Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 13:58:55.093 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6870 1 2025-10-25 13:59:01.185 00:00:10.450 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-10-25 13:55:47.273 00:05:03.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 13:59:55.263 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40108 10 6870 1 2025-10-25 14:00:01.672 00:00:10.372 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-10-25 13:56:47.271 00:05:03.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:00:55.470 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6870 1 2025-10-25 14:01:02.107 00:00:10.929 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:01:55.678 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6870 1 2025-10-25 14:02:03.100 00:00:10.366 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:02:47.748 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:02:47.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:02:55.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41028 10 6870 1 2025-10-25 14:03:03.507 00:00:10.362 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:03:56.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36988 10 6870 1 2025-10-25 14:04:03.908 00:00:10.325 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:04:56.330 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6870 1 2025-10-25 14:05:04.278 00:00:10.367 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:01:47.278 00:05:03.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:05:56.499 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 10 6870 1 2025-10-25 14:06:04.679 00:00:10.367 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:02:47.274 00:05:03.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:06:56.714 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34182 10 6870 1 2025-10-25 14:07:05.108 00:00:10.323 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:07:48.020 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:07:48.154 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:07:56.931 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:38892 10 6870 1 2025-10-25 14:08:05.468 00:00:10.364 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:08:57.127 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6870 1 2025-10-25 14:09:05.872 00:00:10.364 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:09:57.371 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6870 1 2025-10-25 14:10:06.278 00:00:10.369 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:10:57.598 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6870 1 2025-10-25 14:11:06.692 00:00:10.376 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:07:47.278 00:05:03.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:11:57.827 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56134 10 6870 1 2025-10-25 14:12:07.104 00:00:10.364 TCP 23.104.0.1:50030 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:12:48.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:12:48.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:08:47.276 00:05:03.083 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:12:58.053 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6870 1 2025-10-25 14:13:07.507 00:00:10.702 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:13:58.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6870 1 2025-10-25 14:14:08.243 00:00:10.367 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:14:58.510 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6870 1 2025-10-25 14:15:08.652 00:00:10.374 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:15:58.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33558 10 6870 1 2025-10-25 14:16:09.077 00:00:10.364 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:16:58.931 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6870 1 2025-10-25 14:17:09.481 00:00:10.364 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:17:48.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:17:48.472 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:13:47.279 00:05:03.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:17:59.173 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 11 6922 1 2025-10-25 14:18:09.886 00:00:10.328 TCP 23.104.0.1:49322 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:14:47.277 00:05:03.083 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:18:59.449 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50442 10 6870 1 2025-10-25 14:19:10.255 00:00:10.377 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:19:59.685 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6870 1 2025-10-25 14:20:10.670 00:00:10.365 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:20:59.854 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6870 1 2025-10-25 14:21:11.108 00:00:10.326 TCP 23.104.0.1:43664 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:22:00.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6870 1 2025-10-25 14:22:11.470 00:00:10.324 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:22:48.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:22:48.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:23:00.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6870 1 2025-10-25 14:23:11.828 00:00:10.321 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:19:47.280 00:05:03.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:24:00.524 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37434 10 6870 1 2025-10-25 14:24:12.188 00:00:10.369 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:20:47.277 00:05:03.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:25:00.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39882 10 6870 1 2025-10-25 14:25:12.593 00:00:10.416 TCP 23.104.0.1:50968 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:26:00.961 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6870 1 2025-10-25 14:26:13.058 00:00:10.364 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:27:01.186 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43000 10 6870 1 2025-10-25 14:27:13.458 00:00:10.366 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:27:48.560 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:27:48.474 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:28:01.396 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6870 1 2025-10-25 14:28:13.861 00:00:10.330 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:29:01.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54172 10 6870 1 2025-10-25 14:29:14.231 00:00:10.328 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:25:47.280 00:05:03.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:30:01.810 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6870 1 2025-10-25 14:30:14.591 00:00:10.336 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:26:47.278 00:05:03.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:31:02.035 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36388 10 6870 1 2025-10-25 14:31:14.967 00:00:10.337 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:32:02.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43272 10 6870 1 2025-10-25 14:32:15.337 00:00:10.331 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:32:48.814 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:32:49.167 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:33:02.461 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56358 10 6870 1 2025-10-25 14:33:15.704 00:00:10.366 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:34:02.685 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6870 1 2025-10-25 14:34:16.114 00:00:10.363 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:35:02.908 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44410 10 6870 1 2025-10-25 14:35:16.517 00:00:11.004 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:31:47.281 00:05:03.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:36:03.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6870 1 2025-10-25 14:36:17.558 00:00:10.365 TCP 23.104.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:32:47.280 00:05:03.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:37:03.328 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6870 1 2025-10-25 14:37:17.962 00:00:10.363 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:37:48.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:37:48.731 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:38:03.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 10 6870 1 2025-10-25 14:38:18.366 00:00:10.366 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:39:03.719 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56084 10 6870 1 2025-10-25 14:39:18.772 00:00:10.324 TCP 23.104.0.1:56528 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:40:03.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59970 10 6870 1 2025-10-25 14:40:19.136 00:00:10.365 TCP 23.104.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:41:04.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 10 6870 1 2025-10-25 14:41:19.543 00:00:10.365 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:37:47.282 00:05:03.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:42:04.325 00:00:10.864 TCP 1.101.0.1:3000 -> 22.102.0.1:57966 10 6870 1 2025-10-25 14:42:19.949 00:00:10.326 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:42:48.839 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:42:48.811 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:38:47.280 00:05:03.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:43:05.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6870 1 2025-10-25 14:43:20.313 00:00:10.362 TCP 23.104.0.1:38554 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:44:05.445 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6870 1 2025-10-25 14:44:20.714 00:00:10.481 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:45:05.613 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6870 1 2025-10-25 14:45:21.231 00:00:10.365 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:46:05.835 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6870 1 2025-10-25 14:46:21.637 00:00:10.361 TCP 23.104.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:47:06.070 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6870 1 2025-10-25 14:47:22.036 00:00:10.367 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:47:49.139 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:47:48.830 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:43:47.282 00:05:03.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:48:06.290 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6870 1 2025-10-25 14:48:22.447 00:00:10.369 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:44:47.281 00:05:03.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:49:06.461 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6870 1 2025-10-25 14:49:22.852 00:00:10.337 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:50:06.676 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34148 10 6870 1 2025-10-25 14:50:23.224 00:00:10.368 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:51:06.902 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 14 14716 1 2025-10-25 14:51:23.629 00:00:10.527 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 17 2241 1 2025-10-25 14:52:07.134 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6870 1 2025-10-25 14:52:24.199 00:00:10.363 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:52:48.988 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:52:49.124 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:53:07.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35512 10 6870 1 2025-10-25 14:53:24.597 00:00:10.327 TCP 23.104.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:49:47.284 00:05:03.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 14:54:07.564 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39354 10 6870 1 2025-10-25 14:54:24.965 00:00:10.375 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:50:47.281 00:05:03.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 14:55:07.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 12 6974 1 2025-10-25 14:55:25.377 00:00:10.379 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:56:07.984 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6870 1 2025-10-25 14:56:25.788 00:00:10.366 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:57:08.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6870 1 2025-10-25 14:57:26.192 00:00:10.367 TCP 23.104.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 14:57:49.183 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 14:57:49.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 14:58:08.426 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6870 1 2025-10-25 14:58:26.596 00:00:10.368 TCP 23.104.0.1:41144 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 532164, total packets: 1585, avg bps: 1129, avg pps: 0, avg bpp: 335 Time window: 2025-10-25 13:55:47 - 2025-10-25 14:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0022s flows/second: 75781.2 Runtime: 0.0022s