Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 02:58:49.934 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:41842 10 6452 1 2025-10-25 02:58:55.994 00:00:10.367 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:55:47.075 00:05:03.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 02:59:50.121 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43668 10 6452 1 2025-10-25 02:59:56.402 00:00:10.376 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-10-25 02:56:47.072 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:00:50.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-10-25 03:00:56.816 00:00:10.336 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:01:50.546 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38796 10 6452 1 2025-10-25 03:01:57.188 00:00:10.358 TCP 23.104.0.1:36262 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:02:34.743 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:02:34.811 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:02:50.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48040 10 6452 1 2025-10-25 03:02:57.585 00:00:10.362 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:03:50.973 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53018 10 6452 1 2025-10-25 03:03:57.985 00:00:10.331 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:04:51.213 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36986 10 6452 1 2025-10-25 03:04:58.359 00:00:10.369 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:01:47.077 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:05:51.387 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-10-25 03:05:58.767 00:00:10.379 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:02:47.074 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:06:51.605 00:00:10.998 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6452 1 2025-10-25 03:06:59.182 00:00:10.418 TCP 23.104.0.1:32890 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:07:34.967 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:07:34.809 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:07:52.642 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-10-25 03:07:59.636 00:00:10.377 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:08:52.822 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-10-25 03:09:00.056 00:00:10.329 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:09:52.990 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-10-25 03:10:00.422 00:00:10.330 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:10:53.201 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55090 10 6452 1 2025-10-25 03:11:00.793 00:00:10.366 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:07:47.077 00:05:03.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:11:53.416 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50442 10 6452 1 2025-10-25 03:12:01.194 00:00:10.325 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:12:34.724 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:12:34.999 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:08:47.075 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:12:53.641 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-10-25 03:13:01.559 00:00:10.364 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:13:53.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50046 10 6452 1 2025-10-25 03:14:01.973 00:00:10.378 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:14:54.080 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38436 10 6452 1 2025-10-25 03:15:02.384 00:00:10.401 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 15 1926 1 2025-10-25 03:15:54.300 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 12 10375 1 2025-10-25 03:16:02.824 00:00:10.414 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:16:54.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-10-25 03:17:03.279 00:00:10.361 TCP 23.104.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:17:35.050 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:17:34.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:13:47.078 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:17:54.762 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-10-25 03:18:03.679 00:00:10.367 TCP 23.104.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:14:47.075 00:05:03.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:18:55.001 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47902 10 6452 1 2025-10-25 03:19:04.106 00:00:10.372 TCP 23.104.0.1:46662 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:19:55.227 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-10-25 03:20:04.514 00:00:10.364 TCP 23.104.0.1:40262 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:20:55.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33262 10 6452 1 2025-10-25 03:21:04.919 00:00:10.379 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:21:55.657 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-10-25 03:22:05.334 00:00:10.341 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:22:35.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:22:34.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:22:55.872 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-10-25 03:23:05.708 00:00:10.387 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:19:47.079 00:05:03.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:23:56.108 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-10-25 03:24:06.142 00:00:12.729 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:20:47.076 00:05:03.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:24:56.278 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40408 10 6452 1 2025-10-25 03:25:08.933 00:00:10.369 TCP 23.104.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:25:56.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35150 10 6452 1 2025-10-25 03:26:09.345 00:00:10.321 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:27:09.704 00:00:10.364 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:26:56.703 00:00:21.525 TCP 1.101.0.1:3000 -> 22.102.0.1:56708 10 6452 1 2025-10-25 03:27:35.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:27:35.401 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:28:10.110 00:00:10.501 TCP 23.104.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:28:08.280 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39084 10 6452 1 2025-10-25 03:29:10.678 00:00:10.328 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:29:08.488 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-10-25 03:25:47.082 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:30:11.054 00:00:10.322 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:30:08.707 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-10-25 03:26:47.079 00:05:03.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:31:09.087 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-10-25 03:31:11.414 00:00:10.324 TCP 23.104.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:32:09.314 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-10-25 03:32:11.777 00:00:10.367 TCP 23.104.0.1:35416 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:32:35.156 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:32:35.049 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:33:09.492 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60916 10 6452 1 2025-10-25 03:33:12.184 00:00:10.362 TCP 23.104.0.1:46336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:34:09.678 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-10-25 03:34:12.587 00:00:10.368 TCP 23.104.0.1:60776 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:35:09.887 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-10-25 03:35:12.991 00:00:10.809 TCP 23.104.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:31:47.084 00:05:03.056 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:36:10.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-10-25 03:36:13.839 00:00:10.398 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:32:47.083 00:05:03.060 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:37:10.302 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-10-25 03:37:14.272 00:00:10.374 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:37:35.325 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:37:35.179 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:38:10.512 00:00:11.002 TCP 1.101.0.1:3000 -> 22.102.0.1:60898 10 6452 1 2025-10-25 03:38:14.682 00:00:10.371 TCP 23.104.0.1:59852 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:39:11.554 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-10-25 03:39:15.105 00:00:10.685 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:40:11.766 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-10-25 03:40:15.831 00:00:10.329 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:41:11.981 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-10-25 03:41:16.202 00:00:10.320 TCP 23.104.0.1:60792 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:37:47.084 00:05:03.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:42:12.184 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-10-25 03:42:16.558 00:00:10.363 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:42:35.297 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:42:35.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:38:47.083 00:05:03.061 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:43:12.365 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-10-25 03:43:16.958 00:00:10.326 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:44:12.581 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37976 10 6452 1 2025-10-25 03:44:17.320 00:00:10.369 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:45:12.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38908 10 6452 1 2025-10-25 03:45:17.726 00:00:10.365 TCP 23.104.0.1:58522 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:46:13.004 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-10-25 03:46:18.132 00:00:10.324 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:47:13.237 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-10-25 03:47:18.496 00:00:10.375 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:47:35.613 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:47:35.657 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:43:47.088 00:05:03.053 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:48:13.497 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-10-25 03:48:18.910 00:00:10.368 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:44:47.085 00:05:03.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:49:13.685 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-10-25 03:49:19.316 00:00:10.368 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:50:13.931 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-10-25 03:50:19.724 00:00:10.374 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:51:14.129 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-10-25 03:51:20.137 00:00:13.810 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:52:14.339 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-10-25 03:52:24.066 00:00:10.356 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:52:35.559 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:52:35.604 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:53:14.576 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6452 1 2025-10-25 03:53:24.463 00:00:10.365 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:49:47.093 00:05:03.049 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 03:54:14.799 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-10-25 03:54:24.864 00:00:10.372 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:50:47.091 00:05:03.054 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 03:55:15.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-10-25 03:55:25.277 00:00:10.330 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:56:15.233 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43420 10 6452 1 2025-10-25 03:56:25.652 00:00:10.366 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:57:15.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38078 10 6452 1 2025-10-25 03:57:35.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 03:57:36.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 03:57:26.063 00:00:10.362 TCP 23.104.0.1:45648 -> 1.101.0.1:3000 11 1507 1 2025-10-25 03:58:15.629 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6452 1 2025-10-25 03:58:26.468 00:00:10.367 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-10-25 02:55:47 - 2025-10-25 03:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0010s Wall: 0.0020s flows/second: 83075.6 Runtime: 0.0020s