Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 07:58:47.545 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6452 1 2025-10-25 07:59:40.902 00:00:10.365 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:55:47.156 00:05:03.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:59:47.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-10-25 08:00:41.305 00:00:10.321 TCP 23.104.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:56:47.154 00:05:03.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:00:47.984 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46184 10 6452 1 2025-10-25 08:01:41.664 00:00:10.366 TCP 23.104.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:01:48.219 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-10-25 08:02:40.852 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:02:40.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:02:42.094 00:00:10.368 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:02:48.389 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-10-25 08:03:42.499 00:00:10.366 TCP 23.104.0.1:57426 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:03:48.626 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-10-25 08:04:42.902 00:00:10.365 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:04:48.852 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-10-25 08:01:47.165 00:05:03.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:05:43.304 00:00:10.706 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:05:49.095 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-10-25 08:02:47.159 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:06:44.056 00:00:10.367 TCP 23.104.0.1:55276 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:06:49.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 10 6452 1 2025-10-25 08:07:41.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:07:41.480 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:07:44.462 00:00:10.363 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:07:49.517 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 10 6452 1 2025-10-25 08:08:44.865 00:00:10.372 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:08:49.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-10-25 08:09:45.284 00:00:10.322 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:09:49.937 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-10-25 08:10:45.649 00:00:10.532 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 17 2241 1 2025-10-25 08:10:50.162 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 14 14292 1 2025-10-25 08:07:47.164 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:11:46.230 00:00:10.371 TCP 23.104.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:11:50.429 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50690 10 6452 1 2025-10-25 08:12:40.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:12:40.962 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:08:47.160 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:12:50.597 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44062 10 6452 1 2025-10-25 08:12:46.642 00:00:10.363 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:13:47.092 00:00:10.391 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:13:50.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-10-25 08:14:47.526 00:00:10.366 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:14:51.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-10-25 08:15:51.263 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2025-10-25 08:15:47.928 00:00:10.391 TCP 23.104.0.1:46050 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:16:48.358 00:00:10.332 TCP 23.104.0.1:46658 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:16:51.474 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-10-25 08:17:41.062 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:17:40.780 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:13:47.166 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:17:48.722 00:00:10.326 TCP 23.104.0.1:41590 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:17:51.644 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-10-25 08:14:47.163 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:18:49.113 00:00:10.322 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:18:51.823 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-10-25 08:19:49.471 00:00:10.363 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:19:52.065 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46084 10 6452 1 2025-10-25 08:20:49.873 00:00:10.365 TCP 23.104.0.1:38794 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:20:52.280 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 10 6452 1 2025-10-25 08:21:50.281 00:00:10.360 TCP 23.104.0.1:59522 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:21:52.504 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-10-25 08:22:41.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:22:41.219 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:22:50.685 00:00:10.367 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:22:52.683 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-10-25 08:19:47.166 00:05:03.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:23:51.114 00:00:10.324 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:23:52.860 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-10-25 08:20:47.165 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:24:51.479 00:00:10.325 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:24:53.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-10-25 08:25:51.842 00:00:10.393 TCP 23.104.0.1:47296 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:25:53.297 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-10-25 08:26:52.268 00:00:10.321 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:26:53.469 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49442 10 6452 1 2025-10-25 08:27:41.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:27:41.373 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:27:52.627 00:00:10.984 TCP 23.104.0.1:42780 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:27:53.642 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34386 10 6452 1 2025-10-25 08:28:53.649 00:00:10.377 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:28:53.861 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-10-25 08:25:47.170 00:05:03.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:29:54.086 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41404 10 6452 1 2025-10-25 08:29:54.067 00:00:10.363 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:26:47.166 00:05:03.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:30:54.465 00:00:10.368 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:30:54.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-10-25 08:31:54.507 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2025-10-25 08:31:54.873 00:00:10.363 TCP 23.104.0.1:57540 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:32:41.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:32:41.178 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:32:54.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50778 10 6452 1 2025-10-25 08:32:55.273 00:00:10.367 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:33:55.680 00:00:10.374 TCP 23.104.0.1:49388 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:33:54.930 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-10-25 08:34:55.131 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-10-25 08:34:56.108 00:00:10.328 TCP 23.104.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:31:47.168 00:05:03.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:35:56.471 00:00:10.366 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:35:55.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-10-25 08:32:47.171 00:05:03.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:36:55.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-10-25 08:36:56.875 00:00:10.384 TCP 23.104.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:37:41.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:37:41.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:37:55.733 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51752 10 6452 1 2025-10-25 08:37:57.299 00:00:10.368 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:38:55.952 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58528 10 6452 1 2025-10-25 08:38:57.700 00:00:10.376 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:39:56.184 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-10-25 08:39:58.125 00:00:10.363 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:40:56.419 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-10-25 08:40:58.526 00:00:10.322 TCP 23.104.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:37:47.171 00:05:03.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:41:56.632 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-10-25 08:41:58.890 00:00:10.380 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:42:41.605 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:42:41.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:38:47.168 00:05:03.083 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:42:56.839 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-10-25 08:42:59.311 00:00:10.318 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:43:57.033 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-10-25 08:43:59.674 00:00:10.375 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:45:00.105 00:00:10.367 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:44:57.244 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-10-25 08:46:00.516 00:00:10.369 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:45:57.420 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49242 10 6452 1 2025-10-25 08:46:57.634 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-10-25 08:47:00.919 00:00:10.370 TCP 23.104.0.1:39540 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:47:41.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:47:41.781 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:43:47.171 00:05:03.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:48:01.325 00:00:10.367 TCP 23.104.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:47:58.158 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 10 6452 1 2025-10-25 08:44:47.170 00:05:03.083 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:48:58.373 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 10 6452 1 2025-10-25 08:49:01.728 00:00:10.376 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:49:58.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-10-25 08:50:02.144 00:00:10.365 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:50:58.798 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-10-25 08:51:02.552 00:00:10.364 TCP 23.104.0.1:38308 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:51:58.971 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55942 10 6452 1 2025-10-25 08:52:02.950 00:00:23.786 TCP 23.104.0.1:53322 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:52:41.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:52:41.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:52:59.198 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-10-25 08:53:16.809 00:00:10.366 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:49:47.174 00:05:03.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 08:53:59.414 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-10-25 08:54:17.217 00:00:10.333 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:50:47.171 00:05:03.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 08:54:59.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-10-25 08:55:17.587 00:00:10.366 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:55:59.799 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-10-25 08:56:17.987 00:00:10.372 TCP 23.104.0.1:46768 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:57:00.021 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-10-25 08:57:18.401 00:00:10.370 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-10-25 08:57:41.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 08:57:41.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 08:58:00.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-10-25 08:58:18.808 00:00:10.459 TCP 23.104.0.1:49914 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505415, total packets: 1571, avg bps: 1074, avg pps: 0, avg bpp: 321 Time window: 2025-10-25 07:55:47 - 2025-10-25 08:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0027s flows/second: 60684.5 Runtime: 0.0027s