Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 20:58:49.016 00:00:10.367 TCP 23.104.0.1:47578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:58:56.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36136 10 6452 1 2025-10-16 20:59:49.415 00:00:10.815 TCP 23.104.0.1:54364 -> 1.101.0.1:3000 11 1507 1 2025-10-16 20:59:56.658 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-10-16 20:56:43.288 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 20:56:43.285 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:00:50.275 00:00:10.361 TCP 23.104.0.1:32888 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:00:56.882 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-10-16 21:01:50.677 00:00:10.368 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:01:57.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-10-16 21:02:51.101 00:00:10.763 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:02:57.320 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-10-16 21:03:36.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:03:36.069 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:03:51.905 00:00:10.369 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:03:57.547 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46670 10 6452 1 2025-10-16 21:04:52.313 00:00:10.323 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:04:57.719 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-10-16 21:05:52.672 00:00:10.328 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:05:57.957 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-10-16 21:02:43.289 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:02:43.288 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:06:53.033 00:00:10.362 TCP 23.104.0.1:40538 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:06:58.247 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-10-16 21:07:53.440 00:00:10.326 TCP 23.104.0.1:35578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:07:58.458 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42978 10 6452 1 2025-10-16 21:08:36.414 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:08:36.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:08:53.808 00:00:10.393 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:08:58.685 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39146 10 6452 1 2025-10-16 21:09:54.244 00:00:10.366 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:09:58.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-10-16 21:10:54.654 00:00:10.370 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:10:59.090 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50322 10 6452 1 2025-10-16 21:11:55.060 00:00:10.360 TCP 23.104.0.1:49158 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:11:59.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-10-16 21:08:43.291 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:08:43.289 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:12:55.456 00:00:10.371 TCP 23.104.0.1:49632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:12:59.531 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58528 10 6452 1 2025-10-16 21:13:36.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:13:36.350 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:13:55.867 00:00:10.326 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:13:59.763 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-10-16 21:14:56.244 00:00:10.365 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:14:59.977 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-10-16 21:16:00.228 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-10-16 21:15:56.650 00:00:10.365 TCP 23.104.0.1:34214 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:17:00.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-10-16 21:16:57.062 00:00:10.376 TCP 23.104.0.1:41914 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:18:00.663 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-10-16 21:17:57.492 00:00:10.367 TCP 23.104.0.1:43292 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:18:36.469 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:18:36.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:14:43.288 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:14:43.292 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:18:57.894 00:00:10.374 TCP 23.104.0.1:51684 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:19:00.879 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-10-16 21:19:58.309 00:00:10.328 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:20:01.121 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43162 10 6452 1 2025-10-16 21:21:01.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43272 10 6452 1 2025-10-16 21:20:58.673 00:00:10.362 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:21:59.097 00:00:10.384 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:22:01.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-10-16 21:22:59.520 00:00:10.377 TCP 23.104.0.1:56146 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:23:01.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56460 10 6452 1 2025-10-16 21:23:36.828 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:23:36.973 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:23:59.932 00:00:10.398 TCP 23.104.0.1:33392 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:24:01.991 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-10-16 21:20:43.290 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:20:43.293 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:25:00.367 00:00:10.326 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:25:02.184 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44508 10 6452 1 2025-10-16 21:26:00.734 00:00:10.376 TCP 23.104.0.1:59720 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:26:02.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-10-16 21:27:01.140 00:00:10.370 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:27:02.625 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41766 10 6452 1 2025-10-16 21:28:01.554 00:00:10.321 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:28:02.837 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-10-16 21:28:36.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:28:36.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:29:01.912 00:00:10.365 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:29:03.010 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43954 10 6452 1 2025-10-16 21:30:03.234 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54316 10 6452 1 2025-10-16 21:30:02.314 00:00:10.364 TCP 23.104.0.1:33502 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:26:43.291 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:26:43.294 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:31:02.720 00:00:10.341 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:31:03.453 00:00:10.747 TCP 1.101.0.1:3000 -> 22.102.0.1:59182 10 6452 1 2025-10-16 21:32:03.111 00:00:10.359 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:32:04.236 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-10-16 21:33:04.408 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6452 1 2025-10-16 21:33:03.507 00:00:10.368 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:33:36.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:33:36.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:34:04.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34114 10 6452 1 2025-10-16 21:34:03.915 00:00:10.362 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:35:04.843 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-10-16 21:35:04.311 00:00:10.373 TCP 23.104.0.1:41852 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:36:05.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-10-16 21:36:04.724 00:00:10.388 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:32:43.293 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:32:43.295 00:05:02.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:37:05.146 00:00:10.368 TCP 23.104.0.1:47014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:37:05.301 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-10-16 21:38:05.550 00:00:10.321 TCP 23.104.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:38:05.527 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-10-16 21:38:36.977 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:38:37.097 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:39:05.912 00:00:10.368 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:39:05.744 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-10-16 21:40:06.317 00:00:10.322 TCP 23.104.0.1:58236 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:40:05.978 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52292 10 6452 1 2025-10-16 21:41:06.677 00:00:10.985 TCP 23.104.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:41:06.216 00:00:11.353 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-10-16 21:42:07.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-10-16 21:42:07.699 00:00:10.372 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:38:43.294 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:38:43.296 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:43:08.113 00:00:10.327 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:43:07.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-10-16 21:43:36.898 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:43:37.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:44:08.476 00:00:10.366 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:44:08.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43152 10 6452 1 2025-10-16 21:45:08.256 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-10-16 21:45:08.877 00:00:10.325 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:46:08.434 00:00:10.809 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-10-16 21:46:09.240 00:00:10.375 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:47:09.655 00:00:10.324 TCP 23.104.0.1:43892 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:47:09.284 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54094 10 6452 1 2025-10-16 21:48:10.019 00:00:10.364 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:48:09.492 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38750 10 6452 1 2025-10-16 21:48:37.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:44:43.297 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:48:37.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:44:43.296 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:49:10.420 00:00:10.370 TCP 23.104.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:49:09.708 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-10-16 21:50:10.828 00:00:10.380 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:50:09.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-10-16 21:51:11.249 00:00:10.363 TCP 23.104.0.1:52386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:51:10.136 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6452 1 2025-10-16 21:52:10.347 00:00:10.724 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 12 10375 1 2025-10-16 21:52:11.654 00:00:10.446 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 15 1926 1 2025-10-16 21:53:11.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-10-16 21:53:12.140 00:00:10.336 TCP 23.104.0.1:56932 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:53:36.763 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 21:53:36.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:54:11.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-10-16 21:54:12.529 00:00:10.363 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:50:43.301 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 21:50:43.300 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:55:11.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-10-16 21:55:12.932 00:00:10.382 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:56:11.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-10-16 21:56:13.350 00:00:10.362 TCP 23.104.0.1:39164 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:57:13.747 00:00:10.362 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:57:11.950 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-10-16 21:58:14.146 00:00:10.326 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:58:12.132 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-10-16 21:58:37.156 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 21:58:37.174 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-10-16 20:56:43 - 2025-10-16 21:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 71274.0 Runtime: 0.0023s