Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 13:59:19.305 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-10-06 13:59:21.988 00:00:10.367 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:00:19.508 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-10-06 14:00:22.392 00:00:10.369 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-10-06 13:56:38.557 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:01:19.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-10-06 14:01:22.792 00:00:10.365 TCP 23.104.0.1:52340 -> 1.101.0.1:3000 11 1507 1 2025-10-06 13:57:38.560 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:02:19.925 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-10-06 14:02:23.198 00:00:10.329 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:03:20.162 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 10 6452 1 2025-10-06 14:03:23.564 00:00:10.373 TCP 23.104.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:03:38.785 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:03:38.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:04:20.378 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49746 10 6452 1 2025-10-06 14:04:23.972 00:00:10.369 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:05:20.592 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6452 1 2025-10-06 14:05:24.376 00:00:10.372 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:06:20.805 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-10-06 14:06:24.784 00:00:10.740 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:02:38.558 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:07:21.190 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-10-06 14:07:25.563 00:00:10.367 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:03:38.562 00:05:01.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:08:21.414 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51950 10 6452 1 2025-10-06 14:08:25.968 00:00:10.361 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:08:39.150 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:08:38.727 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:09:21.641 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48328 10 6452 1 2025-10-06 14:09:26.367 00:00:10.328 TCP 23.104.0.1:40018 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:10:21.867 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-10-06 14:10:26.733 00:00:10.371 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:11:22.096 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 10 6452 1 2025-10-06 14:11:27.147 00:00:10.364 TCP 23.104.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:12:27.552 00:00:10.368 TCP 23.104.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:12:22.333 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55068 10 6452 1 2025-10-06 14:08:38.560 00:05:01.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:09:38.563 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:13:27.957 00:00:10.369 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:13:39.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:13:22.502 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-10-06 14:13:39.111 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:14:22.707 00:00:10.910 TCP 1.101.0.1:3000 -> 22.102.0.1:42092 10 6452 1 2025-10-06 14:14:28.368 00:00:10.363 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:15:23.656 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-06 14:15:28.769 00:00:10.943 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:16:23.946 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-10-06 14:16:29.747 00:00:10.374 TCP 23.104.0.1:45230 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:17:24.176 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 2025-10-06 14:17:30.149 00:00:10.369 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:18:24.390 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:38772 10 6452 1 2025-10-06 14:18:39.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:14:38.564 00:05:01.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:18:39.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:18:30.554 00:00:10.369 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:19:24.960 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56546 12 6556 1 2025-10-06 14:19:30.962 00:00:10.366 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:15:38.565 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:20:25.194 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41186 10 6452 1 2025-10-06 14:20:31.367 00:00:10.367 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:21:25.415 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-10-06 14:21:31.771 00:00:10.374 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:22:25.586 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-10-06 14:22:32.186 00:00:10.328 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:23:25.770 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-10-06 14:23:39.102 00:00:00.054 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:23:39.049 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:23:32.553 00:00:10.368 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:24:25.963 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-10-06 14:20:38.563 00:05:01.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:24:32.957 00:00:10.366 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:25:26.181 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-10-06 14:21:38.565 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:25:33.363 00:00:10.361 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:26:26.357 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-10-06 14:26:33.763 00:00:10.369 TCP 23.104.0.1:40924 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:27:26.579 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-10-06 14:27:34.165 00:00:10.367 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:28:26.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40076 10 6452 1 2025-10-06 14:28:39.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:28:39.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:28:34.567 00:00:10.365 TCP 23.104.0.1:59440 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:29:27.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6452 1 2025-10-06 14:29:34.980 00:00:10.327 TCP 23.104.0.1:53296 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:30:27.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-10-06 14:26:38.563 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:30:35.350 00:00:10.367 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:27:38.566 00:05:01.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:31:27.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-10-06 14:31:35.759 00:00:10.376 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:32:27.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-10-06 14:32:36.179 00:00:10.432 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:33:39.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:33:27.861 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-10-06 14:33:39.977 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:33:36.667 00:00:10.371 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:34:28.091 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57850 10 6452 1 2025-10-06 14:34:37.099 00:00:10.388 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:35:28.266 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-10-06 14:35:37.524 00:00:10.366 TCP 23.104.0.1:39946 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:36:28.444 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 10 6452 1 2025-10-06 14:32:38.565 00:05:01.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:36:37.931 00:00:10.344 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:33:38.567 00:05:01.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:37:28.658 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57474 10 6452 1 2025-10-06 14:37:38.313 00:00:10.363 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:38:39.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:38:28.868 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-10-06 14:38:39.585 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:38:38.717 00:00:10.369 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:39:29.087 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 12 10375 1 2025-10-06 14:39:39.123 00:00:10.456 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 15 1926 1 2025-10-06 14:40:29.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-10-06 14:40:39.614 00:00:10.363 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:41:29.539 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-10-06 14:41:40.015 00:00:10.375 TCP 23.104.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:42:29.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6452 1 2025-10-06 14:38:38.566 00:05:01.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:42:40.431 00:00:10.363 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:43:39.546 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:43:29.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-10-06 14:43:39.638 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:39:38.570 00:05:01.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:43:40.834 00:00:10.914 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:44:30.194 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 12 10375 1 2025-10-06 14:44:41.786 00:00:10.711 TCP 23.104.0.1:55628 -> 1.101.0.1:3000 15 1926 1 2025-10-06 14:45:30.397 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-10-06 14:45:42.538 00:00:10.370 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:46:30.614 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-10-06 14:46:42.942 00:00:10.370 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:47:30.789 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-10-06 14:47:43.351 00:00:10.360 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:48:30.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-10-06 14:48:39.745 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:44:38.568 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:48:39.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:48:43.748 00:00:10.381 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:49:31.214 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-10-06 14:45:38.571 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:49:44.163 00:00:10.394 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:50:31.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40078 10 6452 1 2025-10-06 14:50:44.596 00:00:10.366 TCP 23.104.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:51:31.635 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-10-06 14:51:44.996 00:00:10.323 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:52:31.860 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-10-06 14:52:45.370 00:00:10.367 TCP 23.104.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:53:39.876 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:53:39.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:53:32.087 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-10-06 14:53:45.769 00:00:10.378 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:50:38.570 00:05:01.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 14:54:32.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56836 10 6452 1 2025-10-06 14:54:46.187 00:00:10.361 TCP 23.104.0.1:38170 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:51:38.572 00:05:01.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 14:55:32.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-10-06 14:55:46.588 00:00:10.327 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:56:32.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-10-06 14:56:46.954 00:00:10.366 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:57:32.945 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-10-06 14:57:47.356 00:00:10.367 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-10-06 14:58:39.861 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 14:58:39.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 14:58:33.173 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53284 10 6452 1 Summary: total flows: 163, total bytes: 505629, total packets: 1575, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-10-06 13:56:38 - 2025-10-06 14:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0060s User: 0.0000s Wall: 0.0024s flows/second: 67576.5 Runtime: 0.0024s