Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 01:58:59.417 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-10-14 01:59:09.465 00:00:10.327 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:59:59.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-10-14 02:00:09.828 00:00:10.398 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-10-14 01:56:41.919 00:05:02.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 01:56:41.921 00:05:02.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:00:59.860 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-10-14 02:01:10.267 00:00:10.364 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:02:00.110 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-10-14 02:02:15.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:02:15.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:02:10.671 00:00:10.364 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:03:00.281 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-10-14 02:03:11.096 00:00:10.361 TCP 23.104.0.1:38876 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:04:00.448 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2025-10-14 02:04:11.495 00:00:10.365 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:05:00.631 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-10-14 02:05:11.898 00:00:10.366 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:06:00.862 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:39450 10 6452 1 2025-10-14 02:06:12.304 00:00:10.320 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:02:41.926 00:05:02.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:02:41.923 00:05:02.468 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:07:01.718 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33148 10 6452 1 2025-10-14 02:07:15.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:07:15.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:07:12.667 00:00:10.373 TCP 23.104.0.1:55578 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:08:01.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-10-14 02:08:13.109 00:00:10.363 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:09:02.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38144 10 6452 1 2025-10-14 02:09:13.513 00:00:10.367 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:10:02.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33784 10 6452 1 2025-10-14 02:10:13.917 00:00:10.377 TCP 23.104.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:11:02.537 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-10-14 02:11:14.331 00:00:10.373 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:12:15.958 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:12:02.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-10-14 02:12:15.913 00:00:00.009 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:12:14.737 00:00:10.330 TCP 23.104.0.1:33146 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:08:41.926 00:05:02.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:08:41.929 00:05:02.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:13:02.956 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58630 10 6452 1 2025-10-14 02:13:15.107 00:00:10.365 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:14:03.188 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-10-14 02:14:15.513 00:00:10.365 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:15:03.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6452 1 2025-10-14 02:15:15.914 00:00:10.366 TCP 23.104.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:16:03.603 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-10-14 02:16:16.319 00:00:10.364 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:17:15.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:17:04.415 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-10-14 02:17:15.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:17:16.721 00:00:10.371 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:18:04.628 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-10-14 02:18:17.130 00:00:10.364 TCP 23.104.0.1:43792 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:14:41.932 00:05:02.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:14:41.929 00:05:02.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:19:04.842 00:00:10.636 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-10-14 02:19:17.532 00:00:10.362 TCP 23.104.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:20:05.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-10-14 02:20:17.934 00:00:10.339 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:21:05.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-10-14 02:21:18.310 00:00:10.366 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:22:05.937 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 10 6452 1 2025-10-14 02:22:16.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:22:16.057 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:22:18.717 00:00:10.383 TCP 23.104.0.1:48898 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:23:06.120 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-10-14 02:23:19.141 00:00:10.367 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:24:06.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-10-14 02:24:19.548 00:00:10.361 TCP 23.104.0.1:55850 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:20:41.947 00:05:02.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:20:41.945 00:05:02.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:25:06.556 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-10-14 02:25:19.949 00:00:10.330 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:26:06.786 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-10-14 02:26:20.324 00:00:10.368 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:27:16.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:27:15.878 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:27:07.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-10-14 02:27:20.735 00:00:10.332 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:28:07.223 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-10-14 02:28:21.110 00:00:10.363 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:29:07.430 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36084 10 6452 1 2025-10-14 02:29:21.513 00:00:10.377 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:30:07.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-10-14 02:30:21.927 00:00:10.347 TCP 23.104.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:26:41.946 00:05:02.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:26:41.944 00:05:02.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:31:07.859 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-10-14 02:31:22.325 00:00:10.365 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:32:16.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:32:16.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:32:08.297 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46074 10 6452 1 2025-10-14 02:32:22.730 00:00:10.373 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:33:08.515 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-10-14 02:33:23.144 00:00:10.362 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:34:08.700 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-10-14 02:34:23.548 00:00:10.363 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:35:08.915 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-10-14 02:35:23.955 00:00:10.365 TCP 23.104.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:36:09.129 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37316 12 10375 1 2025-10-14 02:36:24.361 00:00:10.441 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 15 1926 1 2025-10-14 02:32:41.949 00:05:02.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:32:41.947 00:05:02.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:37:16.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:37:16.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:37:09.367 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-10-14 02:37:24.843 00:00:10.558 TCP 23.104.0.1:59126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:38:09.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 10 6452 1 2025-10-14 02:38:25.443 00:00:10.370 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:39:09.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-10-14 02:39:25.848 00:00:10.341 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:40:09.966 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-10-14 02:40:26.230 00:00:10.363 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:41:10.200 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-10-14 02:41:26.632 00:00:10.321 TCP 23.104.0.1:36160 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:42:16.018 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:42:16.530 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:42:10.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-10-14 02:42:26.992 00:00:10.369 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:38:41.947 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:38:41.950 00:05:02.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:43:10.622 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43866 10 6452 1 2025-10-14 02:43:27.397 00:00:10.363 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:44:10.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-10-14 02:44:27.796 00:00:10.342 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:45:11.049 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-10-14 02:45:28.175 00:00:10.366 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:46:11.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-10-14 02:46:28.578 00:00:10.364 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:47:16.164 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:47:16.419 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:47:11.465 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58732 10 6452 1 2025-10-14 02:47:28.982 00:00:10.371 TCP 23.104.0.1:45894 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:48:11.681 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-14 02:48:29.394 00:00:10.366 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:44:41.950 00:05:02.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:44:41.948 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:49:11.856 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-10-14 02:49:29.796 00:00:10.368 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:50:12.085 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-10-14 02:50:30.206 00:00:10.323 TCP 23.104.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:51:12.315 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-10-14 02:51:30.570 00:00:10.797 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:52:16.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:52:16.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:52:12.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-10-14 02:52:31.405 00:00:10.368 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:53:12.739 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-10-14 02:53:31.812 00:00:10.335 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:54:12.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-10-14 02:50:41.951 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:50:41.953 00:05:02.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 02:54:32.188 00:00:10.364 TCP 23.104.0.1:55882 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:55:13.143 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-10-14 02:55:32.612 00:00:10.368 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:56:13.357 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-10-14 02:56:33.016 00:00:10.363 TCP 23.104.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:57:16.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 02:57:16.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 02:57:13.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-10-14 02:57:33.419 00:00:10.857 TCP 23.104.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-10-14 02:58:13.778 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-10-14 02:58:34.310 00:00:10.360 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-10-14 01:56:41 - 2025-10-14 02:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0009s Wall: 0.0023s flows/second: 69961.9 Runtime: 0.0024s