Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 17:59:00.235 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-10-07 17:59:12.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 17:59:12.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 17:59:35.635 00:00:10.364 TCP 23.104.0.1:35352 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:00:00.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2025-10-07 17:56:39.110 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:00:36.050 00:00:10.363 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:01:00.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-10-07 17:57:39.112 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:01:36.454 00:00:10.363 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:02:00.866 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-10-07 18:02:36.868 00:00:10.369 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:03:01.115 00:00:10.261 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6452 1 2025-10-07 18:03:37.275 00:00:10.322 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:04:01.413 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-07 18:04:12.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:04:12.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:04:37.636 00:00:10.367 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:05:01.636 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-10-07 18:05:38.045 00:00:10.365 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:06:01.850 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33980 10 6452 1 2025-10-07 18:02:39.113 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:06:38.450 00:00:10.327 TCP 23.104.0.1:40224 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:07:02.035 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-10-07 18:03:39.114 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:07:38.821 00:00:10.365 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:08:02.253 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-10-07 18:08:39.226 00:00:10.367 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:09:02.472 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-10-07 18:09:12.712 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:09:12.872 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:09:39.631 00:00:10.393 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:10:02.651 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-10-07 18:10:40.093 00:00:10.375 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:11:02.871 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-10-07 18:11:40.491 00:00:10.362 TCP 23.104.0.1:44038 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:12:03.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-10-07 18:08:39.113 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:12:40.897 00:00:10.334 TCP 23.104.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:13:03.321 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-10-07 18:09:39.114 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:13:41.268 00:00:10.366 TCP 23.104.0.1:33376 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:14:03.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46026 12 6556 1 2025-10-07 18:14:12.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:14:12.754 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:14:41.674 00:00:10.451 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 15 1926 1 2025-10-07 18:15:03.759 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 12 10369 1 2025-10-07 18:15:42.169 00:00:10.371 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:16:03.959 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-10-07 18:16:42.578 00:00:10.364 TCP 23.104.0.1:43432 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:17:04.149 00:00:10.540 TCP 1.101.0.1:3000 -> 22.102.0.1:35104 10 6452 1 2025-10-07 18:17:42.983 00:00:10.368 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:18:04.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-10-07 18:14:39.112 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:18:43.391 00:00:10.327 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:19:12.811 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:19:04.938 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-10-07 18:19:13.102 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:15:39.116 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:19:43.766 00:00:10.374 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:20:05.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-10-07 18:20:44.194 00:00:10.327 TCP 23.104.0.1:50618 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:21:05.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-10-07 18:21:44.561 00:00:10.331 TCP 23.104.0.1:45298 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:22:05.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58056 10 6452 1 2025-10-07 18:22:44.925 00:00:10.376 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:23:05.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-10-07 18:23:45.339 00:00:10.364 TCP 23.104.0.1:57448 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:24:06.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-10-07 18:24:13.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:24:13.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:20:39.115 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:24:45.743 00:00:10.333 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:25:06.251 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-10-07 18:21:39.118 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:25:46.117 00:00:10.329 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:26:06.468 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-10-07 18:26:46.485 00:00:10.369 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:27:06.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60592 10 6452 1 2025-10-07 18:27:46.893 00:00:10.376 TCP 23.104.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:28:06.893 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-10-07 18:28:47.308 00:00:10.358 TCP 23.104.0.1:56396 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:29:13.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:29:12.881 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:29:07.123 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-10-07 18:29:47.706 00:00:10.453 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 15 1926 1 2025-10-07 18:30:07.337 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 12 10375 1 2025-10-07 18:26:39.116 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:30:48.200 00:00:10.373 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:31:07.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-10-07 18:27:39.118 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:31:48.609 00:00:10.370 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:32:07.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-10-07 18:32:49.019 00:00:10.364 TCP 23.104.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:33:08.024 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42734 10 6452 1 2025-10-07 18:33:49.423 00:00:10.362 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:34:13.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:34:13.287 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:34:08.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-10-07 18:34:49.829 00:00:10.360 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:35:08.451 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54042 10 6452 1 2025-10-07 18:35:50.229 00:00:10.331 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:36:08.624 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51054 10 6452 1 2025-10-07 18:32:39.118 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:36:50.589 00:00:10.326 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:37:08.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42404 10 6452 1 2025-10-07 18:33:39.120 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:37:50.954 00:00:10.371 TCP 23.104.0.1:51576 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:38:09.040 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-10-07 18:38:51.355 00:00:10.367 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:39:13.307 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:39:13.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:39:09.258 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58312 10 6452 1 2025-10-07 18:39:51.762 00:00:10.380 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:40:09.476 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-10-07 18:40:52.174 00:00:10.367 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:41:09.690 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-10-07 18:41:52.579 00:00:10.364 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:42:09.921 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-10-07 18:38:39.120 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:42:52.981 00:00:10.373 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:43:10.162 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-10-07 18:39:39.121 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:43:53.398 00:00:10.370 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:44:13.486 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:44:13.244 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:44:10.380 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 12 10375 1 2025-10-07 18:44:53.803 00:00:10.417 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 15 1926 1 2025-10-07 18:45:10.615 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-10-07 18:45:54.257 00:00:10.325 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:46:10.850 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-10-07 18:46:54.620 00:00:10.356 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:47:11.089 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 2025-10-07 18:47:55.022 00:00:10.364 TCP 23.104.0.1:60156 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:48:11.316 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6452 1 2025-10-07 18:44:39.119 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:48:55.427 00:00:10.374 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:49:13.621 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:49:13.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:49:11.539 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 12 10369 1 2025-10-07 18:45:39.122 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:49:55.833 00:00:10.480 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 15 1926 1 2025-10-07 18:50:11.788 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34056 10 6452 1 2025-10-07 18:50:56.357 00:00:10.330 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:51:11.972 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-10-07 18:51:56.723 00:00:10.379 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:52:12.199 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-10-07 18:52:57.142 00:00:10.367 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:53:12.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-10-07 18:53:57.549 00:00:10.366 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:54:13.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 18:54:13.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 18:54:12.619 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2025-10-07 18:50:39.121 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 18:54:57.955 00:00:10.330 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:55:12.839 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-10-07 18:51:39.126 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 18:55:58.329 00:00:10.687 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:56:13.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-10-07 18:56:59.066 00:00:10.370 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:57:13.293 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-10-07 18:57:59.473 00:00:10.377 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-10-07 18:58:13.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59868 10 6452 1 Summary: total flows: 163, total bytes: 514301, total packets: 1587, avg bps: 1110, avg pps: 0, avg bpp: 324 Time window: 2025-10-07 17:56:39 - 2025-10-07 18:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0015s Wall: 0.0033s flows/second: 48949.1 Runtime: 0.0033s