Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 04:58:52.304 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-10-08 04:59:26.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 04:59:25.904 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 04:59:19.668 00:00:10.367 TCP 23.104.0.1:58148 -> 1.101.0.1:3000 11 1507 1 2025-10-08 04:59:52.477 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-10-08 05:00:20.099 00:00:10.363 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-10-08 04:56:39.289 00:05:02.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:00:52.697 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-10-08 05:01:20.497 00:00:10.370 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-10-08 04:57:39.292 00:05:02.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:01:52.909 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6452 1 2025-10-08 05:02:20.906 00:00:10.372 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:02:53.126 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6452 1 2025-10-08 05:03:21.316 00:00:10.365 TCP 23.104.0.1:51402 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:03:53.348 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-10-08 05:04:25.682 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:04:25.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:04:21.716 00:00:10.326 TCP 23.104.0.1:45038 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:04:53.523 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-10-08 05:05:22.102 00:00:10.419 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:05:53.695 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-10-08 05:06:22.560 00:00:10.323 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:02:39.291 00:05:02.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:06:53.904 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-10-08 05:07:22.920 00:00:10.383 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:03:39.293 00:05:02.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:07:54.089 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-10-08 05:08:23.347 00:00:10.371 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:08:54.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55872 10 6452 1 2025-10-08 05:09:26.124 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:09:25.985 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:09:23.754 00:00:10.377 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:09:54.514 00:00:10.617 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-10-08 05:10:24.174 00:00:10.364 TCP 23.104.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:10:55.169 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-10-08 05:11:24.584 00:00:10.330 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:11:55.388 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-10-08 05:12:24.952 00:00:10.372 TCP 23.104.0.1:39748 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:08:39.294 00:05:02.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:12:55.608 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-10-08 05:13:25.360 00:00:10.367 TCP 23.104.0.1:40942 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:09:39.298 00:05:02.037 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:13:55.819 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33966 10 6452 1 2025-10-08 05:14:26.079 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:14:26.065 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:14:25.764 00:00:10.569 TCP 23.104.0.1:58046 -> 1.101.0.1:3000 17 2241 1 2025-10-08 05:14:56.076 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:47860 14 14292 1 2025-10-08 05:15:26.398 00:00:10.363 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:15:56.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-10-08 05:16:26.804 00:00:10.366 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:16:56.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-10-08 05:17:27.207 00:00:10.363 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:17:56.768 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-10-08 05:18:27.608 00:00:10.365 TCP 23.104.0.1:47436 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:14:39.296 00:05:02.041 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:18:56.990 00:00:10.441 TCP 1.101.0.1:3000 -> 22.102.0.1:60152 10 6452 1 2025-10-08 05:19:26.098 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:19:25.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:19:28.014 00:00:10.325 TCP 23.104.0.1:52766 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:15:39.297 00:05:02.037 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:19:57.467 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-10-08 05:20:28.380 00:00:10.362 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:20:57.676 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33104 10 6452 1 2025-10-08 05:21:28.780 00:00:10.326 TCP 23.104.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:21:57.850 00:00:10.639 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6452 1 2025-10-08 05:22:29.147 00:00:10.362 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:22:58.531 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53354 10 6452 1 2025-10-08 05:23:29.543 00:00:10.372 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:23:58.743 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-10-08 05:24:25.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:24:25.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:24:29.958 00:00:10.333 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:20:39.296 00:05:02.043 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:24:59.004 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-10-08 05:25:30.326 00:00:10.325 TCP 23.104.0.1:59584 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:21:39.299 00:05:02.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:25:59.232 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:38498 10 6452 1 2025-10-08 05:26:30.689 00:00:10.423 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:26:59.429 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-10-08 05:27:31.166 00:00:10.372 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:27:59.604 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-10-08 05:28:31.590 00:00:10.374 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:28:59.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-10-08 05:29:26.445 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:29:26.446 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:29:31.996 00:00:10.442 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 15 1926 1 2025-10-08 05:30:00.071 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39512 12 10375 1 2025-10-08 05:26:39.296 00:05:02.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:30:32.475 00:00:10.378 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:31:00.313 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-10-08 05:27:39.300 00:05:02.038 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:31:32.891 00:00:10.376 TCP 23.104.0.1:52296 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:32:00.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6452 1 2025-10-08 05:32:33.306 00:00:10.363 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:33:00.737 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-10-08 05:33:33.708 00:00:10.386 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:34:00.915 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-10-08 05:34:26.552 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:34:26.519 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:34:34.133 00:00:10.370 TCP 23.104.0.1:55764 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:35:01.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-10-08 05:35:34.537 00:00:10.369 TCP 23.104.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:36:01.401 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-10-08 05:36:34.944 00:00:10.379 TCP 23.104.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:32:39.299 00:05:02.044 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:37:01.616 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-10-08 05:33:39.301 00:05:02.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:37:35.361 00:00:10.365 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:38:01.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44108 10 6452 1 2025-10-08 05:38:35.760 00:00:10.375 TCP 23.104.0.1:40598 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:39:02.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37136 10 6452 1 2025-10-08 05:39:26.178 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:39:26.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:39:36.171 00:00:10.324 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:40:02.253 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35038 10 6452 1 2025-10-08 05:40:36.538 00:00:10.363 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:41:02.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-10-08 05:41:36.940 00:00:10.333 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:42:02.690 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-10-08 05:38:39.300 00:05:02.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:42:37.312 00:00:10.364 TCP 23.104.0.1:36778 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:43:02.920 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58100 10 6452 1 2025-10-08 05:39:39.302 00:05:02.039 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:43:37.709 00:00:10.365 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:44:03.137 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-10-08 05:44:26.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:44:26.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:44:38.121 00:00:10.367 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:45:03.361 00:00:10.411 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-08 05:45:38.530 00:00:10.367 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:46:03.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6452 1 2025-10-08 05:46:38.941 00:00:10.381 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:47:04.026 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-10-08 05:47:39.361 00:00:10.361 TCP 23.104.0.1:46868 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:48:04.266 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6452 1 2025-10-08 05:44:39.301 00:05:02.045 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:48:39.764 00:00:10.382 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:49:04.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-10-08 05:49:26.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:49:26.455 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:45:39.304 00:05:02.040 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:49:40.182 00:00:10.321 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:50:04.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38106 10 6452 1 2025-10-08 05:50:40.543 00:00:10.323 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:51:04.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56544 10 6452 1 2025-10-08 05:51:40.907 00:00:10.367 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:52:05.116 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-10-08 05:52:41.311 00:00:10.364 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:53:05.334 00:00:10.472 TCP 1.101.0.1:3000 -> 22.102.0.1:42370 10 6452 1 2025-10-08 05:53:41.716 00:00:10.371 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:54:05.849 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-10-08 05:54:26.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 05:54:26.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 05:50:39.302 00:05:02.046 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 05:54:42.126 00:00:10.377 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:55:06.089 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-10-08 05:51:39.304 00:05:02.041 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 05:55:42.532 00:00:10.330 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:56:06.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39216 10 6452 1 2025-10-08 05:56:42.898 00:00:10.327 TCP 23.104.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:57:06.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52278 10 6452 1 2025-10-08 05:57:43.273 00:00:10.413 TCP 23.104.0.1:41936 -> 1.101.0.1:3000 11 1507 1 2025-10-08 05:58:06.760 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 Summary: total flows: 163, total bytes: 509757, total packets: 1577, avg bps: 1102, avg pps: 0, avg bpp: 323 Time window: 2025-10-08 04:56:39 - 2025-10-08 05:58:16 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0021s flows/second: 77654.7 Runtime: 0.0021s