Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 01:58:55.616 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-10-08 01:59:04.395 00:00:10.365 TCP 23.104.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:59:21.938 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 01:59:22.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 01:59:55.792 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59814 10 6452 1 2025-10-08 02:00:04.800 00:00:10.382 TCP 23.104.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:56:39.232 00:05:02.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:00:56.010 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 10 6452 1 2025-10-08 02:01:05.214 00:00:10.365 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-10-08 01:57:39.235 00:05:02.018 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:01:56.226 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6452 1 2025-10-08 02:02:05.623 00:00:10.368 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:02:56.395 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37618 10 6452 1 2025-10-08 02:03:06.031 00:00:10.381 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:03:56.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-10-08 02:04:06.450 00:00:10.366 TCP 23.104.0.1:46990 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:04:22.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:04:22.246 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:04:56.830 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-10-08 02:05:06.861 00:00:10.332 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:05:57.065 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-10-08 02:06:07.231 00:00:10.326 TCP 23.104.0.1:41426 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:02:39.232 00:05:02.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:06:57.263 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-10-08 02:07:07.594 00:00:10.360 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:03:39.235 00:05:02.023 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:07:57.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38306 10 6452 1 2025-10-08 02:08:07.991 00:00:10.374 TCP 23.104.0.1:36848 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:08:57.690 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-10-08 02:09:08.397 00:00:10.336 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:09:22.188 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:09:22.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:09:57.909 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-10-08 02:10:08.769 00:00:10.375 TCP 23.104.0.1:47398 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:10:58.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-10-08 02:11:09.187 00:00:10.366 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:11:58.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-10-08 02:12:09.592 00:00:10.362 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:08:39.235 00:05:02.026 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:12:58.521 00:00:10.337 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-10-08 02:13:09.994 00:00:10.367 TCP 23.104.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:09:39.236 00:05:02.024 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:13:58.898 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-10-08 02:14:10.401 00:00:10.337 TCP 23.104.0.1:51914 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:14:22.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:14:22.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:14:59.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-10-08 02:15:10.780 00:00:10.363 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:15:59.313 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-10-08 02:16:11.181 00:00:10.368 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:16:59.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-10-08 02:17:11.586 00:00:10.366 TCP 23.104.0.1:47588 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:17:59.745 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45962 10 6452 1 2025-10-08 02:18:12.000 00:00:10.322 TCP 23.104.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:14:39.234 00:05:02.030 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:18:59.955 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 10 6452 1 2025-10-08 02:19:22.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:19:22.558 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:19:12.359 00:00:10.372 TCP 23.104.0.1:47238 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:15:39.237 00:05:02.025 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:20:00.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6452 1 2025-10-08 02:20:12.769 00:00:10.327 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:21:00.395 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-10-08 02:21:13.142 00:00:10.369 TCP 23.104.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:22:00.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52988 10 6452 1 2025-10-08 02:22:13.549 00:00:10.364 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:23:00.832 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-10-08 02:23:13.959 00:00:10.325 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:24:01.051 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-10-08 02:24:22.695 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:24:14.318 00:00:10.377 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:24:22.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:20:39.234 00:05:02.034 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:25:01.261 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-10-08 02:25:14.727 00:00:10.368 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:21:39.237 00:05:02.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:26:01.442 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-10-08 02:26:15.136 00:00:10.328 TCP 23.104.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:27:01.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60664 10 6452 1 2025-10-08 02:27:15.502 00:00:10.362 TCP 23.104.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:28:01.867 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-10-08 02:28:15.906 00:00:10.367 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:29:02.093 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-10-08 02:29:22.805 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:29:16.309 00:00:10.370 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:29:22.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:30:02.267 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-10-08 02:30:16.718 00:00:10.374 TCP 23.104.0.1:55762 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:26:39.237 00:05:02.033 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:31:02.562 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39126 10 6452 1 2025-10-08 02:31:17.134 00:00:10.326 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:27:39.239 00:05:02.030 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:32:02.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2025-10-08 02:32:17.499 00:00:10.374 TCP 23.104.0.1:43890 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:33:02.984 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-10-08 02:33:17.904 00:00:10.324 TCP 23.104.0.1:59912 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:34:03.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-10-08 02:34:22.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:34:22.696 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:34:18.269 00:00:10.366 TCP 23.104.0.1:56782 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:35:03.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-10-08 02:35:18.675 00:00:10.367 TCP 23.104.0.1:33480 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:36:03.632 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-10-08 02:36:19.109 00:00:10.376 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:32:39.238 00:05:02.039 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:37:03.801 00:00:22.936 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-10-08 02:37:19.517 00:00:10.369 TCP 23.104.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:33:39.240 00:05:02.033 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:38:16.804 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-10-08 02:38:19.925 00:00:10.391 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:39:23.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:39:20.355 00:00:10.861 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 15 1926 1 2025-10-08 02:39:23.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:39:17.037 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56554 12 10375 1 2025-10-08 02:40:17.275 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50704 10 6452 1 2025-10-08 02:40:21.265 00:00:10.328 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:41:21.627 00:00:10.369 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:41:17.491 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35000 10 6452 1 2025-10-08 02:42:17.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-10-08 02:42:22.045 00:00:10.324 TCP 23.104.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:38:39.240 00:05:02.039 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:43:17.879 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-10-08 02:43:22.408 00:00:10.365 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:39:39.243 00:05:02.033 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:44:22.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:44:22.922 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:44:18.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-10-08 02:44:22.812 00:00:10.413 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:45:18.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36328 10 6452 1 2025-10-08 02:45:23.261 00:00:10.367 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:46:18.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6452 1 2025-10-08 02:46:23.666 00:00:10.366 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:47:18.752 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-10-08 02:47:24.093 00:00:10.367 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:48:19.421 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-10-08 02:48:24.499 00:00:10.366 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:44:39.241 00:05:02.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:49:23.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:49:22.962 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:49:19.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52882 10 6452 1 2025-10-08 02:49:24.907 00:00:10.369 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:45:39.243 00:05:02.041 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:50:19.816 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39624 10 6452 1 2025-10-08 02:50:25.315 00:00:10.362 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:51:20.042 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:35274 10 6452 1 2025-10-08 02:51:25.720 00:00:10.370 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:52:26.126 00:00:10.330 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:52:20.359 00:00:13.982 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-10-08 02:53:24.385 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56006 10 6452 1 2025-10-08 02:53:26.501 00:00:10.365 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:54:23.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 02:54:23.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 02:54:26.902 00:00:10.379 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:54:24.604 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42888 10 6452 1 2025-10-08 02:50:39.243 00:05:02.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 02:55:24.822 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-10-08 02:55:27.324 00:00:10.366 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:51:39.246 00:05:02.040 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 02:56:25.068 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-10-08 02:56:27.726 00:00:10.326 TCP 23.104.0.1:34062 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:57:25.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-10-08 02:57:28.100 00:00:10.364 TCP 23.104.0.1:47386 -> 1.101.0.1:3000 11 1507 1 2025-10-08 02:58:25.494 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51728 10 6452 1 2025-10-08 02:58:28.502 00:00:10.324 TCP 23.104.0.1:45122 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-08 01:56:39 - 2025-10-08 02:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0000s Wall: 0.0020s flows/second: 83671.8 Runtime: 0.0020s