Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 03:58:42.711 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49926 10 6452 1 2025-10-13 03:58:55.024 00:00:10.325 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:59:42.884 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-10-13 03:59:55.387 00:00:10.324 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 03:56:41.514 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 03:56:41.516 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:00:43.078 00:00:10.360 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6452 1 2025-10-13 04:00:55.743 00:00:10.365 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:01:48.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:01:48.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:01:43.480 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54334 10 6452 1 2025-10-13 04:01:56.146 00:00:10.327 TCP 23.104.0.1:36802 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:02:43.656 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-10-13 04:02:56.509 00:00:10.372 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:03:43.832 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-10-13 04:03:56.922 00:00:10.381 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:04:44.058 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-10-13 04:04:57.346 00:00:10.359 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:05:44.269 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 10 6452 1 2025-10-13 04:05:57.748 00:00:10.359 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:02:41.515 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:02:41.518 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:06:49.022 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:06:49.031 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:06:44.485 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-10-13 04:06:58.146 00:00:10.329 TCP 23.104.0.1:53516 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:07:44.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-10-13 04:07:58.509 00:00:10.362 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:08:44.902 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-10-13 04:08:58.911 00:00:10.382 TCP 23.104.0.1:37358 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:09:45.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-10-13 04:09:59.337 00:00:10.364 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:10:45.346 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 14 10479 1 2025-10-13 04:10:59.741 00:00:10.474 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 15 1926 1 2025-10-13 04:11:48.936 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:11:48.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:11:45.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60586 10 6452 1 2025-10-13 04:12:00.256 00:00:10.363 TCP 23.104.0.1:39378 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:08:41.518 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:08:41.516 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:12:45.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-10-13 04:13:00.661 00:00:10.327 TCP 23.104.0.1:47536 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:13:46.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-10-13 04:14:01.030 00:00:10.375 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:14:46.247 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-10-13 04:15:01.434 00:00:10.362 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:15:46.475 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-10-13 04:16:01.840 00:00:10.387 TCP 23.104.0.1:42122 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:16:49.254 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:16:49.322 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:16:46.649 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36784 10 6452 1 2025-10-13 04:17:02.260 00:00:10.364 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:17:46.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-10-13 04:18:02.662 00:00:10.362 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:14:41.520 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:14:41.517 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:18:47.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-10-13 04:19:03.090 00:00:10.365 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:19:47.292 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33376 10 6452 1 2025-10-13 04:20:03.493 00:00:10.366 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:20:47.514 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-10-13 04:21:03.893 00:00:10.337 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:21:49.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:21:49.556 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:21:47.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-10-13 04:22:04.267 00:00:10.369 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:22:47.903 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44552 10 6452 1 2025-10-13 04:23:04.673 00:00:10.373 TCP 23.104.0.1:53584 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:23:48.122 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 6452 1 2025-10-13 04:24:05.099 00:00:10.366 TCP 23.104.0.1:47508 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:20:41.519 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:20:41.521 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:24:48.294 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-10-13 04:25:05.501 00:00:10.326 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:25:48.505 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47082 10 6452 1 2025-10-13 04:26:05.868 00:00:10.333 TCP 23.104.0.1:33936 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:26:49.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:26:49.351 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:26:48.686 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-10-13 04:27:06.246 00:00:10.373 TCP 23.104.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:27:48.863 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-10-13 04:28:06.659 00:00:10.368 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:28:49.092 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-10-13 04:29:07.094 00:00:10.369 TCP 23.104.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:29:49.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56332 10 6452 1 2025-10-13 04:30:07.502 00:00:10.366 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:26:41.520 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:26:41.522 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:30:49.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-10-13 04:31:07.904 00:00:10.377 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:31:49.576 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:31:49.476 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:31:49.736 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-10-13 04:32:08.330 00:00:10.366 TCP 23.104.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:32:49.975 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-10-13 04:33:08.732 00:00:10.369 TCP 23.104.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:33:50.202 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:32914 10 6452 1 2025-10-13 04:34:09.138 00:00:10.370 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:34:50.373 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 2025-10-13 04:35:09.543 00:00:10.370 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:35:50.590 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 12 10375 1 2025-10-13 04:36:09.949 00:00:11.045 TCP 23.104.0.1:55414 -> 1.101.0.1:3000 15 1926 1 2025-10-13 04:32:41.521 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:32:41.523 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:36:49.974 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:36:49.700 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:36:50.829 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-10-13 04:37:11.059 00:00:10.368 TCP 23.104.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:37:51.075 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59754 10 6452 1 2025-10-13 04:38:11.470 00:00:10.321 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:38:51.247 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-10-13 04:39:11.842 00:00:10.393 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:39:51.480 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56424 10 6452 1 2025-10-13 04:40:12.271 00:00:10.364 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:40:51.723 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-10-13 04:41:12.674 00:00:10.370 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:41:49.728 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:41:49.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:41:51.905 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-10-13 04:42:13.104 00:00:10.323 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:38:41.523 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:38:41.526 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:42:52.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37240 10 6452 1 2025-10-13 04:43:13.461 00:00:10.388 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:43:52.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-10-13 04:44:13.886 00:00:10.379 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:44:52.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-10-13 04:45:14.305 00:00:10.326 TCP 23.104.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:45:52.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58736 10 6452 1 2025-10-13 04:46:14.669 00:00:10.364 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:46:49.728 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:46:50.080 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:46:52.982 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45290 10 6452 1 2025-10-13 04:47:15.099 00:00:10.367 TCP 23.104.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:47:53.204 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-10-13 04:48:15.500 00:00:10.325 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:44:41.524 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:44:41.525 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:48:53.378 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-10-13 04:49:15.864 00:00:10.370 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:49:53.591 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45666 10 6452 1 2025-10-13 04:50:16.275 00:00:10.364 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:50:53.809 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55834 10 6452 1 2025-10-13 04:51:16.680 00:00:10.370 TCP 23.104.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:51:49.953 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:51:49.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:51:53.979 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-10-13 04:52:17.103 00:00:10.363 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:52:54.168 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-10-13 04:53:17.506 00:00:10.370 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:53:54.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-10-13 04:54:17.906 00:00:10.369 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:50:41.525 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 04:50:41.527 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:54:54.603 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32844 10 6452 1 2025-10-13 04:55:18.316 00:00:10.377 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:55:54.834 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38106 10 6452 1 2025-10-13 04:56:18.728 00:00:10.333 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:56:50.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 04:56:50.215 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 04:56:55.005 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-10-13 04:57:19.109 00:00:10.361 TCP 23.104.0.1:46508 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:57:55.219 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55622 10 6452 1 2025-10-13 04:58:19.510 00:00:10.325 TCP 23.104.0.1:60650 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1094, avg pps: 0, avg bpp: 319 Time window: 2025-10-13 03:56:41 - 2025-10-13 04:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0026s Wall: 0.0023s flows/second: 70269.3 Runtime: 0.0024s