Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 00:59:00.033 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-10-20 00:59:01.480 00:00:10.321 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:00:00.246 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42144 10 6452 1 2025-10-20 01:00:07.723 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:00:07.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:00:01.837 00:00:10.401 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-10-20 00:56:44.825 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 00:56:44.827 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:01:00.466 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-10-20 01:01:02.273 00:00:10.362 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:02:00.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-10-20 01:02:02.679 00:00:10.335 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:03:00.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50708 10 6452 1 2025-10-20 01:03:03.062 00:00:10.362 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:04:01.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60904 10 6452 1 2025-10-20 01:04:03.464 00:00:10.363 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:05:08.300 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:05:08.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:05:01.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-10-20 01:05:03.862 00:00:10.373 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:06:01.506 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57692 10 6452 1 2025-10-20 01:06:04.275 00:00:10.370 TCP 23.104.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:02:44.826 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:02:44.829 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:07:01.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-10-20 01:07:04.679 00:00:10.378 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:08:05.108 00:00:10.333 TCP 23.104.0.1:36484 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:08:01.931 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-10-20 01:09:02.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-10-20 01:09:05.470 00:00:10.369 TCP 23.104.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:10:07.678 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:10:07.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:10:02.386 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57610 10 6452 1 2025-10-20 01:10:05.876 00:00:10.408 TCP 23.104.0.1:37808 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:11:06.311 00:00:10.370 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:11:02.594 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-10-20 01:12:02.812 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2025-10-20 01:12:06.715 00:00:10.383 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:08:44.830 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:08:44.832 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:13:02.986 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35506 10 6452 1 2025-10-20 01:13:07.131 00:00:10.411 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:14:03.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43306 10 6452 1 2025-10-20 01:14:07.587 00:00:10.367 TCP 23.104.0.1:39342 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:15:07.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:15:07.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:15:03.430 00:00:10.730 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-10-20 01:15:07.992 00:00:10.365 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:16:04.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35658 10 6452 1 2025-10-20 01:16:08.395 00:00:10.361 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:17:04.386 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-10-20 01:17:08.797 00:00:10.364 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:18:04.558 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 12 10375 1 2025-10-20 01:18:09.208 00:00:10.794 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 15 1926 1 2025-10-20 01:14:44.834 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:14:44.836 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:19:04.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43342 10 6452 1 2025-10-20 01:19:10.086 00:00:10.339 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:20:07.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:20:08.066 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:20:05.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-10-20 01:20:10.468 00:00:10.345 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:21:05.250 00:00:10.502 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-10-20 01:21:10.854 00:00:10.371 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:22:05.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-10-20 01:22:11.270 00:00:10.368 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:23:06.010 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51860 10 6452 1 2025-10-20 01:23:11.683 00:00:10.365 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:24:06.224 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54232 10 6452 1 2025-10-20 01:24:12.110 00:00:10.322 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:20:44.836 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:20:44.838 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:25:07.992 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:25:07.766 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:25:06.425 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41412 10 6452 1 2025-10-20 01:25:12.474 00:00:10.340 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:26:06.637 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-10-20 01:26:12.846 00:00:10.379 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:27:06.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45176 10 6452 1 2025-10-20 01:27:13.262 00:00:10.325 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:28:07.092 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-10-20 01:28:13.626 00:00:10.361 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:29:07.306 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-10-20 01:29:14.026 00:00:10.325 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:30:08.248 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:30:08.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:30:07.556 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-10-20 01:30:14.388 00:00:10.369 TCP 23.104.0.1:39210 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:26:44.840 00:05:02.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:26:44.836 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:31:07.793 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-10-20 01:31:14.794 00:00:10.364 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:32:08.010 00:00:10.630 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-10-20 01:32:15.210 00:00:10.573 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:33:08.682 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-10-20 01:33:15.820 00:00:10.366 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:34:08.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-10-20 01:34:16.228 00:00:10.384 TCP 23.104.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:35:08.030 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:35:08.305 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:35:09.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59864 10 6452 1 2025-10-20 01:35:16.651 00:00:10.367 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:36:09.325 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50390 10 6452 1 2025-10-20 01:36:17.059 00:00:10.366 TCP 23.104.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:32:44.837 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:32:44.840 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:37:09.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-10-20 01:37:17.470 00:00:10.325 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:38:09.745 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-10-20 01:38:17.835 00:00:10.370 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:39:09.967 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60790 10 6452 1 2025-10-20 01:39:18.240 00:00:10.329 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:40:08.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:40:08.316 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:40:10.178 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6452 1 2025-10-20 01:40:18.604 00:00:10.378 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:41:10.394 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-10-20 01:41:19.017 00:00:10.383 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:42:10.560 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-10-20 01:42:19.432 00:00:10.339 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:38:44.842 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:38:44.839 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:43:10.727 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-10-20 01:43:19.810 00:00:10.365 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:44:10.935 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-10-20 01:44:20.209 00:00:10.362 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:45:08.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:45:08.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:45:11.173 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-10-20 01:45:20.606 00:00:10.356 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:46:11.404 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6452 1 2025-10-20 01:46:21.008 00:00:10.366 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:47:11.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-10-20 01:47:21.417 00:00:10.324 TCP 23.104.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:48:11.826 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-10-20 01:48:21.778 00:00:10.326 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:44:44.842 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:44:44.840 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:49:12.000 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-10-20 01:49:22.150 00:00:10.365 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:50:08.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:50:08.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:50:12.220 00:00:10.322 TCP 1.101.0.1:3000 -> 22.102.0.1:44398 10 6452 1 2025-10-20 01:50:22.560 00:00:10.364 TCP 23.104.0.1:53476 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:51:12.581 00:00:10.848 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 10 6452 1 2025-10-20 01:51:22.965 00:00:10.340 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:52:13.476 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52976 10 6452 1 2025-10-20 01:52:23.346 00:00:10.366 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:53:13.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58316 10 6452 1 2025-10-20 01:53:23.755 00:00:10.322 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:54:13.905 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55984 10 6452 1 2025-10-20 01:54:24.118 00:00:10.363 TCP 23.104.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:50:44.841 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 01:50:44.844 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:55:08.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 01:55:08.786 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 01:55:14.136 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-10-20 01:55:24.520 00:00:10.372 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:56:14.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-10-20 01:56:24.923 00:00:10.372 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:57:14.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-10-20 01:57:25.331 00:00:10.366 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:58:14.739 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-10-20 01:58:25.736 00:00:10.369 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-20 00:56:44 - 2025-10-20 01:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0010s Wall: 0.0024s flows/second: 69369.3 Runtime: 0.0024s