Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 17:58:49.110 00:00:10.326 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-10-31 17:59:36.643 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54704 10 6452 1 2025-10-31 17:54:53.645 00:05:56.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 17:54:53.646 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 17:59:49.474 00:00:10.489 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:00:46.135 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:00:46.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:00:36.870 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59788 10 6452 1 2025-10-31 18:00:50.006 00:00:10.324 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:01:37.094 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53110 10 6452 1 2025-10-31 18:01:50.372 00:00:10.330 TCP 23.104.0.1:47216 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:02:37.313 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-10-31 18:02:50.762 00:00:10.373 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:03:37.533 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-10-31 18:03:51.170 00:00:10.368 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:04:37.751 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-10-31 18:04:51.580 00:00:10.370 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:05:45.925 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:05:37.969 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33598 10 6452 1 2025-10-31 18:00:53.648 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:05:46.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:00:53.645 00:05:56.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:05:51.990 00:00:10.367 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:06:38.203 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-10-31 18:06:52.392 00:00:10.365 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:07:38.409 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 11 6504 1 2025-10-31 18:07:52.794 00:00:10.322 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:08:38.699 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38844 10 6452 1 2025-10-31 18:08:53.149 00:00:10.327 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:09:38.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-10-31 18:09:53.510 00:00:10.376 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:10:46.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:10:46.177 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:10:39.135 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-10-31 18:10:53.923 00:00:10.392 TCP 23.104.0.1:56778 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:11:39.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59460 10 6452 1 2025-10-31 18:06:53.650 00:05:56.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:06:53.648 00:05:56.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:11:54.359 00:00:10.366 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:12:39.558 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6452 1 2025-10-31 18:12:54.767 00:00:10.370 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:13:39.739 00:00:10.400 TCP 1.101.0.1:3000 -> 22.102.0.1:43304 10 6452 1 2025-10-31 18:13:55.178 00:00:10.364 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:14:40.173 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33950 10 6452 1 2025-10-31 18:14:55.582 00:00:10.365 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:15:46.314 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:15:46.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:15:40.380 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-10-31 18:15:55.986 00:00:10.367 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:16:40.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52900 10 6452 1 2025-10-31 18:16:56.392 00:00:10.369 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:12:53.649 00:05:56.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:17:40.813 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-10-31 18:12:53.653 00:05:56.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:17:56.800 00:00:10.335 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:18:41.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-31 18:18:57.162 00:00:10.372 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:19:41.250 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-10-31 18:19:57.573 00:00:10.363 TCP 23.104.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:20:46.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:20:46.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:20:41.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-10-31 18:20:57.975 00:00:10.370 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:21:41.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 10 6452 1 2025-10-31 18:21:58.384 00:00:10.363 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:22:41.889 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-10-31 18:22:58.788 00:00:10.370 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:18:53.655 00:05:56.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:18:53.652 00:05:56.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:23:42.106 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6452 1 2025-10-31 18:23:59.198 00:00:10.328 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:24:42.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52410 10 6452 1 2025-10-31 18:24:59.566 00:00:10.323 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:25:46.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:25:46.402 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:25:42.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57278 10 6452 1 2025-10-31 18:25:59.931 00:00:10.374 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:26:42.747 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59322 10 6452 1 2025-10-31 18:27:00.347 00:00:10.361 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:27:42.925 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-10-31 18:28:00.749 00:00:10.387 TCP 23.104.0.1:35380 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:28:43.138 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-10-31 18:29:01.178 00:00:10.363 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:24:53.656 00:05:56.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:24:53.659 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:29:43.349 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-10-31 18:30:01.580 00:00:10.361 TCP 23.104.0.1:53830 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:30:46.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:30:46.628 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:30:43.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 2025-10-31 18:31:01.977 00:00:10.373 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:31:43.777 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33448 10 6452 1 2025-10-31 18:32:02.385 00:00:10.366 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:32:44.001 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-10-31 18:33:02.789 00:00:10.370 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:33:44.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59524 10 6452 1 2025-10-31 18:34:03.197 00:00:10.369 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:34:44.386 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58346 10 6452 1 2025-10-31 18:35:03.603 00:00:10.325 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:35:46.871 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:35:46.789 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:30:53.660 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:30:53.657 00:05:56.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:35:44.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-10-31 18:36:03.967 00:00:10.367 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:36:44.833 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56488 10 6452 1 2025-10-31 18:37:04.378 00:00:10.360 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:37:45.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-10-31 18:38:04.781 00:00:10.364 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:38:45.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51732 12 10375 1 2025-10-31 18:39:05.187 00:00:10.449 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 15 1926 1 2025-10-31 18:39:45.450 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56898 10 6452 1 2025-10-31 18:40:05.676 00:00:10.372 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:40:46.966 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:40:47.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:40:45.623 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-10-31 18:41:06.103 00:00:10.367 TCP 23.104.0.1:50708 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:36:53.663 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:36:53.660 00:05:56.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:41:45.856 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37340 10 6452 1 2025-10-31 18:42:06.504 00:00:10.363 TCP 23.104.0.1:55292 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:42:46.043 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-10-31 18:43:06.908 00:00:10.361 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:43:46.257 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56018 10 6452 1 2025-10-31 18:44:07.308 00:00:10.370 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:44:46.433 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6452 1 2025-10-31 18:45:07.716 00:00:10.382 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:45:46.820 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:45:47.031 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:45:46.642 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-31 18:46:08.134 00:00:10.365 TCP 23.104.0.1:37148 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:46:46.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54816 10 6452 1 2025-10-31 18:47:08.539 00:00:10.362 TCP 23.104.0.1:38906 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:42:53.664 00:05:56.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:42:53.662 00:05:56.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:47:47.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40834 10 6452 1 2025-10-31 18:48:08.938 00:00:10.331 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:48:47.290 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59660 10 6452 1 2025-10-31 18:49:09.302 00:00:10.370 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:49:47.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-10-31 18:50:09.713 00:00:10.372 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:50:46.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:50:46.925 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:50:47.707 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2025-10-31 18:51:10.125 00:00:10.362 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:51:47.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-10-31 18:52:10.526 00:00:10.796 TCP 23.104.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:52:48.133 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-10-31 18:53:11.365 00:00:10.361 TCP 23.104.0.1:40432 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:48:53.662 00:05:56.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 18:48:53.667 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 18:53:48.341 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-10-31 18:54:11.766 00:00:10.376 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:54:48.514 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-10-31 18:55:12.180 00:00:10.368 TCP 23.104.0.1:48988 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:55:46.973 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 18:55:47.178 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 18:55:48.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-10-31 18:56:12.583 00:00:10.331 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:56:48.945 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-10-31 18:57:12.954 00:00:10.368 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-10-31 18:57:49.182 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-10-31 18:58:13.361 00:00:10.367 TCP 23.104.0.1:44050 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496290, total packets: 1569, avg bps: 1042, avg pps: 0, avg bpp: 316 Time window: 2025-10-31 17:54:53 - 2025-10-31 18:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0010s Wall: 0.0013s flows/second: 126068.9 Runtime: 0.0013s