Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 08:58:48.044 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6452 1 2025-10-17 08:59:09.575 00:00:10.325 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:59:48.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-10-17 09:00:09.943 00:00:10.749 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-10-17 08:56:43.533 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 08:56:43.535 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:00:48.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6452 1 2025-10-17 09:01:10.732 00:00:10.366 TCP 23.104.0.1:41448 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:01:48.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38430 10 6452 1 2025-10-17 09:02:11.135 00:00:10.365 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:02:48.895 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-10-17 09:03:11.537 00:00:10.358 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:03:50.273 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:03:50.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:03:49.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 2025-10-17 09:04:11.933 00:00:10.384 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:04:49.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36428 10 6452 1 2025-10-17 09:05:12.354 00:00:10.325 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:05:49.562 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 11 6504 1 2025-10-17 09:06:12.714 00:00:10.384 TCP 23.104.0.1:46160 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:02:43.535 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:02:43.533 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:06:49.852 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-10-17 09:07:13.135 00:00:10.364 TCP 23.104.0.1:50260 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:07:50.102 00:00:11.330 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-10-17 09:08:13.538 00:00:10.368 TCP 23.104.0.1:58944 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:08:50.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:08:50.682 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:08:51.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-10-17 09:09:13.938 00:00:10.379 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:09:51.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34798 10 6452 1 2025-10-17 09:10:14.352 00:00:10.326 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:10:51.895 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-10-17 09:11:14.720 00:00:10.367 TCP 23.104.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:11:52.085 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-10-17 09:12:15.124 00:00:10.371 TCP 23.104.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:08:43.536 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:08:43.534 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:12:52.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-10-17 09:13:15.531 00:00:10.367 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:13:50.874 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:13:50.826 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:13:52.504 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-10-17 09:14:15.935 00:00:10.375 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:14:52.722 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-10-17 09:15:16.347 00:00:10.384 TCP 23.104.0.1:53970 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:15:52.936 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-10-17 09:16:16.779 00:00:10.363 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:16:53.181 00:00:10.403 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-10-17 09:17:17.184 00:00:10.362 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:17:53.626 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59438 10 6452 1 2025-10-17 09:18:17.583 00:00:10.367 TCP 23.104.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:14:43.534 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:14:43.537 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:18:50.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:18:50.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:18:53.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58666 10 6452 1 2025-10-17 09:19:17.985 00:00:10.366 TCP 23.104.0.1:57184 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:19:54.079 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55274 10 6452 1 2025-10-17 09:20:18.389 00:00:10.367 TCP 23.104.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:20:54.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-10-17 09:21:18.791 00:00:10.367 TCP 23.104.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:21:54.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-10-17 09:22:19.201 00:00:10.365 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:22:54.723 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40526 10 6452 1 2025-10-17 09:23:19.602 00:00:10.365 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:23:50.779 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:23:50.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:23:54.931 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-10-17 09:24:20.001 00:00:10.326 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:20:43.538 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:20:43.534 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:24:55.160 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47072 10 6452 1 2025-10-17 09:25:20.365 00:00:10.361 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:25:55.372 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47784 10 6452 1 2025-10-17 09:26:20.763 00:00:10.372 TCP 23.104.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:26:55.580 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 12 10375 1 2025-10-17 09:27:21.178 00:00:10.403 TCP 23.104.0.1:43888 -> 1.101.0.1:3000 15 1926 1 2025-10-17 09:27:55.840 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-10-17 09:28:21.620 00:00:10.362 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:28:51.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:28:51.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:28:56.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-10-17 09:29:22.023 00:00:10.366 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:29:56.296 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 10 6452 1 2025-10-17 09:30:22.428 00:00:10.604 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:26:43.538 00:05:02.617 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:26:43.536 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:30:56.470 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43546 10 6452 1 2025-10-17 09:31:23.113 00:00:10.358 TCP 23.104.0.1:49646 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:31:56.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57894 10 6452 1 2025-10-17 09:32:23.510 00:00:10.361 TCP 23.104.0.1:54370 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:32:56.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-10-17 09:33:23.914 00:00:10.361 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:33:51.245 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:33:51.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:33:57.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-10-17 09:34:24.316 00:00:10.363 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:34:57.329 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59934 10 6452 1 2025-10-17 09:35:24.718 00:00:10.371 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:35:57.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 10 6452 1 2025-10-17 09:36:25.127 00:00:10.765 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:32:43.540 00:05:02.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:32:43.542 00:05:02.619 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:36:57.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59600 10 6452 1 2025-10-17 09:37:25.929 00:00:10.340 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:37:57.980 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-10-17 09:38:26.303 00:00:10.329 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:38:51.452 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:38:51.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:38:58.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47746 10 6452 1 2025-10-17 09:39:26.665 00:00:10.368 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:39:58.419 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42518 10 6452 1 2025-10-17 09:40:27.096 00:00:10.365 TCP 23.104.0.1:54468 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:40:58.591 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 10 6452 1 2025-10-17 09:41:27.499 00:00:10.323 TCP 23.104.0.1:56910 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:41:58.793 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-10-17 09:42:27.863 00:00:10.370 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:38:43.542 00:05:02.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:38:43.545 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:42:59.012 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-10-17 09:43:28.269 00:00:10.383 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:43:51.360 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:43:51.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:43:59.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6452 1 2025-10-17 09:44:28.675 00:00:10.468 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:44:59.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-10-17 09:45:29.178 00:00:10.363 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:45:59.647 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53536 10 6452 1 2025-10-17 09:46:29.580 00:00:10.383 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:46:59.878 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 12 10375 1 2025-10-17 09:47:30.008 00:00:10.440 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 15 1926 1 2025-10-17 09:48:00.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-10-17 09:48:30.488 00:00:10.368 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:44:43.547 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:44:43.544 00:05:02.624 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:48:51.554 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:48:51.549 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:49:00.352 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-10-17 09:49:30.897 00:00:10.376 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:50:00.565 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-10-17 09:50:31.318 00:00:10.366 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:51:00.780 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-10-17 09:51:31.726 00:00:10.326 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:52:00.993 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-10-17 09:52:32.099 00:00:10.367 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:53:01.211 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-10-17 09:53:32.507 00:00:10.319 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:53:52.565 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 09:53:52.374 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:54:01.384 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60756 10 6452 1 2025-10-17 09:54:32.869 00:00:10.376 TCP 23.104.0.1:59724 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:50:43.546 00:05:02.620 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 09:50:43.544 00:05:02.625 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 09:55:01.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-10-17 09:55:33.277 00:00:10.361 TCP 23.104.0.1:50680 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:56:01.763 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6452 1 2025-10-17 09:56:33.681 00:00:10.365 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:57:01.975 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-10-17 09:57:34.105 00:00:10.322 TCP 23.104.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:58:02.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-10-17 09:58:34.462 00:00:10.363 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-10-17 09:58:51.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 09:58:51.771 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1088, avg pps: 0, avg bpp: 319 Time window: 2025-10-17 08:56:43 - 2025-10-17 09:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0017s Wall: 0.0024s flows/second: 67464.3 Runtime: 0.0025s