Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 04:58:44.556 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41926 10 6452 1 2025-10-25 04:58:52.363 00:00:10.366 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:55:47.109 00:05:03.057 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 04:59:44.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-10-25 04:59:52.766 00:00:10.372 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-10-25 04:56:47.106 00:05:03.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:00:44.946 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:45312 10 6452 1 2025-10-25 05:00:53.176 00:00:10.364 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:01:45.192 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-10-25 05:01:53.576 00:00:10.373 TCP 23.104.0.1:35278 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:02:37.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:02:37.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:02:45.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-10-25 05:02:53.980 00:00:10.364 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:03:45.614 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46988 10 6452 1 2025-10-25 05:03:54.385 00:00:10.375 TCP 23.104.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:04:45.827 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-10-25 05:04:54.821 00:00:10.328 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:01:47.108 00:05:03.058 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:05:46.051 00:00:18.239 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 10 6452 1 2025-10-25 05:05:55.189 00:00:10.566 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:02:47.107 00:05:03.062 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:06:55.791 00:00:10.372 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:06:54.334 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-10-25 05:07:37.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:07:37.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:07:56.202 00:00:10.371 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:07:54.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-10-25 05:08:54.765 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-10-25 05:08:56.611 00:00:10.362 TCP 23.104.0.1:49630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:09:54.986 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 10 6452 1 2025-10-25 05:09:57.013 00:00:10.365 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:10:55.220 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56486 10 6452 1 2025-10-25 05:10:57.410 00:00:10.367 TCP 23.104.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:07:47.112 00:05:03.059 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:11:55.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-10-25 05:11:57.814 00:00:10.386 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:12:38.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:12:38.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:08:47.108 00:05:03.065 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:12:55.639 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-10-25 05:12:58.239 00:00:10.368 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:13:55.857 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-10-25 05:13:58.642 00:00:10.365 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:14:56.045 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6452 1 2025-10-25 05:14:59.053 00:00:10.366 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:15:56.265 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-10-25 05:15:59.454 00:00:10.361 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:16:56.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-10-25 05:16:59.862 00:00:10.371 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:17:37.610 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:17:37.356 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:13:47.111 00:05:03.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:17:56.698 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58444 10 6452 1 2025-10-25 05:18:00.276 00:00:10.367 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:14:47.109 00:05:03.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:19:00.681 00:00:10.372 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:18:56.919 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-10-25 05:19:57.166 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-10-25 05:20:01.121 00:00:10.366 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:20:57.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-10-25 05:21:01.524 00:00:10.487 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:21:57.648 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-10-25 05:22:02.064 00:00:10.367 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:22:37.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:22:37.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:22:57.877 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39522 10 6452 1 2025-10-25 05:23:02.469 00:00:10.362 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:19:47.113 00:05:03.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:23:58.111 00:00:14.934 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 10 6452 1 2025-10-25 05:24:02.874 00:00:10.372 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:20:47.110 00:05:03.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:25:03.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42756 10 6452 1 2025-10-25 05:25:03.283 00:00:10.323 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:26:03.307 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-10-25 05:26:03.645 00:00:10.371 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:27:03.530 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53782 10 6452 1 2025-10-25 05:27:04.063 00:00:10.366 TCP 23.104.0.1:39268 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:27:37.859 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:27:37.858 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:28:04.480 00:00:10.361 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:28:03.749 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-10-25 05:29:03.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-10-25 05:29:04.877 00:00:10.364 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:25:47.115 00:05:03.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:30:05.282 00:00:10.365 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:30:04.200 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-10-25 05:26:47.111 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:31:04.411 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-10-25 05:31:05.694 00:00:10.362 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:32:04.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-10-25 05:32:06.106 00:00:10.414 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:32:37.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:32:37.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:33:06.557 00:00:10.365 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:33:04.840 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53716 10 6452 1 2025-10-25 05:34:05.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-10-25 05:34:06.965 00:00:10.372 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:35:07.383 00:00:15.175 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:35:05.288 00:00:17.165 TCP 1.101.0.1:3000 -> 22.102.0.1:48498 10 6452 1 2025-10-25 05:31:47.114 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:36:12.492 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-10-25 05:36:12.602 00:00:10.332 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:32:47.111 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:37:12.719 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-10-25 05:37:12.965 00:00:10.381 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:37:37.965 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:37:37.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:38:13.385 00:00:10.366 TCP 23.104.0.1:52634 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:38:12.935 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56708 10 6452 1 2025-10-25 05:39:13.176 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-10-25 05:39:13.790 00:00:10.368 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:40:13.357 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-10-25 05:40:14.199 00:00:10.325 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:41:14.565 00:00:10.368 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:41:13.539 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-10-25 05:37:47.115 00:05:03.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:42:14.971 00:00:10.335 TCP 23.104.0.1:58430 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:42:13.756 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45386 10 6452 1 2025-10-25 05:42:38.709 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:42:38.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:38:47.114 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:43:15.341 00:00:10.910 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:43:13.972 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 12 6556 1 2025-10-25 05:44:14.202 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 10 6452 1 2025-10-25 05:44:16.290 00:00:10.325 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:45:14.433 00:00:11.359 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-10-25 05:45:16.655 00:00:14.538 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:46:15.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-10-25 05:46:21.256 00:00:10.323 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:47:16.077 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33300 10 6452 1 2025-10-25 05:47:21.613 00:00:10.366 TCP 23.104.0.1:51610 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:47:37.802 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:47:37.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:43:47.115 00:05:03.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:48:16.311 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33196 10 6452 1 2025-10-25 05:48:22.021 00:00:10.360 TCP 23.104.0.1:40912 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:44:47.114 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:49:16.525 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-10-25 05:49:22.420 00:00:10.359 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:50:16.743 00:00:10.355 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-10-25 05:50:22.824 00:00:10.366 TCP 23.104.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:51:17.136 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-10-25 05:51:23.227 00:00:10.362 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:52:17.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-10-25 05:52:23.627 00:00:10.324 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:52:38.087 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:52:38.198 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:53:17.586 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-10-25 05:53:23.996 00:00:10.374 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:49:47.119 00:05:03.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 05:54:17.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-10-25 05:54:24.408 00:00:10.366 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:50:47.115 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 05:55:18.023 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-10-25 05:55:24.813 00:00:10.368 TCP 23.104.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:56:18.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-10-25 05:56:25.224 00:00:10.362 TCP 23.104.0.1:44686 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:57:18.457 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35820 10 6452 1 2025-10-25 05:57:25.624 00:00:10.349 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-10-25 05:57:38.095 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 05:57:37.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 05:58:18.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34402 10 6452 1 2025-10-25 05:58:26.027 00:00:10.366 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1057, avg pps: 0, avg bpp: 316 Time window: 2025-10-25 04:55:47 - 2025-10-25 05:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0086s User: 0.0011s Wall: 0.0061s flows/second: 26881.3 Runtime: 0.0062s