Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 22:59:25.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41074 10 6452 1 2025-10-16 22:59:40.103 00:00:10.366 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:00:25.681 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-10-16 22:56:43.323 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:56:43.321 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:00:40.504 00:00:10.366 TCP 23.104.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:01:25.853 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-10-16 23:01:40.907 00:00:10.325 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:02:26.084 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-10-16 23:02:41.271 00:00:10.370 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:03:26.306 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43454 10 6452 1 2025-10-16 23:03:38.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:03:38.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:03:41.680 00:00:10.368 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:04:26.531 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-10-16 23:04:42.104 00:00:10.365 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:05:26.756 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45958 10 6452 1 2025-10-16 23:05:42.508 00:00:10.326 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:06:26.929 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-10-16 23:02:43.322 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:02:43.325 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:06:42.873 00:00:10.362 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:07:27.183 00:00:10.772 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-10-16 23:07:43.277 00:00:10.361 TCP 23.104.0.1:49070 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:08:38.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:08:27.996 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-10-16 23:08:38.683 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:08:43.673 00:00:10.367 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:09:28.233 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-10-16 23:09:44.103 00:00:10.374 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:10:28.448 00:00:10.511 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-10-16 23:10:44.516 00:00:10.367 TCP 23.104.0.1:49578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:11:29.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36168 10 6452 1 2025-10-16 23:11:44.919 00:00:10.333 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:12:29.220 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-10-16 23:08:43.326 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:08:43.323 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:12:45.293 00:00:10.325 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:13:29.394 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-10-16 23:13:38.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:13:38.605 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:13:45.662 00:00:10.362 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:14:30.258 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52944 10 6452 1 2025-10-16 23:14:46.085 00:00:10.319 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:15:30.429 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-10-16 23:15:46.445 00:00:10.323 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:16:30.602 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-10-16 23:16:46.807 00:00:10.359 TCP 23.104.0.1:45386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:17:30.772 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-10-16 23:17:47.201 00:00:10.366 TCP 23.104.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:18:31.149 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-10-16 23:18:38.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:18:39.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:14:43.324 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:14:43.327 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:18:47.607 00:00:10.370 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:19:31.369 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6452 1 2025-10-16 23:19:48.018 00:00:10.364 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:20:31.556 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58784 10 6452 1 2025-10-16 23:20:48.427 00:00:10.372 TCP 23.104.0.1:60940 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:21:31.762 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32788 10 6452 1 2025-10-16 23:21:48.837 00:00:10.385 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:22:31.976 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34250 10 6452 1 2025-10-16 23:22:49.267 00:00:10.368 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:23:38.690 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:23:38.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:23:32.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48332 10 6452 1 2025-10-16 23:23:49.672 00:00:10.359 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:20:43.325 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:24:32.427 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-10-16 23:20:43.328 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:24:50.102 00:00:10.364 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:25:32.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-10-16 23:25:50.513 00:00:10.359 TCP 23.104.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:26:32.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-10-16 23:26:50.906 00:00:10.337 TCP 23.104.0.1:51224 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:27:33.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-10-16 23:27:51.288 00:00:10.366 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:28:39.177 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:28:38.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:28:33.316 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39980 10 6452 1 2025-10-16 23:28:51.690 00:00:10.374 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:29:33.530 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36302 10 6452 1 2025-10-16 23:29:52.110 00:00:10.365 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:26:43.331 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:26:43.329 00:05:02.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:30:33.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-10-16 23:30:52.515 00:00:10.327 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:31:33.916 00:00:10.441 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-10-16 23:31:52.881 00:00:10.386 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:32:34.414 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-10-16 23:32:53.304 00:00:10.364 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:33:39.247 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:33:39.059 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:33:34.582 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-10-16 23:33:53.704 00:00:10.366 TCP 23.104.0.1:52340 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:34:34.795 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-10-16 23:34:54.113 00:00:10.367 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:35:35.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33312 10 6452 1 2025-10-16 23:35:54.520 00:00:10.367 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:36:35.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-10-16 23:32:43.330 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:32:43.333 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:36:54.924 00:00:10.386 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:37:35.440 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-10-16 23:37:55.351 00:00:10.363 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:38:39.430 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:38:39.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:38:35.651 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6452 1 2025-10-16 23:38:55.768 00:00:10.377 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:39:35.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-10-16 23:39:56.202 00:00:10.361 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:40:36.043 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59268 10 6452 1 2025-10-16 23:40:56.601 00:00:10.368 TCP 23.104.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:41:36.251 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6452 1 2025-10-16 23:41:57.007 00:00:10.362 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:42:36.455 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-10-16 23:38:43.332 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:38:43.334 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:42:57.411 00:00:10.324 TCP 23.104.0.1:36042 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:43:38.977 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:43:39.192 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:43:36.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-10-16 23:43:57.775 00:00:10.341 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:44:36.903 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53118 10 6452 1 2025-10-16 23:44:58.144 00:00:10.372 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:45:37.115 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51722 10 6452 1 2025-10-16 23:45:58.562 00:00:10.366 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:46:37.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52442 10 6452 1 2025-10-16 23:46:58.965 00:00:10.369 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:47:37.540 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 11 6504 1 2025-10-16 23:47:59.374 00:00:10.369 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:48:39.511 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:48:39.508 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:44:43.333 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:44:43.335 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:48:37.824 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-10-16 23:48:59.777 00:00:10.369 TCP 23.104.0.1:36528 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:49:38.032 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33734 10 6452 1 2025-10-16 23:50:00.189 00:00:10.380 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:50:38.245 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-10-16 23:51:00.606 00:00:10.374 TCP 23.104.0.1:57892 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:51:38.416 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-10-16 23:52:01.018 00:00:10.325 TCP 23.104.0.1:53594 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:52:38.632 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-10-16 23:53:01.385 00:00:10.325 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:53:39.481 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:53:39.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:53:38.848 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-10-16 23:54:01.750 00:00:10.372 TCP 23.104.0.1:35266 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:50:43.337 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 23:50:43.335 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 23:54:39.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43594 10 6452 1 2025-10-16 23:55:02.158 00:00:10.359 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:55:39.295 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-10-16 23:56:02.553 00:00:10.369 TCP 23.104.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:56:39.464 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56378 10 6452 1 2025-10-16 23:57:02.965 00:00:10.370 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:57:39.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-10-16 23:58:03.375 00:00:10.366 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-10-16 23:58:39.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 23:58:39.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 23:58:39.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-10-16 22:56:43 - 2025-10-16 23:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0033s flows/second: 49079.1 Runtime: 0.0033s