Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 15:59:21.596 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-10-20 15:59:24.393 00:00:10.364 TCP 23.104.0.1:35690 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:00:25.686 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:00:25.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:00:21.819 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59792 10 6452 1 2025-10-20 16:00:24.797 00:00:10.372 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-10-20 15:55:47.774 00:05:57.353 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 15:56:45.124 00:05:02.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:01:25.203 00:00:10.367 TCP 23.104.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:01:22.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 12 6556 1 2025-10-20 16:02:25.603 00:00:17.136 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:02:22.291 00:00:20.350 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6452 1 2025-10-20 16:03:32.852 00:00:10.381 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:03:32.700 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-10-20 16:04:32.920 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-10-20 16:04:33.276 00:00:10.369 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:05:25.690 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:05:25.753 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:05:33.169 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-10-20 16:05:33.680 00:00:10.367 TCP 23.104.0.1:46296 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:06:34.107 00:00:10.363 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:01:47.775 00:05:57.353 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:06:33.391 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-10-20 16:02:45.124 00:05:02.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:07:34.512 00:00:10.372 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:07:33.558 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56818 10 6452 1 2025-10-20 16:08:33.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 10 6452 1 2025-10-20 16:08:34.922 00:00:10.328 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:09:33.950 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-10-20 16:09:35.286 00:00:10.363 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:10:25.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:10:25.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:10:35.691 00:00:10.369 TCP 23.104.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:10:34.171 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6452 1 2025-10-20 16:11:34.384 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-10-20 16:11:36.108 00:00:14.194 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:07:47.776 00:05:57.352 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:12:34.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44188 10 6452 1 2025-10-20 16:12:40.337 00:00:10.365 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:08:45.124 00:05:02.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:13:34.772 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-10-20 16:13:40.736 00:00:10.368 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:14:35.073 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-10-20 16:14:41.143 00:00:11.076 TCP 23.104.0.1:46854 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:15:25.901 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:15:25.962 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:15:35.281 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60792 10 6452 1 2025-10-20 16:15:42.257 00:00:10.360 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:16:35.515 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:45490 10 6452 1 2025-10-20 16:16:42.659 00:00:10.361 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:17:35.705 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-10-20 16:17:43.078 00:00:10.361 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:13:47.791 00:05:57.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:18:35.929 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-10-20 16:14:45.127 00:05:02.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:18:43.479 00:00:10.368 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:19:36.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-10-20 16:19:43.882 00:00:10.381 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:20:25.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:20:26.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:20:36.344 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-10-20 16:20:44.300 00:00:10.364 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:21:36.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50074 10 6452 1 2025-10-20 16:21:44.706 00:00:10.365 TCP 23.104.0.1:36578 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:22:36.787 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6452 1 2025-10-20 16:22:45.112 00:00:10.367 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:23:36.969 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 12 6556 1 2025-10-20 16:23:45.525 00:00:10.379 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:19:47.792 00:05:57.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:24:37.195 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-10-20 16:20:45.127 00:05:02.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:24:45.945 00:00:10.376 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:25:26.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:25:26.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:25:37.400 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 10 6452 1 2025-10-20 16:25:46.364 00:00:10.358 TCP 23.104.0.1:60650 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:26:37.576 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35172 10 6452 1 2025-10-20 16:26:46.764 00:00:10.377 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:27:37.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 10 6452 1 2025-10-20 16:27:47.180 00:00:10.361 TCP 23.104.0.1:47206 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:28:37.962 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 12 6556 1 2025-10-20 16:28:47.584 00:00:10.367 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:29:38.188 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-10-20 16:29:47.995 00:00:10.367 TCP 23.104.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:30:26.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:30:25.970 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:25:47.795 00:05:57.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:30:38.443 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-10-20 16:26:45.130 00:05:02.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:30:48.400 00:00:10.363 TCP 23.104.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:31:38.618 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-10-20 16:31:48.800 00:00:10.338 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:32:38.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-10-20 16:32:49.171 00:00:10.364 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:33:39.078 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41890 10 6452 1 2025-10-20 16:33:49.573 00:00:10.362 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:34:39.291 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-10-20 16:34:49.976 00:00:10.337 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:35:26.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:35:26.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:35:39.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-10-20 16:35:50.353 00:00:10.368 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:31:47.797 00:05:57.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:32:45.133 00:05:02.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:36:39.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-10-20 16:36:50.761 00:00:10.331 TCP 23.104.0.1:39232 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:37:39.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6452 1 2025-10-20 16:37:51.141 00:00:10.363 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:38:40.108 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-10-20 16:38:51.541 00:00:10.368 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:39:40.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-10-20 16:39:51.948 00:00:10.371 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:40:26.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:40:26.445 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:40:40.661 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-10-20 16:40:52.360 00:00:10.365 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:41:40.881 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-10-20 16:41:52.762 00:00:14.598 TCP 23.104.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:37:47.798 00:05:57.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:38:45.133 00:05:02.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:42:41.378 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-10-20 16:42:57.430 00:00:10.363 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:43:41.595 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-10-20 16:43:57.830 00:00:10.359 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:44:41.819 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57722 10 6452 1 2025-10-20 16:44:58.226 00:00:10.364 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:45:26.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:45:26.596 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:45:42.036 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-10-20 16:45:58.629 00:00:10.366 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:46:42.261 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-10-20 16:46:59.032 00:00:10.368 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:47:42.487 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-10-20 16:47:59.437 00:00:10.367 TCP 23.104.0.1:57530 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:43:47.799 00:05:57.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:44:45.135 00:05:02.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:48:42.700 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-10-20 16:48:59.843 00:00:10.390 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:49:42.920 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-10-20 16:50:00.272 00:00:10.374 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:50:26.409 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:50:26.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:50:43.135 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-10-20 16:51:00.694 00:00:10.323 TCP 23.104.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:51:43.352 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-10-20 16:52:01.061 00:00:10.365 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:52:43.576 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-10-20 16:53:01.463 00:00:10.673 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:53:43.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40038 10 6452 1 2025-10-20 16:54:02.176 00:00:10.324 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:49:47.802 00:05:57.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 16:50:45.137 00:05:02.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 16:54:44.054 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-10-20 16:55:02.541 00:00:10.368 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:55:26.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 16:55:26.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 16:55:44.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6452 1 2025-10-20 16:56:02.944 00:00:10.370 TCP 23.104.0.1:43696 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:56:44.439 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 10 6452 1 2025-10-20 16:57:03.352 00:00:10.363 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-10-20 16:57:44.654 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-10-20 16:58:03.755 00:00:10.446 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 491120, total packets: 1561, avg bps: 1048, avg pps: 0, avg bpp: 314 Time window: 2025-10-20 15:55:47 - 2025-10-20 16:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0026s flows/second: 63007.9 Runtime: 0.0026s