Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 09:58:51.641 00:00:10.323 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-10-11 09:58:49.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40806 10 6452 1 2025-10-11 09:59:49.856 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-10-11 09:59:52.002 00:00:10.415 TCP 23.104.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-10-11 09:56:40.722 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 09:56:40.719 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:00:58.277 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:00:50.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-10-11 10:00:58.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:00:52.457 00:00:10.365 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:01:50.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-10-11 10:01:52.863 00:00:10.377 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:02:50.516 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37822 10 6452 1 2025-10-11 10:02:53.309 00:00:10.369 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:03:50.736 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-10-11 10:03:53.711 00:00:10.366 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:04:50.948 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6452 1 2025-10-11 10:04:54.113 00:00:10.368 TCP 23.104.0.1:58256 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:05:58.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:05:51.179 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-11 10:05:58.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:05:54.520 00:00:10.363 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:02:40.722 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:02:40.720 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:06:51.398 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-10-11 10:06:54.924 00:00:10.383 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:07:51.607 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-10-11 10:07:55.346 00:00:10.363 TCP 23.104.0.1:38638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:08:51.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-10-11 10:08:55.749 00:00:10.389 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:09:56.182 00:00:10.364 TCP 23.104.0.1:52876 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:09:52.032 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-10-11 10:10:58.432 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:10:58.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:10:52.279 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 13 13949 1 2025-10-11 10:10:56.582 00:00:10.498 TCP 23.104.0.1:38274 -> 1.101.0.1:3000 15 1926 1 2025-10-11 10:11:52.519 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-10-11 10:11:57.126 00:00:10.365 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:08:40.723 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:08:40.721 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:12:52.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-10-11 10:12:57.532 00:00:10.364 TCP 23.104.0.1:43064 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:13:52.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-10-11 10:13:57.940 00:00:10.347 TCP 23.104.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:14:53.128 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-10-11 10:14:58.338 00:00:10.327 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:15:59.072 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:15:58.652 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:15:53.343 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 12 10375 1 2025-10-11 10:15:58.704 00:00:10.437 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 15 1926 1 2025-10-11 10:16:53.583 00:00:10.773 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2025-10-11 10:16:59.179 00:00:10.371 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:17:54.396 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6452 1 2025-10-11 10:17:59.597 00:00:10.363 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:14:40.724 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:14:40.722 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:18:54.612 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-10-11 10:19:00.003 00:00:10.367 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:19:54.782 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-10-11 10:20:00.413 00:00:10.365 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:20:58.693 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:20:58.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:20:55.009 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43642 10 6452 1 2025-10-11 10:21:00.813 00:00:10.332 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:21:55.846 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-10-11 10:22:01.186 00:00:10.742 TCP 23.104.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:22:56.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-11 10:23:01.965 00:00:10.371 TCP 23.104.0.1:44116 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:23:56.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-10-11 10:24:02.377 00:00:10.371 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:20:40.724 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:20:40.725 00:05:02.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:24:56.505 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-10-11 10:25:02.786 00:00:10.367 TCP 23.104.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:25:58.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:25:58.857 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:25:56.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-10-11 10:26:03.191 00:00:10.369 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:26:56.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-10-11 10:27:03.598 00:00:10.346 TCP 23.104.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:27:57.113 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-10-11 10:28:03.971 00:00:10.364 TCP 23.104.0.1:36098 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:28:57.324 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55886 10 6452 1 2025-10-11 10:29:04.378 00:00:10.369 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:29:57.541 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-10-11 10:30:04.791 00:00:10.363 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:26:40.726 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:26:40.724 00:05:02.374 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:30:58.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:30:59.053 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:30:57.716 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 12 10375 1 2025-10-11 10:31:05.193 00:00:10.435 TCP 23.104.0.1:50138 -> 1.101.0.1:3000 15 1926 1 2025-10-11 10:31:57.917 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52308 10 6452 1 2025-10-11 10:32:05.667 00:00:10.362 TCP 23.104.0.1:38086 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:32:58.151 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-10-11 10:33:06.098 00:00:10.366 TCP 23.104.0.1:48794 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:33:58.368 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-10-11 10:34:06.505 00:00:10.363 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:34:58.584 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-10-11 10:35:06.909 00:00:10.373 TCP 23.104.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:35:59.280 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:35:58.871 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:35:58.797 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-10-11 10:36:07.325 00:00:10.370 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:32:40.724 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:32:40.726 00:05:02.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:36:59.031 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-10-11 10:37:07.734 00:00:10.366 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:37:59.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-10-11 10:38:08.135 00:00:10.367 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:38:59.515 00:00:10.781 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-10-11 10:39:08.543 00:00:10.855 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:40:00.332 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59118 10 6452 1 2025-10-11 10:40:09.438 00:00:10.364 TCP 23.104.0.1:56610 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:40:59.253 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:40:59.128 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:41:00.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-10-11 10:41:09.845 00:00:10.342 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:42:00.725 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-10-11 10:42:10.225 00:00:10.375 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:38:40.725 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:38:40.727 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:43:00.950 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34702 10 6452 1 2025-10-11 10:43:10.666 00:00:10.368 TCP 23.104.0.1:33008 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:44:01.195 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-10-11 10:44:11.117 00:00:10.363 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:45:01.417 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45196 10 6452 1 2025-10-11 10:45:11.524 00:00:10.339 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:45:59.371 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:45:59.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:46:01.631 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-10-11 10:46:11.903 00:00:10.375 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:47:01.853 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-10-11 10:47:12.314 00:00:10.365 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:48:02.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-10-11 10:48:12.717 00:00:10.371 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 12 1559 1 2025-10-11 10:44:40.729 00:05:02.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:44:40.726 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:49:02.301 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43684 10 6452 1 2025-10-11 10:49:13.129 00:00:10.363 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:50:02.536 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-10-11 10:50:13.529 00:00:10.325 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:50:59.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:50:59.360 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:51:02.716 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-10-11 10:51:13.902 00:00:10.372 TCP 23.104.0.1:54162 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:52:02.889 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-10-11 10:52:14.315 00:00:10.365 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:53:03.075 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-10-11 10:53:14.719 00:00:10.340 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:54:03.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-10-11 10:54:15.109 00:00:10.357 TCP 23.104.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:50:40.729 00:05:02.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 10:50:40.727 00:05:02.375 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:55:03.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-10-11 10:55:15.504 00:00:10.365 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:55:59.878 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 10:55:59.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 10:56:03.705 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-10-11 10:56:15.912 00:00:10.359 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:57:03.922 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-10-11 10:57:16.314 00:00:10.325 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-10-11 10:58:04.136 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-10-11 10:58:16.680 00:00:10.375 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 515000, total packets: 1592, avg bps: 1111, avg pps: 0, avg bpp: 323 Time window: 2025-10-11 09:56:40 - 2025-10-11 10:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0061s User: 0.0000s Wall: 0.0031s flows/second: 53613.9 Runtime: 0.0031s