Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 02:58:44.225 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-10-20 02:59:00.836 00:00:21.677 TCP 23.104.0.1:54802 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:59:44.463 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-10-20 03:00:09.801 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:00:09.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:00:12.572 00:00:10.366 TCP 23.104.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:56:44.863 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:56:44.860 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:00:44.689 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49132 10 6452 1 2025-10-20 03:01:12.978 00:00:10.366 TCP 23.104.0.1:58766 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:01:44.914 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-10-20 03:02:13.382 00:00:10.325 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:02:45.153 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-10-20 03:03:13.752 00:00:10.459 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 15 1926 1 2025-10-20 03:03:45.362 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 12 10375 1 2025-10-20 03:04:14.252 00:00:10.328 TCP 23.104.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:04:45.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-10-20 03:05:09.990 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:05:09.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:05:14.616 00:00:10.365 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:05:45.823 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-10-20 03:06:15.014 00:00:10.366 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:02:44.865 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:02:44.862 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:06:46.039 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-10-20 03:07:15.420 00:00:10.374 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:07:46.253 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:41016 10 6452 1 2025-10-20 03:08:15.836 00:00:10.388 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:08:46.419 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-10-20 03:09:16.262 00:00:10.324 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:09:46.640 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-10-20 03:10:10.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:10:10.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:10:16.627 00:00:10.364 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:10:46.870 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-10-20 03:11:17.033 00:00:10.369 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:11:47.064 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40100 10 6452 1 2025-10-20 03:12:17.444 00:00:10.359 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:08:44.868 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:08:44.865 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:12:47.289 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-10-20 03:13:17.847 00:00:10.381 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:13:47.508 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39448 10 6452 1 2025-10-20 03:14:18.265 00:00:10.903 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:14:47.728 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51984 10 6452 1 2025-10-20 03:15:10.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:15:09.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:15:19.207 00:00:10.365 TCP 23.104.0.1:41676 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:15:47.960 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6452 1 2025-10-20 03:16:19.613 00:00:10.362 TCP 23.104.0.1:37154 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:16:48.187 00:00:10.450 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-10-20 03:17:20.017 00:00:10.364 TCP 23.104.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:17:48.674 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-10-20 03:18:20.418 00:00:10.368 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:14:44.867 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:14:44.869 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:18:48.881 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45560 10 6452 1 2025-10-20 03:19:20.830 00:00:10.392 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:19:49.078 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-10-20 03:20:10.298 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:20:10.497 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:20:21.260 00:00:10.366 TCP 23.104.0.1:38560 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:20:49.299 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6452 1 2025-10-20 03:21:21.663 00:00:10.379 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:21:49.540 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-10-20 03:22:22.114 00:00:10.334 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:22:49.752 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-10-20 03:23:22.493 00:00:10.366 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:23:49.970 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41598 10 6452 1 2025-10-20 03:24:22.895 00:00:10.373 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:20:44.870 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:20:44.868 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:24:50.193 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-10-20 03:25:10.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:25:10.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:25:23.314 00:00:10.366 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:25:50.407 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-10-20 03:26:23.721 00:00:11.886 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:26:50.613 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-10-20 03:27:25.651 00:00:10.368 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:27:50.837 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 2025-10-20 03:28:26.069 00:00:10.367 TCP 23.104.0.1:50990 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:28:51.003 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-10-20 03:29:26.475 00:00:10.866 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:29:51.220 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-10-20 03:30:10.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:30:10.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:30:27.376 00:00:10.364 TCP 23.104.0.1:60502 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:26:44.872 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:26:44.871 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:30:51.444 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-10-20 03:31:27.778 00:00:10.368 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:31:51.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54978 10 6452 1 2025-10-20 03:32:28.187 00:00:10.325 TCP 23.104.0.1:37626 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:32:51.827 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-10-20 03:33:28.549 00:00:10.363 TCP 23.104.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:33:52.004 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-10-20 03:34:28.951 00:00:10.328 TCP 23.104.0.1:43836 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:34:52.219 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-10-20 03:35:10.735 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:35:10.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:35:29.316 00:00:10.363 TCP 23.104.0.1:44416 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:35:52.387 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33544 10 6452 1 2025-10-20 03:36:29.717 00:00:10.326 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:32:44.873 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:32:44.876 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:36:52.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 2025-10-20 03:37:30.107 00:00:10.364 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:37:52.812 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-10-20 03:38:30.520 00:00:10.363 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:38:53.029 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-10-20 03:39:30.921 00:00:10.373 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:39:53.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-10-20 03:40:10.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:40:10.526 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:40:31.334 00:00:10.363 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:40:53.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37256 10 6452 1 2025-10-20 03:41:31.736 00:00:10.329 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:41:53.712 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6452 1 2025-10-20 03:38:44.874 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:42:32.102 00:00:10.364 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:38:44.878 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:42:53.882 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-10-20 03:43:32.507 00:00:10.371 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:43:54.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-10-20 03:44:32.909 00:00:10.369 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:44:54.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-10-20 03:45:10.836 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:45:10.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:45:33.317 00:00:10.360 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:45:54.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53890 10 6452 1 2025-10-20 03:46:33.717 00:00:10.318 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:46:54.759 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54716 10 6452 1 2025-10-20 03:47:34.100 00:00:10.366 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:47:54.984 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:40370 10 6452 1 2025-10-20 03:48:34.500 00:00:10.361 TCP 23.104.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:44:44.880 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:44:44.878 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:48:55.172 00:00:23.685 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 11 6504 1 2025-10-20 03:49:34.903 00:00:10.371 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:50:12.228 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:50:12.148 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:50:08.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-10-20 03:50:35.329 00:00:10.369 TCP 23.104.0.1:35286 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:51:09.133 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55514 10 6452 1 2025-10-20 03:51:35.737 00:00:10.371 TCP 23.104.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:52:09.350 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-10-20 03:52:36.146 00:00:10.327 TCP 23.104.0.1:38496 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:53:09.521 00:00:10.477 TCP 1.101.0.1:3000 -> 22.102.0.1:58882 10 6452 1 2025-10-20 03:53:36.511 00:00:10.364 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:54:10.047 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-20 03:50:44.879 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 03:54:36.913 00:00:10.367 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:50:44.884 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 03:55:11.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 03:55:10.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 03:55:10.295 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-10-20 03:55:37.311 00:00:10.335 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:56:10.511 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-10-20 03:56:37.686 00:00:10.322 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:57:10.680 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 6452 1 2025-10-20 03:57:38.052 00:00:10.363 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-10-20 03:58:10.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-10-20 03:58:38.452 00:00:10.377 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-10-20 02:56:44 - 2025-10-20 03:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0023s flows/second: 70118.8 Runtime: 0.0024s