Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 22:59:16.602 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39700 10 6452 1 2025-10-25 22:59:38.072 00:00:10.366 TCP 23.104.0.1:52646 -> 1.101.0.1:3000 11 1507 1 2025-10-25 22:55:47.433 00:05:03.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:00:16.807 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41836 10 6452 1 2025-10-25 22:56:47.431 00:05:03.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:00:38.473 00:00:10.365 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:01:17.036 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-10-25 23:01:38.871 00:00:10.322 TCP 23.104.0.1:33198 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:02:17.242 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-10-25 23:02:39.230 00:00:10.362 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:02:58.936 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:02:58.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:03:17.417 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-10-25 23:03:39.627 00:00:10.416 TCP 23.104.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:04:17.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 10 6452 1 2025-10-25 23:04:40.106 00:00:10.328 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:05:17.851 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-10-25 23:05:40.470 00:00:10.367 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:01:47.440 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:06:18.032 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56728 10 6452 1 2025-10-25 23:02:47.437 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:06:40.876 00:00:10.384 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:07:18.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-10-25 23:07:41.297 00:00:10.362 TCP 23.104.0.1:35258 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:07:58.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:07:58.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:08:18.450 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-10-25 23:08:41.696 00:00:10.403 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:09:18.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-10-25 23:09:42.147 00:00:10.365 TCP 23.104.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:10:18.837 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-10-25 23:10:42.550 00:00:10.319 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:11:19.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33334 10 6452 1 2025-10-25 23:07:47.442 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:11:42.902 00:00:10.369 TCP 23.104.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:12:19.293 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2025-10-25 23:08:47.440 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:12:43.304 00:00:10.368 TCP 23.104.0.1:38210 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:12:58.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:12:58.849 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:13:19.469 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33944 10 6452 1 2025-10-25 23:13:43.712 00:00:10.381 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:14:19.686 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-10-25 23:14:44.133 00:00:10.363 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:15:19.916 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-10-25 23:15:44.537 00:00:10.364 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:16:20.129 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46624 10 6452 1 2025-10-25 23:16:44.938 00:00:10.381 TCP 23.104.0.1:41262 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:17:20.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-10-25 23:13:47.443 00:05:03.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:17:45.354 00:00:10.366 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:17:59.064 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:17:59.393 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:18:20.518 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-10-25 23:14:47.442 00:05:03.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:18:45.755 00:00:10.384 TCP 23.104.0.1:55106 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:19:20.687 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-10-25 23:19:46.175 00:00:10.322 TCP 23.104.0.1:42408 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:20:20.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41176 10 6452 1 2025-10-25 23:20:46.533 00:00:10.362 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:21:21.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-10-25 23:21:46.935 00:00:10.378 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:22:21.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47034 10 6452 1 2025-10-25 23:22:47.358 00:00:10.364 TCP 23.104.0.1:42406 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:22:59.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:22:59.288 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:23:21.547 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-10-25 23:19:47.445 00:05:03.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:23:47.759 00:00:11.087 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:24:21.719 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38068 10 6452 1 2025-10-25 23:20:47.442 00:05:03.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:24:48.882 00:00:10.346 TCP 23.104.0.1:52018 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:25:21.889 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-10-25 23:25:49.263 00:00:10.365 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:26:22.081 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-10-25 23:26:49.668 00:00:10.328 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:27:22.470 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37626 10 6452 1 2025-10-25 23:27:50.036 00:00:10.366 TCP 23.104.0.1:47976 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:27:59.114 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:27:59.401 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:28:22.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-10-25 23:28:50.442 00:00:10.361 TCP 23.104.0.1:43760 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:29:22.899 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2025-10-25 23:25:47.445 00:05:03.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:29:50.840 00:00:10.343 TCP 23.104.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:30:23.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-10-25 23:26:47.442 00:05:03.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:30:51.224 00:00:10.439 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 15 1926 1 2025-10-25 23:31:23.320 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 12 10369 1 2025-10-25 23:31:51.702 00:00:10.581 TCP 23.104.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:32:23.560 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-10-25 23:32:59.487 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:32:59.302 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:32:52.318 00:00:10.365 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:33:23.729 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-10-25 23:33:52.722 00:00:10.374 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:34:23.937 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-10-25 23:34:53.135 00:00:10.364 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:35:24.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59754 10 6452 1 2025-10-25 23:31:47.447 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:35:53.547 00:00:10.363 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:36:24.350 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-10-25 23:32:47.444 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:36:53.949 00:00:10.328 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:37:24.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46438 10 6452 1 2025-10-25 23:37:59.403 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:37:59.595 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:37:54.322 00:00:10.376 TCP 23.104.0.1:53740 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:38:24.740 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-10-25 23:38:54.740 00:00:10.371 TCP 23.104.0.1:39328 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:39:24.998 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-10-25 23:39:55.153 00:00:10.393 TCP 23.104.0.1:59364 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:40:25.188 00:00:10.759 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-10-25 23:40:55.593 00:00:10.328 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:41:25.991 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 10 6452 1 2025-10-25 23:37:47.447 00:05:03.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:41:55.960 00:00:10.318 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:42:26.217 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-10-25 23:38:47.446 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:42:59.858 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:42:59.915 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:42:56.318 00:00:10.327 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:43:26.426 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49006 10 6452 1 2025-10-25 23:43:56.687 00:00:10.363 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:44:26.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-10-25 23:44:57.113 00:00:10.362 TCP 23.104.0.1:57054 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:45:26.849 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47082 10 6452 1 2025-10-25 23:45:57.514 00:00:10.363 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:46:27.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-10-25 23:46:57.917 00:00:10.378 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:47:27.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-10-25 23:43:47.449 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:47:59.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:47:59.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:47:58.328 00:00:10.369 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:48:27.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-10-25 23:44:47.446 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:48:58.734 00:00:10.377 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:49:27.721 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-10-25 23:49:59.149 00:00:10.365 TCP 23.104.0.1:42800 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:50:27.895 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 6452 1 2025-10-25 23:50:59.553 00:00:10.366 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:51:28.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53390 10 6452 1 2025-10-25 23:51:59.956 00:00:10.366 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:52:28.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-10-25 23:52:59.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:52:59.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:53:00.359 00:00:10.428 TCP 23.104.0.1:36880 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:53:28.534 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52552 10 6452 1 2025-10-25 23:49:47.451 00:05:03.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 23:54:00.822 00:00:10.369 TCP 23.104.0.1:40966 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:54:28.745 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:57046 11 6504 1 2025-10-25 23:50:47.448 00:05:03.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 23:55:01.230 00:00:10.369 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:55:29.020 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-10-25 23:56:01.641 00:00:10.372 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:56:29.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41668 10 6452 1 2025-10-25 23:57:02.045 00:00:10.369 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:57:29.450 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-10-25 23:57:59.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 23:57:59.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 23:58:02.455 00:00:10.366 TCP 23.104.0.1:57002 -> 1.101.0.1:3000 11 1507 1 2025-10-25 23:58:29.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 Summary: total flows: 163, total bytes: 501229, total packets: 1568, avg bps: 1062, avg pps: 0, avg bpp: 319 Time window: 2025-10-25 22:55:47 - 2025-10-25 23:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 76955.4 Runtime: 0.0021s