Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 02:59:28.714 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-10-17 02:59:30.386 00:00:10.365 TCP 23.104.0.1:44448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:00:30.792 00:00:10.362 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:00:28.892 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-10-17 02:56:43.449 00:05:02.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 02:56:43.452 00:05:02.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:01:31.199 00:00:10.364 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:01:29.117 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-10-17 03:02:29.330 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58046 10 6452 1 2025-10-17 03:02:31.600 00:00:10.329 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:03:29.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-10-17 03:03:43.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:03:31.965 00:00:10.372 TCP 23.104.0.1:50352 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:03:43.319 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:04:29.752 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2025-10-17 03:04:32.376 00:00:10.366 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:05:29.962 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36770 10 6452 1 2025-10-17 03:05:32.778 00:00:10.374 TCP 23.104.0.1:43002 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:06:30.145 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-10-17 03:02:43.449 00:05:02.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:06:33.190 00:00:10.380 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:02:43.453 00:05:02.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:07:30.311 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-10-17 03:07:33.608 00:00:10.324 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:08:30.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-10-17 03:08:43.504 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:08:43.620 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:08:33.968 00:00:10.328 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:09:30.698 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-10-17 03:09:34.334 00:00:10.324 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:10:30.907 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-10-17 03:10:34.694 00:00:10.365 TCP 23.104.0.1:58030 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:11:31.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-10-17 03:11:35.111 00:00:10.558 TCP 23.104.0.1:49592 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:12:31.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53110 10 6452 1 2025-10-17 03:08:43.450 00:05:02.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:08:43.454 00:05:02.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:12:35.708 00:00:10.376 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:13:31.517 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6452 1 2025-10-17 03:13:43.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:13:36.122 00:00:10.359 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:13:43.380 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:14:31.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-10-17 03:14:36.521 00:00:10.324 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:15:32.001 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-10-17 03:15:36.883 00:00:10.387 TCP 23.104.0.1:49360 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:16:32.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-10-17 03:16:37.310 00:00:10.365 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:17:32.434 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 12 10375 1 2025-10-17 03:17:37.715 00:00:10.452 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 15 1926 1 2025-10-17 03:18:43.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:14:43.454 00:05:02.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:18:43.564 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:14:43.454 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:18:32.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-10-17 03:18:38.204 00:00:10.374 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:19:32.890 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-10-17 03:19:38.622 00:00:10.364 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:20:33.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-10-17 03:20:39.028 00:00:10.367 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:21:33.346 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-10-17 03:21:39.437 00:00:10.361 TCP 23.104.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:22:33.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-10-17 03:22:39.838 00:00:10.390 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:23:43.843 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:23:43.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:23:33.731 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-10-17 03:23:40.266 00:00:10.332 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:20:43.457 00:05:02.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:24:33.947 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49936 10 6452 1 2025-10-17 03:20:43.454 00:05:02.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:24:40.643 00:00:10.368 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:25:34.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59646 10 6452 1 2025-10-17 03:25:41.055 00:00:10.370 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:26:34.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-10-17 03:26:41.465 00:00:10.363 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:27:34.597 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-10-17 03:27:41.864 00:00:10.371 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:28:43.787 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:28:43.866 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:28:34.768 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-10-17 03:28:42.275 00:00:10.363 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:29:34.985 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39970 10 6452 1 2025-10-17 03:29:42.674 00:00:10.370 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:26:43.458 00:05:02.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:30:35.217 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-10-17 03:26:43.455 00:05:02.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:30:43.102 00:00:10.370 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:31:35.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-10-17 03:31:43.497 00:00:10.375 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:32:35.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33368 10 6452 1 2025-10-17 03:32:43.909 00:00:10.371 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:33:44.074 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:33:43.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:33:35.870 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44952 10 6452 1 2025-10-17 03:33:44.315 00:00:10.366 TCP 23.104.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:34:36.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-10-17 03:34:44.717 00:00:10.375 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:35:36.313 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41120 10 6452 1 2025-10-17 03:35:45.130 00:00:10.325 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:32:43.458 00:05:02.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:32:43.456 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:36:36.525 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33082 10 6452 1 2025-10-17 03:36:45.490 00:00:10.361 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:37:36.696 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-10-17 03:37:45.887 00:00:10.373 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:38:43.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:38:43.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:38:36.867 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-10-17 03:38:46.300 00:00:10.332 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:39:37.097 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-10-17 03:39:46.664 00:00:10.368 TCP 23.104.0.1:49594 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:40:37.314 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-10-17 03:40:47.081 00:00:10.364 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:41:37.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-10-17 03:41:47.482 00:00:10.360 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:38:43.460 00:05:02.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:42:37.768 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-10-17 03:38:43.457 00:05:02.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:42:47.884 00:00:10.341 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:43:44.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:43:44.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:43:37.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 12 6556 1 2025-10-17 03:43:48.252 00:00:10.361 TCP 23.104.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:44:38.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57756 10 6452 1 2025-10-17 03:44:48.654 00:00:10.365 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:45:38.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-10-17 03:45:49.059 00:00:10.367 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:46:38.614 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45622 10 6452 1 2025-10-17 03:46:49.467 00:00:10.368 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:47:38.825 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 2025-10-17 03:47:49.876 00:00:10.362 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:48:44.338 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:44:43.460 00:05:02.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:48:44.290 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:44:43.458 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:48:39.061 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-10-17 03:48:50.281 00:00:10.364 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:49:39.230 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-10-17 03:49:50.682 00:00:10.364 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:50:39.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-17 03:50:51.109 00:00:10.328 TCP 23.104.0.1:56174 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:51:39.655 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54588 10 6452 1 2025-10-17 03:51:51.476 00:00:10.361 TCP 23.104.0.1:56140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:52:39.868 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45654 10 6452 1 2025-10-17 03:52:51.877 00:00:10.365 TCP 23.104.0.1:56262 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:53:44.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:53:44.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:53:40.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43654 10 6452 1 2025-10-17 03:53:52.288 00:00:10.377 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:50:43.461 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 03:50:43.460 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 03:54:40.302 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-10-17 03:54:52.702 00:00:10.362 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:55:40.479 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-10-17 03:55:53.110 00:00:10.360 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:56:40.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59668 10 6452 1 2025-10-17 03:56:53.518 00:00:10.365 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:57:40.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40616 10 6452 1 2025-10-17 03:57:53.918 00:00:10.379 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-10-17 03:58:44.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 03:58:44.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 03:58:41.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1075, avg pps: 0, avg bpp: 319 Time window: 2025-10-17 02:56:43 - 2025-10-17 03:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0027s Wall: 0.0020s flows/second: 81292.7 Runtime: 0.0020s