Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 01:58:43.801 00:00:10.433 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 15 1926 1 2025-10-31 01:59:24.702 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 10 6452 1 2025-10-31 01:59:44.275 00:00:10.361 TCP 23.104.0.1:37128 -> 1.101.0.1:3000 11 1507 1 2025-10-31 01:55:49.827 00:05:03.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 01:55:49.825 00:05:03.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:00:26.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:00:26.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:00:24.932 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-10-31 02:00:44.681 00:00:10.327 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:01:25.122 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-10-31 02:01:45.054 00:00:10.601 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:02:25.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-10-31 02:02:45.702 00:00:10.365 TCP 23.104.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:03:25.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-10-31 02:03:46.111 00:00:10.360 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:04:25.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-10-31 02:04:46.511 00:00:10.365 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:05:26.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:05:26.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:05:25.992 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-10-31 02:01:49.828 00:05:03.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:01:49.830 00:05:03.448 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:05:46.912 00:00:10.360 TCP 23.104.0.1:33196 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:06:26.238 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-10-31 02:06:47.308 00:00:10.326 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:07:26.464 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-10-31 02:07:47.674 00:00:10.369 TCP 23.104.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:08:26.641 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 12 6556 1 2025-10-31 02:08:48.098 00:00:10.366 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:09:26.849 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-10-31 02:09:48.502 00:00:11.526 TCP 23.104.0.1:33440 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:10:27.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:10:27.082 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:10:27.081 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-10-31 02:10:50.099 00:00:10.367 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:11:27.265 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-10-31 02:07:49.832 00:05:03.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:07:49.829 00:05:03.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:11:50.504 00:00:10.366 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:12:27.479 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-10-31 02:12:50.911 00:00:10.364 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:13:27.689 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46222 10 6452 1 2025-10-31 02:13:51.313 00:00:10.365 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:14:27.866 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-10-31 02:14:51.713 00:00:10.334 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:15:27.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:15:27.053 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:15:28.135 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33208 10 6452 1 2025-10-31 02:15:52.105 00:00:10.325 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:16:28.352 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-10-31 02:16:52.471 00:00:10.367 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:17:28.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-10-31 02:13:49.833 00:05:03.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:13:49.831 00:05:03.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:17:52.875 00:00:10.361 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:18:28.781 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-10-31 02:18:53.276 00:00:10.362 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:19:28.993 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 10 6452 1 2025-10-31 02:19:53.671 00:00:10.366 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:20:27.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:20:27.415 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:20:29.175 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-10-31 02:20:54.104 00:00:10.326 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:21:29.397 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36844 10 6452 1 2025-10-31 02:21:54.469 00:00:10.359 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:22:29.617 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-10-31 02:22:54.867 00:00:10.370 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:23:29.838 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-10-31 02:19:49.832 00:05:03.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:19:49.835 00:05:03.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:23:55.274 00:00:10.363 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:24:30.013 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6452 1 2025-10-31 02:24:55.675 00:00:10.363 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:25:27.313 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:25:27.038 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:25:30.226 00:00:10.339 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-10-31 02:25:56.105 00:00:10.364 TCP 23.104.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:26:30.603 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-10-31 02:26:56.509 00:00:10.364 TCP 23.104.0.1:57518 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:27:30.830 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-10-31 02:27:56.913 00:00:10.368 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:28:31.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-10-31 02:28:57.318 00:00:10.363 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:29:31.294 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-10-31 02:25:49.836 00:05:03.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:25:49.840 00:05:03.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:29:57.718 00:00:10.372 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:30:27.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:30:27.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:30:31.515 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40898 10 6452 1 2025-10-31 02:30:58.128 00:00:11.567 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:31:31.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-10-31 02:31:59.738 00:00:10.366 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:32:31.947 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-10-31 02:33:00.137 00:00:10.327 TCP 23.104.0.1:57688 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:33:32.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6452 1 2025-10-31 02:34:00.496 00:00:10.372 TCP 23.104.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:34:32.395 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-10-31 02:35:00.902 00:00:10.368 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:35:27.550 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:35:27.551 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:35:32.617 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-10-31 02:31:49.840 00:05:03.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:31:49.839 00:05:03.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:36:01.309 00:00:10.358 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:36:32.788 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-10-31 02:37:01.703 00:00:10.328 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:37:33.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34274 10 6452 1 2025-10-31 02:38:02.090 00:00:10.387 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:38:33.227 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-10-31 02:39:02.516 00:00:12.290 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:39:33.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43954 10 6452 1 2025-10-31 02:40:04.853 00:00:10.386 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:40:27.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:40:27.507 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:40:33.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-10-31 02:41:05.280 00:00:10.365 TCP 23.104.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:41:33.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-10-31 02:37:49.849 00:05:03.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:37:49.853 00:05:03.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:42:05.685 00:00:10.326 TCP 23.104.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:42:34.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41350 10 6452 1 2025-10-31 02:43:06.060 00:00:10.370 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:43:34.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 12 6556 1 2025-10-31 02:44:06.470 00:00:10.941 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:44:34.555 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:39200 10 6452 1 2025-10-31 02:45:07.454 00:00:10.363 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:45:27.724 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:45:27.591 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:45:34.725 00:00:10.659 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-10-31 02:46:07.855 00:00:10.381 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:46:35.418 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-10-31 02:47:08.272 00:00:10.335 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:47:35.639 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38866 10 6452 1 2025-10-31 02:43:49.849 00:05:03.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:43:49.854 00:05:03.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:48:08.644 00:00:10.368 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:48:35.815 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57788 10 6452 1 2025-10-31 02:49:09.065 00:00:10.366 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:49:36.038 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 10 6452 1 2025-10-31 02:50:09.468 00:00:10.326 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:50:27.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:50:27.844 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:50:36.248 00:00:11.464 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6452 1 2025-10-31 02:51:09.836 00:00:10.378 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:51:37.766 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-10-31 02:52:10.256 00:00:10.364 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:52:37.980 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 10 6452 1 2025-10-31 02:53:10.658 00:00:10.390 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:53:38.216 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6452 1 2025-10-31 02:49:49.851 00:05:03.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 02:49:49.854 00:05:03.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 02:54:11.103 00:00:10.365 TCP 23.104.0.1:48928 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:54:38.445 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-10-31 02:55:11.505 00:00:10.371 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:55:27.777 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 02:55:27.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 02:55:38.667 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53716 10 6452 1 2025-10-31 02:56:11.913 00:00:10.366 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:56:38.880 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-10-31 02:57:12.310 00:00:10.364 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:57:39.107 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34970 10 6452 1 2025-10-31 02:58:12.711 00:00:10.362 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-10-31 02:58:39.350 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 Summary: total flows: 164, total bytes: 498975, total packets: 1580, avg bps: 1056, avg pps: 0, avg bpp: 315 Time window: 2025-10-31 01:55:49 - 2025-10-31 02:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0021s Wall: 0.0024s flows/second: 69167.0 Runtime: 0.0024s