Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 13:58:52.784 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-10-14 13:59:15.976 00:00:10.365 TCP 23.104.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:59:53.002 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-10-14 14:00:16.381 00:00:10.367 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:56:42.213 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:56:42.210 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:00:53.217 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60822 10 6452 1 2025-10-14 14:01:16.783 00:00:10.381 TCP 23.104.0.1:32808 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:01:53.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-10-14 14:02:30.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:02:29.749 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:02:17.203 00:00:10.422 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:02:53.645 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-10-14 14:03:17.673 00:00:10.391 TCP 23.104.0.1:59230 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:03:53.833 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-10-14 14:04:18.102 00:00:10.324 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:04:54.072 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-10-14 14:05:18.465 00:00:10.362 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:05:54.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-10-14 14:06:18.865 00:00:10.369 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:02:42.213 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:02:42.210 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:06:54.629 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-10-14 14:07:30.056 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:07:30.109 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:07:19.269 00:00:10.364 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:07:54.847 00:00:10.555 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-10-14 14:08:19.673 00:00:10.325 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:08:55.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-10-14 14:09:20.043 00:00:10.364 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:09:55.667 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-10-14 14:10:20.445 00:00:10.368 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:10:55.881 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 10 6452 1 2025-10-14 14:11:20.853 00:00:10.332 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:11:56.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-10-14 14:12:29.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:12:30.022 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:12:21.224 00:00:10.369 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:08:42.214 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:08:42.212 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:12:56.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47748 10 6452 1 2025-10-14 14:13:21.628 00:00:10.367 TCP 23.104.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:13:56.534 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-10-14 14:14:22.034 00:00:10.326 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:14:56.748 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6452 1 2025-10-14 14:15:22.397 00:00:10.325 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:15:56.915 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-10-14 14:16:22.762 00:00:10.368 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:16:57.132 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34528 10 6452 1 2025-10-14 14:17:30.230 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:17:30.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:17:23.173 00:00:10.324 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:17:57.338 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-10-14 14:18:23.535 00:00:10.361 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:14:42.214 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:14:42.212 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:18:57.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6452 1 2025-10-14 14:19:23.937 00:00:10.378 TCP 23.104.0.1:56112 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:19:57.765 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 10 6452 1 2025-10-14 14:20:24.359 00:00:10.367 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:20:57.946 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-10-14 14:21:24.767 00:00:10.371 TCP 23.104.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:21:58.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44392 10 6452 1 2025-10-14 14:22:30.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:22:30.411 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:22:25.179 00:00:10.370 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:22:58.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47640 10 6452 1 2025-10-14 14:23:25.604 00:00:10.324 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:23:58.600 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-10-14 14:24:25.967 00:00:10.368 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:20:42.215 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:20:42.214 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:24:58.826 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52148 10 6452 1 2025-10-14 14:25:26.368 00:00:10.360 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:25:59.076 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 10 6452 1 2025-10-14 14:26:26.770 00:00:10.366 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:26:59.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-10-14 14:27:30.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:27:30.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:27:27.171 00:00:10.324 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:27:59.509 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6452 1 2025-10-14 14:28:27.528 00:00:10.367 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:28:59.730 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-10-14 14:29:27.929 00:00:10.385 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:29:59.940 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-10-14 14:30:28.356 00:00:10.365 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:26:42.218 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:26:42.216 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:31:00.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-10-14 14:31:28.762 00:00:10.383 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:32:00.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35870 10 6452 1 2025-10-14 14:32:30.411 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:32:30.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:32:29.181 00:00:10.368 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:33:00.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49974 10 6452 1 2025-10-14 14:33:29.585 00:00:10.396 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:34:00.796 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:57558 10 6452 1 2025-10-14 14:34:30.025 00:00:10.324 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:35:01.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-10-14 14:35:30.395 00:00:10.366 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:36:01.714 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-10-14 14:36:30.799 00:00:10.527 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:32:42.218 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:32:42.217 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:37:01.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-10-14 14:37:30.673 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:37:30.430 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:37:31.364 00:00:10.359 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:38:02.133 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-10-14 14:38:31.758 00:00:10.380 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:39:02.342 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-10-14 14:39:32.174 00:00:10.358 TCP 23.104.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:40:02.555 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43662 10 6452 1 2025-10-14 14:40:32.572 00:00:10.366 TCP 23.104.0.1:38144 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:41:02.768 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-10-14 14:41:32.980 00:00:10.323 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:42:02.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-10-14 14:42:30.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:42:30.754 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:38:42.219 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:42:33.339 00:00:10.366 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:38:42.215 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:43:03.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45814 10 6452 1 2025-10-14 14:43:33.747 00:00:10.321 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:44:03.427 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-10-14 14:44:34.106 00:00:10.321 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:45:03.607 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60244 10 6452 1 2025-10-14 14:45:34.474 00:00:10.359 TCP 23.104.0.1:51078 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:46:03.817 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60768 10 6452 1 2025-10-14 14:46:34.871 00:00:10.364 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:47:04.042 00:00:10.714 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-10-14 14:47:30.573 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:47:30.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:47:35.276 00:00:10.322 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:48:04.796 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-10-14 14:44:42.218 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:44:42.221 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:48:35.641 00:00:10.360 TCP 23.104.0.1:51622 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:49:04.966 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 12 6556 1 2025-10-14 14:49:36.049 00:00:10.370 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:50:05.333 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-10-14 14:50:36.460 00:00:10.365 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:51:05.553 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-10-14 14:51:36.862 00:00:10.370 TCP 23.104.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:52:05.777 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 10 6452 1 2025-10-14 14:52:30.935 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:52:30.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:52:37.269 00:00:10.604 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:53:06.006 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:38832 10 6452 1 2025-10-14 14:53:37.912 00:00:10.367 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:54:06.605 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-10-14 14:50:42.227 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 14:50:42.227 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:54:38.316 00:00:10.369 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:55:06.827 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-10-14 14:55:38.721 00:00:10.330 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:56:07.073 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-10-14 14:56:39.102 00:00:10.364 TCP 23.104.0.1:42632 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:57:07.308 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50772 10 6452 1 2025-10-14 14:57:30.980 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 14:57:30.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 14:57:39.509 00:00:10.359 TCP 23.104.0.1:58278 -> 1.101.0.1:3000 11 1507 1 2025-10-14 14:58:07.555 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-10-14 14:58:39.912 00:00:10.375 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-10-14 13:56:42 - 2025-10-14 14:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0022s Wall: 0.0022s flows/second: 75606.3 Runtime: 0.0022s