Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 08:59:22.741 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-10-27 08:59:40.147 00:00:10.363 TCP 23.104.0.1:43072 -> 1.101.0.1:3000 11 1507 1 2025-10-27 08:55:48.089 00:05:03.263 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:00:22.912 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:51182 10 6452 1 2025-10-27 09:00:40.549 00:00:10.368 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-10-27 08:56:48.088 00:05:03.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:01:23.101 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-10-27 09:01:40.956 00:00:10.365 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:02:23.314 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53030 10 6452 1 2025-10-27 09:02:41.359 00:00:10.364 TCP 23.104.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:03:39.683 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:03:23.525 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-10-27 09:03:39.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:03:41.757 00:00:10.364 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:04:23.748 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-10-27 09:04:42.159 00:00:10.367 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:05:23.964 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-10-27 09:05:42.565 00:00:10.363 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:01:48.090 00:05:03.264 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:06:24.200 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54880 10 6452 1 2025-10-27 09:02:48.087 00:05:03.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:06:42.969 00:00:10.367 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:07:24.422 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-10-27 09:07:43.370 00:00:10.360 TCP 23.104.0.1:34572 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:08:24.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-10-27 09:08:40.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:08:39.632 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:08:43.770 00:00:10.373 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:09:24.852 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-10-27 09:09:44.181 00:00:10.336 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:10:25.099 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-10-27 09:10:44.563 00:00:10.372 TCP 23.104.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:11:25.267 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46498 10 6452 1 2025-10-27 09:07:48.092 00:05:03.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:11:44.974 00:00:10.377 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:12:25.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-10-27 09:08:48.089 00:05:03.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:12:45.390 00:00:10.325 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:13:25.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-10-27 09:13:39.951 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:13:39.876 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:13:45.756 00:00:10.341 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:14:25.905 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-10-27 09:14:46.137 00:00:10.365 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:15:26.119 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 10 6452 1 2025-10-27 09:15:46.540 00:00:10.319 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:16:26.333 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-10-27 09:16:46.901 00:00:10.374 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:17:26.517 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35210 10 6452 1 2025-10-27 09:13:48.093 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:17:47.315 00:00:10.360 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:18:40.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:18:26.750 00:00:10.371 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-10-27 09:18:40.134 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:14:48.092 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:18:47.718 00:00:10.376 TCP 23.104.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:19:27.157 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46602 10 6452 1 2025-10-27 09:19:48.144 00:00:10.327 TCP 23.104.0.1:45552 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:20:27.366 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44586 10 6452 1 2025-10-27 09:20:48.504 00:00:10.440 TCP 23.104.0.1:42460 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:21:27.539 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40086 11 6492 1 2025-10-27 09:21:48.982 00:00:10.365 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:22:27.755 00:00:13.032 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6452 1 2025-10-27 09:22:49.387 00:00:10.369 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:23:40.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:23:30.824 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-10-27 09:23:40.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:19:48.093 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:23:49.792 00:00:10.365 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:24:31.065 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50778 10 6452 1 2025-10-27 09:20:48.091 00:05:03.274 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:24:50.197 00:00:10.362 TCP 23.104.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:25:31.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53688 10 6452 1 2025-10-27 09:25:50.601 00:00:10.354 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:26:31.497 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-10-27 09:26:51.020 00:00:10.365 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:27:31.674 00:00:10.325 TCP 1.101.0.1:3000 -> 22.102.0.1:50460 13 6608 1 2025-10-27 09:27:51.425 00:00:10.365 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:28:40.206 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:28:40.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:28:32.092 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54440 10 6452 1 2025-10-27 09:28:51.830 00:00:10.371 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:29:32.307 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41900 10 6452 1 2025-10-27 09:25:48.095 00:05:03.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:29:52.236 00:00:10.362 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:30:32.516 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-10-27 09:26:48.093 00:05:03.274 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:30:52.642 00:00:10.319 TCP 23.104.0.1:37166 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:31:32.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-10-27 09:31:53.004 00:00:10.359 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:32:32.939 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-10-27 09:32:53.403 00:00:10.364 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:33:40.095 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:33:40.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:33:33.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46328 10 6452 1 2025-10-27 09:33:53.806 00:00:10.366 TCP 23.104.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:34:33.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46064 10 6452 1 2025-10-27 09:34:54.207 00:00:10.366 TCP 23.104.0.1:39268 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:35:33.539 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-10-27 09:31:48.096 00:05:03.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:35:54.607 00:00:10.368 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:36:33.753 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 2025-10-27 09:32:48.094 00:05:03.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:36:55.015 00:00:10.366 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:37:33.978 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 10 6452 1 2025-10-27 09:37:55.419 00:00:10.367 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:38:40.377 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:38:40.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:38:34.222 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37676 10 6452 1 2025-10-27 09:38:55.818 00:00:10.325 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:39:34.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 10 6452 1 2025-10-27 09:39:56.187 00:00:10.367 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:40:34.616 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-10-27 09:40:56.582 00:00:10.364 TCP 23.104.0.1:56906 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:41:34.829 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-10-27 09:37:48.099 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:41:56.986 00:00:10.365 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:42:35.058 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33334 10 6452 1 2025-10-27 09:38:48.100 00:05:03.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:42:57.394 00:00:10.364 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:43:40.705 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:43:40.654 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:43:35.266 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53826 10 6452 1 2025-10-27 09:43:57.799 00:00:10.371 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:44:35.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-10-27 09:44:58.233 00:00:10.372 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:45:35.693 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6452 1 2025-10-27 09:45:58.634 00:00:10.373 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:46:35.919 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 10 6452 1 2025-10-27 09:46:59.061 00:00:10.365 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:47:36.134 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-10-27 09:43:48.100 00:05:03.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:47:59.466 00:00:10.367 TCP 23.104.0.1:42904 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:48:40.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:48:40.697 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:48:36.305 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50054 10 6452 1 2025-10-27 09:44:48.097 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:48:59.872 00:00:10.333 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:49:36.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-10-27 09:50:00.242 00:00:10.323 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:50:36.748 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:54430 10 6452 1 2025-10-27 09:51:00.601 00:00:10.324 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:51:37.200 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-10-27 09:52:00.961 00:00:10.361 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:52:37.443 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6452 1 2025-10-27 09:53:01.359 00:00:10.327 TCP 23.104.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:53:41.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:53:41.148 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:53:37.664 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-10-27 09:49:48.101 00:05:03.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 09:54:01.718 00:00:11.069 TCP 23.104.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:54:37.905 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-10-27 09:50:48.099 00:05:03.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 09:55:02.824 00:00:10.364 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:55:38.117 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-10-27 09:56:03.224 00:00:10.361 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:56:38.298 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-10-27 09:57:03.623 00:00:10.366 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:57:38.520 00:00:10.387 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-10-27 09:58:04.022 00:00:10.361 TCP 23.104.0.1:34556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:58:40.993 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 09:58:40.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 09:58:38.950 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 Summary: total flows: 163, total bytes: 497037, total packets: 1565, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-10-27 08:55:48 - 2025-10-27 09:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 73261.0 Runtime: 0.0022s