Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 09:59:12.437 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-10-04 09:59:25.311 00:00:10.364 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:00:12.612 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-10-04 10:00:25.716 00:00:10.377 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:56:37.465 00:05:01.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:01:12.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-10-04 10:01:26.132 00:00:10.325 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:57:37.468 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:02:13.006 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60134 10 6452 1 2025-10-04 10:02:36.944 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:02:36.156 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:02:26.495 00:00:10.367 TCP 23.104.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:03:13.226 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-04 10:03:26.898 00:00:10.381 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:04:13.448 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 10 6452 1 2025-10-04 10:04:27.315 00:00:10.328 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:05:13.673 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-10-04 10:05:27.688 00:00:10.385 TCP 23.104.0.1:44722 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:06:13.892 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6452 1 2025-10-04 10:02:37.468 00:05:01.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:06:28.106 00:00:10.364 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:07:14.120 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6452 1 2025-10-04 10:07:36.556 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:07:36.303 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:07:28.514 00:00:10.361 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:03:37.470 00:05:01.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:08:14.339 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-10-04 10:08:28.912 00:00:10.377 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:09:14.577 00:00:22.416 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-10-04 10:09:29.326 00:00:10.372 TCP 23.104.0.1:51552 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:10:29.743 00:00:10.394 TCP 23.104.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:10:27.072 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-10-04 10:11:27.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-10-04 10:11:30.194 00:00:10.365 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:12:37.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:12:30.597 00:00:10.361 TCP 23.104.0.1:43282 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:12:37.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:08:37.468 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:12:27.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-10-04 10:13:30.999 00:00:10.366 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:09:37.472 00:05:01.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:13:27.730 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-10-04 10:14:31.400 00:00:10.366 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:14:27.958 00:00:10.760 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 10 6452 1 2025-10-04 10:15:28.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-10-04 10:15:31.806 00:00:10.364 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:16:28.969 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-10-04 10:16:32.212 00:00:10.366 TCP 23.104.0.1:53476 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:17:36.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:17:36.585 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:17:29.205 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-10-04 10:17:32.625 00:00:10.365 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:18:29.426 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60754 10 6452 1 2025-10-04 10:14:37.472 00:05:01.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:18:33.028 00:00:10.364 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:19:29.648 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-10-04 10:15:37.475 00:05:01.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:19:33.428 00:00:10.492 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:20:29.860 00:00:10.690 TCP 1.101.0.1:3000 -> 22.102.0.1:34868 10 6452 1 2025-10-04 10:20:33.956 00:00:10.325 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:21:30.589 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50736 10 6452 1 2025-10-04 10:21:34.322 00:00:10.370 TCP 23.104.0.1:57184 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:22:36.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:22:36.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:22:30.802 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-10-04 10:22:34.733 00:00:10.366 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:23:31.006 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-10-04 10:23:35.139 00:00:10.373 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:24:31.178 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-10-04 10:20:37.476 00:05:01.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:24:35.552 00:00:10.362 TCP 23.104.0.1:46044 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:25:31.391 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-10-04 10:21:37.478 00:05:01.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:25:35.952 00:00:10.328 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:26:31.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58450 10 6452 1 2025-10-04 10:26:36.318 00:00:10.370 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:27:36.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:27:36.807 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:27:31.835 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-10-04 10:27:36.728 00:00:10.326 TCP 23.104.0.1:46610 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:28:32.096 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-04 10:28:37.106 00:00:10.368 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:29:32.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45124 10 6452 1 2025-10-04 10:29:37.518 00:00:10.362 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:26:37.476 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:30:32.540 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-10-04 10:30:37.919 00:00:10.977 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:27:37.479 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:31:32.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-10-04 10:31:38.934 00:00:10.371 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:32:37.051 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:32:37.095 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:32:32.984 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:34328 10 6452 1 2025-10-04 10:32:39.346 00:00:10.376 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:33:33.231 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38012 10 6452 1 2025-10-04 10:33:39.768 00:00:10.381 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:34:33.441 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-10-04 10:34:40.200 00:00:10.327 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:35:33.676 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6452 1 2025-10-04 10:35:40.568 00:00:10.365 TCP 23.104.0.1:54024 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:32:37.476 00:05:01.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:36:33.901 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-10-04 10:36:40.971 00:00:10.338 TCP 23.104.0.1:33198 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:37:36.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:37:37.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:33:37.481 00:05:01.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:37:34.096 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-10-04 10:37:41.349 00:00:10.367 TCP 23.104.0.1:58804 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:38:34.268 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-10-04 10:38:41.792 00:00:10.351 TCP 23.104.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:39:34.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-10-04 10:39:42.183 00:00:10.371 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:40:34.704 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46718 10 6452 1 2025-10-04 10:40:42.595 00:00:10.362 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:41:34.874 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-10-04 10:41:43.016 00:00:10.362 TCP 23.104.0.1:45770 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:42:37.359 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:42:37.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:38:37.478 00:05:01.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:42:35.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35228 10 6452 1 2025-10-04 10:42:43.423 00:00:10.359 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:39:37.482 00:05:01.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:43:35.324 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 12 10375 1 2025-10-04 10:43:43.823 00:00:10.441 TCP 23.104.0.1:35036 -> 1.101.0.1:3000 15 1926 1 2025-10-04 10:44:35.574 00:00:10.352 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-10-04 10:44:44.306 00:00:11.136 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:45:35.962 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-10-04 10:45:45.484 00:00:10.323 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:46:36.179 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-10-04 10:46:45.845 00:00:10.386 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:47:37.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:47:37.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:47:36.765 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 12 6556 1 2025-10-04 10:47:46.274 00:00:10.362 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:44:37.480 00:05:01.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:48:37.273 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-10-04 10:48:46.676 00:00:10.368 TCP 23.104.0.1:48836 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:45:37.482 00:05:01.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:49:37.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-10-04 10:49:47.111 00:00:10.339 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:50:37.703 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-10-04 10:50:47.517 00:00:10.366 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:51:37.924 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-10-04 10:51:47.925 00:00:10.396 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:52:37.334 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:52:37.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:52:38.173 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-10-04 10:52:48.362 00:00:10.324 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:53:38.398 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-10-04 10:53:48.725 00:00:10.371 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:50:37.480 00:05:01.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 10:54:38.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45892 10 6452 1 2025-10-04 10:54:49.136 00:00:10.362 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:51:37.483 00:05:01.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 10:55:38.833 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34956 10 6452 1 2025-10-04 10:55:49.538 00:00:10.319 TCP 23.104.0.1:41848 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:56:39.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41332 10 6452 1 2025-10-04 10:56:49.896 00:00:10.370 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:57:37.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 10:57:37.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 10:57:39.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47528 10 6452 1 2025-10-04 10:57:50.311 00:00:10.365 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-10-04 10:58:39.506 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1074, avg pps: 0, avg bpp: 319 Time window: 2025-10-04 09:56:37 - 2025-10-04 10:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0009s Wall: 0.0027s flows/second: 60235.4 Runtime: 0.0027s