Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 02:58:45.949 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56826 12 6556 1 2025-10-24 02:58:57.799 00:00:10.360 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:55:46.618 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 02:59:46.193 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33334 10 6452 1 2025-10-24 02:59:58.204 00:00:10.362 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-10-24 02:56:46.614 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:00:46.401 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-10-24 03:00:58.602 00:00:10.367 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:01:46.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-10-24 03:02:05.518 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:02:05.557 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:01:59.008 00:00:10.363 TCP 23.104.0.1:33850 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:02:46.816 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-10-24 03:02:59.412 00:00:10.359 TCP 23.104.0.1:58524 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:03:47.011 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-10-24 03:03:59.807 00:00:10.329 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:04:47.226 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 12 10578 1 2025-10-24 03:05:00.179 00:00:10.439 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 15 1926 1 2025-10-24 03:01:46.618 00:05:02.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:05:47.470 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6661 1 2025-10-24 03:06:00.656 00:00:10.367 TCP 23.104.0.1:55496 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:02:46.615 00:05:02.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:06:47.683 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6661 1 2025-10-24 03:07:05.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:07:05.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:07:01.067 00:00:10.368 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:07:47.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6661 1 2025-10-24 03:08:01.473 00:00:10.362 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:08:48.089 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43990 10 6661 1 2025-10-24 03:09:01.872 00:00:10.363 TCP 23.104.0.1:39632 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:09:48.263 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43958 12 10787 1 2025-10-24 03:10:02.282 00:00:10.438 TCP 23.104.0.1:55542 -> 1.101.0.1:3000 15 1926 1 2025-10-24 03:10:48.500 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6870 1 2025-10-24 03:11:02.756 00:00:10.383 TCP 23.104.0.1:44894 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:07:46.619 00:05:02.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:11:48.712 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 10 6870 1 2025-10-24 03:12:05.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:12:05.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:12:03.177 00:00:10.363 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:08:46.616 00:05:02.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:12:48.883 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6870 1 2025-10-24 03:13:03.584 00:00:10.364 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:13:49.100 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6870 1 2025-10-24 03:14:03.984 00:00:10.373 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:14:49.327 00:00:13.459 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6870 1 2025-10-24 03:15:04.391 00:00:10.321 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:15:52.827 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34704 10 6870 1 2025-10-24 03:16:04.758 00:00:10.385 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:16:53.071 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6870 1 2025-10-24 03:17:05.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:17:05.861 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:17:05.183 00:00:10.363 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:13:46.621 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:17:53.279 00:00:10.784 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6870 1 2025-10-24 03:18:05.587 00:00:16.890 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:14:46.617 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:18:54.098 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6870 1 2025-10-24 03:19:12.528 00:00:10.365 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:19:54.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6870 1 2025-10-24 03:20:12.927 00:00:10.385 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:20:54.541 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6870 1 2025-10-24 03:21:13.356 00:00:10.366 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:22:06.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:21:54.718 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6870 1 2025-10-24 03:22:05.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:22:13.766 00:00:10.379 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:22:54.948 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6870 1 2025-10-24 03:23:14.191 00:00:10.359 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:19:46.624 00:05:02.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:23:55.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51310 10 6870 1 2025-10-24 03:24:14.593 00:00:10.360 TCP 23.104.0.1:42462 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:20:46.622 00:05:02.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:24:55.400 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 12 6974 1 2025-10-24 03:25:14.991 00:00:10.345 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:25:55.625 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6870 1 2025-10-24 03:26:15.409 00:00:10.373 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:27:06.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:26:55.845 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6870 1 2025-10-24 03:27:05.724 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:27:15.816 00:00:10.367 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:27:56.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6870 1 2025-10-24 03:28:16.222 00:00:10.366 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:28:56.260 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42764 10 6870 1 2025-10-24 03:29:16.621 00:00:10.364 TCP 23.104.0.1:54508 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:25:46.626 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:29:56.472 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6870 1 2025-10-24 03:30:17.027 00:00:10.360 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:26:46.623 00:05:02.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:30:56.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6870 1 2025-10-24 03:31:17.428 00:00:10.320 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:32:06.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:32:06.366 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:31:56.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6870 1 2025-10-24 03:32:17.790 00:00:10.372 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:32:57.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6870 1 2025-10-24 03:33:18.196 00:00:10.325 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:33:57.329 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6870 1 2025-10-24 03:34:18.559 00:00:10.329 TCP 23.104.0.1:59372 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:34:57.559 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 10 6870 1 2025-10-24 03:35:18.924 00:00:10.397 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:31:46.628 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:35:58.110 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55192 10 6870 1 2025-10-24 03:36:19.357 00:00:10.333 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:32:46.626 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:37:06.339 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:37:06.083 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:36:58.332 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6870 1 2025-10-24 03:37:19.726 00:00:10.383 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:37:58.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6870 1 2025-10-24 03:38:20.147 00:00:10.364 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:38:58.756 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6870 1 2025-10-24 03:39:20.554 00:00:10.369 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:39:58.975 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38646 10 6870 1 2025-10-24 03:40:20.962 00:00:10.374 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:40:59.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6870 1 2025-10-24 03:41:21.376 00:00:10.365 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:37:46.629 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:42:06.382 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:42:06.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:41:59.424 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6870 1 2025-10-24 03:42:21.788 00:00:10.361 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:38:46.627 00:05:02.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:42:59.643 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45508 10 6870 1 2025-10-24 03:43:22.201 00:00:10.322 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:43:59.864 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6870 1 2025-10-24 03:44:22.560 00:00:10.367 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:45:00.074 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35062 10 6870 1 2025-10-24 03:45:22.966 00:00:11.341 TCP 23.104.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:46:00.282 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6870 1 2025-10-24 03:46:24.348 00:00:10.329 TCP 23.104.0.1:35088 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:47:06.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:47:06.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:47:00.510 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6870 1 2025-10-24 03:47:24.716 00:00:10.366 TCP 23.104.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:43:46.631 00:05:02.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:48:00.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6870 1 2025-10-24 03:48:25.121 00:00:10.362 TCP 23.104.0.1:59146 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:44:46.628 00:05:02.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:49:00.980 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 10 6870 1 2025-10-24 03:49:25.522 00:00:10.364 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:50:01.215 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6870 1 2025-10-24 03:50:25.924 00:00:10.390 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:51:01.446 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58566 10 6870 1 2025-10-24 03:51:26.361 00:00:10.365 TCP 23.104.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:52:06.450 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:52:06.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:52:01.667 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 10 6870 1 2025-10-24 03:52:26.772 00:00:10.372 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:53:01.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6870 1 2025-10-24 03:53:27.184 00:00:10.370 TCP 23.104.0.1:60014 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:49:46.631 00:05:02.985 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 03:54:02.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6870 1 2025-10-24 03:54:27.591 00:00:10.365 TCP 23.104.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:50:46.629 00:05:02.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 03:55:02.322 00:00:10.402 TCP 1.101.0.1:3000 -> 22.102.0.1:51968 12 10375 1 2025-10-24 03:55:27.998 00:00:10.435 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 15 1926 1 2025-10-24 03:56:02.766 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56542 10 6452 1 2025-10-24 03:56:28.472 00:00:10.362 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:57:06.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 03:57:06.603 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 03:57:02.989 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-10-24 03:57:28.875 00:00:10.365 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-10-24 03:58:03.216 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-10-24 03:58:29.284 00:00:10.364 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 531425, total packets: 1594, avg bps: 1126, avg pps: 0, avg bpp: 333 Time window: 2025-10-24 02:55:46 - 2025-10-24 03:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 75889.9 Runtime: 0.0022s