Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-09 14:58:44.732 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:35502 10 6452 1 2025-10-09 14:59:37.346 00:00:10.366 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-10-09 14:59:45.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56436 10 6452 1 2025-10-09 15:00:06.629 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:00:06.646 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 14:56:39.904 00:05:02.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:00:37.751 00:00:10.374 TCP 23.104.0.1:58110 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:00:45.351 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-10-09 14:57:39.906 00:05:02.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:01:38.163 00:00:10.366 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:01:45.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-10-09 15:02:38.565 00:00:10.367 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:02:45.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48372 10 6452 1 2025-10-09 15:03:38.970 00:00:10.365 TCP 23.104.0.1:35716 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:03:45.954 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-10-09 15:04:39.378 00:00:10.367 TCP 23.104.0.1:37540 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:04:46.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37616 10 6452 1 2025-10-09 15:05:07.726 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:05:06.993 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:05:39.781 00:00:10.368 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:05:46.404 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-10-09 15:02:39.905 00:05:02.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:06:40.183 00:00:10.365 TCP 23.104.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:06:46.573 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58050 10 6452 1 2025-10-09 15:03:39.907 00:05:02.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:07:40.584 00:00:10.347 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:07:46.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48292 10 6452 1 2025-10-09 15:08:40.982 00:00:10.372 TCP 23.104.0.1:60002 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:08:46.997 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36324 10 6452 1 2025-10-09 15:09:41.392 00:00:10.364 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:09:47.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33354 10 6452 1 2025-10-09 15:10:06.820 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:10:06.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:10:41.790 00:00:10.365 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:10:47.433 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-10-09 15:11:42.192 00:00:10.375 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:11:48.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-09 15:08:39.907 00:05:02.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:12:42.603 00:00:10.365 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:12:48.346 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47826 10 6452 1 2025-10-09 15:09:39.913 00:05:02.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:13:43.005 00:00:10.972 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:13:48.563 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-10-09 15:14:44.019 00:00:10.363 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:14:48.772 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37490 10 6452 1 2025-10-09 15:15:06.798 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:15:06.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:15:44.423 00:00:10.368 TCP 23.104.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:15:48.986 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-10-09 15:16:44.831 00:00:10.381 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:16:49.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-10-09 15:17:45.250 00:00:10.783 TCP 23.104.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:17:49.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-10-09 15:14:39.912 00:05:02.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:18:46.087 00:00:10.366 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:18:49.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-10-09 15:15:39.915 00:05:02.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:19:46.493 00:00:10.363 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:19:49.827 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 11 6504 1 2025-10-09 15:20:07.169 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:20:07.041 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:20:46.898 00:00:10.373 TCP 23.104.0.1:60014 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:20:50.096 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 2025-10-09 15:21:47.312 00:00:10.368 TCP 23.104.0.1:53016 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:21:50.267 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49994 10 6452 1 2025-10-09 15:22:50.472 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49124 10 6452 1 2025-10-09 15:22:47.717 00:00:10.376 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:23:50.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-10-09 15:23:48.135 00:00:10.320 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:20:39.915 00:05:02.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:24:50.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-10-09 15:24:48.489 00:00:10.367 TCP 23.104.0.1:48442 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:25:07.027 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:25:06.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:21:39.917 00:05:02.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:25:51.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52942 10 6452 1 2025-10-09 15:25:48.892 00:00:10.373 TCP 23.104.0.1:52508 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:26:51.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-10-09 15:26:49.302 00:00:10.323 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:27:51.536 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-10-09 15:27:49.665 00:00:10.362 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:28:50.095 00:00:10.361 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:28:51.751 00:00:21.075 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-10-09 15:29:50.498 00:00:10.325 TCP 23.104.0.1:40016 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:30:07.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:30:07.340 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:30:02.862 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-10-09 15:26:39.916 00:05:02.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:30:50.862 00:00:10.328 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:31:03.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-10-09 15:27:39.918 00:05:02.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:31:51.230 00:00:10.374 TCP 23.104.0.1:55276 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:32:03.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 10 6452 1 2025-10-09 15:32:51.632 00:00:10.364 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:33:03.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40482 10 6452 1 2025-10-09 15:33:52.034 00:00:10.362 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:34:03.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-10-09 15:34:52.436 00:00:10.442 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 15 1926 1 2025-10-09 15:35:07.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:35:07.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:35:03.937 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 12 10375 1 2025-10-09 15:35:52.914 00:00:10.374 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:36:04.163 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 10 6452 1 2025-10-09 15:32:39.918 00:05:02.249 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:36:53.337 00:00:10.362 TCP 23.104.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:37:04.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37188 10 6452 1 2025-10-09 15:33:39.919 00:05:02.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:37:53.738 00:00:10.368 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:38:04.599 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-10-09 15:38:54.154 00:00:10.384 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:39:04.811 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43072 10 6452 1 2025-10-09 15:39:54.578 00:00:10.363 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:40:07.524 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:40:07.521 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:40:04.981 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6452 1 2025-10-09 15:40:54.978 00:00:10.375 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:41:05.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-10-09 15:41:55.403 00:00:10.367 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:42:05.433 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45216 10 6452 1 2025-10-09 15:38:39.917 00:05:02.249 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:42:55.809 00:00:10.367 TCP 23.104.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:43:05.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-10-09 15:39:39.921 00:05:02.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:43:56.214 00:00:10.475 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:44:05.869 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58550 10 6452 1 2025-10-09 15:45:07.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:44:56.730 00:00:10.365 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:45:07.489 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:45:06.094 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-10-09 15:45:57.139 00:00:10.374 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:46:06.320 00:00:10.484 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 11 6504 1 2025-10-09 15:46:57.542 00:00:10.373 TCP 23.104.0.1:35570 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:47:06.848 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41508 10 6452 1 2025-10-09 15:47:57.951 00:00:10.330 TCP 23.104.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:48:07.090 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57030 10 6452 1 2025-10-09 15:44:39.919 00:05:02.249 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:48:58.321 00:00:10.361 TCP 23.104.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:49:07.313 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-10-09 15:45:39.923 00:05:02.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:50:07.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:50:07.776 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:49:58.721 00:00:10.379 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:50:07.560 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56308 10 6452 1 2025-10-09 15:50:59.134 00:00:10.362 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:51:07.730 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35612 10 6452 1 2025-10-09 15:51:59.535 00:00:10.362 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:52:07.948 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:33132 10 6452 1 2025-10-09 15:52:59.939 00:00:10.372 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:53:08.190 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-10-09 15:54:00.350 00:00:10.328 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:54:08.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6452 1 2025-10-09 15:50:39.918 00:05:02.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 15:55:07.795 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 15:55:00.712 00:00:10.375 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:55:07.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 15:55:08.622 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34274 10 6452 1 2025-10-09 15:51:39.921 00:05:02.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 15:56:01.117 00:00:10.332 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:56:08.847 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-10-09 15:57:01.518 00:00:10.367 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:57:09.088 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-10-09 15:58:01.922 00:00:10.389 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-10-09 15:58:09.262 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-10-09 14:56:39 - 2025-10-09 15:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0008s Wall: 0.0022s flows/second: 74980.4 Runtime: 0.0022s