Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 06:59:08.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 10 6452 1 2025-10-14 06:59:14.353 00:00:10.366 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:00:09.080 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-10-14 07:00:14.757 00:00:11.191 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-10-14 06:56:42.055 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 06:56:42.057 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:01:09.307 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58542 10 6452 1 2025-10-14 07:01:15.992 00:00:10.363 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:02:09.526 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 10 6452 1 2025-10-14 07:02:21.464 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:02:21.582 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:02:16.389 00:00:10.366 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:03:09.746 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:57766 10 6452 1 2025-10-14 07:03:16.792 00:00:10.365 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:04:10.471 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 10 6452 1 2025-10-14 07:04:17.191 00:00:10.374 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:05:10.691 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-10-14 07:05:17.600 00:00:10.366 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:06:10.909 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-10-14 07:06:18.004 00:00:10.362 TCP 23.104.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:02:42.056 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:02:42.059 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:07:21.597 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:07:21.799 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:07:11.152 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-10-14 07:07:18.400 00:00:10.362 TCP 23.104.0.1:50270 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:08:11.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-10-14 07:08:18.799 00:00:10.371 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:09:11.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-10-14 07:09:19.207 00:00:10.368 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:10:11.793 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50330 10 6452 1 2025-10-14 07:10:19.611 00:00:10.368 TCP 23.104.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:11:12.013 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-10-14 07:11:20.018 00:00:10.366 TCP 23.104.0.1:34556 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:12:21.488 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:12:21.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:12:12.223 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-10-14 07:12:20.418 00:00:10.364 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:08:42.059 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:08:42.057 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:13:12.434 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-10-14 07:13:20.815 00:00:10.376 TCP 23.104.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:14:12.647 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-10-14 07:14:21.246 00:00:10.360 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:15:12.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-10-14 07:15:21.648 00:00:10.328 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:16:13.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-10-14 07:16:22.062 00:00:10.375 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:17:21.646 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:17:21.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:17:13.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-10-14 07:17:22.472 00:00:10.373 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:18:13.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-10-14 07:18:22.892 00:00:10.379 TCP 23.104.0.1:53430 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:14:42.058 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:14:42.060 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:19:13.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-10-14 07:19:23.303 00:00:10.365 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:20:13.933 00:00:10.881 TCP 1.101.0.1:3000 -> 22.102.0.1:37374 10 6452 1 2025-10-14 07:20:23.704 00:00:10.372 TCP 23.104.0.1:49550 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:21:14.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-10-14 07:21:24.119 00:00:10.366 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:22:21.902 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:22:15.080 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-10-14 07:22:22.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:22:24.525 00:00:10.325 TCP 23.104.0.1:53938 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:23:15.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-10-14 07:23:24.888 00:00:10.336 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:24:15.521 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-10-14 07:24:25.261 00:00:10.384 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:20:42.060 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:20:42.058 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:25:15.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51632 10 6452 1 2025-10-14 07:25:25.676 00:00:10.381 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:26:15.924 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-10-14 07:26:26.107 00:00:10.366 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:27:21.958 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:27:21.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:27:16.164 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41104 10 6452 1 2025-10-14 07:27:26.512 00:00:10.367 TCP 23.104.0.1:35872 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:28:16.377 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-10-14 07:28:26.915 00:00:10.380 TCP 23.104.0.1:53704 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:29:16.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48372 10 6452 1 2025-10-14 07:29:27.332 00:00:10.503 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:30:16.961 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44238 10 6452 1 2025-10-14 07:30:27.871 00:00:10.367 TCP 23.104.0.1:55014 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:26:42.064 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:26:42.060 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:31:17.181 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35840 10 6452 1 2025-10-14 07:31:28.277 00:00:10.361 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:32:21.829 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:32:22.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:32:17.411 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-10-14 07:32:28.677 00:00:10.368 TCP 23.104.0.1:34100 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:33:17.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34640 10 6452 1 2025-10-14 07:33:29.105 00:00:10.322 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:34:17.863 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6452 1 2025-10-14 07:34:29.466 00:00:10.366 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:35:18.076 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-10-14 07:35:29.869 00:00:10.369 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:36:18.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53124 10 6452 1 2025-10-14 07:36:30.274 00:00:10.378 TCP 23.104.0.1:52366 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:32:42.065 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:32:42.062 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:37:22.357 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:37:22.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:37:18.466 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-10-14 07:37:30.690 00:00:10.344 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:38:18.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6452 1 2025-10-14 07:38:31.080 00:00:10.364 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:39:18.879 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60496 10 6452 1 2025-10-14 07:39:31.480 00:00:10.367 TCP 23.104.0.1:50304 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:40:19.103 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-10-14 07:40:31.885 00:00:10.341 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:41:19.315 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 12 10375 1 2025-10-14 07:41:32.264 00:00:10.402 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 15 1926 1 2025-10-14 07:42:22.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:42:22.278 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:42:19.561 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48878 10 6452 1 2025-10-14 07:38:42.063 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:38:42.066 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:42:32.706 00:00:10.367 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:43:19.779 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-10-14 07:43:33.112 00:00:10.328 TCP 23.104.0.1:32794 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:44:19.999 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-10-14 07:44:33.480 00:00:10.369 TCP 23.104.0.1:58762 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:45:20.220 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42496 10 6452 1 2025-10-14 07:45:33.889 00:00:10.379 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:46:20.396 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6452 1 2025-10-14 07:46:34.308 00:00:10.368 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:47:22.524 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:47:22.420 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:47:20.621 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-10-14 07:47:34.711 00:00:10.323 TCP 23.104.0.1:39970 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:48:20.843 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-10-14 07:44:42.064 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:44:42.067 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:48:35.105 00:00:10.363 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:49:21.027 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-10-14 07:49:35.505 00:00:10.384 TCP 23.104.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:50:21.201 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-10-14 07:50:35.932 00:00:10.388 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:51:21.413 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-10-14 07:51:36.360 00:00:10.362 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:52:22.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:52:22.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:52:21.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43888 10 6452 1 2025-10-14 07:52:36.763 00:00:10.374 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:53:21.848 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-10-14 07:53:37.177 00:00:10.325 TCP 23.104.0.1:35160 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:54:22.085 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40594 10 6452 1 2025-10-14 07:50:42.069 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 07:50:42.065 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:54:37.541 00:00:10.371 TCP 23.104.0.1:35894 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:55:22.305 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47572 10 6452 1 2025-10-14 07:55:37.954 00:00:10.323 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:56:22.516 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-10-14 07:56:38.313 00:00:10.363 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:57:22.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 07:57:23.052 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 07:57:22.705 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-10-14 07:57:38.715 00:00:11.073 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-10-14 07:58:22.920 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:38050 10 6452 1 2025-10-14 07:58:39.834 00:00:10.346 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-14 06:56:42 - 2025-10-14 07:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0047s flows/second: 35186.8 Runtime: 0.0047s