Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 08:58:47.661 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-10-08 08:59:30.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 08:59:30.299 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 08:59:16.670 00:00:10.386 TCP 23.104.0.1:56960 -> 1.101.0.1:3000 11 1507 1 2025-10-08 08:59:47.877 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 10 6452 1 2025-10-08 09:00:17.102 00:00:10.369 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-08 08:56:39.349 00:05:02.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:00:48.110 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-10-08 09:01:17.508 00:00:10.341 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-10-08 08:57:39.353 00:05:02.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:01:48.707 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 2025-10-08 09:02:17.887 00:00:10.383 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:02:48.929 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-10-08 09:03:18.304 00:00:10.371 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:03:49.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-10-08 09:04:30.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:04:30.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:04:18.715 00:00:10.375 TCP 23.104.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:04:49.348 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-10-08 09:05:19.136 00:00:10.368 TCP 23.104.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:05:49.556 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-10-08 09:06:19.545 00:00:10.327 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:02:39.351 00:05:02.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:06:49.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49236 10 6452 1 2025-10-08 09:07:19.911 00:00:10.364 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:03:39.354 00:05:02.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:07:49.937 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-10-08 09:08:20.315 00:00:10.360 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:08:50.139 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-10-08 09:09:30.600 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:09:20.712 00:00:10.456 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 15 1926 1 2025-10-08 09:09:30.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:09:50.349 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 12 10369 1 2025-10-08 09:10:21.197 00:00:10.365 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:10:50.560 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35720 10 6452 1 2025-10-08 09:11:21.595 00:00:10.326 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:11:50.731 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-10-08 09:12:21.964 00:00:10.330 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:08:39.351 00:05:02.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:12:50.943 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-10-08 09:13:22.327 00:00:10.330 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:09:39.354 00:05:02.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:13:51.180 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-10-08 09:14:30.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:14:30.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:14:22.694 00:00:10.323 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:14:51.350 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6452 1 2025-10-08 09:15:23.061 00:00:10.361 TCP 23.104.0.1:53794 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:15:51.575 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54354 10 6452 1 2025-10-08 09:16:23.458 00:00:10.366 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:16:51.779 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-10-08 09:17:23.867 00:00:10.370 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:17:51.999 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6452 1 2025-10-08 09:18:24.279 00:00:10.367 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:14:39.356 00:05:02.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:18:52.693 00:00:10.590 TCP 1.101.0.1:3000 -> 22.102.0.1:57536 12 6556 1 2025-10-08 09:19:30.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:19:30.963 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:19:24.682 00:00:10.408 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 15 1926 1 2025-10-08 09:15:39.358 00:05:02.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:19:53.319 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 12 10369 1 2025-10-08 09:20:25.130 00:00:10.367 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:20:53.575 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-10-08 09:21:25.536 00:00:10.361 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:21:53.801 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-10-08 09:22:25.940 00:00:10.339 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:22:54.011 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-10-08 09:23:26.311 00:00:10.367 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:23:54.234 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-10-08 09:24:30.931 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:24:30.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:24:26.711 00:00:10.366 TCP 23.104.0.1:54488 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:20:39.358 00:05:02.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:24:54.454 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 12 6556 1 2025-10-08 09:25:27.112 00:00:10.370 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:21:39.359 00:05:02.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:25:54.672 00:00:10.849 TCP 1.101.0.1:3000 -> 22.102.0.1:36974 10 6452 1 2025-10-08 09:26:27.518 00:00:10.366 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:26:55.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47042 10 6452 1 2025-10-08 09:27:27.921 00:00:10.377 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:27:55.772 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-10-08 09:28:28.335 00:00:10.370 TCP 23.104.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:28:55.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-10-08 09:29:31.100 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:29:31.162 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:29:28.740 00:00:10.368 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:29:56.214 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-10-08 09:30:29.144 00:00:10.337 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:26:39.359 00:05:02.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:30:56.430 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-10-08 09:27:39.363 00:05:02.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:31:29.526 00:00:10.364 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:31:56.640 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-10-08 09:32:29.933 00:00:10.375 TCP 23.104.0.1:38554 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:32:56.864 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-10-08 09:33:30.346 00:00:10.367 TCP 23.104.0.1:54176 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:33:57.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-10-08 09:34:31.387 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:34:31.143 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:34:30.753 00:00:10.392 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:34:57.318 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-10-08 09:35:31.182 00:00:10.365 TCP 23.104.0.1:59868 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:35:57.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-10-08 09:32:39.360 00:05:02.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:36:31.589 00:00:10.318 TCP 23.104.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:36:57.845 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-10-08 09:33:39.363 00:05:02.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:37:31.948 00:00:10.379 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:37:58.038 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-10-08 09:38:32.358 00:00:10.373 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:38:58.260 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-10-08 09:39:31.193 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:39:31.235 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:39:32.771 00:00:10.370 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:39:58.477 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-10-08 09:40:33.180 00:00:10.364 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:40:58.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-10-08 09:41:33.589 00:00:10.373 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:41:58.894 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37756 12 6556 1 2025-10-08 09:42:34.000 00:00:10.372 TCP 23.104.0.1:34340 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:38:39.362 00:05:02.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:42:59.110 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6452 1 2025-10-08 09:39:39.363 00:05:02.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:43:34.411 00:00:10.373 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:43:59.320 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-10-08 09:44:31.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:44:31.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:44:34.819 00:00:10.364 TCP 23.104.0.1:58542 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:44:59.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-10-08 09:45:35.227 00:00:10.364 TCP 23.104.0.1:59414 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:45:59.748 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56878 10 6452 1 2025-10-08 09:46:35.626 00:00:10.326 TCP 23.104.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:46:59.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33758 10 6452 1 2025-10-08 09:47:35.994 00:00:10.322 TCP 23.104.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:48:00.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-10-08 09:44:39.364 00:05:02.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:48:36.355 00:00:10.357 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:49:00.401 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-10-08 09:49:31.531 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:49:31.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:45:39.366 00:05:02.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:49:36.751 00:00:10.393 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:50:00.569 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-10-08 09:50:37.184 00:00:10.362 TCP 23.104.0.1:37818 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:51:00.759 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-10-08 09:51:37.586 00:00:10.356 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:52:00.930 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6452 1 2025-10-08 09:52:37.983 00:00:10.364 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:53:01.161 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34130 10 6452 1 2025-10-08 09:53:38.388 00:00:10.324 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:54:01.335 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 10 6452 1 2025-10-08 09:54:31.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 09:54:31.864 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 09:50:39.364 00:05:02.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 09:54:38.752 00:00:10.321 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:55:01.552 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34776 10 6452 1 2025-10-08 09:51:39.368 00:05:02.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 09:55:39.118 00:00:10.371 TCP 23.104.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:56:01.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42408 10 6452 1 2025-10-08 09:56:39.526 00:00:10.324 TCP 23.104.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:57:01.981 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-10-08 09:57:39.888 00:00:10.329 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-10-08 09:58:02.225 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-10-08 09:58:40.259 00:00:10.362 TCP 23.104.0.1:59852 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507332, total packets: 1590, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-10-08 08:56:39 - 2025-10-08 09:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0011s Wall: 0.0016s flows/second: 103020.2 Runtime: 0.0016s