Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 04:59:18.221 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-10-15 04:59:37.468 00:00:10.371 TCP 23.104.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:00:18.436 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-10-15 04:56:42.476 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 04:56:42.477 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:00:37.874 00:00:10.325 TCP 23.104.0.1:50390 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:01:18.650 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59250 10 6452 1 2025-10-15 05:01:38.235 00:00:10.319 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:02:18.862 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-10-15 05:02:38.593 00:00:10.367 TCP 23.104.0.1:48036 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:02:47.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:02:48.143 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:03:19.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-10-15 05:03:38.999 00:00:10.325 TCP 23.104.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:04:19.300 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59122 10 6452 1 2025-10-15 05:04:39.365 00:00:10.365 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:05:19.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45414 10 6452 1 2025-10-15 05:05:39.771 00:00:10.324 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:06:19.722 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-10-15 05:02:42.479 00:05:02.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:02:42.476 00:05:02.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:06:40.137 00:00:10.324 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:07:19.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40156 10 6452 1 2025-10-15 05:07:48.093 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:07:40.508 00:00:10.976 TCP 23.104.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:07:47.891 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:08:20.117 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-15 05:08:41.527 00:00:10.363 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:09:20.331 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55378 11 6504 1 2025-10-15 05:09:41.929 00:00:10.380 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:10:20.552 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-10-15 05:10:42.345 00:00:10.361 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:11:20.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-10-15 05:11:42.751 00:00:10.547 TCP 23.104.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:12:20.986 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-10-15 05:08:42.476 00:05:02.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:12:48.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:08:42.479 00:05:02.483 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:12:48.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:12:43.337 00:00:10.366 TCP 23.104.0.1:38708 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:13:21.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39132 10 6452 1 2025-10-15 05:13:43.744 00:00:10.366 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:14:21.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40548 10 6452 1 2025-10-15 05:14:44.147 00:00:10.368 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:15:21.651 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56358 10 6452 1 2025-10-15 05:15:44.550 00:00:10.367 TCP 23.104.0.1:45360 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:16:21.858 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-10-15 05:16:44.952 00:00:10.368 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:17:22.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-10-15 05:17:48.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:17:48.063 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:17:45.358 00:00:10.372 TCP 23.104.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:18:22.254 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-10-15 05:14:42.480 00:05:02.482 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:14:42.477 00:05:02.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:18:45.771 00:00:10.376 TCP 23.104.0.1:52544 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:19:22.468 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-10-15 05:19:46.183 00:00:10.368 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:20:22.693 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:33878 10 6452 1 2025-10-15 05:20:46.586 00:00:10.367 TCP 23.104.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:21:23.279 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42206 10 6452 1 2025-10-15 05:21:46.989 00:00:10.372 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:22:23.502 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52666 10 6452 1 2025-10-15 05:22:48.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:22:48.309 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:22:47.403 00:00:10.535 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:23:23.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 10 6452 1 2025-10-15 05:23:47.977 00:00:10.376 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:24:23.897 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6452 1 2025-10-15 05:20:42.485 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:20:42.482 00:05:02.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:24:48.391 00:00:10.373 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:25:24.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-10-15 05:25:48.798 00:00:10.372 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:26:24.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42444 10 6452 1 2025-10-15 05:26:49.204 00:00:10.358 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:27:24.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-10-15 05:27:48.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:27:48.448 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:27:49.595 00:00:10.368 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:28:24.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6452 1 2025-10-15 05:28:50.005 00:00:10.360 TCP 23.104.0.1:54710 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:29:24.910 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-10-15 05:29:50.404 00:00:10.368 TCP 23.104.0.1:56528 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:30:25.122 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57406 10 6452 1 2025-10-15 05:26:42.486 00:05:02.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:26:42.483 00:05:02.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:30:50.812 00:00:10.334 TCP 23.104.0.1:45436 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:31:25.333 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39400 10 6452 1 2025-10-15 05:31:51.185 00:00:10.371 TCP 23.104.0.1:49816 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:32:25.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-10-15 05:32:48.418 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:32:48.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:32:51.591 00:00:10.373 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:33:25.774 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-10-15 05:33:52.012 00:00:10.367 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:34:25.984 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:39284 10 6452 1 2025-10-15 05:34:52.417 00:00:10.365 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:35:26.695 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34668 10 6452 1 2025-10-15 05:35:52.824 00:00:10.424 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:36:26.907 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-10-15 05:32:42.485 00:05:02.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:32:42.488 00:05:02.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:36:53.289 00:00:10.364 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:37:27.127 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-10-15 05:37:48.684 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:37:48.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:37:53.687 00:00:10.518 TCP 23.104.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:38:27.297 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-10-15 05:38:54.245 00:00:11.241 TCP 23.104.0.1:55354 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:39:27.472 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-10-15 05:39:55.524 00:00:10.364 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:40:27.689 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46140 10 6452 1 2025-10-15 05:40:55.930 00:00:10.382 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:41:27.864 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58170 10 6452 1 2025-10-15 05:41:56.342 00:00:10.368 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:42:28.095 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50030 10 6452 1 2025-10-15 05:38:42.485 00:05:02.486 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:42:48.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:38:42.487 00:05:02.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:42:48.988 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:42:56.739 00:00:10.365 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:43:28.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-10-15 05:43:57.143 00:00:10.324 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:44:28.516 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-10-15 05:44:57.503 00:00:10.323 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:45:28.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41662 10 6452 1 2025-10-15 05:45:57.865 00:00:10.369 TCP 23.104.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:46:28.909 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-10-15 05:46:58.274 00:00:10.330 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:47:29.117 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55388 10 6452 1 2025-10-15 05:47:48.888 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:47:48.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:47:58.643 00:00:10.365 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:48:29.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-10-15 05:44:42.487 00:05:02.486 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:44:42.491 00:05:02.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:48:59.060 00:00:10.366 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:49:29.542 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-10-15 05:49:59.462 00:00:10.368 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:50:29.715 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-10-15 05:50:59.872 00:00:10.397 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:51:29.890 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6452 1 2025-10-15 05:52:00.302 00:00:10.371 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:52:30.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-10-15 05:52:49.034 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:52:48.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:53:00.707 00:00:10.377 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:53:30.324 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-15 05:54:01.135 00:00:10.376 TCP 23.104.0.1:42708 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:54:30.493 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-10-15 05:50:42.494 00:05:02.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 05:50:42.492 00:05:02.486 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 05:55:01.550 00:00:10.634 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:55:30.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-10-15 05:56:02.224 00:00:10.364 TCP 23.104.0.1:39708 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:56:30.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-10-15 05:57:02.626 00:00:10.322 TCP 23.104.0.1:55496 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:57:31.104 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-10-15 05:57:48.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 05:57:49.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 05:58:02.987 00:00:10.372 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-10-15 05:58:31.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1068, avg pps: 0, avg bpp: 318 Time window: 2025-10-15 04:56:42 - 2025-10-15 05:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0020s flows/second: 82499.3 Runtime: 0.0020s