Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 23:58:49.125 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-10-12 23:59:06.148 00:00:10.366 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-10-12 23:59:49.355 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-10-13 00:00:06.554 00:00:10.365 TCP 23.104.0.1:35522 -> 1.101.0.1:3000 11 1507 1 2025-10-12 23:56:41.433 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 23:56:41.430 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:00:49.602 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 12 10369 1 2025-10-13 00:01:06.984 00:00:10.440 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 15 1926 1 2025-10-13 00:01:44.111 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:01:43.978 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:01:49.849 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-10-13 00:02:07.464 00:00:10.329 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:02:50.248 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-10-13 00:03:07.840 00:00:10.385 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:03:50.419 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-10-13 00:04:08.260 00:00:10.363 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:04:50.631 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-10-13 00:05:08.661 00:00:10.370 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:05:50.846 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42414 10 6452 1 2025-10-13 00:06:09.096 00:00:10.363 TCP 23.104.0.1:40520 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:06:44.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:02:41.435 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:06:44.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:02:41.433 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:06:51.081 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-10-13 00:07:09.499 00:00:10.366 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:07:51.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-10-13 00:08:09.909 00:00:10.329 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:08:51.504 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-10-13 00:09:10.272 00:00:10.365 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:09:51.686 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-10-13 00:10:10.675 00:00:10.864 TCP 23.104.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:10:51.907 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-10-13 00:11:11.577 00:00:10.371 TCP 23.104.0.1:44446 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:11:44.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:11:44.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:11:52.125 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-10-13 00:12:11.981 00:00:10.371 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:08:41.435 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:08:41.437 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:12:52.368 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6452 1 2025-10-13 00:13:12.398 00:00:10.369 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:13:52.584 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50850 10 6452 1 2025-10-13 00:14:12.799 00:00:10.364 TCP 23.104.0.1:58438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:14:52.806 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6452 1 2025-10-13 00:15:13.207 00:00:11.015 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:15:53.027 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33618 10 6452 1 2025-10-13 00:16:14.263 00:00:10.323 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:16:44.396 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:16:44.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:16:53.238 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-10-13 00:17:14.625 00:00:10.364 TCP 23.104.0.1:38826 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:17:53.452 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-10-13 00:18:15.027 00:00:10.360 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:14:41.436 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:14:41.438 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:18:53.668 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-10-13 00:19:15.426 00:00:10.373 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:19:53.871 00:00:11.107 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-10-13 00:20:15.848 00:00:10.375 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:20:55.024 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35082 10 6452 1 2025-10-13 00:21:16.274 00:00:10.367 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:21:44.302 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:21:44.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:21:55.239 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57110 10 6452 1 2025-10-13 00:22:16.678 00:00:10.364 TCP 23.104.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:22:55.449 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-10-13 00:23:17.100 00:00:10.370 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:23:55.659 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-10-13 00:24:17.509 00:00:10.371 TCP 23.104.0.1:41418 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:20:41.439 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:20:41.438 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:24:55.876 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-10-13 00:25:17.922 00:00:10.387 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:25:56.073 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-10-13 00:26:18.346 00:00:10.361 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:26:44.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:26:44.711 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:26:56.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-10-13 00:27:18.752 00:00:10.574 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:27:56.516 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-10-13 00:28:19.366 00:00:10.361 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:28:56.732 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6452 1 2025-10-13 00:29:19.765 00:00:10.374 TCP 23.104.0.1:33300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:29:56.914 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-10-13 00:30:20.177 00:00:10.322 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:26:41.448 00:05:02.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:26:41.451 00:05:02.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:30:57.126 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-10-13 00:31:20.533 00:00:19.690 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:31:44.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:31:44.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:31:57.373 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-10-13 00:32:30.273 00:00:10.362 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:32:57.587 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6452 1 2025-10-13 00:33:30.672 00:00:10.330 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:33:57.803 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-10-13 00:34:31.056 00:00:10.363 TCP 23.104.0.1:49852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:34:58.028 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6452 1 2025-10-13 00:35:31.460 00:00:10.363 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:35:58.240 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6452 1 2025-10-13 00:36:44.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:32:41.449 00:05:02.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:36:31.863 00:00:10.326 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:32:41.452 00:05:02.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:36:45.068 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:36:58.455 00:00:10.691 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-10-13 00:37:32.226 00:00:10.322 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:37:59.186 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-10-13 00:38:32.589 00:00:10.370 TCP 23.104.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:38:59.402 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38534 10 6452 1 2025-10-13 00:39:32.999 00:00:10.367 TCP 23.104.0.1:44086 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:39:59.622 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58936 10 6452 1 2025-10-13 00:40:33.401 00:00:10.369 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:40:59.850 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 10 6452 1 2025-10-13 00:41:44.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:41:44.843 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:41:33.808 00:00:10.374 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:42:00.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-10-13 00:42:34.216 00:00:10.366 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:38:41.456 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:38:41.453 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:43:00.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-10-13 00:43:34.620 00:00:10.364 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:44:00.501 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-10-13 00:44:35.025 00:00:10.320 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:45:00.710 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60212 10 6452 1 2025-10-13 00:45:35.384 00:00:10.362 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:46:00.919 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 12 10369 1 2025-10-13 00:46:44.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:46:45.200 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:46:35.788 00:00:10.444 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 15 1926 1 2025-10-13 00:47:01.160 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-10-13 00:47:36.268 00:00:10.365 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:48:01.328 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-10-13 00:44:41.456 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:44:41.458 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:48:36.675 00:00:10.360 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:49:01.545 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-10-13 00:49:37.091 00:00:10.326 TCP 23.104.0.1:59232 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:50:01.716 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41478 10 6452 1 2025-10-13 00:50:37.457 00:00:10.365 TCP 23.104.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:51:01.930 00:00:10.666 TCP 1.101.0.1:3000 -> 22.102.0.1:50304 10 6452 1 2025-10-13 00:51:44.873 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:51:45.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:51:37.860 00:00:10.371 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:52:02.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-10-13 00:52:38.275 00:00:10.364 TCP 23.104.0.1:53722 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:53:02.854 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-10-13 00:53:38.673 00:00:10.376 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:54:03.085 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-10-13 00:50:41.457 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 00:50:41.460 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 00:54:39.097 00:00:10.364 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:55:03.265 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-10-13 00:55:39.504 00:00:10.323 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:56:03.479 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-10-13 00:56:45.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 00:56:45.252 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 00:56:39.866 00:00:10.518 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:57:03.703 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-10-13 00:57:40.427 00:00:10.326 TCP 23.104.0.1:54380 -> 1.101.0.1:3000 11 1507 1 2025-10-13 00:58:03.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 2025-10-13 00:58:40.787 00:00:10.378 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507020, total packets: 1584, avg bps: 1087, avg pps: 0, avg bpp: 320 Time window: 2025-10-12 23:56:41 - 2025-10-13 00:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0020s Wall: 0.0021s flows/second: 77063.2 Runtime: 0.0021s