Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 08:58:58.403 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-10-13 08:59:02.793 00:00:10.365 TCP 23.104.0.1:43548 -> 1.101.0.1:3000 11 1507 1 2025-10-13 08:59:58.616 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-10-13 09:00:03.197 00:00:10.368 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-10-13 08:56:41.615 00:05:02.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 08:56:41.613 00:05:02.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:00:58.804 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56818 10 6452 1 2025-10-13 09:01:03.598 00:00:10.366 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:01:55.215 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:01:55.284 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:01:59.027 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6452 1 2025-10-13 09:02:04.001 00:00:10.366 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:02:59.201 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60664 10 6452 1 2025-10-13 09:03:04.405 00:00:10.365 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:03:59.419 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6452 1 2025-10-13 09:04:04.808 00:00:10.370 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:04:59.653 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-10-13 09:05:05.214 00:00:10.362 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:05:59.821 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43816 10 6452 1 2025-10-13 09:06:05.616 00:00:10.326 TCP 23.104.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:02:41.620 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:02:41.622 00:05:02.446 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:06:54.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:06:54.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:07:00.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-10-13 09:07:05.978 00:00:10.364 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:08:00.253 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6452 1 2025-10-13 09:08:06.378 00:00:10.325 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:09:00.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-10-13 09:09:06.744 00:00:10.361 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:10:00.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-10-13 09:10:07.148 00:00:10.329 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:11:00.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-10-13 09:11:07.519 00:00:10.363 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:11:55.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:11:55.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:12:01.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-10-13 09:12:07.917 00:00:10.329 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:08:41.622 00:05:02.447 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:08:41.620 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:13:01.289 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-10-13 09:13:08.281 00:00:10.372 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:14:01.500 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-10-13 09:14:08.691 00:00:10.365 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:15:01.712 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-10-13 09:15:09.113 00:00:10.364 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:16:02.226 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50936 10 6452 1 2025-10-13 09:16:09.513 00:00:10.366 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:16:55.332 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:16:55.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:17:02.450 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-10-13 09:17:09.919 00:00:10.364 TCP 23.104.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:18:02.679 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-10-13 09:18:10.321 00:00:10.365 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:14:41.624 00:05:02.448 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:14:41.622 00:05:02.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:19:02.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-10-13 09:19:10.724 00:00:10.366 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:20:03.122 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-10-13 09:20:11.132 00:00:10.365 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:21:03.336 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-10-13 09:21:11.540 00:00:10.367 TCP 23.104.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:21:55.696 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:21:55.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:22:03.553 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-10-13 09:22:11.940 00:00:10.381 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:23:03.762 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-10-13 09:23:12.360 00:00:10.375 TCP 23.104.0.1:47992 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:24:03.931 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36148 10 6452 1 2025-10-13 09:24:12.769 00:00:10.377 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:20:41.626 00:05:02.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:20:41.624 00:05:02.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:25:04.175 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-10-13 09:25:13.188 00:00:10.370 TCP 23.104.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:26:04.358 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-10-13 09:26:13.591 00:00:10.365 TCP 23.104.0.1:58096 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:26:55.532 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:26:55.440 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:27:04.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-10-13 09:27:13.991 00:00:10.369 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:28:04.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-10-13 09:28:14.394 00:00:10.367 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:29:05.005 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-10-13 09:29:14.798 00:00:10.379 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:30:05.225 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-10-13 09:30:15.203 00:00:10.324 TCP 23.104.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:26:41.631 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:26:41.630 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:31:05.398 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56642 10 6452 1 2025-10-13 09:31:15.560 00:00:10.361 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:31:55.605 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:31:55.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:32:05.620 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2025-10-13 09:32:15.958 00:00:10.366 TCP 23.104.0.1:59562 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:33:05.842 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51778 10 6452 1 2025-10-13 09:33:16.364 00:00:10.361 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:34:06.077 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-10-13 09:34:16.761 00:00:10.380 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:35:06.295 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-10-13 09:35:17.180 00:00:10.368 TCP 23.104.0.1:50502 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:36:06.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56714 10 6452 1 2025-10-13 09:36:17.585 00:00:10.370 TCP 23.104.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:32:41.630 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:32:41.632 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:36:55.445 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:36:55.700 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:37:06.847 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-10-13 09:37:17.985 00:00:10.362 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:38:07.081 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-10-13 09:38:18.383 00:00:10.362 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:39:07.257 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-10-13 09:39:18.784 00:00:10.322 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:40:07.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 12 6556 1 2025-10-13 09:40:19.146 00:00:10.322 TCP 23.104.0.1:56170 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:41:08.185 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-10-13 09:41:19.508 00:00:10.367 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:41:55.822 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:41:55.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:42:08.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6452 1 2025-10-13 09:42:19.908 00:00:10.319 TCP 23.104.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:38:41.633 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:38:41.635 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:43:08.604 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-10-13 09:43:20.265 00:00:10.936 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:44:08.815 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-10-13 09:44:21.241 00:00:10.325 TCP 23.104.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:45:09.024 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-10-13 09:45:21.608 00:00:10.371 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:46:09.233 00:00:10.947 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-10-13 09:46:22.027 00:00:10.364 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:46:55.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:46:55.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:47:10.213 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-10-13 09:47:22.431 00:00:10.319 TCP 23.104.0.1:35096 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:48:10.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50688 10 6452 1 2025-10-13 09:48:22.788 00:00:10.335 TCP 23.104.0.1:38996 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:44:41.633 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:44:41.635 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:49:10.645 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-10-13 09:49:23.159 00:00:10.367 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:50:10.854 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-10-13 09:50:23.558 00:00:10.361 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:51:11.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-10-13 09:51:23.960 00:00:10.364 TCP 23.104.0.1:51774 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:51:56.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:51:56.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:52:11.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-10-13 09:52:24.370 00:00:10.371 TCP 23.104.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:53:11.520 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-10-13 09:53:24.791 00:00:10.388 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:54:11.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-10-13 09:54:25.211 00:00:10.326 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:50:41.634 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 09:50:41.636 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 09:55:11.908 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-10-13 09:55:25.575 00:00:10.319 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:56:12.090 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-10-13 09:56:25.933 00:00:10.367 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:56:55.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 09:56:56.223 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 09:57:12.264 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42744 10 6452 1 2025-10-13 09:57:26.341 00:00:10.372 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-10-13 09:58:12.475 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6452 1 2025-10-13 09:58:26.745 00:00:10.376 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1073, avg pps: 0, avg bpp: 316 Time window: 2025-10-13 08:56:41 - 2025-10-13 09:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0010s Wall: 0.0030s flows/second: 55197.1 Runtime: 0.0030s