Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 20:58:53.738 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-10-13 20:59:06.026 00:00:10.360 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-10-13 20:59:53.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-10-13 21:00:06.431 00:00:10.369 TCP 23.104.0.1:38478 -> 1.101.0.1:3000 11 1507 1 2025-10-13 20:56:41.829 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 20:56:41.832 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:00:54.127 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37022 10 6452 1 2025-10-13 21:01:06.841 00:00:10.346 TCP 23.104.0.1:57894 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:01:54.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-10-13 21:02:09.506 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:02:09.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:02:07.229 00:00:10.360 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:02:54.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-10-13 21:03:07.627 00:00:10.365 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:03:54.769 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-10-13 21:04:08.032 00:00:10.365 TCP 23.104.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:04:54.949 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54928 10 6452 1 2025-10-13 21:05:08.438 00:00:10.365 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:05:55.139 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-10-13 21:06:08.842 00:00:10.388 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:02:41.831 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:02:41.833 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:07:09.732 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:06:55.356 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43746 10 6452 1 2025-10-13 21:07:09.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:07:09.266 00:00:10.375 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:07:55.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-10-13 21:08:09.679 00:00:10.369 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:08:55.778 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-10-13 21:09:10.104 00:00:10.361 TCP 23.104.0.1:51632 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:09:55.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-10-13 21:10:10.507 00:00:10.369 TCP 23.104.0.1:52184 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:10:56.210 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-10-13 21:11:10.918 00:00:10.399 TCP 23.104.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:11:56.425 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39910 10 6452 1 2025-10-13 21:12:09.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:12:09.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:12:11.357 00:00:10.360 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:08:41.833 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:08:41.834 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:12:56.598 00:00:10.740 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-10-13 21:13:11.764 00:00:10.372 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:13:57.379 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-10-13 21:14:12.173 00:00:10.365 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:14:57.593 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-10-13 21:15:12.581 00:00:10.374 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:15:57.767 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-10-13 21:16:12.997 00:00:10.369 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:17:09.562 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:16:57.984 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-10-13 21:17:09.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:17:13.407 00:00:10.320 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:17:58.176 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6452 1 2025-10-13 21:18:13.765 00:00:10.373 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:14:41.834 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:14:41.837 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:18:58.347 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-10-13 21:19:14.177 00:00:10.360 TCP 23.104.0.1:46336 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:19:58.523 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-10-13 21:20:14.580 00:00:10.364 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:20:58.698 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6452 1 2025-10-13 21:21:14.984 00:00:10.366 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:22:09.822 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:22:09.891 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:21:58.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40330 10 6452 1 2025-10-13 21:22:15.389 00:00:10.368 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:22:59.134 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-10-13 21:23:15.794 00:00:10.365 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:23:59.309 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59234 10 6452 1 2025-10-13 21:24:16.192 00:00:10.369 TCP 23.104.0.1:43254 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:20:41.838 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:20:41.836 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:24:59.494 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57334 10 6452 1 2025-10-13 21:25:16.598 00:00:10.364 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:25:59.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42064 10 6452 1 2025-10-13 21:26:17.000 00:00:10.359 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:26:59.922 00:00:10.273 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-10-13 21:27:10.034 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:27:09.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:27:17.404 00:00:10.363 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:28:00.236 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-10-13 21:28:17.801 00:00:10.347 TCP 23.104.0.1:43100 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:29:00.819 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59562 10 6452 1 2025-10-13 21:29:18.184 00:00:10.383 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:30:01.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-10-13 21:30:18.600 00:00:11.179 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:26:41.839 00:05:02.442 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:26:41.836 00:05:02.447 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:31:01.263 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 11 6813 1 2025-10-13 21:31:19.860 00:00:10.372 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:32:01.435 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54348 10 6452 1 2025-10-13 21:32:09.941 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:32:09.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:32:20.271 00:00:10.360 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:33:01.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45362 10 6452 1 2025-10-13 21:33:20.676 00:00:10.367 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:34:01.822 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-10-13 21:34:21.105 00:00:10.362 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:35:02.044 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-10-13 21:35:21.505 00:00:10.374 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:36:02.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-10-13 21:36:21.918 00:00:10.371 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:32:41.840 00:05:02.442 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:32:41.838 00:05:02.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:37:10.013 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:37:10.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:37:02.469 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50610 10 6452 1 2025-10-13 21:37:22.324 00:00:10.327 TCP 23.104.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:38:02.638 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-10-13 21:38:22.687 00:00:10.365 TCP 23.104.0.1:47772 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:39:02.850 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57662 10 6452 1 2025-10-13 21:39:23.105 00:00:10.366 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:40:03.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-10-13 21:40:23.511 00:00:10.367 TCP 23.104.0.1:53786 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:41:03.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-10-13 21:41:23.919 00:00:10.383 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 12 1559 1 2025-10-13 21:42:09.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:42:10.010 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:42:03.458 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-10-13 21:42:24.340 00:00:10.361 TCP 23.104.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:38:41.839 00:05:02.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:38:41.842 00:05:02.448 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:43:03.666 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-10-13 21:43:24.740 00:00:10.367 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:44:03.878 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-10-13 21:44:25.144 00:00:10.380 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:45:04.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-10-13 21:45:25.555 00:00:10.361 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:46:04.319 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-10-13 21:46:25.955 00:00:10.371 TCP 23.104.0.1:44426 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:47:10.438 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:47:10.393 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:47:04.532 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59806 10 6452 1 2025-10-13 21:47:26.361 00:00:10.365 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:48:04.747 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-10-13 21:48:26.768 00:00:10.380 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:44:41.840 00:05:02.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:44:41.842 00:05:02.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:49:04.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-10-13 21:49:27.184 00:00:10.366 TCP 23.104.0.1:59892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:50:05.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-10-13 21:50:27.589 00:00:10.369 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:51:05.426 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 12 10369 1 2025-10-13 21:51:27.995 00:00:10.442 TCP 23.104.0.1:50896 -> 1.101.0.1:3000 15 1926 1 2025-10-13 21:52:10.242 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:52:10.731 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:52:05.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-10-13 21:52:28.476 00:00:10.366 TCP 23.104.0.1:52346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:53:05.882 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58266 10 6452 1 2025-10-13 21:53:28.878 00:00:10.593 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:54:06.073 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-10-13 21:54:29.507 00:00:10.367 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:50:41.851 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 21:50:41.854 00:05:02.446 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 21:55:06.281 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-10-13 21:55:29.916 00:00:10.370 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:56:06.465 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-10-13 21:56:30.327 00:00:10.365 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:57:10.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 21:57:10.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 21:57:06.680 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-10-13 21:57:30.735 00:00:10.328 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-10-13 21:58:06.847 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37686 10 6452 1 2025-10-13 21:58:31.110 00:00:10.369 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503097, total packets: 1580, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-10-13 20:56:41 - 2025-10-13 21:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0008s Wall: 0.0030s flows/second: 55051.3 Runtime: 0.0030s