Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 02:59:13.990 00:00:10.770 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-10-14 02:59:34.708 00:00:10.322 TCP 23.104.0.1:32824 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:00:14.798 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6452 1 2025-10-14 02:56:41.953 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 02:56:41.955 00:05:02.451 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:00:35.095 00:00:10.369 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:01:15.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45770 10 6452 1 2025-10-14 03:01:35.515 00:00:10.340 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:02:16.707 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:02:16.617 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:02:15.239 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6452 1 2025-10-14 03:02:35.893 00:00:10.370 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:03:15.411 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37968 10 6452 1 2025-10-14 03:03:36.298 00:00:10.365 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:04:15.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-10-14 03:04:36.705 00:00:10.621 TCP 23.104.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:05:15.847 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-10-14 03:05:37.364 00:00:10.360 TCP 23.104.0.1:42032 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:06:16.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-10-14 03:02:41.954 00:05:02.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:02:41.955 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:06:37.759 00:00:10.332 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:07:16.636 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:07:16.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:07:16.294 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-10-14 03:07:38.128 00:00:10.368 TCP 23.104.0.1:60110 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:08:16.511 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59284 10 6452 1 2025-10-14 03:08:38.532 00:00:10.331 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:09:16.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-10-14 03:09:38.903 00:00:10.371 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:10:16.933 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-10-14 03:10:39.308 00:00:10.360 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:11:17.166 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46420 10 6452 1 2025-10-14 03:11:39.702 00:00:10.326 TCP 23.104.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:12:16.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:12:16.997 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:12:17.373 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-10-14 03:08:41.957 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:08:41.953 00:05:02.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:12:40.095 00:00:10.363 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:13:17.587 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-10-14 03:13:40.499 00:00:10.367 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:14:17.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-10-14 03:14:40.909 00:00:10.364 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:15:18.042 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51708 10 6452 1 2025-10-14 03:15:41.311 00:00:10.361 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:16:18.261 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-10-14 03:16:41.708 00:00:10.368 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:17:16.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:17:17.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:17:18.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-10-14 03:17:42.111 00:00:10.367 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:18:18.695 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-10-14 03:14:41.957 00:05:02.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:14:41.954 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:18:42.517 00:00:10.328 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:19:18.868 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-10-14 03:19:42.881 00:00:10.321 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:20:19.102 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-10-14 03:20:43.237 00:00:10.326 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:21:19.273 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 12 6556 1 2025-10-14 03:21:43.602 00:00:10.322 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:22:16.791 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:22:17.030 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:22:19.492 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-10-14 03:22:43.961 00:00:10.364 TCP 23.104.0.1:59232 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:23:19.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42064 10 6452 1 2025-10-14 03:23:44.362 00:00:10.361 TCP 23.104.0.1:35786 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:24:19.884 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-10-14 03:20:41.956 00:05:02.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:20:41.959 00:05:02.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:24:44.765 00:00:10.375 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:25:20.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6452 1 2025-10-14 03:25:45.181 00:00:10.363 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:26:20.302 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-10-14 03:26:45.581 00:00:10.320 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:27:17.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:27:17.256 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:27:20.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6452 1 2025-10-14 03:27:45.940 00:00:10.371 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:28:20.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39262 10 6452 1 2025-10-14 03:28:46.356 00:00:10.364 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:29:20.901 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-10-14 03:29:46.759 00:00:10.377 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:30:21.091 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-10-14 03:26:41.960 00:05:02.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:26:41.959 00:05:02.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:30:47.176 00:00:10.373 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:31:21.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-10-14 03:31:47.590 00:00:10.335 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:32:16.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:32:17.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:32:21.527 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-10-14 03:32:47.972 00:00:10.378 TCP 23.104.0.1:43052 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:33:21.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39366 10 6452 1 2025-10-14 03:33:48.383 00:00:11.085 TCP 23.104.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:34:21.956 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 10 6452 1 2025-10-14 03:34:49.504 00:00:10.365 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:35:22.200 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-10-14 03:35:49.908 00:00:10.362 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:36:22.418 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-10-14 03:32:41.959 00:05:02.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:32:41.961 00:05:02.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:36:50.319 00:00:10.363 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:37:17.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:37:17.372 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:37:22.588 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33160 10 6452 1 2025-10-14 03:37:50.722 00:00:10.370 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:38:22.757 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 2025-10-14 03:38:51.131 00:00:10.362 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:39:22.975 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34178 10 6452 1 2025-10-14 03:39:51.530 00:00:10.320 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:40:23.217 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 10 6452 1 2025-10-14 03:40:51.886 00:00:10.377 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:41:23.430 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48676 10 6452 1 2025-10-14 03:41:52.300 00:00:10.329 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:42:17.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:42:17.385 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:42:23.596 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-10-14 03:38:41.961 00:05:02.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:38:41.964 00:05:02.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:42:52.662 00:00:10.328 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:43:23.808 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-10-14 03:43:53.025 00:00:10.364 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:44:24.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-10-14 03:44:53.430 00:00:10.368 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:45:24.249 00:00:10.727 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-10-14 03:45:53.837 00:00:10.390 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:46:25.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37994 10 6452 1 2025-10-14 03:46:54.261 00:00:10.379 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:47:17.604 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:47:17.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:47:25.246 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-10-14 03:47:54.686 00:00:10.365 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:48:25.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35124 10 6452 1 2025-10-14 03:44:41.965 00:05:02.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:44:41.962 00:05:02.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:48:55.108 00:00:10.376 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:49:25.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48564 10 6452 1 2025-10-14 03:49:55.521 00:00:10.697 TCP 23.104.0.1:54302 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:50:25.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-10-14 03:50:56.261 00:00:10.361 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:51:26.113 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-10-14 03:51:56.659 00:00:10.364 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:52:18.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:52:18.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:52:26.331 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-10-14 03:52:57.092 00:00:10.463 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:53:26.549 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50672 10 6452 1 2025-10-14 03:53:57.602 00:00:10.364 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:54:26.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-10-14 03:50:41.969 00:05:02.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 03:50:41.966 00:05:02.464 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 03:54:58.006 00:00:10.321 TCP 23.104.0.1:47536 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:55:26.937 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57112 10 6452 1 2025-10-14 03:55:58.360 00:00:10.365 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:56:27.141 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-10-14 03:56:58.757 00:00:10.372 TCP 23.104.0.1:40096 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:57:17.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 03:57:17.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 03:57:27.311 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59166 10 6452 1 2025-10-14 03:57:59.164 00:00:10.367 TCP 23.104.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-10-14 03:58:27.527 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47592 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1069, avg pps: 0, avg bpp: 317 Time window: 2025-10-14 02:56:41 - 2025-10-14 03:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0026s flows/second: 63081.0 Runtime: 0.0026s