Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 19:59:04.899 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 12 10369 1 2025-10-31 19:54:53.690 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 19:54:53.688 00:05:56.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 19:59:39.499 00:00:10.367 TCP 23.104.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:00:05.147 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-10-31 20:00:48.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:00:48.394 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:00:39.904 00:00:10.371 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:01:05.317 00:00:17.301 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-10-31 20:01:40.311 00:00:10.364 TCP 23.104.0.1:52012 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:02:12.656 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-10-31 20:02:40.712 00:00:10.327 TCP 23.104.0.1:37808 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:03:12.887 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37462 10 6452 1 2025-10-31 20:03:41.107 00:00:10.364 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:04:13.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 10 6452 1 2025-10-31 20:04:41.512 00:00:10.365 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:05:13.314 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-10-31 20:05:48.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:00:53.692 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:05:48.596 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:00:53.689 00:05:56.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:05:41.915 00:00:10.363 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:06:13.535 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-10-31 20:06:42.322 00:00:10.360 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:07:13.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-10-31 20:07:42.727 00:00:10.375 TCP 23.104.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:08:13.972 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 13 6608 1 2025-10-31 20:08:43.139 00:00:10.376 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:09:14.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35326 10 6452 1 2025-10-31 20:09:43.555 00:00:10.363 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:10:14.440 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48584 10 6452 1 2025-10-31 20:10:48.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:10:48.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:10:43.956 00:00:10.380 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:11:14.657 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-10-31 20:06:53.704 00:05:56.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:06:53.700 00:05:56.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:11:44.376 00:00:10.361 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:12:14.870 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-10-31 20:12:44.780 00:00:10.365 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:13:15.094 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-10-31 20:13:45.185 00:00:10.371 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:14:15.315 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-10-31 20:14:45.589 00:00:10.367 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:15:15.527 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-10-31 20:15:48.859 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:15:48.687 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:15:45.990 00:00:11.570 TCP 23.104.0.1:34914 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:16:15.738 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35290 10 6452 1 2025-10-31 20:16:47.607 00:00:10.367 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:17:15.908 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37036 10 6452 1 2025-10-31 20:12:53.702 00:05:56.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:12:53.705 00:05:56.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:17:48.016 00:00:10.323 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:18:16.129 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-10-31 20:18:48.381 00:00:11.524 TCP 23.104.0.1:38282 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:19:16.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-10-31 20:19:49.943 00:00:10.371 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:20:16.566 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-10-31 20:20:49.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:20:48.863 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:20:50.365 00:00:10.368 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:21:16.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34840 10 6452 1 2025-10-31 20:21:50.767 00:00:10.370 TCP 23.104.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:22:17.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-10-31 20:22:51.180 00:00:10.362 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:23:17.244 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-10-31 20:18:53.705 00:05:56.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:18:53.703 00:05:56.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:23:51.574 00:00:10.363 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:24:17.459 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32916 10 6452 1 2025-10-31 20:24:51.980 00:00:10.365 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:25:17.684 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-10-31 20:25:48.724 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:25:49.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:25:52.384 00:00:10.323 TCP 23.104.0.1:32786 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:26:17.906 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-10-31 20:26:52.743 00:00:10.420 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:27:18.122 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-10-31 20:27:53.203 00:00:10.369 TCP 23.104.0.1:43760 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:28:18.343 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39790 10 6452 1 2025-10-31 20:28:53.608 00:00:10.365 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:29:18.564 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-10-31 20:24:53.708 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:24:53.708 00:05:56.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:29:54.010 00:00:10.365 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:30:18.790 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37632 10 6452 1 2025-10-31 20:30:49.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:30:49.128 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:30:54.411 00:00:10.367 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:31:19.032 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-10-31 20:31:54.814 00:00:10.365 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:32:19.250 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-10-31 20:32:55.216 00:00:10.366 TCP 23.104.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:33:19.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-10-31 20:33:55.622 00:00:10.365 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:34:19.684 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41666 10 6452 1 2025-10-31 20:34:56.037 00:00:10.366 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:35:19.859 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-10-31 20:35:49.064 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:30:53.711 00:05:56.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:35:49.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:30:53.708 00:05:56.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:35:56.443 00:00:10.329 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:36:20.081 00:00:10.681 TCP 1.101.0.1:3000 -> 22.102.0.1:48796 10 6452 1 2025-10-31 20:36:56.809 00:00:10.365 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:37:20.797 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60538 10 6452 1 2025-10-31 20:37:57.214 00:00:10.366 TCP 23.104.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:38:21.027 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-10-31 20:38:57.616 00:00:10.323 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:39:21.194 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-10-31 20:39:57.975 00:00:10.370 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:40:21.362 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 10 6452 1 2025-10-31 20:40:49.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:40:49.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:40:58.383 00:00:10.379 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:41:21.572 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-10-31 20:36:53.714 00:05:56.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:36:53.712 00:05:56.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:41:58.786 00:00:10.362 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:42:21.784 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-10-31 20:42:59.185 00:00:10.365 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:43:21.970 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-10-31 20:43:59.589 00:00:18.786 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:44:22.204 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-10-31 20:45:08.431 00:00:10.362 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:45:22.376 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-10-31 20:45:49.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:45:49.643 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:46:08.830 00:00:10.378 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:46:22.549 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-10-31 20:47:09.247 00:00:10.365 TCP 23.104.0.1:45482 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:47:22.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-10-31 20:42:53.711 00:05:56.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:42:53.714 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:48:09.656 00:00:10.366 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:48:23.007 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44856 10 6452 1 2025-10-31 20:49:10.080 00:00:12.758 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:49:23.218 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-10-31 20:50:12.877 00:00:10.327 TCP 23.104.0.1:50874 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:50:23.400 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59262 10 6452 1 2025-10-31 20:50:49.639 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:50:49.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:51:13.244 00:00:10.330 TCP 23.104.0.1:47340 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:51:23.575 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-10-31 20:52:13.614 00:00:11.474 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:52:23.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-10-31 20:53:15.129 00:00:10.359 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:53:24.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-10-31 20:48:53.716 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 20:48:53.714 00:05:56.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 20:54:15.528 00:00:10.390 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:54:24.233 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-10-31 20:55:15.957 00:00:10.329 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:55:24.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-10-31 20:55:49.388 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 20:55:49.360 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 20:56:16.324 00:00:10.381 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:56:24.659 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-10-31 20:57:16.734 00:00:10.362 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:57:24.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46134 10 6452 1 2025-10-31 20:58:17.130 00:00:10.324 TCP 23.104.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-10-31 20:58:25.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55870 10 6452 1 Summary: total flows: 163, total bytes: 500914, total packets: 1566, avg bps: 1048, avg pps: 0, avg bpp: 319 Time window: 2025-10-31 19:54:53 - 2025-10-31 20:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0011s Wall: 0.0013s flows/second: 123965.8 Runtime: 0.0013s