Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 20:58:48.658 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46590 10 6452 1 2025-10-17 20:59:04.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 20:59:04.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 20:59:16.538 00:00:10.362 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:59:48.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-10-17 21:00:16.939 00:00:10.332 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-10-17 20:56:43.782 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 20:56:43.779 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:00:49.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-10-17 21:01:17.313 00:00:10.364 TCP 23.104.0.1:36180 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:01:49.306 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-10-17 21:02:17.714 00:00:10.655 TCP 23.104.0.1:45494 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:02:49.482 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-10-17 21:03:18.407 00:00:10.375 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:03:49.696 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42068 10 6452 1 2025-10-17 21:04:05.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:04:05.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:04:18.823 00:00:10.390 TCP 23.104.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:04:49.872 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34382 10 6452 1 2025-10-17 21:05:19.244 00:00:10.325 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:05:50.069 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-10-17 21:06:19.606 00:00:10.425 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:02:43.785 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:02:43.781 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:06:50.283 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42790 10 6452 1 2025-10-17 21:07:20.100 00:00:10.366 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:07:50.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-10-17 21:08:20.503 00:00:10.362 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:08:50.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40288 10 6452 1 2025-10-17 21:09:04.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:09:05.212 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:09:20.906 00:00:10.362 TCP 23.104.0.1:48464 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:09:50.941 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56088 10 6452 1 2025-10-17 21:10:21.311 00:00:10.363 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:10:51.171 00:00:10.959 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-10-17 21:11:21.708 00:00:10.361 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:11:52.174 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 10 6452 1 2025-10-17 21:12:22.110 00:00:10.336 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:08:43.785 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:08:43.787 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:12:52.351 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-10-17 21:13:22.485 00:00:10.769 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:14:05.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:13:52.573 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-10-17 21:14:05.122 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:14:23.287 00:00:10.358 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:14:52.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 10 6452 1 2025-10-17 21:15:23.684 00:00:10.370 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:15:53.001 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-10-17 21:16:24.103 00:00:10.359 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:16:53.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6452 1 2025-10-17 21:17:24.504 00:00:10.368 TCP 23.104.0.1:39610 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:17:53.408 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-10-17 21:18:24.910 00:00:10.365 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:14:43.790 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:14:43.788 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:19:05.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:18:53.627 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6452 1 2025-10-17 21:19:05.324 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:19:25.321 00:00:10.359 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:19:53.845 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-10-17 21:20:25.718 00:00:10.390 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:20:54.078 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53346 10 6452 1 2025-10-17 21:21:26.149 00:00:10.364 TCP 23.104.0.1:35420 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:21:54.301 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-10-17 21:22:26.552 00:00:10.364 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:22:54.471 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-10-17 21:23:26.955 00:00:10.370 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:24:05.682 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:23:54.654 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-10-17 21:24:05.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:24:27.359 00:00:10.363 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:20:43.790 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:20:43.792 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:24:54.867 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34200 10 6452 1 2025-10-17 21:25:27.762 00:00:10.375 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:25:55.089 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41610 10 6452 1 2025-10-17 21:26:28.172 00:00:10.363 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:26:55.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-10-17 21:27:28.581 00:00:10.325 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:27:55.542 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35640 10 6452 1 2025-10-17 21:28:28.946 00:00:10.370 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:28:55.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6452 1 2025-10-17 21:29:05.835 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:29:05.755 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:29:29.362 00:00:10.360 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:29:55.977 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-10-17 21:26:43.790 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:30:29.758 00:00:10.368 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:26:43.792 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:30:56.218 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-10-17 21:31:30.165 00:00:10.374 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:31:56.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-10-17 21:32:30.574 00:00:10.366 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:32:56.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-10-17 21:33:30.976 00:00:10.329 TCP 23.104.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:34:05.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:33:56.823 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-10-17 21:34:05.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:34:31.340 00:00:10.363 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:34:57.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 10 6452 1 2025-10-17 21:35:31.738 00:00:10.365 TCP 23.104.0.1:37082 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:35:57.222 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-10-17 21:32:43.795 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:36:32.138 00:00:10.322 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:32:43.797 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:36:57.439 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-10-17 21:37:32.495 00:00:10.842 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:37:57.617 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33448 10 6452 1 2025-10-17 21:38:33.377 00:00:10.370 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:39:05.808 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:39:05.665 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:38:57.825 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 11 6504 1 2025-10-17 21:39:33.785 00:00:10.368 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:39:58.100 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-10-17 21:40:34.189 00:00:10.370 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:40:58.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-10-17 21:41:34.593 00:00:10.321 TCP 23.104.0.1:46870 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:41:58.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-10-17 21:38:43.797 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:38:43.799 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:42:34.948 00:00:10.331 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:42:58.748 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-10-17 21:43:35.317 00:00:10.370 TCP 23.104.0.1:49148 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:44:05.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:44:05.808 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:43:58.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-10-17 21:44:35.720 00:00:10.376 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:44:59.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-10-17 21:45:36.136 00:00:10.364 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:45:59.347 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-10-17 21:46:36.543 00:00:10.320 TCP 23.104.0.1:34492 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:46:59.557 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50056 10 6452 1 2025-10-17 21:47:36.901 00:00:10.458 TCP 23.104.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:47:59.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-10-17 21:44:43.797 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:48:37.399 00:00:10.324 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:44:43.799 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:49:05.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:49:05.981 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:48:59.979 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-10-17 21:49:37.757 00:00:10.377 TCP 23.104.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:50:00.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-10-17 21:50:38.169 00:00:10.394 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:51:00.429 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 2025-10-17 21:51:38.599 00:00:10.328 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:52:00.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-10-17 21:52:38.964 00:00:10.373 TCP 23.104.0.1:53194 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:53:00.860 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-10-17 21:53:39.380 00:00:10.707 TCP 23.104.0.1:57768 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:54:05.867 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:54:06.265 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:54:01.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-10-17 21:50:43.797 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 21:50:43.800 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:54:40.125 00:00:10.367 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:55:01.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48698 10 6452 1 2025-10-17 21:55:40.532 00:00:10.367 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:56:01.466 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49744 10 6452 1 2025-10-17 21:56:40.941 00:00:10.532 TCP 23.104.0.1:57472 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:57:01.640 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49770 10 6452 1 2025-10-17 21:57:41.516 00:00:10.365 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:58:01.853 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-10-17 20:56:43 - 2025-10-17 21:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0057s User: 0.0038s Wall: 0.0020s flows/second: 79589.2 Runtime: 0.0021s