Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 00:58:46.566 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6661 1 2025-10-14 00:58:44.861 00:00:10.375 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:59:45.280 00:00:10.409 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-10-14 00:59:46.797 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6661 1 2025-10-14 00:56:41.897 00:05:02.469 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 00:56:41.900 00:05:02.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:00:45.728 00:00:10.329 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:00:47.009 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6661 1 2025-10-14 01:01:46.102 00:00:10.368 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:01:47.182 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6661 1 2025-10-14 01:02:14.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:02:14.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:02:46.509 00:00:10.326 TCP 23.104.0.1:47246 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:02:47.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6661 1 2025-10-14 01:03:46.872 00:00:10.323 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:03:47.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 10 6661 1 2025-10-14 01:04:47.832 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6661 1 2025-10-14 01:04:47.240 00:00:10.373 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:05:48.081 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6661 1 2025-10-14 01:05:47.654 00:00:10.324 TCP 23.104.0.1:55850 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:02:41.898 00:05:02.469 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:02:41.900 00:05:02.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:06:48.717 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 13 13955 1 2025-10-14 01:06:48.020 00:00:10.441 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 15 1926 1 2025-10-14 01:07:14.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:07:14.054 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:07:48.498 00:00:10.369 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:07:48.960 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-10-14 01:08:48.908 00:00:10.515 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:08:49.146 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:58790 10 6452 1 2025-10-14 01:09:49.433 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6452 1 2025-10-14 01:09:49.465 00:00:10.325 TCP 23.104.0.1:54084 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:10:49.831 00:00:10.384 TCP 23.104.0.1:54414 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:10:49.653 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-10-14 01:11:50.254 00:00:10.361 TCP 23.104.0.1:42984 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:11:49.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-10-14 01:12:14.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:12:14.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:08:41.899 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:08:41.902 00:05:02.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:12:50.044 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-10-14 01:12:50.656 00:00:10.364 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:13:50.265 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-10-14 01:13:51.082 00:00:10.362 TCP 23.104.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:14:51.480 00:00:10.370 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:14:50.478 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-10-14 01:15:50.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-10-14 01:15:51.890 00:00:10.326 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:16:50.868 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-10-14 01:16:52.254 00:00:10.327 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:17:14.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:17:14.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:17:51.049 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50638 10 6452 1 2025-10-14 01:17:52.622 00:00:10.366 TCP 23.104.0.1:34372 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:14:41.902 00:05:02.468 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:14:41.904 00:05:02.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:18:51.259 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51478 10 6452 1 2025-10-14 01:18:53.023 00:00:10.364 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:19:51.484 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-10-14 01:19:53.427 00:00:10.367 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:20:51.699 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-10-14 01:20:53.829 00:00:10.402 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:21:51.915 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-10-14 01:21:54.270 00:00:10.364 TCP 23.104.0.1:59612 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:22:14.776 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:22:14.597 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:22:52.129 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-10-14 01:22:54.680 00:00:10.367 TCP 23.104.0.1:49948 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:23:52.342 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-10-14 01:23:55.105 00:00:10.366 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:20:41.902 00:05:02.469 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:20:41.906 00:05:02.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:24:52.551 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-10-14 01:24:55.517 00:00:10.368 TCP 23.104.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:25:52.764 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-10-14 01:25:55.926 00:00:10.377 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:26:56.343 00:00:10.368 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:26:52.943 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-10-14 01:27:14.887 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:27:14.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:27:53.134 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-10-14 01:27:56.753 00:00:10.341 TCP 23.104.0.1:35042 -> 1.101.0.1:3000 12 1559 1 2025-10-14 01:28:53.349 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57718 10 6452 1 2025-10-14 01:28:57.138 00:00:10.371 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:29:53.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-10-14 01:29:57.552 00:00:10.361 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:26:41.906 00:05:02.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:26:41.904 00:05:02.472 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:30:53.772 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-10-14 01:30:57.948 00:00:10.372 TCP 23.104.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:31:53.944 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-10-14 01:32:14.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:31:58.356 00:00:10.364 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:32:14.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:32:54.180 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43448 10 6452 1 2025-10-14 01:32:58.757 00:00:10.370 TCP 23.104.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:33:54.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-10-14 01:33:59.164 00:00:10.364 TCP 23.104.0.1:48936 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:34:54.564 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-10-14 01:34:59.567 00:00:10.363 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:35:54.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-10-14 01:35:59.973 00:00:10.393 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:32:41.908 00:05:02.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:32:41.909 00:05:02.469 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:36:54.948 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-10-14 01:37:00.407 00:00:10.369 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:37:14.846 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:37:15.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:37:55.147 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-10-14 01:38:00.813 00:00:10.361 TCP 23.104.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:38:55.357 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-10-14 01:39:01.211 00:00:10.362 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:39:55.579 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-10-14 01:40:01.617 00:00:10.360 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:40:55.795 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44062 10 6452 1 2025-10-14 01:41:02.020 00:00:10.368 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:41:56.008 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-10-14 01:42:15.014 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:42:02.429 00:00:10.319 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:42:14.815 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:38:41.907 00:05:02.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:38:41.910 00:05:02.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:42:56.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-10-14 01:43:02.803 00:00:10.363 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:43:56.432 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-10-14 01:44:03.200 00:00:10.366 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:44:56.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-10-14 01:45:03.597 00:00:10.362 TCP 23.104.0.1:56900 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:45:56.817 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49442 10 6452 1 2025-10-14 01:46:04.004 00:00:10.323 TCP 23.104.0.1:60282 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:47:15.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:47:04.366 00:00:10.367 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:46:57.041 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43340 10 6452 1 2025-10-14 01:47:14.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:47:57.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 11 6492 1 2025-10-14 01:48:04.767 00:00:10.679 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:44:41.914 00:05:02.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:44:41.917 00:05:02.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:48:57.457 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-10-14 01:49:05.485 00:00:10.324 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:49:57.630 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-10-14 01:50:05.848 00:00:10.384 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:50:57.800 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-10-14 01:51:06.270 00:00:10.380 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:52:15.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:51:58.032 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-10-14 01:52:15.228 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:52:06.678 00:00:10.326 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:52:58.203 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-10-14 01:53:07.052 00:00:10.321 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:53:58.426 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-10-14 01:54:07.414 00:00:10.327 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:50:41.920 00:05:02.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 01:50:41.918 00:05:02.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:54:58.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-10-14 01:55:07.780 00:00:10.432 TCP 23.104.0.1:42218 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:55:58.806 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-10-14 01:56:08.254 00:00:10.363 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:56:59.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58512 10 6452 1 2025-10-14 01:57:15.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 01:57:15.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 01:57:08.658 00:00:10.370 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:57:59.243 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-10-14 01:58:09.098 00:00:10.325 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 508034, total packets: 1581, avg bps: 1099, avg pps: 0, avg bpp: 321 Time window: 2025-10-14 00:56:41 - 2025-10-14 01:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0029s Wall: 0.0022s flows/second: 75581.3 Runtime: 0.0022s