Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 16:59:18.702 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-10-03 16:59:23.709 00:00:10.335 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:00:18.914 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32778 10 6452 1 2025-10-03 17:00:24.097 00:00:10.620 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-10-03 16:56:37.184 00:05:01.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:01:19.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-10-03 17:01:24.754 00:00:10.391 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-10-03 16:57:37.185 00:05:01.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:02:15.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:02:15.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:02:19.336 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-10-03 17:02:25.183 00:00:10.366 TCP 23.104.0.1:35254 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:03:19.552 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-10-03 17:03:25.590 00:00:10.363 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:04:19.729 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-10-03 17:04:25.991 00:00:10.380 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:05:19.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-10-03 17:05:26.408 00:00:10.366 TCP 23.104.0.1:55348 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:06:20.118 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-10-03 17:02:37.185 00:05:01.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:06:26.815 00:00:10.367 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:07:16.234 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:07:16.286 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:07:20.333 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-10-03 17:03:37.189 00:05:01.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:07:27.216 00:00:10.365 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:08:20.555 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-10-03 17:08:27.621 00:00:10.360 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:09:20.726 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-10-03 17:09:28.021 00:00:10.357 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:10:20.944 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59582 10 6452 1 2025-10-03 17:10:28.419 00:00:10.369 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:11:21.188 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-10-03 17:11:28.828 00:00:10.373 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:12:16.048 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:12:16.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:12:21.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42572 10 6452 1 2025-10-03 17:12:29.236 00:00:10.373 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:08:37.186 00:05:01.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:13:21.629 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55238 10 6452 1 2025-10-03 17:09:37.188 00:05:01.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:13:29.649 00:00:10.376 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:14:21.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-10-03 17:14:30.088 00:00:10.322 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:15:22.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-10-03 17:15:30.448 00:00:10.362 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:16:22.275 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-10-03 17:16:30.849 00:00:10.394 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:17:16.374 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:17:16.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:17:22.487 00:00:10.261 TCP 1.101.0.1:3000 -> 22.102.0.1:36114 10 6452 1 2025-10-03 17:17:31.286 00:00:10.364 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:18:22.787 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-10-03 17:14:37.187 00:05:01.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:18:31.690 00:00:10.365 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:19:23.000 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-10-03 17:15:37.189 00:05:01.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:19:32.108 00:00:10.373 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:20:23.227 00:00:10.744 TCP 1.101.0.1:3000 -> 22.102.0.1:60922 10 6452 1 2025-10-03 17:20:32.516 00:00:10.369 TCP 23.104.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:21:24.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-10-03 17:21:32.925 00:00:10.388 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:22:16.398 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:22:16.111 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:22:24.221 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6452 1 2025-10-03 17:22:33.356 00:00:10.363 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:23:24.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-10-03 17:23:33.759 00:00:10.375 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:24:24.605 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-10-03 17:20:37.187 00:05:01.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:24:34.172 00:00:10.362 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:25:24.825 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-10-03 17:21:37.190 00:05:01.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:25:34.573 00:00:10.377 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:26:25.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51590 10 6452 1 2025-10-03 17:26:34.986 00:00:10.876 TCP 23.104.0.1:44776 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:27:16.569 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:27:16.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:27:25.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-10-03 17:27:35.901 00:00:10.328 TCP 23.104.0.1:41574 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:28:25.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33226 10 6452 1 2025-10-03 17:28:36.263 00:00:10.365 TCP 23.104.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:29:25.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 10 6452 1 2025-10-03 17:29:36.668 00:00:10.359 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:30:25.935 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-10-03 17:26:37.190 00:05:01.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:30:37.091 00:00:10.364 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:31:26.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-10-03 17:27:37.193 00:05:01.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:31:37.492 00:00:10.369 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:32:16.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:32:16.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:32:26.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-10-03 17:32:37.903 00:00:10.364 TCP 23.104.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:33:26.551 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-10-03 17:33:38.309 00:00:10.364 TCP 23.104.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:34:26.722 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37670 10 6452 1 2025-10-03 17:34:38.712 00:00:10.375 TCP 23.104.0.1:54770 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:35:26.934 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-10-03 17:35:39.125 00:00:10.369 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:36:27.127 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-10-03 17:32:37.192 00:05:01.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:36:39.535 00:00:10.362 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:37:16.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:37:16.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:33:37.195 00:05:01.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:37:27.346 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-10-03 17:37:39.936 00:00:10.377 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:38:27.572 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-10-03 17:38:40.354 00:00:10.367 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:39:27.747 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-10-03 17:39:40.767 00:00:10.379 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:40:27.974 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-10-03 17:40:41.186 00:00:10.361 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:41:28.216 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-10-03 17:41:41.585 00:00:10.365 TCP 23.104.0.1:34166 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:42:16.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:42:16.680 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:42:28.410 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-10-03 17:38:37.195 00:05:01.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:42:41.986 00:00:10.369 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:39:37.197 00:05:01.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:43:28.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6452 1 2025-10-03 17:43:42.391 00:00:10.326 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:44:28.844 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-10-03 17:44:42.756 00:00:10.383 TCP 23.104.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:45:29.017 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-10-03 17:45:43.173 00:00:10.321 TCP 23.104.0.1:46174 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:46:29.232 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58190 10 6452 1 2025-10-03 17:46:43.532 00:00:10.365 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:47:16.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:47:16.993 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:47:29.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54286 10 6452 1 2025-10-03 17:47:43.937 00:00:10.479 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:48:29.672 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-10-03 17:44:37.206 00:05:01.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:48:44.457 00:00:10.326 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:45:37.209 00:05:01.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:49:29.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-10-03 17:49:44.820 00:00:10.364 TCP 23.104.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:50:30.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46366 10 6452 1 2025-10-03 17:50:45.222 00:00:10.365 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:51:30.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-10-03 17:51:45.626 00:00:10.381 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:52:16.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:52:17.351 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:52:30.531 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34840 10 6452 1 2025-10-03 17:52:46.054 00:00:10.367 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:53:30.746 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34906 10 6452 1 2025-10-03 17:53:46.463 00:00:10.363 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:54:30.915 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42700 10 6452 1 2025-10-03 17:50:37.209 00:05:01.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 17:54:46.870 00:00:10.375 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:51:37.212 00:05:01.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 17:55:31.098 00:00:10.639 TCP 1.101.0.1:3000 -> 22.102.0.1:40908 10 6452 1 2025-10-03 17:55:47.296 00:00:10.366 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:56:31.781 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56752 10 6452 1 2025-10-03 17:56:47.699 00:00:10.367 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:57:16.943 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 17:57:17.023 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 17:57:32.010 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-10-03 17:57:48.115 00:00:10.363 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-10-03 17:58:32.232 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-10-03 16:56:37 - 2025-10-03 17:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0032s Wall: 0.0021s flows/second: 79046.3 Runtime: 0.0021s