Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 04:58:47.213 00:00:10.332 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 10 6452 1 2025-10-01 04:58:57.669 00:00:10.362 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-01 04:59:47.585 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-10-01 04:59:58.100 00:00:10.360 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-10-01 04:56:35.995 00:05:01.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:00:48.310 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-10-01 05:01:03.184 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:01:03.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:00:58.499 00:00:24.262 TCP 23.104.0.1:60842 -> 1.101.0.1:3000 11 1507 1 2025-10-01 04:57:35.997 00:05:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-10-01 05:01:48.574 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 10 6452 1 2025-10-01 05:02:12.824 00:00:10.362 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:02:48.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-10-01 05:03:13.224 00:00:10.364 TCP 23.104.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:03:49.009 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53110 10 6452 1 2025-10-01 05:04:13.628 00:00:10.367 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:04:49.244 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-10-01 05:05:14.032 00:00:10.365 TCP 23.104.0.1:54698 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:06:03.711 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:05:49.420 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60804 10 6452 1 2025-10-01 05:06:03.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:06:14.438 00:00:10.321 TCP 23.104.0.1:49448 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:02:35.997 00:05:01.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:06:49.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-10-01 05:07:14.794 00:00:10.378 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:02:37.705 00:05:58.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:07:49.816 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-10-01 05:08:15.212 00:00:10.322 TCP 23.104.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:08:50.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-10-01 05:09:15.574 00:00:10.881 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:09:50.248 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-10-01 05:10:16.486 00:00:10.371 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:10:50.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-10-01 05:11:03.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:11:03.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:11:16.904 00:00:10.326 TCP 23.104.0.1:56804 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:11:50.688 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-10-01 05:12:17.269 00:00:10.362 TCP 23.104.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:08:35.998 00:05:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-10-01 05:12:50.903 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33010 10 6452 1 2025-10-01 05:13:17.672 00:00:10.359 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:08:37.707 00:05:58.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:13:51.127 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-10-01 05:14:18.104 00:00:10.361 TCP 23.104.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:14:51.351 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57638 10 6452 1 2025-10-01 05:15:18.507 00:00:10.365 TCP 23.104.0.1:39620 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:15:51.572 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:59578 10 6452 1 2025-10-01 05:16:03.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:16:03.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:16:18.911 00:00:10.363 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:16:51.759 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6452 1 2025-10-01 05:17:19.310 00:00:10.364 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:17:51.930 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-10-01 05:18:19.715 00:00:10.931 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:13:37.734 00:05:58.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:18:52.171 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-10-01 05:19:20.682 00:00:10.373 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:14:37.730 00:05:58.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:19:52.364 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-10-01 05:20:21.104 00:00:10.373 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:21:03.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:21:03.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:20:52.577 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-10-01 05:21:21.514 00:00:10.374 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:21:52.795 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-10-01 05:22:21.938 00:00:10.379 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:22:53.025 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-10-01 05:23:22.355 00:00:10.362 TCP 23.104.0.1:41828 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:23:53.233 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33168 10 6452 1 2025-10-01 05:24:22.760 00:00:10.334 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:19:37.733 00:05:58.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:24:53.449 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6452 1 2025-10-01 05:25:23.140 00:00:10.368 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:20:37.731 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-10-01 05:25:53.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-10-01 05:26:03.935 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:26:04.091 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:26:23.545 00:00:10.378 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:26:53.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-10-01 05:27:23.982 00:00:10.369 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:27:54.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-10-01 05:28:24.390 00:00:10.322 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:28:54.333 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-10-01 05:29:24.751 00:00:10.373 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:29:54.503 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:40782 10 6452 1 2025-10-01 05:25:37.734 00:05:58.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:30:25.165 00:00:10.365 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:30:54.970 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:54974 10 6452 1 2025-10-01 05:31:04.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:31:04.233 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:31:25.564 00:00:10.367 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:27:36.034 00:05:01.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:31:55.225 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-10-01 05:32:25.970 00:00:10.362 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:32:55.398 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 10 6452 1 2025-10-01 05:33:26.371 00:00:10.321 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:33:55.568 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34682 10 6452 1 2025-10-01 05:34:26.733 00:00:10.374 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:34:55.809 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-10-01 05:35:27.144 00:00:10.363 TCP 23.104.0.1:56284 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:35:55.989 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-10-01 05:36:04.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:36:04.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:31:37.736 00:05:58.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:36:27.546 00:00:10.363 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:36:56.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-10-01 05:33:36.039 00:05:01.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:37:27.947 00:00:10.369 TCP 23.104.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:37:56.425 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 12 10375 1 2025-10-01 05:38:28.353 00:00:10.406 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 15 1926 1 2025-10-01 05:38:56.662 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-10-01 05:39:28.800 00:00:10.338 TCP 23.104.0.1:51518 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:39:56.886 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-10-01 05:40:29.177 00:00:10.365 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:41:04.120 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:41:04.301 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:40:57.112 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6452 1 2025-10-01 05:41:29.576 00:00:10.358 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:41:57.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-10-01 05:37:37.738 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-10-01 05:42:29.978 00:00:10.371 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:42:57.549 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45666 10 6452 1 2025-10-01 05:39:36.040 00:05:01.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:43:30.389 00:00:10.366 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:43:57.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44586 10 6452 1 2025-10-01 05:44:30.793 00:00:10.334 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:44:57.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-10-01 05:45:31.166 00:00:10.364 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:46:04.420 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:46:04.455 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:45:58.184 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-10-01 05:46:31.569 00:00:10.364 TCP 23.104.0.1:42380 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:46:58.442 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-10-01 05:47:31.970 00:00:10.376 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:47:58.665 00:00:10.621 TCP 1.101.0.1:3000 -> 22.102.0.1:41166 10 6452 1 2025-10-01 05:44:36.038 00:05:01.704 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:48:32.391 00:00:10.373 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:48:59.329 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-10-01 05:45:36.041 00:05:01.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:49:32.804 00:00:10.369 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:49:59.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-10-01 05:50:33.212 00:00:10.359 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:51:05.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:51:04.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:50:59.759 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57196 10 6452 1 2025-10-01 05:51:33.616 00:00:10.371 TCP 23.104.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:51:59.984 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-10-01 05:52:34.025 00:00:10.368 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:53:00.172 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52622 10 6452 1 2025-10-01 05:53:34.430 00:00:10.361 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:54:00.381 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-10-01 05:50:36.040 00:05:01.704 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 05:54:34.832 00:00:10.337 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:55:00.589 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-10-01 05:51:36.041 00:05:01.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 05:55:35.214 00:00:10.372 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:56:04.517 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 05:56:04.702 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 05:56:00.811 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:37210 10 6452 1 2025-10-01 05:56:35.624 00:00:10.366 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:57:01.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-10-01 05:57:36.032 00:00:10.366 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-10-01 05:58:01.305 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51990 10 6452 1 2025-10-01 05:58:36.434 00:00:10.362 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-10-01 04:56:35 - 2025-10-01 05:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0019s Wall: 0.0024s flows/second: 69763.3 Runtime: 0.0024s