Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 05:59:27.190 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-10-30 05:59:38.657 00:00:11.052 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-10-30 05:55:49.420 00:05:03.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:00:02.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:00:02.724 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:00:27.411 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57722 10 6452 1 2025-10-30 05:55:52.824 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:00:39.754 00:00:10.396 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:01:27.589 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6452 1 2025-10-30 06:01:40.192 00:00:10.371 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:02:27.811 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46848 10 6452 1 2025-10-30 06:02:40.595 00:00:10.367 TCP 23.104.0.1:43578 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:03:27.982 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 10 6452 1 2025-10-30 06:03:41.002 00:00:10.363 TCP 23.104.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:04:28.222 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-10-30 06:04:41.407 00:00:10.364 TCP 23.104.0.1:41472 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:05:02.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:05:02.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:05:28.433 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33078 10 6452 1 2025-10-30 06:05:41.813 00:00:10.370 TCP 23.104.0.1:33210 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:01:49.422 00:05:03.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:01:52.827 00:05:56.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:06:28.641 00:00:26.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43566 10 6452 1 2025-10-30 06:06:42.223 00:00:12.663 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:07:44.926 00:00:10.341 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:07:44.839 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-10-30 06:08:45.311 00:00:10.360 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:08:45.010 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39926 10 6452 1 2025-10-30 06:09:45.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-10-30 06:09:45.714 00:00:10.371 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:10:02.862 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:10:03.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:10:46.127 00:00:10.366 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:10:45.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-10-30 06:11:46.532 00:00:10.362 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:07:49.423 00:05:03.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:11:45.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47146 10 6452 1 2025-10-30 06:07:52.830 00:05:56.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:12:45.864 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-10-30 06:12:46.936 00:00:10.378 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:13:46.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-10-30 06:13:47.349 00:00:10.367 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:14:46.302 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41372 10 6452 1 2025-10-30 06:14:47.754 00:00:10.387 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:15:02.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:15:03.107 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:15:46.524 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-10-30 06:15:48.190 00:00:10.367 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:16:46.750 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41904 10 6452 1 2025-10-30 06:16:48.598 00:00:10.366 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:13:49.426 00:05:03.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:17:46.971 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:56988 14 14292 1 2025-10-30 06:17:49.008 00:00:10.511 TCP 23.104.0.1:44824 -> 1.101.0.1:3000 17 2241 1 2025-10-30 06:13:52.830 00:05:56.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:18:49.554 00:00:10.323 TCP 23.104.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:18:47.259 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-10-30 06:19:47.467 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-10-30 06:19:49.917 00:00:10.375 TCP 23.104.0.1:49114 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:20:03.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:20:02.944 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:20:50.334 00:00:10.846 TCP 23.104.0.1:59012 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:20:47.676 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-10-30 06:21:51.225 00:00:10.394 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:21:48.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-10-30 06:22:48.790 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-10-30 06:22:51.700 00:00:10.371 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:19:49.426 00:05:03.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:23:49.003 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-10-30 06:23:52.109 00:00:10.370 TCP 23.104.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:19:52.833 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:24:49.179 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-10-30 06:25:02.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:24:52.515 00:00:10.323 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:25:03.147 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:25:49.402 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-10-30 06:25:52.875 00:00:10.366 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:26:49.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-10-30 06:26:53.277 00:00:10.327 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:27:49.829 00:00:10.347 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-10-30 06:27:53.641 00:00:10.368 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:28:50.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-10-30 06:28:54.050 00:00:10.367 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:25:49.430 00:05:03.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:29:50.425 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-10-30 06:30:03.513 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:29:54.455 00:00:10.362 TCP 23.104.0.1:54558 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:30:03.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:25:52.835 00:05:56.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:30:50.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-10-30 06:30:54.855 00:00:10.383 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:31:50.807 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-10-30 06:31:55.273 00:00:10.360 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:32:51.012 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-10-30 06:32:55.675 00:00:10.383 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:33:51.222 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-10-30 06:33:56.108 00:00:10.368 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:34:51.451 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-10-30 06:35:03.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:34:56.513 00:00:10.367 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:35:03.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:31:49.432 00:05:03.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:35:51.672 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-10-30 06:35:56.915 00:00:10.367 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:31:52.835 00:05:56.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:36:51.856 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-10-30 06:36:57.318 00:00:10.377 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:37:52.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6452 1 2025-10-30 06:37:57.733 00:00:10.375 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:38:52.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-10-30 06:38:58.146 00:00:10.364 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:40:03.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:39:52.521 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-10-30 06:40:03.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:39:58.548 00:00:10.364 TCP 23.104.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:40:52.742 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-10-30 06:40:58.952 00:00:10.367 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:37:49.439 00:05:03.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:41:52.962 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:35808 13 6608 1 2025-10-30 06:41:59.360 00:00:10.364 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:37:52.836 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:42:53.265 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6452 1 2025-10-30 06:42:59.760 00:00:10.373 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:43:53.488 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6452 1 2025-10-30 06:44:00.172 00:00:10.364 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:44:53.710 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-10-30 06:45:03.636 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:45:03.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:45:00.577 00:00:10.359 TCP 23.104.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:45:53.949 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:57782 10 6452 1 2025-10-30 06:46:00.975 00:00:10.332 TCP 23.104.0.1:54238 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:46:54.668 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-10-30 06:47:01.353 00:00:10.337 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:43:49.445 00:05:03.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:47:54.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-10-30 06:48:01.743 00:00:10.364 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:43:52.838 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:48:55.073 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40686 10 6452 1 2025-10-30 06:49:02.146 00:00:10.327 TCP 23.104.0.1:58024 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:49:55.262 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43230 10 6452 1 2025-10-30 06:50:03.832 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:50:03.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:50:02.517 00:00:10.366 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:50:55.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44986 10 6452 1 2025-10-30 06:51:02.923 00:00:10.390 TCP 23.104.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:51:55.695 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-10-30 06:52:03.367 00:00:10.361 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:52:55.866 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48656 10 6452 1 2025-10-30 06:53:03.767 00:00:10.370 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:49:49.447 00:05:03.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 06:53:56.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-10-30 06:54:04.176 00:00:10.327 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:49:52.839 00:05:56.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 06:55:03.702 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 06:54:56.299 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49608 10 6452 1 2025-10-30 06:55:04.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 06:55:04.544 00:00:10.323 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 12 1559 1 2025-10-30 06:55:56.524 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-10-30 06:56:04.909 00:00:10.372 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:56:56.697 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41186 10 6452 1 2025-10-30 06:57:05.312 00:00:10.368 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-10-30 06:57:56.906 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6452 1 2025-10-30 06:58:05.716 00:00:10.376 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499171, total packets: 1565, avg bps: 1065, avg pps: 0, avg bpp: 318 Time window: 2025-10-30 05:55:49 - 2025-10-30 06:58:16 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0016s Wall: 0.0028s flows/second: 57407.7 Runtime: 0.0028s