Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 19:58:43.366 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-10-30 19:59:00.385 00:00:10.365 TCP 23.104.0.1:56344 -> 1.101.0.1:3000 11 1507 1 2025-10-30 19:55:49.695 00:05:03.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 19:59:43.576 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-10-30 19:55:49.698 00:05:03.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:00:00.790 00:00:10.369 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:00:19.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:00:19.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:00:43.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58048 10 6452 1 2025-10-30 20:01:01.195 00:00:10.366 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:01:44.001 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-10-30 20:02:01.593 00:00:10.370 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:02:44.224 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-10-30 20:03:01.994 00:00:10.359 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:03:44.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-10-30 20:04:02.394 00:00:10.363 TCP 23.104.0.1:41480 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:04:44.668 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-10-30 20:05:02.799 00:00:10.366 TCP 23.104.0.1:33240 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:05:19.527 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:05:19.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:05:44.885 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54936 10 6452 1 2025-10-30 20:01:49.696 00:05:03.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:01:49.699 00:05:03.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:06:03.202 00:00:10.319 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:06:45.139 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6452 1 2025-10-30 20:07:03.561 00:00:10.363 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:07:45.351 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51416 10 6452 1 2025-10-30 20:08:03.962 00:00:10.328 TCP 23.104.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:08:45.575 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6452 1 2025-10-30 20:09:04.328 00:00:10.361 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:09:45.787 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-10-30 20:10:04.728 00:00:10.364 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:10:20.019 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:10:19.734 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:10:46.005 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-10-30 20:11:05.131 00:00:10.360 TCP 23.104.0.1:38862 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:11:46.235 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 6452 1 2025-10-30 20:07:49.699 00:05:03.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:07:49.703 00:05:03.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:12:05.531 00:00:10.319 TCP 23.104.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:12:46.454 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35876 10 6452 1 2025-10-30 20:13:05.893 00:00:10.376 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:13:46.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-10-30 20:14:06.303 00:00:10.368 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:14:46.837 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40244 10 6452 1 2025-10-30 20:15:19.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:15:19.571 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:15:06.709 00:00:10.323 TCP 23.104.0.1:46374 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:15:47.074 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 2025-10-30 20:16:07.101 00:00:10.361 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:16:47.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59216 10 6452 1 2025-10-30 20:17:07.503 00:00:10.366 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:13:49.706 00:05:03.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:13:49.703 00:05:03.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:17:47.456 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33980 10 6452 1 2025-10-30 20:18:07.914 00:00:10.367 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:18:47.633 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-10-30 20:19:08.316 00:00:10.365 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:19:47.849 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:35274 10 6452 1 2025-10-30 20:20:19.913 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:20:08.728 00:00:10.375 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:20:19.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:20:48.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42164 10 6452 1 2025-10-30 20:21:09.142 00:00:10.360 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:21:48.699 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54664 10 6452 1 2025-10-30 20:22:09.544 00:00:10.369 TCP 23.104.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:22:48.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32824 12 6556 1 2025-10-30 20:23:09.950 00:00:10.369 TCP 23.104.0.1:41314 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:19:49.707 00:05:03.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:19:49.703 00:05:03.464 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:23:49.127 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35094 10 6452 1 2025-10-30 20:24:10.347 00:00:10.377 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:24:49.296 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-10-30 20:25:10.764 00:00:10.379 TCP 23.104.0.1:38186 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:25:20.124 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:25:19.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:25:49.477 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-10-30 20:26:11.179 00:00:10.377 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:26:49.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-10-30 20:27:11.592 00:00:10.376 TCP 23.104.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:27:49.900 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-10-30 20:28:12.011 00:00:10.372 TCP 23.104.0.1:49462 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:28:50.080 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36678 10 6452 1 2025-10-30 20:29:12.427 00:00:10.358 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:25:49.707 00:05:03.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:25:49.706 00:05:03.463 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:29:50.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-10-30 20:30:19.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:30:20.222 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:30:12.824 00:00:10.374 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:30:50.514 00:00:10.604 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-10-30 20:31:13.233 00:00:10.364 TCP 23.104.0.1:58072 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:31:51.157 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-10-30 20:32:13.634 00:00:10.324 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:32:51.371 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-10-30 20:33:13.997 00:00:10.367 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:33:51.612 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:60902 10 6452 1 2025-10-30 20:34:14.400 00:00:10.742 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:34:51.811 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6452 1 2025-10-30 20:35:20.370 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:35:20.245 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:35:15.176 00:00:10.363 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:31:49.706 00:05:03.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:31:49.708 00:05:03.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:35:52.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-10-30 20:36:15.575 00:00:10.369 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:36:52.255 00:00:10.919 TCP 1.101.0.1:3000 -> 22.102.0.1:35100 11 6504 1 2025-10-30 20:37:15.981 00:00:10.372 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:37:53.212 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41356 10 6452 1 2025-10-30 20:38:16.390 00:00:10.368 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:38:53.416 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-10-30 20:39:16.796 00:00:10.366 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:39:53.624 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-10-30 20:40:20.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:40:20.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:40:17.208 00:00:10.366 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:40:53.845 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42876 12 6556 1 2025-10-30 20:41:17.607 00:00:10.611 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:37:49.710 00:05:03.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:37:49.708 00:05:03.465 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:41:54.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32838 10 6452 1 2025-10-30 20:42:18.256 00:00:10.366 TCP 23.104.0.1:60586 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:42:54.284 00:00:11.611 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-10-30 20:43:18.659 00:00:10.404 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 15 1926 1 2025-10-30 20:43:55.948 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 12 10375 1 2025-10-30 20:44:19.108 00:00:10.368 TCP 23.104.0.1:55714 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:44:56.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47022 10 6452 1 2025-10-30 20:45:20.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:45:20.223 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:45:19.523 00:00:10.360 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:45:56.439 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-10-30 20:46:19.922 00:00:10.382 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:46:56.912 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-10-30 20:47:20.343 00:00:10.359 TCP 23.104.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:43:49.711 00:05:03.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:43:49.708 00:05:03.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:47:57.152 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-10-30 20:48:20.745 00:00:10.371 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:48:57.368 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-10-30 20:49:21.164 00:00:10.364 TCP 23.104.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:49:57.578 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6452 1 2025-10-30 20:50:20.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:50:20.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:50:21.565 00:00:10.370 TCP 23.104.0.1:59994 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:50:57.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 10 6452 1 2025-10-30 20:51:21.976 00:00:10.325 TCP 23.104.0.1:33790 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:51:58.020 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-10-30 20:52:22.348 00:00:10.373 TCP 23.104.0.1:44094 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:52:58.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6452 1 2025-10-30 20:53:22.756 00:00:10.388 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:49:49.709 00:05:03.475 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 20:49:49.712 00:05:03.470 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 20:53:58.403 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-10-30 20:54:23.178 00:00:10.650 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:54:58.630 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40502 10 6452 1 2025-10-30 20:55:20.585 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 20:55:20.476 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 20:55:23.867 00:00:10.326 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:55:58.815 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-10-30 20:56:24.232 00:00:10.369 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:56:59.038 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-10-30 20:57:24.642 00:00:10.490 TCP 23.104.0.1:57998 -> 1.101.0.1:3000 11 1507 1 2025-10-30 20:57:59.458 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38166 12 6556 1 2025-10-30 20:58:25.170 00:00:10.323 TCP 23.104.0.1:41002 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503054, total packets: 1585, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-10-30 19:55:49 - 2025-10-30 20:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0021s flows/second: 78139.9 Runtime: 0.0021s