Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 02:59:30.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-10-13 02:59:30.428 00:00:10.359 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:00:30.538 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-10-13 02:56:41.499 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:00:30.826 00:00:10.358 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-10-13 02:56:41.501 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:01:30.762 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-10-13 03:01:31.226 00:00:10.364 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:01:47.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:01:47.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:02:31.631 00:00:10.367 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:02:30.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-10-13 03:03:31.190 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58638 10 6452 1 2025-10-13 03:03:32.056 00:00:10.365 TCP 23.104.0.1:37372 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:04:31.359 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50498 10 6452 1 2025-10-13 03:04:32.458 00:00:10.752 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:05:31.575 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44896 10 6452 1 2025-10-13 03:05:33.248 00:00:10.365 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:06:31.749 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43170 10 6452 1 2025-10-13 03:02:41.499 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:02:41.502 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:06:33.652 00:00:10.369 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:06:47.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:06:47.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:07:31.961 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-10-13 03:07:34.081 00:00:10.363 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:08:32.193 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43182 10 6452 1 2025-10-13 03:08:34.488 00:00:10.367 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:09:34.891 00:00:10.398 TCP 23.104.0.1:38388 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:09:32.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58056 10 6452 1 2025-10-13 03:10:32.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-10-13 03:10:35.318 00:00:10.366 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:11:32.822 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 14 14298 1 2025-10-13 03:11:48.253 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:11:35.723 00:00:10.576 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 17 2241 1 2025-10-13 03:11:48.156 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:12:33.100 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-10-13 03:08:41.503 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:08:41.505 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:12:36.341 00:00:10.324 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:13:33.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52830 10 6452 1 2025-10-13 03:13:36.701 00:00:10.371 TCP 23.104.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:14:33.527 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-10-13 03:14:37.111 00:00:10.365 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:15:33.742 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-10-13 03:15:37.515 00:00:10.365 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:16:33.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48198 12 6556 1 2025-10-13 03:16:48.047 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:16:48.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:16:37.914 00:00:10.365 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:17:34.189 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-10-13 03:17:38.313 00:00:10.326 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:14:41.504 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:18:34.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-10-13 03:14:41.502 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:18:38.674 00:00:10.371 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:19:34.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54624 10 6452 1 2025-10-13 03:19:39.105 00:00:10.365 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:20:34.828 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43240 10 6452 1 2025-10-13 03:20:39.505 00:00:10.419 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:21:35.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-10-13 03:21:48.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:21:39.965 00:00:10.425 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:21:48.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:22:35.231 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-10-13 03:22:40.433 00:00:10.364 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:23:35.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58336 10 6452 1 2025-10-13 03:23:40.831 00:00:10.384 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:20:41.505 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:20:41.503 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:24:35.682 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-10-13 03:24:41.256 00:00:10.335 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:25:35.857 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-10-13 03:25:41.633 00:00:10.367 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:26:36.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51540 10 6452 1 2025-10-13 03:26:48.206 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:26:48.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:26:42.060 00:00:10.373 TCP 23.104.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:27:36.250 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-10-13 03:27:42.468 00:00:10.367 TCP 23.104.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:28:36.463 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37900 10 6452 1 2025-10-13 03:28:42.881 00:00:10.384 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:29:36.682 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-10-13 03:29:43.312 00:00:10.367 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:26:41.505 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:26:41.507 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:30:36.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-10-13 03:30:43.717 00:00:10.374 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:31:37.114 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 12 10369 1 2025-10-13 03:31:48.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:31:48.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:31:44.129 00:00:10.440 TCP 23.104.0.1:39202 -> 1.101.0.1:3000 15 1926 1 2025-10-13 03:32:37.352 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-10-13 03:32:44.603 00:00:10.372 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:33:37.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-10-13 03:33:45.014 00:00:10.380 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:34:37.779 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6452 1 2025-10-13 03:34:45.425 00:00:10.367 TCP 23.104.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:35:37.949 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-10-13 03:35:45.833 00:00:10.385 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:32:41.509 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:32:41.508 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:36:38.136 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-10-13 03:36:48.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:36:48.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:36:46.253 00:00:10.366 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:37:38.352 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60834 10 6452 1 2025-10-13 03:37:46.656 00:00:10.364 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:38:38.526 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55500 10 6452 1 2025-10-13 03:38:47.090 00:00:10.322 TCP 23.104.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:39:38.745 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-10-13 03:39:47.453 00:00:10.334 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:40:38.918 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6452 1 2025-10-13 03:40:47.819 00:00:10.367 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:41:48.489 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:41:39.131 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54266 10 6452 1 2025-10-13 03:41:48.495 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:41:48.225 00:00:10.361 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:38:41.509 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:38:41.507 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:42:39.305 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 10 6452 1 2025-10-13 03:42:48.628 00:00:10.365 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:43:39.523 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49304 10 6452 1 2025-10-13 03:43:49.050 00:00:10.362 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:44:39.692 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-10-13 03:44:49.456 00:00:10.367 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:45:39.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-10-13 03:45:49.858 00:00:10.379 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:46:48.640 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:46:40.133 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-10-13 03:46:48.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:46:50.275 00:00:10.368 TCP 23.104.0.1:50048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:47:40.344 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45056 10 6452 1 2025-10-13 03:47:50.675 00:00:10.360 TCP 23.104.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:44:41.511 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:44:41.510 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:48:40.535 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-10-13 03:48:51.099 00:00:10.321 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:49:40.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-10-13 03:49:51.460 00:00:10.366 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:50:40.954 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51278 12 6556 1 2025-10-13 03:50:51.867 00:00:10.333 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:51:41.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6452 1 2025-10-13 03:51:49.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:51:49.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:51:52.231 00:00:10.361 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:52:41.417 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-10-13 03:52:52.630 00:00:10.364 TCP 23.104.0.1:34450 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:53:41.628 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-10-13 03:53:53.034 00:00:10.365 TCP 23.104.0.1:49872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:50:41.512 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:50:41.513 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 03:54:41.835 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43046 10 6452 1 2025-10-13 03:54:53.439 00:00:10.322 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:55:42.070 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-10-13 03:55:53.802 00:00:10.371 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:56:48.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 03:56:48.919 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 03:56:42.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 10 6452 1 2025-10-13 03:56:54.213 00:00:10.366 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:57:42.499 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45204 10 6452 1 2025-10-13 03:57:54.617 00:00:10.367 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503513, total packets: 1571, avg bps: 1093, avg pps: 0, avg bpp: 320 Time window: 2025-10-13 02:56:41 - 2025-10-13 03:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 65962.3 Runtime: 0.0025s