Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 20:58:45.178 00:00:10.365 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:59:22.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:59:22.846 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:59:20.317 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-10-28 20:55:48.805 00:05:03.358 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:59:45.578 00:00:10.365 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:00:20.482 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60804 10 6452 1 2025-10-28 20:56:48.801 00:05:03.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:00:45.981 00:00:10.369 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:01:20.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-10-28 21:01:46.385 00:00:10.327 TCP 23.104.0.1:53300 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:02:20.907 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-10-28 21:02:46.746 00:00:10.362 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:03:21.122 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47784 10 6452 1 2025-10-28 21:03:47.157 00:00:10.361 TCP 23.104.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:04:22.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:04:22.986 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:04:21.359 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-10-28 21:04:47.564 00:00:10.391 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:05:21.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47072 10 6452 1 2025-10-28 21:01:48.806 00:05:03.357 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:05:47.994 00:00:10.330 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:06:21.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39146 10 6452 1 2025-10-28 21:02:48.804 00:05:03.362 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:06:48.360 00:00:14.204 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:07:21.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44438 12 6556 1 2025-10-28 21:07:52.656 00:00:10.359 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:08:22.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-10-28 21:08:53.062 00:00:10.371 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:09:23.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:09:23.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:09:22.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-10-28 21:09:53.467 00:00:10.361 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:10:22.591 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-10-28 21:10:53.868 00:00:10.379 TCP 23.104.0.1:59624 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:11:22.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-10-28 21:07:48.813 00:05:03.352 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:11:54.287 00:00:10.326 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:12:23.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6452 1 2025-10-28 21:08:48.813 00:05:03.356 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:12:54.655 00:00:10.367 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:13:23.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-10-28 21:13:55.084 00:00:10.358 TCP 23.104.0.1:43438 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:14:23.093 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:14:23.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:14:23.450 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50428 10 6452 1 2025-10-28 21:14:55.484 00:00:10.365 TCP 23.104.0.1:37536 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:15:23.662 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56098 10 6452 1 2025-10-28 21:15:55.889 00:00:10.388 TCP 23.104.0.1:41846 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:16:23.875 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 10 6452 1 2025-10-28 21:16:56.317 00:00:10.366 TCP 23.104.0.1:33950 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:17:24.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-10-28 21:13:48.814 00:05:03.353 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:17:56.724 00:00:10.370 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:18:24.316 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-10-28 21:14:48.811 00:05:03.357 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:18:57.134 00:00:10.366 TCP 23.104.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:19:23.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:19:23.266 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:19:24.486 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-10-28 21:19:57.539 00:00:10.368 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:20:24.656 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-10-28 21:20:57.948 00:00:10.367 TCP 23.104.0.1:33160 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:21:24.868 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60220 10 6452 1 2025-10-28 21:21:58.359 00:00:10.365 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:22:25.059 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6452 1 2025-10-28 21:22:58.759 00:00:10.379 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:23:25.273 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-10-28 21:19:48.816 00:05:03.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:23:59.179 00:00:10.326 TCP 23.104.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:24:23.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:24:23.525 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:24:25.486 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36976 10 6452 1 2025-10-28 21:20:48.812 00:05:03.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:24:59.542 00:00:10.361 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:25:25.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54386 10 6452 1 2025-10-28 21:25:59.939 00:00:10.378 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:26:25.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-10-28 21:27:00.354 00:00:10.326 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:27:26.102 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60368 10 6452 1 2025-10-28 21:28:00.716 00:00:10.330 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:28:26.335 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 10 6452 1 2025-10-28 21:29:01.103 00:00:10.359 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:29:23.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:29:23.554 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:29:26.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-10-28 21:25:48.816 00:05:03.358 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:30:01.504 00:00:10.366 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:30:26.756 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-10-28 21:26:48.815 00:05:03.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:31:01.906 00:00:10.328 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:31:26.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39212 10 6452 1 2025-10-28 21:32:02.270 00:00:10.330 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:32:27.198 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-10-28 21:33:02.635 00:00:10.369 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:33:27.373 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45104 10 6452 1 2025-10-28 21:34:03.061 00:00:10.659 TCP 23.104.0.1:46258 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:34:23.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:34:23.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:34:27.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-10-28 21:35:03.774 00:00:10.327 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:35:27.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33772 10 6452 1 2025-10-28 21:31:48.816 00:05:03.358 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:36:04.141 00:00:10.369 TCP 23.104.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:36:27.970 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6452 1 2025-10-28 21:32:48.814 00:05:03.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:37:04.548 00:00:10.366 TCP 23.104.0.1:59680 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:37:28.188 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51316 10 6452 1 2025-10-28 21:38:04.954 00:00:10.369 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:38:28.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-10-28 21:39:05.365 00:00:10.422 TCP 23.104.0.1:43666 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:39:23.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:39:23.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:39:28.614 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34002 10 6452 1 2025-10-28 21:40:05.821 00:00:10.367 TCP 23.104.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:40:28.826 00:00:18.547 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-10-28 21:41:06.225 00:00:10.327 TCP 23.104.0.1:47192 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:41:37.414 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-10-28 21:37:48.817 00:05:03.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:42:06.587 00:00:10.367 TCP 23.104.0.1:54520 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:42:37.634 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-10-28 21:38:48.816 00:05:03.374 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:43:06.990 00:00:10.369 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:43:37.860 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-10-28 21:44:24.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:44:07.403 00:00:10.368 TCP 23.104.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:44:24.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:44:38.038 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-10-28 21:45:07.804 00:00:10.371 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:45:38.260 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-10-28 21:46:08.218 00:00:10.368 TCP 23.104.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:46:38.484 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40574 10 6452 1 2025-10-28 21:47:08.623 00:00:10.318 TCP 23.104.0.1:43466 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:47:38.703 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-10-28 21:43:48.826 00:05:03.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:48:08.981 00:00:10.368 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:48:38.928 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40134 10 6452 1 2025-10-28 21:44:48.824 00:05:03.359 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:49:09.399 00:00:10.360 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:49:24.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:49:23.767 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:49:39.167 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-10-28 21:50:09.801 00:00:10.365 TCP 23.104.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:50:39.379 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34650 10 6452 1 2025-10-28 21:51:10.205 00:00:10.369 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:51:39.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44896 10 6452 1 2025-10-28 21:52:10.616 00:00:10.365 TCP 23.104.0.1:34404 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:52:39.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-10-28 21:53:11.022 00:00:10.324 TCP 23.104.0.1:40134 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:53:40.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-10-28 21:49:48.827 00:05:03.354 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 21:54:11.381 00:00:10.370 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:54:24.009 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 21:54:23.886 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 21:54:40.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32780 10 6452 1 2025-10-28 21:50:48.824 00:05:03.359 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 21:55:11.784 00:00:10.366 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:55:40.446 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-28 21:56:12.186 00:00:10.365 TCP 23.104.0.1:54788 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:56:40.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55324 10 6452 1 2025-10-28 21:57:12.587 00:00:10.334 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:57:40.830 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:55308 10 6452 1 2025-10-28 21:58:12.985 00:00:10.367 TCP 23.104.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-10-28 21:58:41.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-10-28 20:55:48 - 2025-10-28 21:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0059s User: 0.0000s Wall: 0.0023s flows/second: 71615.4 Runtime: 0.0023s