Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-24 16:59:22.246 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-10-24 16:59:23.971 00:00:10.368 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-10-24 16:55:46.855 00:05:03.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:00:24.375 00:00:10.366 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:00:22.474 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-10-24 16:56:46.854 00:05:03.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:01:22.692 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42230 10 6452 1 2025-10-24 17:01:24.781 00:00:10.368 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:02:22.734 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:02:22.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:02:22.916 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-10-24 17:02:25.184 00:00:10.365 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:03:23.133 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-10-24 17:03:25.589 00:00:10.366 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:04:25.994 00:00:10.361 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:04:23.364 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56730 10 6452 1 2025-10-24 17:05:26.392 00:00:10.374 TCP 23.104.0.1:52728 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:05:23.577 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-10-24 17:01:46.857 00:05:03.044 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:06:23.798 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-10-24 17:06:26.797 00:00:10.363 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:02:46.854 00:05:03.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:07:23.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:07:23.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:07:24.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49776 10 6452 1 2025-10-24 17:07:27.199 00:00:10.367 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:08:24.252 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-10-24 17:08:27.604 00:00:10.328 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:09:24.474 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-10-24 17:09:27.969 00:00:10.366 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:10:24.695 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-10-24 17:10:28.372 00:00:10.367 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:11:24.917 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-10-24 17:11:28.772 00:00:10.364 TCP 23.104.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:07:46.858 00:05:03.044 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:12:22.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:12:22.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:12:25.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-10-24 17:12:29.178 00:00:10.372 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:08:46.856 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:13:25.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35718 10 6452 1 2025-10-24 17:13:29.584 00:00:10.371 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:14:25.545 00:00:10.652 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-10-24 17:14:29.990 00:00:10.330 TCP 23.104.0.1:45620 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:15:30.355 00:00:10.368 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:15:26.235 00:00:10.775 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6452 1 2025-10-24 17:16:27.067 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-10-24 17:16:30.754 00:00:11.356 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:17:23.268 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:17:23.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:17:27.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33558 10 6452 1 2025-10-24 17:17:32.147 00:00:10.325 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:13:46.858 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:18:27.516 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-10-24 17:18:32.514 00:00:10.367 TCP 23.104.0.1:60034 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:14:46.857 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:19:27.745 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6452 1 2025-10-24 17:19:32.926 00:00:10.389 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:20:27.963 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-10-24 17:20:33.358 00:00:10.365 TCP 23.104.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:21:28.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-10-24 17:21:33.758 00:00:11.096 TCP 23.104.0.1:45000 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:22:22.996 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:22:23.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:22:28.401 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48044 10 6452 1 2025-10-24 17:22:34.890 00:00:10.329 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:23:28.622 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47624 10 6452 1 2025-10-24 17:23:35.265 00:00:10.372 TCP 23.104.0.1:54626 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:19:46.859 00:05:03.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:24:28.796 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38122 10 6452 1 2025-10-24 17:24:35.680 00:00:10.361 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:20:46.856 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:25:29.029 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38694 10 6452 1 2025-10-24 17:25:36.106 00:00:10.364 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:26:29.252 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-10-24 17:26:36.508 00:00:10.366 TCP 23.104.0.1:53830 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:27:23.580 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:27:23.102 00:00:00.066 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:27:29.473 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52062 10 6452 1 2025-10-24 17:27:36.912 00:00:10.364 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:28:29.694 00:00:10.468 TCP 1.101.0.1:3000 -> 22.102.0.1:37064 10 6452 1 2025-10-24 17:28:37.316 00:00:10.363 TCP 23.104.0.1:48896 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:29:30.203 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-10-24 17:25:46.860 00:05:03.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:29:37.718 00:00:10.374 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:30:30.429 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36816 10 6452 1 2025-10-24 17:26:46.861 00:05:03.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:30:38.131 00:00:10.366 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:31:30.643 00:00:10.519 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-10-24 17:31:38.532 00:00:10.366 TCP 23.104.0.1:53052 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:32:23.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:32:23.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:32:31.199 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6452 1 2025-10-24 17:32:38.938 00:00:10.386 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:33:31.427 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-10-24 17:33:39.354 00:00:10.321 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:34:31.660 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6452 1 2025-10-24 17:34:39.716 00:00:10.327 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:35:31.835 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57772 10 6452 1 2025-10-24 17:35:40.111 00:00:10.366 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:31:46.864 00:05:03.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:36:32.061 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-10-24 17:36:40.521 00:00:10.363 TCP 23.104.0.1:41676 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:32:46.867 00:05:03.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:37:23.468 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:37:23.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:37:32.276 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59276 10 6452 1 2025-10-24 17:37:40.921 00:00:10.380 TCP 23.104.0.1:34306 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:38:32.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-10-24 17:38:41.339 00:00:10.365 TCP 23.104.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:39:32.697 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-10-24 17:39:41.743 00:00:10.366 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:40:32.910 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43216 10 6452 1 2025-10-24 17:40:42.148 00:00:10.369 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:41:33.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6452 1 2025-10-24 17:37:46.870 00:05:03.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:41:42.556 00:00:10.366 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:42:23.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:42:23.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:42:33.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48944 10 6452 1 2025-10-24 17:38:46.868 00:05:03.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:42:42.964 00:00:10.373 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:43:33.556 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6452 1 2025-10-24 17:43:43.380 00:00:10.366 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:44:33.765 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-10-24 17:44:43.777 00:00:10.368 TCP 23.104.0.1:58766 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:45:34.027 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49904 10 6452 1 2025-10-24 17:45:44.183 00:00:10.369 TCP 23.104.0.1:57876 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:46:34.246 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38108 10 6452 1 2025-10-24 17:46:44.601 00:00:10.369 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:47:23.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:47:23.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:47:34.470 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-10-24 17:43:46.873 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:47:45.011 00:00:10.322 TCP 23.104.0.1:47610 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:48:34.687 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-10-24 17:44:46.870 00:05:03.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:48:45.375 00:00:10.365 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:49:34.902 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-10-24 17:49:45.779 00:00:10.365 TCP 23.104.0.1:36556 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:50:35.124 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-10-24 17:50:46.185 00:00:10.367 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:51:35.352 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-10-24 17:51:46.591 00:00:10.324 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:52:23.753 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:52:23.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:52:35.572 00:00:10.912 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-10-24 17:52:46.956 00:00:10.419 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:53:36.519 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-10-24 17:49:46.873 00:05:03.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 17:53:47.422 00:00:10.368 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:54:36.704 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-10-24 17:50:46.871 00:05:03.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 17:54:47.833 00:00:10.385 TCP 23.104.0.1:47584 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:55:36.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60032 10 6452 1 2025-10-24 17:55:48.268 00:00:10.368 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:56:37.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-10-24 17:56:48.671 00:00:10.369 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:57:23.853 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 17:57:23.798 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 17:57:37.339 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-10-24 17:57:49.101 00:00:10.365 TCP 23.104.0.1:57256 -> 1.101.0.1:3000 11 1507 1 2025-10-24 17:58:37.552 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1051, avg pps: 0, avg bpp: 318 Time window: 2025-10-24 16:55:46 - 2025-10-24 17:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0056s User: 0.0022s Wall: 0.0035s flows/second: 46385.2 Runtime: 0.0035s