Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 19:59:01.627 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-10-08 19:59:12.956 00:00:10.797 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-10-08 19:59:43.746 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 19:59:43.632 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:00:01.835 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-10-08 20:00:13.788 00:00:10.370 TCP 23.104.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-10-08 19:56:39.532 00:05:02.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:01:02.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50460 10 6452 1 2025-10-08 20:01:14.194 00:00:10.818 TCP 23.104.0.1:38886 -> 1.101.0.1:3000 11 1507 1 2025-10-08 19:57:39.535 00:05:02.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:02:02.292 00:00:10.719 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-10-08 20:02:15.059 00:00:10.373 TCP 23.104.0.1:40890 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:03:03.075 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45604 10 6452 1 2025-10-08 20:03:15.471 00:00:10.323 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:04:03.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-10-08 20:04:15.835 00:00:10.400 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:04:43.732 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:04:43.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:05:03.508 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-10-08 20:05:16.268 00:00:10.788 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:06:03.684 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-10-08 20:06:17.106 00:00:10.367 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:02:39.536 00:05:02.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:07:03.856 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6452 1 2025-10-08 20:07:17.517 00:00:10.368 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:03:39.538 00:05:02.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:08:04.098 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-10-08 20:08:17.925 00:00:10.339 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:09:04.334 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-10-08 20:09:18.299 00:00:10.374 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:09:43.969 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:09:44.159 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:10:04.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59370 10 6452 1 2025-10-08 20:10:18.712 00:00:10.374 TCP 23.104.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:11:04.776 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-10-08 20:11:19.128 00:00:10.369 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:12:04.994 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35472 10 6452 1 2025-10-08 20:12:19.534 00:00:10.368 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:08:39.535 00:05:02.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:13:05.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-10-08 20:13:19.936 00:00:10.394 TCP 23.104.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:09:39.538 00:05:02.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:14:05.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34124 10 6452 1 2025-10-08 20:14:20.368 00:00:10.363 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:14:43.940 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:14:44.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:15:05.644 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55338 10 6452 1 2025-10-08 20:15:20.771 00:00:10.374 TCP 23.104.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:16:05.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60784 10 6452 1 2025-10-08 20:16:21.182 00:00:10.367 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:17:06.070 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-10-08 20:17:21.591 00:00:10.378 TCP 23.104.0.1:53824 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:18:06.279 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-10-08 20:18:22.006 00:00:10.364 TCP 23.104.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:14:39.536 00:05:02.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:19:06.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-10-08 20:19:22.409 00:00:10.364 TCP 23.104.0.1:48654 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:19:44.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:15:39.540 00:05:02.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:19:44.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:20:06.707 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-10-08 20:20:22.812 00:00:10.328 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:21:06.926 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-10-08 20:21:23.181 00:00:10.372 TCP 23.104.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:22:07.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-10-08 20:22:23.592 00:00:10.366 TCP 23.104.0.1:59554 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:23:07.384 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45314 11 6492 1 2025-10-08 20:23:24.010 00:00:10.362 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:24:07.595 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33690 10 6452 1 2025-10-08 20:24:24.416 00:00:10.372 TCP 23.104.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:20:39.539 00:05:02.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:24:44.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:24:44.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:25:07.808 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53778 10 6452 1 2025-10-08 20:25:24.827 00:00:10.352 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:21:39.542 00:05:02.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:26:07.979 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33168 10 6452 1 2025-10-08 20:26:25.222 00:00:10.359 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:27:08.206 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48328 10 6452 1 2025-10-08 20:27:25.620 00:00:10.366 TCP 23.104.0.1:51176 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:28:08.435 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44340 10 6452 1 2025-10-08 20:28:26.030 00:00:10.361 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:29:08.668 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-10-08 20:29:26.433 00:00:10.326 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:29:44.433 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:29:44.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:30:08.844 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37144 10 6452 1 2025-10-08 20:30:26.796 00:00:10.369 TCP 23.104.0.1:38706 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:26:39.539 00:05:02.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:31:09.073 00:00:10.909 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-10-08 20:31:27.203 00:00:10.370 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:27:39.541 00:05:02.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:32:10.073 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-10-08 20:32:27.611 00:00:10.855 TCP 23.104.0.1:44132 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:33:10.241 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49120 10 6452 1 2025-10-08 20:33:28.504 00:00:10.364 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:34:10.452 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-10-08 20:34:28.906 00:00:10.364 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:34:44.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:34:44.471 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:35:10.671 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-10-08 20:35:29.307 00:00:10.325 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:36:10.895 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-10-08 20:32:39.540 00:05:02.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:36:29.668 00:00:10.371 TCP 23.104.0.1:60836 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:37:11.118 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-10-08 20:37:30.101 00:00:10.367 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:33:39.544 00:05:02.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:38:11.331 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37470 11 6775 1 2025-10-08 20:38:30.506 00:00:10.363 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:39:11.549 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-10-08 20:39:30.905 00:00:10.372 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:39:44.429 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:39:44.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:40:11.770 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-10-08 20:40:31.312 00:00:10.375 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:41:11.995 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6452 1 2025-10-08 20:41:31.717 00:00:10.327 TCP 23.104.0.1:55614 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:42:12.226 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-10-08 20:38:39.543 00:05:02.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:42:32.105 00:00:10.365 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:43:12.454 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-10-08 20:39:39.547 00:05:02.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:43:32.508 00:00:10.368 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:44:12.680 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-10-08 20:44:44.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:44:32.920 00:00:10.400 TCP 23.104.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:44:44.712 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:45:12.856 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-10-08 20:45:33.390 00:00:10.327 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:46:13.050 00:00:11.213 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6452 1 2025-10-08 20:46:33.758 00:00:10.343 TCP 23.104.0.1:39618 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:47:14.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57524 10 6452 1 2025-10-08 20:47:34.139 00:00:10.355 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:48:14.524 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43734 10 6452 1 2025-10-08 20:44:39.544 00:05:02.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:48:34.536 00:00:10.361 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:49:14.747 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-10-08 20:49:44.992 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:49:45.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:45:39.546 00:05:02.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:49:34.935 00:00:10.371 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:50:14.968 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 12 6556 1 2025-10-08 20:50:35.344 00:00:10.371 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:51:15.206 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-10-08 20:51:35.751 00:00:10.375 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:52:15.457 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-10-08 20:52:36.161 00:00:10.371 TCP 23.104.0.1:60066 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:53:15.678 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-10-08 20:53:36.571 00:00:10.364 TCP 23.104.0.1:51712 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:54:15.916 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-10-08 20:54:45.207 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:54:45.203 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:50:39.546 00:05:02.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 20:54:36.972 00:00:10.436 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:55:16.150 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-10-08 20:51:39.548 00:05:02.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 20:55:37.449 00:00:11.021 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:56:16.364 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6452 1 2025-10-08 20:56:38.511 00:00:10.375 TCP 23.104.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:57:16.590 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-10-08 20:57:38.923 00:00:10.385 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-10-08 20:58:16.808 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-10-08 20:58:39.345 00:00:10.323 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498815, total packets: 1576, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-10-08 19:56:39 - 2025-10-08 20:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0017s Wall: 0.0021s flows/second: 77436.2 Runtime: 0.0021s