Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 04:58:55.427 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-10-13 04:59:19.882 00:00:10.384 TCP 23.104.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:59:55.645 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-10-13 05:00:20.303 00:00:10.329 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-10-13 04:56:41.530 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 04:56:41.528 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:00:55.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-10-13 05:01:20.682 00:00:10.365 TCP 23.104.0.1:36434 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:01:50.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:01:51.190 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:01:56.040 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-10-13 05:02:21.109 00:00:10.367 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:02:56.513 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 11 6504 1 2025-10-13 05:03:21.520 00:00:10.372 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:03:56.774 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-10-13 05:04:21.934 00:00:10.967 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:04:57.013 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-10-13 05:05:22.933 00:00:10.374 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:05:57.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38254 10 6452 1 2025-10-13 05:06:23.347 00:00:10.324 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:02:41.528 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:06:49.939 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:02:41.532 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:06:50.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:06:57.452 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-10-13 05:07:23.716 00:00:10.379 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:07:57.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55922 10 6452 1 2025-10-13 05:08:24.144 00:00:10.365 TCP 23.104.0.1:50402 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:08:57.913 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-10-13 05:09:24.544 00:00:10.363 TCP 23.104.0.1:45492 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:09:58.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-10-13 05:10:24.947 00:00:10.367 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:10:58.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39530 10 6452 1 2025-10-13 05:11:25.355 00:00:10.325 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:11:50.471 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:11:50.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:11:58.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-10-13 05:12:25.720 00:00:10.372 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:08:41.529 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:08:41.531 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:12:58.784 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-10-13 05:13:26.133 00:00:10.370 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:13:59.187 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-10-13 05:14:26.541 00:00:10.360 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:14:59.360 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-10-13 05:15:26.940 00:00:10.381 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:15:59.576 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 12 10375 1 2025-10-13 05:16:27.363 00:00:10.397 TCP 23.104.0.1:56100 -> 1.101.0.1:3000 15 1926 1 2025-10-13 05:16:50.416 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:16:50.429 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:16:59.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58928 10 6452 1 2025-10-13 05:17:27.802 00:00:10.342 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:18:00.045 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-10-13 05:18:28.186 00:00:10.368 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:14:41.533 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:14:41.531 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:19:00.260 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-10-13 05:19:28.593 00:00:10.361 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:20:00.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-10-13 05:20:28.990 00:00:10.369 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:21:00.692 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46576 10 6452 1 2025-10-13 05:21:29.399 00:00:10.367 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:21:50.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:21:50.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:22:00.899 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48968 10 6452 1 2025-10-13 05:22:29.803 00:00:10.337 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:23:01.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41402 10 6452 1 2025-10-13 05:23:30.182 00:00:10.368 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:24:01.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6452 1 2025-10-13 05:20:41.532 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:24:30.590 00:00:10.331 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:20:41.536 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:25:01.542 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-10-13 05:25:30.957 00:00:10.367 TCP 23.104.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:26:01.713 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-10-13 05:26:31.360 00:00:10.324 TCP 23.104.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:26:50.690 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:26:50.495 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:27:01.934 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-10-13 05:27:31.722 00:00:10.346 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:28:02.126 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-10-13 05:28:32.103 00:00:10.358 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:29:02.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-10-13 05:29:32.500 00:00:10.365 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:30:02.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-10-13 05:30:32.905 00:00:10.363 TCP 23.104.0.1:53732 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:26:41.535 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:26:41.533 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:31:02.836 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42380 10 6452 1 2025-10-13 05:31:33.314 00:00:10.319 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:31:50.714 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:31:50.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:32:03.069 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60654 10 6452 1 2025-10-13 05:32:33.682 00:00:10.816 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:33:03.253 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38210 10 6452 1 2025-10-13 05:33:34.536 00:00:14.000 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:34:03.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40664 10 6452 1 2025-10-13 05:34:38.577 00:00:10.363 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:35:03.641 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-10-13 05:35:38.977 00:00:10.368 TCP 23.104.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:36:03.861 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-10-13 05:32:41.536 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:32:41.534 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:36:50.736 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:36:50.879 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:36:39.387 00:00:10.365 TCP 23.104.0.1:34470 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:37:04.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-10-13 05:37:39.789 00:00:10.370 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:38:04.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 2025-10-13 05:38:40.191 00:00:10.364 TCP 23.104.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:39:04.514 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6452 1 2025-10-13 05:39:40.593 00:00:10.361 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:40:04.682 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44704 10 6452 1 2025-10-13 05:40:40.996 00:00:10.361 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:41:04.895 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-10-13 05:41:51.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:41:51.050 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:41:41.402 00:00:10.324 TCP 23.104.0.1:48084 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:42:05.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-10-13 05:38:41.536 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:38:41.539 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:42:41.769 00:00:10.365 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:43:05.324 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48070 10 6452 1 2025-10-13 05:43:42.173 00:00:10.366 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:44:05.494 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 2025-10-13 05:44:42.579 00:00:10.366 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:45:05.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-10-13 05:45:42.985 00:00:10.323 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:46:05.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58602 10 6452 1 2025-10-13 05:46:50.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:46:51.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:46:43.349 00:00:10.366 TCP 23.104.0.1:49894 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:47:06.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-10-13 05:47:43.754 00:00:10.334 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:48:06.317 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-10-13 05:44:41.540 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:44:41.539 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:48:44.128 00:00:10.370 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:49:06.479 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 12 6556 1 2025-10-13 05:49:44.536 00:00:10.363 TCP 23.104.0.1:39526 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:50:06.697 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33670 10 6452 1 2025-10-13 05:50:44.938 00:00:10.387 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:51:06.924 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36572 12 10369 1 2025-10-13 05:51:51.065 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:51:51.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:51:45.367 00:00:10.442 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 15 1926 1 2025-10-13 05:52:07.157 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-10-13 05:52:45.848 00:00:10.388 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:53:07.378 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-10-13 05:53:46.275 00:00:10.362 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:54:07.600 00:00:10.787 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-13 05:50:41.544 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 05:50:41.541 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 05:54:46.672 00:00:10.358 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:55:08.427 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-10-13 05:55:47.090 00:00:10.367 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:56:08.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-10-13 05:56:51.164 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 05:56:50.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 05:56:47.498 00:00:10.364 TCP 23.104.0.1:60300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:57:08.814 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-10-13 05:57:47.904 00:00:10.362 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-10-13 05:58:09.044 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33466 10 6452 1 Summary: total flows: 163, total bytes: 505675, total packets: 1576, avg bps: 1094, avg pps: 0, avg bpp: 320 Time window: 2025-10-13 04:56:41 - 2025-10-13 05:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 75219.7 Runtime: 0.0022s