Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 06:58:56.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-10-16 06:59:09.264 00:00:10.367 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:59:56.247 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 10 6452 1 2025-10-16 07:00:09.673 00:00:10.375 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:56:42.966 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:56:42.964 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:00:56.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53618 10 6452 1 2025-10-16 07:01:10.108 00:00:10.365 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:01:56.679 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-10-16 07:02:10.526 00:00:10.369 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:02:56.886 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-10-16 07:03:19.410 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:03:19.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:03:10.934 00:00:10.375 TCP 23.104.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:03:57.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33852 10 6452 1 2025-10-16 07:04:11.346 00:00:10.362 TCP 23.104.0.1:43750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:04:57.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45744 10 6452 1 2025-10-16 07:05:11.750 00:00:10.571 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:05:57.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-10-16 07:06:12.356 00:00:10.361 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:02:42.966 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:02:42.969 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:06:57.760 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-10-16 07:07:12.754 00:00:10.340 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:07:57.939 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34490 10 6452 1 2025-10-16 07:08:19.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:08:19.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:08:13.132 00:00:10.362 TCP 23.104.0.1:54724 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:08:58.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-10-16 07:09:13.535 00:00:10.369 TCP 23.104.0.1:37318 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:09:58.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-10-16 07:10:13.951 00:00:10.322 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:10:58.612 00:00:10.875 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-10-16 07:11:14.312 00:00:10.321 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:11:59.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 10 6452 1 2025-10-16 07:12:14.671 00:00:10.371 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:08:42.971 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:08:42.969 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:12:59.739 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 11 6492 1 2025-10-16 07:13:19.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:13:19.233 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:13:15.104 00:00:10.789 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:13:59.968 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 12 6556 1 2025-10-16 07:14:15.928 00:00:10.384 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:15:00.194 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-10-16 07:15:16.357 00:00:10.318 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:16:00.411 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-10-16 07:16:16.714 00:00:10.374 TCP 23.104.0.1:48536 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:17:00.604 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-10-16 07:17:17.129 00:00:10.360 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:18:00.842 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57416 10 6452 1 2025-10-16 07:18:19.771 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:18:19.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:18:17.532 00:00:10.994 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:14:42.969 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:14:42.971 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:19:01.087 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-10-16 07:19:18.564 00:00:10.361 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:20:01.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51078 10 6452 1 2025-10-16 07:20:18.966 00:00:10.380 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:21:01.526 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-10-16 07:21:19.382 00:00:10.373 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:22:01.707 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51638 10 6452 1 2025-10-16 07:22:19.796 00:00:10.368 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:23:01.922 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-10-16 07:23:19.643 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:23:19.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:23:20.202 00:00:10.368 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:24:02.166 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-10-16 07:24:20.608 00:00:10.324 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:20:42.971 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:20:42.973 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:25:02.387 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-10-16 07:25:20.974 00:00:10.368 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:26:02.562 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-10-16 07:26:21.376 00:00:10.368 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:27:02.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-10-16 07:27:21.781 00:00:10.366 TCP 23.104.0.1:44334 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:28:02.988 00:00:10.748 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 10 6452 1 2025-10-16 07:28:19.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:28:19.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:28:22.184 00:00:10.367 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:29:03.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34168 10 6452 1 2025-10-16 07:29:22.585 00:00:10.382 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:30:03.979 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44250 10 6452 1 2025-10-16 07:30:23.012 00:00:10.325 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:26:42.978 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:26:42.976 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:31:04.205 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-10-16 07:31:23.377 00:00:10.330 TCP 23.104.0.1:40730 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:32:04.376 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39256 10 6452 1 2025-10-16 07:32:23.745 00:00:10.367 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:33:04.589 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 6452 1 2025-10-16 07:33:19.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:33:20.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:33:24.150 00:00:10.368 TCP 23.104.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:34:04.801 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-10-16 07:34:24.561 00:00:10.367 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:35:05.012 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-10-16 07:35:24.963 00:00:10.372 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:36:05.187 00:00:10.372 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-10-16 07:36:25.375 00:00:10.368 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:32:42.978 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:32:42.980 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:37:05.593 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-10-16 07:37:25.776 00:00:10.367 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:38:05.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-10-16 07:38:19.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:38:20.200 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:38:26.184 00:00:10.325 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:39:06.033 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-10-16 07:39:26.545 00:00:10.329 TCP 23.104.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:40:06.247 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56556 10 6452 1 2025-10-16 07:40:26.906 00:00:10.361 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:41:06.423 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60300 10 6452 1 2025-10-16 07:41:27.305 00:00:10.447 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 15 1926 1 2025-10-16 07:42:06.662 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 12 10375 1 2025-10-16 07:42:27.798 00:00:10.369 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:38:42.983 00:05:02.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:38:42.984 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:43:20.575 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:43:19.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:43:06.918 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-10-16 07:43:28.201 00:00:10.367 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:44:07.154 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-10-16 07:44:28.605 00:00:10.368 TCP 23.104.0.1:52172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:45:07.365 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-10-16 07:45:29.017 00:00:10.360 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:46:07.587 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-10-16 07:46:29.417 00:00:10.364 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:47:07.855 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60946 12 6556 1 2025-10-16 07:47:29.820 00:00:10.321 TCP 23.104.0.1:58850 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:48:20.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:48:08.082 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-10-16 07:48:20.233 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:48:30.182 00:00:10.364 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:44:42.983 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:44:42.986 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:49:08.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57334 10 6452 1 2025-10-16 07:49:30.585 00:00:10.366 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:50:08.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-10-16 07:50:30.988 00:00:10.325 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:51:08.728 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-10-16 07:51:31.350 00:00:10.375 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:52:08.944 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-10-16 07:52:31.786 00:00:10.371 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:53:20.422 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:53:09.187 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54910 10 6452 1 2025-10-16 07:53:20.411 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:53:32.190 00:00:10.382 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:54:09.400 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-10-16 07:50:42.985 00:05:02.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 07:54:32.607 00:00:10.366 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:50:42.989 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 07:55:09.623 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:39376 10 6452 1 2025-10-16 07:55:33.012 00:00:10.365 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:56:09.950 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-10-16 07:56:33.418 00:00:10.366 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:57:10.128 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-10-16 07:57:33.818 00:00:10.366 TCP 23.104.0.1:57172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 07:58:10.354 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-10-16 07:58:20.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 07:58:20.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 07:58:34.220 00:00:10.363 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502938, total packets: 1583, avg bps: 1081, avg pps: 0, avg bpp: 317 Time window: 2025-10-16 06:56:42 - 2025-10-16 07:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0022s Wall: 0.0032s flows/second: 51587.4 Runtime: 0.0032s