Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 03:59:05.254 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54818 10 6452 1 2025-10-15 03:59:13.279 00:00:10.323 TCP 23.104.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:00:05.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-10-15 04:00:13.642 00:00:10.366 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:56:42.459 00:05:02.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:56:42.457 00:05:02.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:01:05.645 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:57336 10 6452 1 2025-10-15 04:01:14.052 00:00:10.361 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:02:05.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50752 10 6452 1 2025-10-15 04:02:14.453 00:00:10.362 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:02:46.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:02:46.747 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:03:06.185 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-10-15 04:03:14.854 00:00:10.378 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:04:06.398 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-10-15 04:04:15.271 00:00:10.324 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:05:06.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53114 10 6452 1 2025-10-15 04:05:15.632 00:00:10.363 TCP 23.104.0.1:48204 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:06:06.838 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-10-15 04:06:16.031 00:00:10.361 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:02:42.457 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:02:42.460 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:07:07.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6452 1 2025-10-15 04:07:16.436 00:00:10.364 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:07:46.872 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:07:46.931 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:08:07.293 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44806 10 6452 1 2025-10-15 04:08:16.840 00:00:10.341 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:09:07.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-10-15 04:09:17.219 00:00:10.366 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:10:07.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-10-15 04:10:17.618 00:00:10.373 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:11:07.927 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-10-15 04:11:18.029 00:00:10.327 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:12:08.130 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-10-15 04:12:18.391 00:00:10.365 TCP 23.104.0.1:56528 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:08:42.463 00:05:02.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:12:46.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:08:42.461 00:05:02.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:12:47.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:13:08.308 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 10 6452 1 2025-10-15 04:13:18.798 00:00:10.332 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:14:08.484 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54114 10 6452 1 2025-10-15 04:14:19.168 00:00:10.364 TCP 23.104.0.1:38282 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:15:08.712 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-10-15 04:15:19.569 00:00:10.361 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:16:08.889 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 12 6556 1 2025-10-15 04:16:19.974 00:00:10.373 TCP 23.104.0.1:59104 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:17:09.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-10-15 04:17:20.400 00:00:10.364 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:17:47.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:17:47.102 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:18:09.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42834 10 6452 1 2025-10-15 04:18:20.796 00:00:10.375 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:14:42.467 00:05:02.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:14:42.463 00:05:02.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:19:09.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37462 10 6452 1 2025-10-15 04:19:21.218 00:00:10.369 TCP 23.104.0.1:58780 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:20:09.757 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-10-15 04:20:21.622 00:00:10.373 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:21:09.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50828 10 6452 1 2025-10-15 04:21:22.036 00:00:10.328 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:22:10.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53998 10 6452 1 2025-10-15 04:22:22.399 00:00:10.365 TCP 23.104.0.1:33320 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:22:47.123 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:22:47.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:23:10.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 12 6556 1 2025-10-15 04:23:22.806 00:00:10.370 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:24:10.633 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45582 10 6452 1 2025-10-15 04:24:23.218 00:00:10.364 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:20:42.469 00:05:02.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:20:42.466 00:05:02.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:25:10.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38798 10 6452 1 2025-10-15 04:25:23.622 00:00:10.365 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:26:11.083 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-10-15 04:26:24.029 00:00:10.372 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:27:11.288 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-10-15 04:27:24.443 00:00:10.362 TCP 23.104.0.1:47254 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:27:47.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:27:47.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:28:11.465 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58712 10 6452 1 2025-10-15 04:28:24.850 00:00:10.379 TCP 23.104.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:29:11.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-10-15 04:29:25.269 00:00:10.323 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:30:11.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33462 10 6452 1 2025-10-15 04:30:25.633 00:00:10.363 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:26:42.469 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:26:42.472 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:31:12.114 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50704 10 6452 1 2025-10-15 04:31:26.036 00:00:10.361 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:32:12.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40992 10 6452 1 2025-10-15 04:32:26.440 00:00:10.366 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:32:47.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:32:47.301 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:33:12.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37316 10 6452 1 2025-10-15 04:33:26.847 00:00:10.384 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:34:12.719 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41806 10 6452 1 2025-10-15 04:34:27.266 00:00:10.368 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:35:12.945 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-10-15 04:35:27.672 00:00:10.370 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:36:13.179 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51550 12 10369 1 2025-10-15 04:36:28.101 00:00:10.446 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 15 1926 1 2025-10-15 04:32:42.475 00:05:02.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:32:42.472 00:05:02.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:37:13.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38528 10 6452 1 2025-10-15 04:37:28.581 00:00:10.368 TCP 23.104.0.1:33576 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:37:47.375 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:37:47.416 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:38:13.642 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50520 10 6452 1 2025-10-15 04:38:28.987 00:00:10.323 TCP 23.104.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:39:13.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33246 10 6452 1 2025-10-15 04:39:29.354 00:00:10.362 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:40:14.128 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49660 10 6452 1 2025-10-15 04:40:29.750 00:00:10.376 TCP 23.104.0.1:52310 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:41:14.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-10-15 04:41:30.163 00:00:10.369 TCP 23.104.0.1:53354 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:42:14.510 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-10-15 04:38:42.473 00:05:02.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:42:30.571 00:00:10.372 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:38:42.476 00:05:02.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:42:47.559 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:42:47.802 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:43:14.732 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-10-15 04:43:30.974 00:00:10.372 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:44:14.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-10-15 04:44:31.381 00:00:10.375 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:45:15.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48116 10 6452 1 2025-10-15 04:45:31.798 00:00:10.363 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:46:15.388 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:41546 12 10375 1 2025-10-15 04:46:32.201 00:00:10.407 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 15 1926 1 2025-10-15 04:47:15.628 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-10-15 04:47:32.642 00:00:10.362 TCP 23.104.0.1:54816 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:47:47.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:47:47.690 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:48:15.814 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 11 6492 1 2025-10-15 04:44:42.473 00:05:02.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:48:33.055 00:00:10.399 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:44:42.476 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:49:16.034 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-10-15 04:49:33.505 00:00:10.368 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:50:16.250 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-10-15 04:50:33.916 00:00:10.328 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:51:16.462 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-10-15 04:51:34.283 00:00:10.329 TCP 23.104.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:52:16.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50602 10 6452 1 2025-10-15 04:52:34.651 00:00:10.323 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:52:47.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:52:47.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:53:16.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-10-15 04:53:35.016 00:00:10.332 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:54:17.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60140 10 6452 1 2025-10-15 04:50:42.474 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:50:42.478 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 04:54:35.391 00:00:10.326 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:55:17.326 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58744 10 6452 1 2025-10-15 04:55:35.758 00:00:10.377 TCP 23.104.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:56:17.544 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40700 12 10371 1 2025-10-15 04:56:36.170 00:00:10.449 TCP 23.104.0.1:54320 -> 1.101.0.1:3000 15 1926 1 2025-10-15 04:57:17.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-10-15 04:57:48.271 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 04:57:48.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 04:57:36.667 00:00:10.365 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-10-15 04:58:18.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57562 10 6452 1 2025-10-15 04:58:37.098 00:00:10.329 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511612, total packets: 1595, avg bps: 1098, avg pps: 0, avg bpp: 320 Time window: 2025-10-15 03:56:42 - 2025-10-15 04:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0020s Wall: 0.0020s flows/second: 83896.3 Runtime: 0.0020s