Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 23:59:03.782 00:00:10.365 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:59:40.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-10-17 00:00:04.185 00:00:10.328 TCP 23.104.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:56:43.340 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:56:43.337 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:00:40.323 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39108 10 6452 1 2025-10-17 00:01:04.550 00:00:10.364 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:01:40.545 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35328 10 6452 1 2025-10-17 00:02:04.952 00:00:10.327 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:02:40.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-10-17 00:03:05.330 00:00:10.366 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:03:39.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:03:39.821 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:03:40.936 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-10-17 00:04:05.736 00:00:10.366 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:04:41.152 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-10-17 00:05:06.146 00:00:10.365 TCP 23.104.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:05:41.325 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56412 10 6452 1 2025-10-17 00:06:06.551 00:00:10.376 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:02:43.338 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:02:43.339 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:06:41.538 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40926 10 6452 1 2025-10-17 00:07:06.965 00:00:10.371 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:07:41.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-10-17 00:08:07.373 00:00:10.362 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:08:40.106 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:08:40.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:08:41.965 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:38274 10 6452 1 2025-10-17 00:09:07.780 00:00:10.368 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:09:42.164 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41142 10 6452 1 2025-10-17 00:10:08.184 00:00:10.372 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:10:42.384 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36454 10 6452 1 2025-10-17 00:11:08.588 00:00:10.366 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:11:42.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-10-17 00:12:08.992 00:00:10.360 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:08:43.339 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:08:43.343 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:12:42.809 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-10-17 00:13:09.391 00:00:10.319 TCP 23.104.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:13:39.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:13:39.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:13:42.983 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-10-17 00:14:09.755 00:00:10.758 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:14:43.161 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-10-17 00:15:10.552 00:00:10.769 TCP 23.104.0.1:35274 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:15:43.373 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-10-17 00:16:11.364 00:00:10.364 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:16:43.585 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 12 10375 1 2025-10-17 00:17:11.773 00:00:10.446 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 15 1926 1 2025-10-17 00:17:43.826 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-10-17 00:18:12.263 00:00:10.364 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:18:40.220 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:18:40.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:14:43.343 00:05:02.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:14:43.345 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:18:44.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38034 10 6452 1 2025-10-17 00:19:12.662 00:00:10.368 TCP 23.104.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:19:44.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37050 10 6452 1 2025-10-17 00:20:13.091 00:00:10.325 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:20:44.498 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-10-17 00:21:13.454 00:00:10.359 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:21:44.717 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37894 10 6452 1 2025-10-17 00:22:13.858 00:00:10.384 TCP 23.104.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:22:44.890 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59488 10 6452 1 2025-10-17 00:23:14.283 00:00:10.368 TCP 23.104.0.1:58602 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:23:40.170 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:23:40.019 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:23:45.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-10-17 00:24:14.693 00:00:10.377 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:20:43.347 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:20:43.345 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:24:45.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-10-17 00:25:15.113 00:00:10.853 TCP 23.104.0.1:51760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:25:45.517 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-10-17 00:26:16.011 00:00:10.319 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:26:45.688 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44442 10 6452 1 2025-10-17 00:27:16.370 00:00:10.362 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:27:45.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6452 1 2025-10-17 00:28:16.774 00:00:10.366 TCP 23.104.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:28:40.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:28:40.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:28:46.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37462 10 6452 1 2025-10-17 00:29:17.178 00:00:10.328 TCP 23.104.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:29:46.295 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 10 6452 1 2025-10-17 00:30:17.556 00:00:10.363 TCP 23.104.0.1:43818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:26:43.348 00:05:02.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:26:43.345 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:30:46.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-10-17 00:31:17.957 00:00:10.365 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:31:46.725 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-10-17 00:32:18.374 00:00:10.362 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:32:46.898 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37710 10 6452 1 2025-10-17 00:33:18.775 00:00:10.367 TCP 23.104.0.1:58810 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:33:40.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:33:40.379 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:33:47.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-10-17 00:34:19.182 00:00:10.365 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:34:47.318 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-10-17 00:35:19.589 00:00:10.367 TCP 23.104.0.1:45706 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:35:47.494 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-10-17 00:36:19.994 00:00:10.370 TCP 23.104.0.1:60034 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:32:43.348 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:32:43.345 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:36:47.705 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 14 14298 1 2025-10-17 00:37:20.403 00:00:10.477 TCP 23.104.0.1:56904 -> 1.101.0.1:3000 17 2241 1 2025-10-17 00:37:47.973 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39284 10 6452 1 2025-10-17 00:38:20.918 00:00:10.369 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:38:40.418 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:38:40.487 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:38:48.217 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34278 10 6452 1 2025-10-17 00:39:21.324 00:00:10.363 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:39:48.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49850 10 6452 1 2025-10-17 00:40:21.727 00:00:10.370 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:40:48.642 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-10-17 00:41:22.133 00:00:10.549 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:41:48.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46440 10 6452 1 2025-10-17 00:42:22.720 00:00:10.369 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:38:43.381 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:38:43.382 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:42:49.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45464 10 6452 1 2025-10-17 00:43:23.121 00:00:10.334 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:43:40.548 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:43:40.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:43:49.232 00:00:19.593 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-10-17 00:44:23.490 00:00:10.373 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:44:58.873 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 10 6452 1 2025-10-17 00:45:23.900 00:00:10.379 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:45:59.265 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-10-17 00:46:24.319 00:00:10.744 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:46:59.487 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-10-17 00:47:25.114 00:00:10.366 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:47:59.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-10-17 00:48:25.517 00:00:10.361 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:48:40.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:48:40.618 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:44:43.384 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:44:43.382 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:48:59.914 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56708 10 6452 1 2025-10-17 00:49:25.920 00:00:10.549 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:50:00.131 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-10-17 00:50:26.507 00:00:10.322 TCP 23.104.0.1:52102 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:51:00.305 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39776 10 6452 1 2025-10-17 00:51:26.868 00:00:10.366 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:52:00.519 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52338 10 6452 1 2025-10-17 00:52:27.265 00:00:10.360 TCP 23.104.0.1:35280 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:53:00.732 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-10-17 00:53:40.778 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 00:53:27.665 00:00:10.365 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:53:40.662 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:54:00.939 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-10-17 00:54:28.100 00:00:10.368 TCP 23.104.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:50:43.383 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 00:50:43.386 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 00:55:01.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-10-17 00:55:28.504 00:00:10.772 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:56:01.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-10-17 00:56:29.316 00:00:10.366 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:57:01.557 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-10-17 00:57:29.716 00:00:10.378 TCP 23.104.0.1:42700 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:58:01.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-10-17 00:58:30.136 00:00:10.631 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 00:58:40.942 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 00:58:40.718 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 504818, total packets: 1578, avg bps: 1086, avg pps: 0, avg bpp: 319 Time window: 2025-10-16 23:56:43 - 2025-10-17 00:58:40 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0016s Wall: 0.0025s flows/second: 65598.9 Runtime: 0.0025s