:49.916 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 11 6504 1 2025-10-16 20:32:37.762 00:00:10.344 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:32:50.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-10-16 20:33:35.493 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:33:35.589 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:33:38.144 00:00:10.364 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:33:50.401 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-10-16 20:34:38.550 00:00:10.367 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:34:50.626 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36780 10 6452 1 2025-10-16 20:35:38.956 00:00:10.365 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:35:50.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-10-16 20:32:43.280 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:32:43.282 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:36:39.358 00:00:10.365 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:36:51.079 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55508 10 6452 1 2025-10-16 20:37:39.766 00:00:10.373 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:37:51.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-10-16 20:38:35.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:38:35.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:38:40.180 00:00:10.362 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:38:51.521 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-10-16 20:39:40.590 00:00:10.369 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:39:51.736 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-10-16 20:40:41.000 00:00:10.368 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:40:51.960 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 13 6608 1 2025-10-16 20:41:41.405 00:00:10.914 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 17 2241 1 2025-10-16 20:41:52.208 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 14 14286 1 2025-10-16 20:38:43.280 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:38:43.284 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:42:42.360 00:00:10.370 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:42:52.477 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 10 6452 1 2025-10-16 20:43:35.546 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:43:35.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:43:42.763 00:00:10.377 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:43:52.690 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-10-16 20:44:43.180 00:00:10.360 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:44:52.912 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-10-16 20:45:43.586 00:00:10.365 TCP 23.104.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:45:53.121 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42244 10 6452 1 2025-10-16 20:46:43.985 00:00:10.633 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:46:53.338 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45960 10 6452 1 2025-10-16 20:47:44.662 00:00:10.323 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:47:53.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41036 10 6452 1 2025-10-16 20:48:35.996 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:48:35.811 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:44:43.284 00:05:02.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:44:43.282 00:05:02.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:48:45.024 00:00:10.367 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:48:53.769 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:45290 10 6452 1 2025-10-16 20:49:45.431 00:00:10.363 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:49:54.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-10-16 20:50:45.835 00:00:10.375 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:50:54.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-10-16 20:51:46.250 00:00:10.363 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:51:54.939 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-10-16 20:52:46.654 00:00:10.366 TCP 23.104.0.1:52488 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:52:55.179 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-10-16 20:53:35.555 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 20:53:35.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:53:47.065 00:00:10.320 TCP 23.104.0.1:41946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:53:55.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 10 6452 1 2025-10-16 20:50:43.284 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 20:50:43.286 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:54:47.424 00:00:10.363 TCP 23.104.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:54:55.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-10-16 20:55:47.828 00:00:10.344 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:55:55.823 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 10 6452 1 2025-10-16 20:56:48.210 00:00:10.368 TCP 23.104.0.1:56738 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:56:55.997 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-10-16 20:57:48.615 00:00:10.366 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:57:56.220 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-10-16 20:58:36.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 20:58:36.202 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 162, total bytes: 503715, total packets: 1575, avg bps: 1085, avg pps: 0, avg bpp: 319 Time window: 2025-10-16 19:56:43 - 2025-10-16 20:58:36 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0050s User: 0.0000s Wall: 0.0028s flows/second: 58234.3 Runtime: 0.0028s