Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 23:59:08.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-10-14 23:59:31.401 00:00:10.364 TCP 23.104.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:00:08.960 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 12 6556 1 2025-10-14 23:56:42.398 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:00:31.806 00:00:10.413 TCP 23.104.0.1:47982 -> 1.101.0.1:3000 11 1507 1 2025-10-14 23:56:42.396 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:01:09.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56564 10 6452 1 2025-10-15 00:01:32.259 00:00:10.362 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:02:09.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-10-15 00:02:42.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:02:32.662 00:00:10.744 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:02:42.101 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:03:09.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-10-15 00:03:33.453 00:00:10.364 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:04:09.826 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-10-15 00:04:33.854 00:00:10.382 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:05:10.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-10-15 00:05:34.273 00:00:10.332 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:06:10.305 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-10-15 00:02:42.398 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:06:34.639 00:00:10.492 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:02:42.400 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:07:10.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48128 10 6452 1 2025-10-15 00:07:41.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:07:35.167 00:00:10.324 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:07:41.993 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:08:10.742 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-10-15 00:08:35.524 00:00:10.374 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:09:10.968 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38580 10 6452 1 2025-10-15 00:09:35.939 00:00:10.692 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:10:11.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42056 10 6452 1 2025-10-15 00:10:36.672 00:00:10.360 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:11:11.394 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-10-15 00:11:37.094 00:00:10.327 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:12:11.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60490 10 6452 1 2025-10-15 00:12:42.151 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:08:42.401 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:12:42.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:08:42.404 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:12:37.462 00:00:10.723 TCP 23.104.0.1:42848 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:13:11.827 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-10-15 00:13:38.223 00:00:10.358 TCP 23.104.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:14:12.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-10-15 00:14:38.623 00:00:10.363 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:15:12.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-10-15 00:15:39.023 00:00:10.374 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:16:12.496 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-10-15 00:16:39.437 00:00:10.363 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:17:12.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40904 10 6452 1 2025-10-15 00:17:42.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:17:42.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:17:39.839 00:00:10.343 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:18:12.883 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41748 10 6452 1 2025-10-15 00:14:42.405 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:14:42.402 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:18:40.221 00:00:10.365 TCP 23.104.0.1:54700 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:19:13.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-10-15 00:19:40.625 00:00:10.363 TCP 23.104.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:20:13.299 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-10-15 00:20:41.034 00:00:10.363 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:21:13.468 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-10-15 00:21:41.441 00:00:10.363 TCP 23.104.0.1:38686 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:22:13.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-10-15 00:22:42.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:22:42.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:22:41.839 00:00:10.439 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:23:13.883 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59098 10 6452 1 2025-10-15 00:23:42.317 00:00:10.368 TCP 23.104.0.1:56900 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:24:14.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48492 10 6452 1 2025-10-15 00:20:42.405 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:20:42.407 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:24:42.727 00:00:10.375 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:25:14.273 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-10-15 00:25:43.143 00:00:10.370 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:26:14.489 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-10-15 00:26:43.556 00:00:10.365 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:27:14.697 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36030 10 6452 1 2025-10-15 00:27:43.098 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:27:43.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:27:43.961 00:00:10.463 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:28:14.900 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47302 10 6452 1 2025-10-15 00:28:44.464 00:00:10.351 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:29:15.089 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-10-15 00:29:44.864 00:00:10.364 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:30:15.331 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-10-15 00:26:42.408 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:26:42.406 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:30:45.271 00:00:10.323 TCP 23.104.0.1:46928 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:31:15.548 00:00:10.793 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-10-15 00:31:45.635 00:00:10.319 TCP 23.104.0.1:43544 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:32:16.380 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52076 10 6452 1 2025-10-15 00:32:42.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:32:42.655 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:32:45.990 00:00:10.451 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:33:16.586 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33982 10 6452 1 2025-10-15 00:33:46.482 00:00:10.579 TCP 23.104.0.1:52606 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:34:16.809 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43642 10 6452 1 2025-10-15 00:34:47.111 00:00:10.363 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:35:17.051 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-10-15 00:35:47.515 00:00:10.362 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:36:17.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 10 6452 1 2025-10-15 00:32:42.409 00:05:02.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:32:42.410 00:05:02.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:36:47.918 00:00:10.380 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:37:17.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59760 10 6452 1 2025-10-15 00:37:42.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:37:42.545 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:37:48.334 00:00:11.012 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:38:17.736 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:56704 10 6452 1 2025-10-15 00:38:49.379 00:00:10.372 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:39:17.990 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-10-15 00:39:49.792 00:00:10.369 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:40:18.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-10-15 00:40:50.204 00:00:10.364 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:41:18.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44374 10 6452 1 2025-10-15 00:41:50.608 00:00:10.368 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:42:18.599 00:00:10.912 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-10-15 00:42:42.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:38:42.408 00:05:02.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:42:42.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:38:42.411 00:05:02.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:42:51.013 00:00:10.365 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:43:19.550 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53900 10 6452 1 2025-10-15 00:43:51.419 00:00:10.366 TCP 23.104.0.1:46602 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:44:19.767 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6452 1 2025-10-15 00:44:51.819 00:00:10.370 TCP 23.104.0.1:52616 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:45:19.958 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-10-15 00:45:52.223 00:00:10.362 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:46:20.193 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-10-15 00:46:52.624 00:00:10.368 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:47:20.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-10-15 00:47:42.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:47:42.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:47:53.054 00:00:10.364 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:48:20.625 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57782 10 6452 1 2025-10-15 00:44:42.414 00:05:02.452 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:44:42.417 00:05:02.447 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:48:53.467 00:00:10.320 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:49:20.801 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-10-15 00:49:53.824 00:00:10.344 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:50:21.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-10-15 00:50:54.204 00:00:10.439 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 15 1926 1 2025-10-15 00:51:21.227 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 12 10369 1 2025-10-15 00:51:54.680 00:00:10.327 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:52:21.467 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-10-15 00:52:42.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:52:42.999 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:52:55.059 00:00:10.363 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:53:21.643 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55902 10 6452 1 2025-10-15 00:53:55.462 00:00:10.359 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:54:21.858 00:00:10.648 TCP 1.101.0.1:3000 -> 22.102.0.1:37602 10 6452 1 2025-10-15 00:50:42.415 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 00:50:42.417 00:05:02.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 00:54:55.860 00:00:10.381 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:55:22.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-10-15 00:55:56.275 00:00:10.321 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:56:22.759 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37500 10 6452 1 2025-10-15 00:56:56.633 00:00:10.364 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:57:22.935 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-10-15 00:57:43.110 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 00:57:43.068 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 00:57:57.057 00:00:10.368 TCP 23.104.0.1:34564 -> 1.101.0.1:3000 11 1507 1 2025-10-15 00:58:23.176 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-10-14 23:56:42 - 2025-10-15 00:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0000s Wall: 0.0019s flows/second: 86018.1 Runtime: 0.0019s