Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 22:58:53.557 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38444 10 6452 1 2025-10-15 22:59:18.717 00:00:10.370 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-10-15 22:59:53.780 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 11 6504 1 2025-10-15 23:00:19.129 00:00:10.364 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-10-15 22:56:42.824 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 22:56:42.827 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:00:54.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45690 10 6452 1 2025-10-15 23:01:19.533 00:00:10.360 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:01:54.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57068 10 6452 1 2025-10-15 23:02:19.935 00:00:10.342 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:02:54.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6452 1 2025-10-15 23:03:09.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:03:09.936 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:03:20.319 00:00:10.366 TCP 23.104.0.1:50628 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:03:54.728 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37614 10 6452 1 2025-10-15 23:04:20.722 00:00:10.371 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:04:54.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56644 10 6452 1 2025-10-15 23:05:21.134 00:00:10.365 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:05:55.109 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-10-15 23:06:21.535 00:00:10.365 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:02:42.827 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:02:42.824 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:06:55.314 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:33716 10 6452 1 2025-10-15 23:07:21.938 00:00:10.375 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:07:55.809 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-10-15 23:08:09.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:08:09.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:08:22.347 00:00:10.364 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:08:56.036 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-10-15 23:09:22.753 00:00:10.389 TCP 23.104.0.1:56898 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:09:56.260 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-10-15 23:10:23.180 00:00:10.363 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:10:56.485 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-10-15 23:11:23.582 00:00:10.333 TCP 23.104.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:11:56.702 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-10-15 23:12:23.955 00:00:10.364 TCP 23.104.0.1:50304 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:08:42.826 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:08:42.828 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:13:09.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:12:56.926 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-10-15 23:13:09.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:13:24.359 00:00:10.366 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:13:57.139 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38716 10 6452 1 2025-10-15 23:14:24.774 00:00:10.370 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:14:57.373 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59564 10 6452 1 2025-10-15 23:15:25.184 00:00:10.360 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:15:57.582 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-10-15 23:16:25.581 00:00:10.364 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:16:57.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-10-15 23:17:25.982 00:00:10.370 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:17:57.974 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6452 1 2025-10-15 23:18:10.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:18:10.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:18:26.392 00:00:10.367 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:14:42.832 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:14:42.829 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:18:58.160 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-10-15 23:19:26.794 00:00:10.366 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:19:58.374 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-10-15 23:20:27.190 00:00:10.365 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:20:58.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-10-15 23:21:27.591 00:00:10.363 TCP 23.104.0.1:56680 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:21:58.757 00:00:10.633 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2025-10-15 23:22:27.992 00:00:10.368 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:23:10.100 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:22:59.426 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36352 10 6452 1 2025-10-15 23:23:10.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:23:28.395 00:00:10.369 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:23:59.642 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 10 6452 1 2025-10-15 23:24:28.799 00:00:10.367 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:20:42.829 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:20:42.831 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:24:59.825 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-10-15 23:25:29.207 00:00:10.328 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:26:00.036 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-10-15 23:26:29.576 00:00:10.437 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 15 1926 1 2025-10-15 23:27:00.272 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 12 10375 1 2025-10-15 23:27:30.057 00:00:10.368 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:28:00.509 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55290 10 6452 1 2025-10-15 23:28:09.964 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:28:09.986 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:28:30.459 00:00:10.324 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:29:00.723 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-10-15 23:29:30.817 00:00:10.368 TCP 23.104.0.1:55986 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:30:00.931 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59178 10 6452 1 2025-10-15 23:30:31.221 00:00:10.364 TCP 23.104.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:26:42.834 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:26:42.833 00:05:02.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:31:01.158 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41566 10 6452 1 2025-10-15 23:31:31.624 00:00:10.363 TCP 23.104.0.1:36466 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:32:01.370 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-10-15 23:32:32.028 00:00:10.324 TCP 23.104.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:33:10.496 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:33:01.581 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-10-15 23:33:10.549 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:33:32.388 00:00:10.423 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:34:01.760 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-10-15 23:34:32.851 00:00:10.381 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:35:01.980 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38822 10 6452 1 2025-10-15 23:35:33.269 00:00:10.376 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:36:02.216 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-10-15 23:36:33.676 00:00:10.374 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:32:42.834 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:32:42.833 00:05:02.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:37:02.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53588 10 6452 1 2025-10-15 23:37:34.103 00:00:10.365 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:38:10.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:38:10.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:38:02.649 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46720 10 6452 1 2025-10-15 23:38:34.506 00:00:10.368 TCP 23.104.0.1:54678 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:39:02.825 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47510 10 6452 1 2025-10-15 23:39:34.911 00:00:10.320 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:40:03.003 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:56268 10 6452 1 2025-10-15 23:40:35.270 00:00:10.373 TCP 23.104.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:41:03.203 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55902 10 6452 1 2025-10-15 23:41:35.685 00:00:10.369 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:42:03.414 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-10-15 23:42:36.107 00:00:10.368 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:38:42.838 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:38:42.835 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:43:10.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:43:10.545 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:43:03.630 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42888 10 6452 1 2025-10-15 23:43:36.516 00:00:10.321 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:44:03.847 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-10-15 23:44:36.874 00:00:10.365 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:45:04.038 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6452 1 2025-10-15 23:45:37.282 00:00:10.368 TCP 23.104.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:46:04.247 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-10-15 23:46:37.695 00:00:10.365 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:47:04.431 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-10-15 23:47:38.104 00:00:10.368 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:48:10.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:48:10.292 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:48:04.836 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51758 10 6452 1 2025-10-15 23:44:42.837 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:44:42.839 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:48:38.511 00:00:10.368 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:49:05.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56760 10 6452 1 2025-10-15 23:49:38.912 00:00:10.323 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:50:05.225 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 11 6504 1 2025-10-15 23:50:39.270 00:00:10.368 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:51:05.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-10-15 23:51:39.672 00:00:10.376 TCP 23.104.0.1:58038 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:52:05.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-10-15 23:52:40.100 00:00:10.325 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:53:10.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:53:10.830 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:53:05.932 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45788 10 6452 1 2025-10-15 23:53:40.459 00:00:10.369 TCP 23.104.0.1:45602 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:54:06.153 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-10-15 23:50:42.840 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 23:50:42.838 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 23:54:40.863 00:00:10.895 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:55:06.363 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-10-15 23:55:41.792 00:00:10.376 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:56:06.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-10-15 23:56:42.202 00:00:10.328 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:57:06.787 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56670 10 6452 1 2025-10-15 23:57:42.566 00:00:10.322 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-10-15 23:58:10.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 23:58:10.934 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 23:58:06.961 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36034 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1085, avg pps: 0, avg bpp: 319 Time window: 2025-10-15 22:56:42 - 2025-10-15 23:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0029s Wall: 0.0021s flows/second: 77619.4 Runtime: 0.0021s