Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 15:58:47.578 00:00:10.372 TCP 23.104.0.1:50738 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:55:48.206 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:59:38.320 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-10-27 15:59:47.984 00:00:10.368 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:00:38.497 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6452 1 2025-10-27 15:56:48.204 00:05:03.303 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:00:48.393 00:00:10.359 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:01:38.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 2025-10-27 16:01:48.793 00:00:10.367 TCP 23.104.0.1:56808 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:02:38.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-10-27 16:02:49.202 00:00:10.364 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:03:48.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:03:39.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 10 6452 1 2025-10-27 16:03:48.150 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:03:49.614 00:00:10.362 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:04:39.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-10-27 16:04:50.019 00:00:10.364 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:05:39.531 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-10-27 16:01:48.207 00:05:03.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:05:50.418 00:00:10.365 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:06:39.743 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52864 10 6452 1 2025-10-27 16:02:48.207 00:05:03.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:06:50.823 00:00:10.359 TCP 23.104.0.1:35096 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:07:39.919 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-10-27 16:07:51.224 00:00:10.365 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:08:40.154 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-10-27 16:08:48.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:08:48.262 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:08:51.627 00:00:10.325 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:09:40.375 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-10-27 16:09:51.991 00:00:10.368 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:10:40.584 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-10-27 16:10:52.399 00:00:10.374 TCP 23.104.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:11:40.799 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:42676 10 6452 1 2025-10-27 16:07:48.209 00:05:03.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:11:52.811 00:00:10.410 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:12:40.987 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-10-27 16:08:48.205 00:05:03.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:12:53.328 00:00:10.372 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:13:41.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-10-27 16:13:48.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:13:48.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:13:53.735 00:00:10.371 TCP 23.104.0.1:47628 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:14:41.414 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-10-27 16:14:54.142 00:00:10.366 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:15:41.636 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-10-27 16:15:54.547 00:00:10.366 TCP 23.104.0.1:51376 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:16:41.858 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 12 10375 1 2025-10-27 16:16:54.950 00:00:10.447 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 15 1926 1 2025-10-27 16:13:48.211 00:05:03.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:17:42.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32768 10 6452 1 2025-10-27 16:17:55.436 00:00:10.363 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:18:48.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:18:48.589 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:18:42.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-10-27 16:14:48.211 00:05:03.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:18:55.838 00:00:10.380 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:19:42.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59274 10 6452 1 2025-10-27 16:19:56.257 00:00:10.358 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:20:42.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-10-27 16:20:56.655 00:00:10.322 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:21:42.970 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 12 10375 1 2025-10-27 16:21:57.016 00:00:10.433 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 15 1926 1 2025-10-27 16:22:43.638 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6452 1 2025-10-27 16:22:57.496 00:00:10.366 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:23:48.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:23:48.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:19:48.213 00:05:03.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:23:43.858 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-10-27 16:23:57.904 00:00:10.367 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:20:48.211 00:05:03.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:24:44.088 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38770 10 6452 1 2025-10-27 16:24:58.307 00:00:10.365 TCP 23.104.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:25:44.259 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53372 10 6452 1 2025-10-27 16:25:58.715 00:00:10.320 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:26:44.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-10-27 16:26:59.095 00:00:10.369 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:27:44.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-10-27 16:27:59.498 00:00:10.366 TCP 23.104.0.1:43758 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:28:48.851 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:28:48.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:28:44.920 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49492 10 6452 1 2025-10-27 16:28:59.903 00:00:10.371 TCP 23.104.0.1:58630 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:25:48.214 00:05:03.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:29:45.139 00:00:17.686 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 12 6556 1 2025-10-27 16:30:00.310 00:00:10.385 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:26:48.215 00:05:03.303 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:30:52.876 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-10-27 16:31:00.736 00:00:10.377 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:31:53.085 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60024 10 6452 1 2025-10-27 16:32:01.148 00:00:10.324 TCP 23.104.0.1:46324 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:32:53.290 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6452 1 2025-10-27 16:33:01.514 00:00:10.365 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:33:48.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:33:48.876 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:33:53.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38562 10 6452 1 2025-10-27 16:34:01.913 00:00:10.365 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:34:53.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-10-27 16:35:02.323 00:00:10.377 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:31:48.217 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:35:53.942 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51452 10 6452 1 2025-10-27 16:36:02.739 00:00:10.374 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:32:48.214 00:05:03.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:36:54.189 00:00:10.698 TCP 1.101.0.1:3000 -> 22.102.0.1:46540 10 6452 1 2025-10-27 16:37:03.150 00:00:10.348 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:37:54.925 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-10-27 16:38:03.541 00:00:10.366 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:38:49.115 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:38:49.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:38:55.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 10 6452 1 2025-10-27 16:39:03.949 00:00:10.369 TCP 23.104.0.1:42018 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:39:55.393 00:00:17.490 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-10-27 16:40:04.359 00:00:10.371 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:41:04.771 00:00:10.336 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:41:02.920 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-10-27 16:37:48.219 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:42:03.172 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-10-27 16:42:05.147 00:00:10.363 TCP 23.104.0.1:55762 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:38:48.216 00:05:03.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:43:05.545 00:00:10.364 TCP 23.104.0.1:47254 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:43:03.394 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-10-27 16:43:48.925 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:43:48.963 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:44:03.612 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-10-27 16:44:05.946 00:00:10.368 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:45:06.366 00:00:10.579 TCP 23.104.0.1:50168 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:45:03.830 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-10-27 16:46:04.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-10-27 16:46:06.981 00:00:10.372 TCP 23.104.0.1:36214 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:47:04.286 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-10-27 16:47:07.384 00:00:10.369 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:43:48.220 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:48:04.513 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-10-27 16:48:07.792 00:00:10.364 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:48:49.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:44:48.217 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:48:49.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:49:04.733 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-10-27 16:49:08.191 00:00:10.358 TCP 23.104.0.1:37682 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:50:04.949 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-10-27 16:50:08.587 00:00:10.363 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:51:05.197 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59200 10 6452 1 2025-10-27 16:51:08.991 00:00:10.369 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:52:05.414 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-10-27 16:52:09.400 00:00:10.366 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:53:05.631 00:00:10.806 TCP 1.101.0.1:3000 -> 22.102.0.1:44914 10 6452 1 2025-10-27 16:53:09.800 00:00:11.696 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:53:48.809 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:53:49.181 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 16:49:48.222 00:05:03.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 16:54:06.477 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42774 10 6452 1 2025-10-27 16:54:11.537 00:00:10.367 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:50:48.218 00:05:03.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 16:55:06.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-10-27 16:55:11.937 00:00:10.329 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:56:06.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37864 10 6452 1 2025-10-27 16:56:12.303 00:00:10.365 TCP 23.104.0.1:58030 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:57:07.126 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-10-27 16:57:12.706 00:00:10.365 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:58:07.351 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55384 10 6452 1 2025-10-27 16:58:13.111 00:00:10.329 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-10-27 16:58:49.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 16:58:49.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 500684, total packets: 1576, avg bps: 1059, avg pps: 0, avg bpp: 317 Time window: 2025-10-27 15:55:48 - 2025-10-27 16:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0011s Wall: 0.0017s flows/second: 96906.0 Runtime: 0.0017s