Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 11:59:26.283 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50854 10 6661 1 2025-10-26 11:59:39.666 00:00:10.325 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-10-26 11:55:47.663 00:05:03.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:00:26.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52004 10 6661 1 2025-10-26 12:00:40.043 00:00:10.370 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-10-26 11:56:47.661 00:05:03.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:01:26.672 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6661 1 2025-10-26 12:01:40.453 00:00:10.358 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:02:26.895 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6661 1 2025-10-26 12:02:40.845 00:00:11.509 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:03:14.488 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:03:14.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:03:27.110 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6661 1 2025-10-26 12:03:42.385 00:00:10.365 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:04:27.357 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51128 10 6661 1 2025-10-26 12:04:42.789 00:00:10.365 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:05:27.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6661 1 2025-10-26 12:01:47.664 00:05:03.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:05:43.193 00:00:10.324 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:06:27.786 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6661 1 2025-10-26 12:02:47.661 00:05:03.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:06:43.560 00:00:10.361 TCP 23.104.0.1:42780 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:07:27.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6661 1 2025-10-26 12:07:43.968 00:00:10.367 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:08:14.724 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:08:14.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:08:28.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6661 1 2025-10-26 12:08:44.377 00:00:10.364 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:09:28.433 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40960 10 6661 1 2025-10-26 12:09:44.782 00:00:10.360 TCP 23.104.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:10:28.602 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6661 1 2025-10-26 12:10:45.184 00:00:10.362 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:11:28.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6661 1 2025-10-26 12:07:47.666 00:05:03.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:11:45.584 00:00:10.367 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:12:29.000 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6661 1 2025-10-26 12:08:47.664 00:05:03.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:12:45.987 00:00:10.326 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:13:14.561 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:13:14.657 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:13:29.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 10 6661 1 2025-10-26 12:13:46.350 00:00:10.369 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:14:29.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6661 1 2025-10-26 12:14:46.754 00:00:10.373 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:15:29.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6661 1 2025-10-26 12:15:47.165 00:00:10.368 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:16:29.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6661 1 2025-10-26 12:16:47.569 00:00:10.325 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:17:30.077 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6661 1 2025-10-26 12:13:47.668 00:05:03.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:17:47.932 00:00:10.373 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:18:14.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:18:14.681 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:18:30.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6661 1 2025-10-26 12:14:47.666 00:05:03.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:18:48.341 00:00:10.367 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:19:30.547 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6661 1 2025-10-26 12:19:48.740 00:00:10.373 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:20:30.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48882 10 6661 1 2025-10-26 12:20:49.150 00:00:10.361 TCP 23.104.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:21:30.967 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 12 6765 1 2025-10-26 12:21:49.551 00:00:10.360 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:22:31.201 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6661 1 2025-10-26 12:22:49.949 00:00:16.047 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:23:14.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:23:14.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:23:31.415 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41372 10 6661 1 2025-10-26 12:19:47.669 00:05:03.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:23:56.045 00:00:10.366 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:24:31.627 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6661 1 2025-10-26 12:20:47.665 00:05:03.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:24:56.447 00:00:10.361 TCP 23.104.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:25:31.850 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33732 10 6661 1 2025-10-26 12:25:56.847 00:00:10.380 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:26:32.080 00:00:12.555 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6661 1 2025-10-26 12:26:57.267 00:00:10.364 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:27:34.691 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6661 1 2025-10-26 12:27:57.664 00:00:10.327 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:28:14.983 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:28:14.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:28:34.919 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:46436 10 6661 1 2025-10-26 12:28:58.025 00:00:10.346 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:29:35.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6661 1 2025-10-26 12:25:47.669 00:05:03.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:29:58.408 00:00:10.371 TCP 23.104.0.1:53998 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:30:35.396 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6661 1 2025-10-26 12:26:47.667 00:05:03.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:30:58.813 00:00:10.363 TCP 23.104.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:31:35.625 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34904 10 6661 1 2025-10-26 12:31:59.213 00:00:10.324 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:32:35.848 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6661 1 2025-10-26 12:32:59.579 00:00:10.375 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:33:15.264 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:33:15.295 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:33:36.083 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 11 6984 1 2025-10-26 12:34:00.008 00:00:10.370 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:34:36.305 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6661 1 2025-10-26 12:35:00.412 00:00:10.375 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:35:36.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6661 1 2025-10-26 12:31:47.670 00:05:03.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:36:00.823 00:00:10.362 TCP 23.104.0.1:41680 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:36:36.748 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6661 1 2025-10-26 12:32:47.667 00:05:03.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:37:01.226 00:00:10.370 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:37:36.963 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 12 6765 1 2025-10-26 12:38:14.975 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:38:01.637 00:00:10.366 TCP 23.104.0.1:57014 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:38:15.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:38:37.181 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49022 10 6661 1 2025-10-26 12:39:02.049 00:00:10.365 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:39:37.399 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6661 1 2025-10-26 12:40:02.456 00:00:10.699 TCP 23.104.0.1:49148 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:40:37.628 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6661 1 2025-10-26 12:41:03.191 00:00:10.322 TCP 23.104.0.1:50888 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:37:47.674 00:05:03.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:41:37.851 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44134 10 6661 1 2025-10-26 12:42:03.556 00:00:10.360 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:38:47.672 00:05:03.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:42:38.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6661 1 2025-10-26 12:43:15.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:43:15.363 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:43:03.954 00:00:10.367 TCP 23.104.0.1:42562 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:43:38.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36038 10 6661 1 2025-10-26 12:44:04.359 00:00:10.366 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:44:38.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6661 1 2025-10-26 12:45:04.761 00:00:10.377 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:45:38.730 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6661 1 2025-10-26 12:46:05.172 00:00:10.366 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:46:38.958 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36112 10 6661 1 2025-10-26 12:47:05.577 00:00:10.414 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:47:39.147 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6661 1 2025-10-26 12:43:47.679 00:05:03.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:48:15.369 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:48:15.406 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:48:06.033 00:00:10.330 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:44:47.675 00:05:03.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:48:39.325 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 12 6765 1 2025-10-26 12:49:06.400 00:00:10.371 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:49:39.534 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6661 1 2025-10-26 12:50:06.806 00:00:10.335 TCP 23.104.0.1:58030 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:50:39.758 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50358 10 6661 1 2025-10-26 12:51:07.188 00:00:10.373 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:51:39.965 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6661 1 2025-10-26 12:52:07.601 00:00:10.360 TCP 23.104.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:52:40.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53636 10 6661 1 2025-10-26 12:53:15.533 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:53:15.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:53:08.005 00:00:10.366 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:53:40.412 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6661 1 2025-10-26 12:49:47.681 00:05:03.201 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 12:54:08.411 00:00:10.366 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:54:40.598 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39734 10 6661 1 2025-10-26 12:50:47.679 00:05:03.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 12:55:08.814 00:00:10.369 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:55:40.769 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6661 1 2025-10-26 12:56:09.223 00:00:10.442 TCP 23.104.0.1:55248 -> 1.101.0.1:3000 15 1926 1 2025-10-26 12:56:40.988 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 12 10375 1 2025-10-26 12:57:09.701 00:00:10.365 TCP 23.104.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:57:41.231 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39892 10 6452 1 2025-10-26 12:58:15.579 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 12:58:15.648 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 12:58:10.109 00:00:10.367 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-10-26 12:58:41.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 Summary: total flows: 163, total bytes: 513731, total packets: 1574, avg bps: 1086, avg pps: 0, avg bpp: 326 Time window: 2025-10-26 11:55:47 - 2025-10-26 12:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0018s Wall: 0.0020s flows/second: 79933.5 Runtime: 0.0021s