Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 23:58:46.638 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58990 10 6452 1 2025-10-19 23:59:35.779 00:00:10.362 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:59:46.813 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-10-20 00:00:06.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:00:06.447 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:00:36.192 00:00:10.365 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:56:44.806 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:56:44.804 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:00:47.034 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59942 10 6452 1 2025-10-20 00:01:36.590 00:00:10.324 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:01:47.204 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-10-20 00:02:36.952 00:00:10.372 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:02:47.425 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33570 10 6452 1 2025-10-20 00:03:37.363 00:00:10.325 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:03:47.596 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-10-20 00:04:37.730 00:00:10.383 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:04:47.814 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-10-20 00:05:06.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:05:06.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:05:38.152 00:00:10.367 TCP 23.104.0.1:38172 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:05:48.048 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-10-20 00:02:44.808 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:06:38.559 00:00:10.360 TCP 23.104.0.1:43440 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:02:44.805 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:06:48.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43464 10 6452 1 2025-10-20 00:07:38.959 00:00:10.362 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:07:48.440 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-10-20 00:08:39.366 00:00:10.341 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:08:48.656 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-10-20 00:09:39.743 00:00:10.369 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:09:48.850 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34828 10 6452 1 2025-10-20 00:10:06.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:10:06.739 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:10:40.151 00:00:10.334 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:10:49.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43026 10 6452 1 2025-10-20 00:11:40.528 00:00:10.368 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:11:49.249 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-10-20 00:08:44.808 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:08:44.810 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:12:40.931 00:00:11.411 TCP 23.104.0.1:56396 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:12:49.466 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-10-20 00:13:42.379 00:00:10.360 TCP 23.104.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:13:49.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-10-20 00:14:42.779 00:00:10.366 TCP 23.104.0.1:46326 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:14:49.857 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-20 00:15:06.693 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:15:06.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:15:43.186 00:00:10.367 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:15:50.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-10-20 00:16:43.598 00:00:10.360 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:16:50.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-10-20 00:17:44.004 00:00:10.363 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:17:50.510 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-10-20 00:14:44.809 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:14:44.811 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:18:44.406 00:00:10.439 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 15 1926 1 2025-10-20 00:18:50.680 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 12 10375 1 2025-10-20 00:19:44.891 00:00:10.385 TCP 23.104.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:19:50.923 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33530 10 6452 1 2025-10-20 00:20:06.800 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:20:06.769 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:20:45.313 00:00:10.360 TCP 23.104.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:20:51.155 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49140 10 6452 1 2025-10-20 00:21:45.708 00:00:10.324 TCP 23.104.0.1:38424 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:21:51.367 00:00:10.375 TCP 1.101.0.1:3000 -> 22.102.0.1:48032 10 6452 1 2025-10-20 00:22:46.097 00:00:10.323 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:22:51.779 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-10-20 00:23:46.461 00:00:10.328 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:23:51.992 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48060 10 6452 1 2025-10-20 00:20:44.811 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:20:44.814 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:24:46.830 00:00:10.347 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:25:06.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:24:52.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-10-20 00:25:07.063 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:25:47.212 00:00:10.368 TCP 23.104.0.1:44884 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:25:52.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-10-20 00:26:47.614 00:00:10.363 TCP 23.104.0.1:41734 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:26:52.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-10-20 00:27:48.013 00:00:10.360 TCP 23.104.0.1:59532 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:27:52.856 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50642 10 6452 1 2025-10-20 00:28:48.407 00:00:10.368 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:28:53.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53704 10 6452 1 2025-10-20 00:30:06.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:29:53.292 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-10-20 00:29:48.820 00:00:10.371 TCP 23.104.0.1:40490 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:30:06.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:26:44.812 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:26:44.815 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:30:49.230 00:00:10.364 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:30:53.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-10-20 00:31:49.630 00:00:10.327 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:31:53.724 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-10-20 00:32:50.007 00:00:10.323 TCP 23.104.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:32:53.937 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-10-20 00:33:50.367 00:00:10.369 TCP 23.104.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:33:54.172 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 10 6452 1 2025-10-20 00:34:50.778 00:00:10.332 TCP 23.104.0.1:40268 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:35:07.089 00:00:00.054 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:34:54.390 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-10-20 00:35:07.032 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:35:51.148 00:00:10.798 TCP 23.104.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:35:54.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-10-20 00:32:44.816 00:05:02.648 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:32:44.821 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:36:54.781 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33906 10 6452 1 2025-10-20 00:36:51.983 00:00:10.365 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:37:52.384 00:00:10.361 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:37:55.029 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36508 10 6452 1 2025-10-20 00:38:52.784 00:00:10.675 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:38:55.257 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-10-20 00:39:53.498 00:00:10.370 TCP 23.104.0.1:60954 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:39:55.659 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-10-20 00:40:07.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:40:07.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:40:55.882 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-10-20 00:40:53.904 00:00:10.365 TCP 23.104.0.1:46530 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:41:56.079 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-10-20 00:41:54.305 00:00:10.363 TCP 23.104.0.1:55824 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:38:44.818 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:38:44.820 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:42:56.244 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-10-20 00:42:54.708 00:00:10.364 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:43:56.456 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-10-20 00:43:55.117 00:00:10.369 TCP 23.104.0.1:59816 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:44:56.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-10-20 00:45:07.528 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:44:55.518 00:00:10.365 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:45:07.404 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:45:55.920 00:00:10.384 TCP 23.104.0.1:56736 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:45:56.879 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-10-20 00:46:56.339 00:00:10.361 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:46:57.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-10-20 00:47:57.329 00:00:10.588 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 11 6504 1 2025-10-20 00:47:56.741 00:00:10.366 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:44:44.819 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:44:44.822 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:48:57.145 00:00:10.370 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:48:57.957 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 12 6556 1 2025-10-20 00:49:58.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-10-20 00:50:07.113 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:50:07.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:49:57.551 00:00:10.363 TCP 23.104.0.1:54652 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:50:57.953 00:00:10.320 TCP 23.104.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:50:58.401 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-10-20 00:51:58.569 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-10-20 00:51:58.312 00:00:10.325 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:52:58.673 00:00:10.368 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:52:58.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6452 1 2025-10-20 00:53:59.105 00:00:10.366 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:53:59.007 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-10-20 00:50:44.822 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 00:50:44.821 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:54:59.514 00:00:10.373 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:55:07.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 00:54:59.225 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-10-20 00:55:07.626 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 00:55:59.442 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-10-20 00:55:59.925 00:00:10.718 TCP 23.104.0.1:32808 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:56:59.627 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-10-20 00:57:00.696 00:00:10.368 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:57:59.800 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-10-20 00:58:01.110 00:00:10.327 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501339, total packets: 1570, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-10-19 23:56:44 - 2025-10-20 00:58:11 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0009s Wall: 0.0021s flows/second: 77181.3 Runtime: 0.0021s