Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 17:58:53.408 00:00:10.487 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-10-25 17:58:53.398 00:00:10.591 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 17:55:47.334 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 17:59:53.937 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6452 1 2025-10-25 17:59:54.028 00:00:10.366 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-10-25 17:56:47.333 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:00:54.436 00:00:10.363 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:00:54.188 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-10-25 18:01:54.403 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44840 10 6452 1 2025-10-25 18:01:54.835 00:00:10.382 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:02:52.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:02:52.855 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:02:54.577 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-10-25 18:02:55.254 00:00:10.368 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:03:54.785 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-10-25 18:03:55.664 00:00:10.361 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:04:54.995 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6452 1 2025-10-25 18:04:56.091 00:00:10.362 TCP 23.104.0.1:41190 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:01:47.335 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:05:55.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35450 10 6452 1 2025-10-25 18:05:56.492 00:00:10.366 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:02:47.333 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:06:55.423 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-10-25 18:06:56.898 00:00:10.331 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:07:52.590 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:07:52.828 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:07:55.595 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33092 10 6452 1 2025-10-25 18:07:57.271 00:00:10.364 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:08:55.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46026 10 6452 1 2025-10-25 18:08:57.670 00:00:10.375 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:09:55.985 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 6452 1 2025-10-25 18:09:58.105 00:00:10.364 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:10:56.220 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42014 10 6452 1 2025-10-25 18:10:58.507 00:00:10.369 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:07:47.337 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:11:56.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-10-25 18:11:58.916 00:00:10.331 TCP 23.104.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:08:47.334 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:12:53.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:12:53.109 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:12:56.641 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-10-25 18:12:59.289 00:00:10.362 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:13:59.690 00:00:10.327 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:13:57.023 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-10-25 18:14:57.284 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-10-25 18:15:00.067 00:00:10.382 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:15:57.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-10-25 18:16:00.518 00:00:11.711 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:16:57.725 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36252 10 6452 1 2025-10-25 18:17:02.275 00:00:10.369 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:13:47.339 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:17:52.934 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:17:53.012 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:17:57.937 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36312 10 6452 1 2025-10-25 18:18:02.684 00:00:10.328 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:14:47.335 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:18:58.123 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-10-25 18:19:03.069 00:00:10.366 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:19:58.339 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-10-25 18:20:03.472 00:00:10.364 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:20:58.548 00:00:10.707 TCP 1.101.0.1:3000 -> 22.102.0.1:46894 10 6452 1 2025-10-25 18:21:03.879 00:00:10.387 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:21:59.297 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-10-25 18:22:04.306 00:00:10.501 TCP 23.104.0.1:37968 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:22:52.896 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:22:53.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:22:59.467 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44316 10 6452 1 2025-10-25 18:23:04.849 00:00:10.374 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:19:47.339 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:23:59.681 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 11 6504 1 2025-10-25 18:24:05.263 00:00:10.361 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:20:47.337 00:05:03.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:24:59.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48390 10 6452 1 2025-10-25 18:25:05.664 00:00:10.364 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:26:00.177 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-10-25 18:26:06.097 00:00:10.368 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:27:00.355 00:00:10.645 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-10-25 18:27:06.502 00:00:10.366 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:27:53.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:27:53.341 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:28:01.060 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6452 1 2025-10-25 18:28:06.912 00:00:10.409 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:29:01.274 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38258 10 6452 1 2025-10-25 18:29:07.362 00:00:10.363 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:25:47.339 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:30:01.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53532 10 6452 1 2025-10-25 18:30:07.768 00:00:10.371 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:26:47.338 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:31:01.660 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:48330 12 10375 1 2025-10-25 18:31:08.178 00:00:10.433 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 15 1926 1 2025-10-25 18:32:01.858 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59892 10 6452 1 2025-10-25 18:32:08.652 00:00:10.370 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:32:53.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:32:53.403 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:33:02.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-10-25 18:33:09.074 00:00:10.321 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:34:02.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40538 10 6452 1 2025-10-25 18:34:09.441 00:00:10.396 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:35:02.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-10-25 18:35:09.892 00:00:10.375 TCP 23.104.0.1:57248 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:31:47.353 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:36:02.724 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47778 10 6452 1 2025-10-25 18:36:10.308 00:00:10.363 TCP 23.104.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:32:47.339 00:05:03.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:37:02.898 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39412 10 6452 1 2025-10-25 18:37:10.709 00:00:10.377 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:37:53.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:37:53.332 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:38:03.114 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-10-25 18:38:11.126 00:00:10.330 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:39:03.283 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-10-25 18:39:11.493 00:00:10.375 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:40:03.497 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-10-25 18:40:11.909 00:00:10.494 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:41:03.675 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32850 10 6452 1 2025-10-25 18:41:12.436 00:00:10.418 TCP 23.104.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:37:47.341 00:05:03.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:42:03.850 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-10-25 18:42:12.896 00:00:10.369 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:38:47.339 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:42:53.733 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:42:53.629 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:43:04.081 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-10-25 18:43:13.301 00:00:10.369 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:44:04.255 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-10-25 18:44:13.707 00:00:10.364 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:45:04.463 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-10-25 18:45:14.110 00:00:10.367 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:46:04.688 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-10-25 18:46:14.514 00:00:10.369 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:47:04.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-10-25 18:47:14.924 00:00:10.387 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:43:47.343 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:47:53.809 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:47:53.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:48:05.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51402 10 6452 1 2025-10-25 18:48:15.346 00:00:10.363 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:44:47.341 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:49:05.335 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54634 10 6452 1 2025-10-25 18:49:15.745 00:00:10.368 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:50:05.545 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:39456 10 6452 1 2025-10-25 18:50:16.150 00:00:10.363 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:51:05.823 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57242 10 6452 1 2025-10-25 18:51:16.552 00:00:10.378 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:52:06.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-10-25 18:52:16.969 00:00:10.368 TCP 23.104.0.1:51268 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:52:53.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:52:53.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:53:06.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-10-25 18:53:17.377 00:00:24.712 TCP 23.104.0.1:38338 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:49:47.348 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 18:54:06.485 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52154 10 6452 1 2025-10-25 18:54:32.130 00:00:10.368 TCP 23.104.0.1:55240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:50:47.347 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 18:55:06.698 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-10-25 18:55:32.544 00:00:10.367 TCP 23.104.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:56:06.909 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-10-25 18:56:32.947 00:00:10.326 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:57:07.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-10-25 18:57:33.315 00:00:10.364 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-10-25 18:57:53.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 18:57:54.034 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 18:58:07.326 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-10-25 18:58:33.719 00:00:16.962 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-10-25 17:55:47 - 2025-10-25 18:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0012s Wall: 0.0024s flows/second: 69727.9 Runtime: 0.0024s