Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 05:58:47.733 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36756 10 6452 1 2025-10-20 05:59:28.089 00:00:10.334 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:59:47.953 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58192 10 6452 1 2025-10-20 06:00:13.349 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:00:13.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:00:28.462 00:00:10.361 TCP 23.104.0.1:37120 -> 1.101.0.1:3000 11 1507 1 2025-10-20 05:56:44.923 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 05:56:44.926 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:00:48.181 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-10-20 06:01:28.864 00:00:10.367 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:01:48.397 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-10-20 06:02:29.271 00:00:10.323 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:02:48.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54836 10 6452 1 2025-10-20 06:03:29.631 00:00:10.326 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:03:48.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-10-20 06:04:29.994 00:00:10.362 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:04:49.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55820 10 6452 1 2025-10-20 06:05:13.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:05:13.527 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:05:30.400 00:00:10.378 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:05:49.251 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-10-20 06:06:30.831 00:00:10.378 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:02:44.929 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:02:44.925 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:06:49.460 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-10-20 06:07:31.245 00:00:10.366 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:07:49.669 00:00:10.784 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-10-20 06:08:31.653 00:00:10.441 TCP 23.104.0.1:60608 -> 1.101.0.1:3000 15 1926 1 2025-10-20 06:08:50.475 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 12 10375 1 2025-10-20 06:09:32.133 00:00:10.331 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:09:50.715 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-10-20 06:10:13.742 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:10:13.597 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:10:32.508 00:00:10.367 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:10:50.926 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-10-20 06:11:32.914 00:00:10.338 TCP 23.104.0.1:35640 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:11:51.135 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-10-20 06:08:44.927 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:12:33.294 00:00:10.359 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:08:44.930 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:12:51.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-10-20 06:13:33.692 00:00:10.366 TCP 23.104.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:13:51.523 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40272 10 6452 1 2025-10-20 06:14:34.105 00:00:10.365 TCP 23.104.0.1:43998 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:14:51.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-10-20 06:15:13.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:15:14.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:15:34.508 00:00:10.364 TCP 23.104.0.1:43448 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:15:51.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-10-20 06:16:34.913 00:00:11.032 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:16:52.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-10-20 06:17:35.983 00:00:10.330 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:17:52.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-10-20 06:14:44.929 00:05:02.648 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:18:36.342 00:00:10.325 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:14:44.931 00:05:02.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:18:52.610 00:00:10.325 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-10-20 06:19:36.703 00:00:10.368 TCP 23.104.0.1:50582 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:19:52.978 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-10-20 06:20:13.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:20:13.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:20:37.110 00:00:10.321 TCP 23.104.0.1:33232 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:20:53.219 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 10 6452 1 2025-10-20 06:21:37.467 00:00:10.359 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:21:53.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-10-20 06:22:37.867 00:00:10.366 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:22:53.603 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-10-20 06:23:38.274 00:00:10.366 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:23:53.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59462 10 6452 1 2025-10-20 06:20:44.933 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:24:38.681 00:00:10.371 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:20:44.934 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:24:53.981 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 12 6556 1 2025-10-20 06:25:14.110 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:25:14.071 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:25:39.107 00:00:10.322 TCP 23.104.0.1:54562 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:25:54.197 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 2025-10-20 06:26:39.468 00:00:10.322 TCP 23.104.0.1:46946 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:26:54.414 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-20 06:27:39.822 00:00:10.385 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:27:54.628 00:00:11.042 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 12 10375 1 2025-10-20 06:28:40.251 00:00:10.436 TCP 23.104.0.1:37480 -> 1.101.0.1:3000 15 1926 1 2025-10-20 06:28:55.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44640 10 6452 1 2025-10-20 06:29:40.728 00:00:10.363 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:29:55.920 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-10-20 06:30:14.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:30:14.257 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:26:44.935 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:30:41.132 00:00:10.363 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:26:44.932 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:30:56.121 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42478 10 6452 1 2025-10-20 06:31:41.539 00:00:10.365 TCP 23.104.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:31:56.337 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-10-20 06:32:41.943 00:00:10.366 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:32:56.548 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-10-20 06:33:42.347 00:00:10.362 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:33:56.769 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56112 10 6452 1 2025-10-20 06:34:42.749 00:00:10.396 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:34:56.991 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33758 10 6452 1 2025-10-20 06:35:14.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:35:14.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:35:43.191 00:00:10.363 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:35:57.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-10-20 06:32:44.936 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:32:44.933 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:36:43.590 00:00:10.330 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:36:57.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-10-20 06:37:43.959 00:00:10.320 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:37:57.642 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-10-20 06:38:44.320 00:00:10.373 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:38:57.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-10-20 06:39:44.733 00:00:10.328 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:39:58.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-10-20 06:40:14.231 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:40:14.416 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:40:45.109 00:00:10.359 TCP 23.104.0.1:50666 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:40:58.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47502 10 6452 1 2025-10-20 06:41:45.510 00:00:10.362 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:41:58.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48294 10 6452 1 2025-10-20 06:38:44.938 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:38:44.935 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:42:45.909 00:00:10.366 TCP 23.104.0.1:54722 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:42:58.668 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48392 10 6452 1 2025-10-20 06:43:46.315 00:00:10.323 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:43:58.844 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50750 10 6452 1 2025-10-20 06:44:46.681 00:00:10.374 TCP 23.104.0.1:46396 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:44:59.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 10 6452 1 2025-10-20 06:45:14.331 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:45:14.321 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:45:47.148 00:00:10.365 TCP 23.104.0.1:40474 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:45:59.298 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34842 10 6452 1 2025-10-20 06:46:47.550 00:00:10.368 TCP 23.104.0.1:35444 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:46:59.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 10 6452 1 2025-10-20 06:47:47.953 00:00:10.385 TCP 23.104.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:47:59.691 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44182 10 6452 1 2025-10-20 06:44:44.939 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:44:44.941 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:48:48.379 00:00:10.368 TCP 23.104.0.1:59900 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:48:59.914 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-10-20 06:49:48.783 00:00:10.363 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:50:00.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-10-20 06:50:14.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:50:14.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:50:49.190 00:00:10.361 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:51:00.315 00:00:10.556 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-10-20 06:51:49.590 00:00:10.364 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:52:00.912 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-10-20 06:52:49.991 00:00:10.378 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:53:01.123 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-10-20 06:53:50.406 00:00:10.362 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:54:01.296 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-10-20 06:50:44.943 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 06:50:44.939 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 06:54:50.821 00:00:10.368 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:55:01.467 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-10-20 06:55:14.855 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 06:55:14.894 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 06:55:51.222 00:00:10.360 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:56:01.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6452 1 2025-10-20 06:56:51.624 00:00:10.362 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:57:01.898 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-10-20 06:57:52.028 00:00:10.369 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-10-20 06:58:02.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33836 10 6452 1 Summary: total flows: 163, total bytes: 505629, total packets: 1575, avg bps: 1096, avg pps: 0, avg bpp: 321 Time window: 2025-10-20 05:56:44 - 2025-10-20 06:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0023s User: 0.0023s Wall: 0.0021s flows/second: 77469.9 Runtime: 0.0021s