Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 07:58:55.066 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-10-05 07:59:09.779 00:00:10.327 TCP 23.104.0.1:38232 -> 1.101.0.1:3000 11 1507 1 2025-10-05 07:59:55.278 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-10-05 08:00:10.144 00:00:10.319 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-10-05 07:56:37.883 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:00:55.493 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-10-05 08:01:10.502 00:00:10.363 TCP 23.104.0.1:51262 -> 1.101.0.1:3000 11 1507 1 2025-10-05 07:57:37.886 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:01:55.704 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:38758 10 6452 1 2025-10-05 08:02:10.940 00:00:10.432 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:02:55.896 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6452 1 2025-10-05 08:03:02.945 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:03:02.717 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:03:11.411 00:00:10.690 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:03:56.106 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36554 10 6452 1 2025-10-05 08:04:12.151 00:00:10.370 TCP 23.104.0.1:39708 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:04:56.322 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-10-05 08:05:12.558 00:00:10.616 TCP 23.104.0.1:38144 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:05:56.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54710 10 6452 1 2025-10-05 08:06:13.211 00:00:10.370 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:02:37.884 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:06:56.756 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50866 10 6452 1 2025-10-05 08:07:13.622 00:00:10.361 TCP 23.104.0.1:37820 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:03:37.888 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:08:03.017 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:08:02.926 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:07:56.983 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-10-05 08:08:14.021 00:00:17.378 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:08:57.210 00:00:10.422 TCP 1.101.0.1:3000 -> 22.102.0.1:59316 10 6452 1 2025-10-05 08:09:21.439 00:00:10.329 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:09:57.671 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-10-05 08:10:21.808 00:00:10.369 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:10:57.882 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38826 10 6452 1 2025-10-05 08:11:22.213 00:00:10.365 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:11:58.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-10-05 08:12:22.608 00:00:10.319 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:08:37.887 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:13:02.914 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:13:03.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:12:58.318 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-10-05 08:13:22.970 00:00:10.370 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:09:37.888 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:13:58.578 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-10-05 08:14:23.375 00:00:10.361 TCP 23.104.0.1:57466 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:14:58.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-10-05 08:15:23.780 00:00:10.364 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:15:58.960 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-10-05 08:16:24.183 00:00:10.358 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:16:59.144 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-10-05 08:17:24.581 00:00:10.363 TCP 23.104.0.1:44534 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:18:02.962 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:18:02.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:17:59.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-10-05 08:18:24.981 00:00:10.331 TCP 23.104.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:14:37.886 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:18:59.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-10-05 08:19:25.349 00:00:10.318 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:15:37.890 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:19:59.787 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59064 10 6452 1 2025-10-05 08:20:25.702 00:00:10.364 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:20:59.993 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-10-05 08:21:26.108 00:00:10.366 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:22:00.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-05 08:22:26.516 00:00:10.336 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:23:03.130 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:23:03.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:23:00.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-10-05 08:23:26.895 00:00:10.368 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:24:00.595 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-10-05 08:20:37.888 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:24:27.303 00:00:10.365 TCP 23.104.0.1:53994 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:25:00.823 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-10-05 08:25:27.706 00:00:10.369 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:21:37.890 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:26:01.096 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43874 10 6452 1 2025-10-05 08:26:28.125 00:00:10.368 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:27:01.316 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-10-05 08:27:28.530 00:00:10.369 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:28:03.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:28:02.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:28:01.538 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-10-05 08:28:28.935 00:00:10.382 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:29:01.759 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 10 6452 1 2025-10-05 08:29:29.355 00:00:10.366 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:30:01.982 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6452 1 2025-10-05 08:30:29.761 00:00:10.374 TCP 23.104.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:26:37.888 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:31:02.171 00:00:10.795 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-10-05 08:27:37.891 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:31:30.170 00:00:10.363 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:32:03.007 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-10-05 08:32:30.568 00:00:10.365 TCP 23.104.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:33:03.355 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:33:03.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:33:03.224 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-10-05 08:33:30.970 00:00:10.959 TCP 23.104.0.1:55500 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:34:03.437 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-10-05 08:34:31.970 00:00:10.368 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:35:03.647 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-10-05 08:35:32.375 00:00:10.368 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:36:03.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55374 10 6452 1 2025-10-05 08:32:37.892 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:36:32.779 00:00:10.371 TCP 23.104.0.1:43448 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:37:04.089 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 6452 1 2025-10-05 08:33:37.895 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:37:33.188 00:00:10.722 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:38:03.695 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:38:03.630 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:38:04.456 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6452 1 2025-10-05 08:38:33.949 00:00:10.370 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:39:04.684 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-10-05 08:39:34.360 00:00:10.369 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:40:04.902 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-10-05 08:40:34.764 00:00:10.331 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:41:05.094 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-10-05 08:41:35.131 00:00:10.366 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:42:05.318 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-10-05 08:38:37.893 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:42:35.534 00:00:10.326 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:43:03.717 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:43:03.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:43:05.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-10-05 08:39:37.895 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:43:35.897 00:00:10.369 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:44:05.763 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37034 10 6452 1 2025-10-05 08:44:36.307 00:00:10.335 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:45:05.987 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-10-05 08:45:36.686 00:00:10.372 TCP 23.104.0.1:44886 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:46:06.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38156 10 6452 1 2025-10-05 08:46:37.107 00:00:10.365 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:47:06.440 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55332 10 6452 1 2025-10-05 08:47:37.516 00:00:10.319 TCP 23.104.0.1:58724 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:48:03.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:48:03.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:48:06.614 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:37074 11 6504 1 2025-10-05 08:44:37.893 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:48:37.876 00:00:10.439 TCP 23.104.0.1:41046 -> 1.101.0.1:3000 15 1926 1 2025-10-05 08:49:06.897 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 12 10369 1 2025-10-05 08:45:37.896 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:49:38.355 00:00:10.364 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:50:07.145 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-10-05 08:50:38.759 00:00:10.374 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:51:07.361 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-10-05 08:51:39.175 00:00:10.364 TCP 23.104.0.1:47340 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:52:07.559 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51188 10 6452 1 2025-10-05 08:52:39.577 00:00:10.326 TCP 23.104.0.1:39946 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:53:03.938 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:53:03.796 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:53:07.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44188 10 6452 1 2025-10-05 08:53:39.937 00:00:10.578 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:54:07.982 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 10 6452 1 2025-10-05 08:50:37.894 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 08:54:40.560 00:00:10.363 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:55:08.166 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41260 10 6452 1 2025-10-05 08:51:37.896 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 08:55:40.958 00:00:10.372 TCP 23.104.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:56:08.386 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6452 1 2025-10-05 08:56:41.368 00:00:10.368 TCP 23.104.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:57:08.592 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-10-05 08:57:41.773 00:00:10.370 TCP 23.104.0.1:49438 -> 1.101.0.1:3000 11 1507 1 2025-10-05 08:58:04.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 08:58:03.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 08:58:08.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 Summary: total flows: 163, total bytes: 501229, total packets: 1568, avg bps: 1083, avg pps: 0, avg bpp: 319 Time window: 2025-10-05 07:56:37 - 2025-10-05 08:58:18 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0033s Wall: 0.0027s flows/second: 61326.8 Runtime: 0.0027s