Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 06:59:19.309 00:00:10.361 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-10-17 06:59:21.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-10-17 07:00:21.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-10-17 07:00:19.708 00:00:10.381 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-10-17 06:56:43.497 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 06:56:43.495 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:01:20.129 00:00:10.368 TCP 23.104.0.1:51388 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:01:21.518 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-10-17 07:02:20.536 00:00:10.364 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:02:21.705 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44028 10 6452 1 2025-10-17 07:03:20.940 00:00:10.371 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:03:21.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38738 10 6452 1 2025-10-17 07:03:48.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:03:48.108 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:04:21.350 00:00:10.362 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:04:22.132 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-10-17 07:05:21.750 00:00:10.385 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:05:22.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52020 10 6452 1 2025-10-17 07:06:22.520 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52080 10 6452 1 2025-10-17 07:06:22.175 00:00:10.365 TCP 23.104.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:02:43.497 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:02:43.499 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:07:22.579 00:00:10.364 TCP 23.104.0.1:47698 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:07:22.734 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-10-17 07:08:22.980 00:00:10.363 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:08:22.950 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 6452 1 2025-10-17 07:08:48.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:08:48.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:09:23.144 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-10-17 07:09:23.382 00:00:10.862 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:10:23.361 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 10 6452 1 2025-10-17 07:10:24.288 00:00:10.362 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:11:23.531 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59374 10 6452 1 2025-10-17 07:11:24.686 00:00:10.366 TCP 23.104.0.1:44140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:12:25.105 00:00:10.342 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:12:23.749 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-10-17 07:08:43.500 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:08:43.498 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:13:23.972 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6452 1 2025-10-17 07:13:25.489 00:00:10.375 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:13:48.463 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:13:48.254 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:14:24.195 00:00:10.818 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-10-17 07:14:25.901 00:00:10.371 TCP 23.104.0.1:49804 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:15:25.080 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 10 6452 1 2025-10-17 07:15:26.313 00:00:10.361 TCP 23.104.0.1:47998 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:16:25.245 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-10-17 07:16:26.710 00:00:10.330 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:17:25.465 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-10-17 07:17:27.103 00:00:10.364 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:18:25.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-10-17 07:18:27.506 00:00:10.324 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:14:43.499 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:14:43.502 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:18:48.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:18:48.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:19:25.911 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-10-17 07:19:27.865 00:00:10.373 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:20:26.119 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-10-17 07:20:28.278 00:00:10.328 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:21:26.356 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 10 6452 1 2025-10-17 07:21:28.643 00:00:10.366 TCP 23.104.0.1:46108 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:22:26.596 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 12 10375 1 2025-10-17 07:22:29.062 00:00:10.438 TCP 23.104.0.1:49716 -> 1.101.0.1:3000 15 1926 1 2025-10-17 07:23:26.846 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-10-17 07:23:29.542 00:00:10.332 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:23:48.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:23:48.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:24:27.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-10-17 07:24:29.913 00:00:10.335 TCP 23.104.0.1:44696 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:20:43.499 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:20:43.502 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:25:30.275 00:00:10.328 TCP 23.104.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:25:27.286 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35760 10 6452 1 2025-10-17 07:26:27.460 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55592 10 6452 1 2025-10-17 07:26:30.640 00:00:10.366 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:27:27.682 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:45868 12 10369 1 2025-10-17 07:27:31.050 00:00:10.444 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 15 1926 1 2025-10-17 07:28:31.531 00:00:10.364 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:28:27.926 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-10-17 07:28:48.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:28:48.836 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:29:28.148 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-10-17 07:29:31.931 00:00:10.385 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:30:28.309 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-10-17 07:26:43.501 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:26:43.504 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:30:32.354 00:00:10.364 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:31:28.476 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47808 10 6452 1 2025-10-17 07:31:32.753 00:00:10.376 TCP 23.104.0.1:41320 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:32:28.689 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-10-17 07:32:33.167 00:00:10.361 TCP 23.104.0.1:54716 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:33:28.902 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2025-10-17 07:33:33.570 00:00:10.366 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:33:48.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:33:48.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:34:29.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39512 10 6452 1 2025-10-17 07:34:33.978 00:00:10.372 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:35:29.344 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-10-17 07:35:34.391 00:00:10.366 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:36:29.522 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54808 10 6452 1 2025-10-17 07:36:34.795 00:00:10.347 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:32:43.507 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:32:43.504 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:37:29.735 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 10 6452 1 2025-10-17 07:37:35.180 00:00:10.321 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:38:29.910 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:60076 10 6452 1 2025-10-17 07:38:35.540 00:00:10.333 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:38:48.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:38:48.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:39:30.108 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-10-17 07:39:35.904 00:00:10.367 TCP 23.104.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:40:30.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57452 10 6452 1 2025-10-17 07:40:36.311 00:00:10.325 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:41:30.541 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-10-17 07:41:36.675 00:00:10.364 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:38:43.510 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:42:30.712 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-17 07:38:43.507 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:42:37.105 00:00:10.321 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:43:30.924 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38958 10 6452 1 2025-10-17 07:43:37.465 00:00:10.364 TCP 23.104.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:43:48.863 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:43:48.843 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:44:31.153 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-10-17 07:44:37.869 00:00:10.363 TCP 23.104.0.1:49978 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:45:31.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-10-17 07:45:38.272 00:00:10.367 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:46:31.582 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-10-17 07:46:38.674 00:00:10.324 TCP 23.104.0.1:41556 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:47:31.758 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-10-17 07:47:39.061 00:00:10.371 TCP 23.104.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:44:43.509 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:48:31.980 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6452 1 2025-10-17 07:44:43.507 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:48:48.978 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:48:39.470 00:00:10.329 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:48:48.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:49:32.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-10-17 07:49:39.828 00:00:10.349 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:50:32.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54904 10 6452 1 2025-10-17 07:50:40.217 00:00:10.367 TCP 23.104.0.1:53200 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:51:32.598 00:00:10.926 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-10-17 07:51:40.621 00:00:10.365 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:52:33.566 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 6452 1 2025-10-17 07:52:41.021 00:00:10.323 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:53:33.739 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43080 10 6452 1 2025-10-17 07:53:41.380 00:00:10.363 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:53:49.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 07:53:49.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:50:43.514 00:05:02.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 07:54:33.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6452 1 2025-10-17 07:50:43.511 00:05:02.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 07:54:41.784 00:00:10.380 TCP 23.104.0.1:50668 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:55:34.131 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-10-17 07:55:42.212 00:00:10.425 TCP 23.104.0.1:36604 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:56:34.344 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-10-17 07:56:42.677 00:00:10.324 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:57:34.519 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47926 10 6452 1 2025-10-17 07:57:43.036 00:00:10.369 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-10-17 07:58:34.689 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-10-17 07:58:49.440 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 07:58:49.200 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-10-17 06:56:43 - 2025-10-17 07:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 72094.4 Runtime: 0.0023s