Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 13:58:45.936 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:58638 10 6452 1 2025-10-11 13:59:39.929 00:00:10.395 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-10-11 13:59:46.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-10-11 13:56:40.785 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 13:56:40.782 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:00:40.358 00:00:10.369 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:00:46.398 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47492 10 6452 1 2025-10-11 14:01:03.228 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:01:03.246 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:01:40.769 00:00:10.374 TCP 23.104.0.1:59518 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:01:46.615 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-10-11 14:02:41.181 00:00:10.364 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:02:46.833 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-10-11 14:03:41.581 00:00:10.527 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:03:47.071 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-10-11 14:04:42.147 00:00:10.365 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:04:47.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42168 10 6452 1 2025-10-11 14:05:42.549 00:00:10.366 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:05:47.522 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-10-11 14:06:03.268 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:06:03.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:02:40.792 00:05:02.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:02:40.789 00:05:02.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:06:42.952 00:00:10.370 TCP 23.104.0.1:44032 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:06:48.476 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-10-11 14:07:43.359 00:00:10.325 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:07:48.687 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-10-11 14:08:43.720 00:00:10.328 TCP 23.104.0.1:35364 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:08:48.854 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-10-11 14:09:44.104 00:00:10.362 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:09:49.036 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54262 10 6452 1 2025-10-11 14:10:44.508 00:00:10.372 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:11:03.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:10:49.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-10-11 14:11:03.546 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:11:44.915 00:00:10.338 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:11:49.420 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-10-11 14:08:40.793 00:05:02.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:08:40.791 00:05:02.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:12:45.292 00:00:10.324 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:12:49.584 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35450 10 6452 1 2025-10-11 14:13:45.655 00:00:10.368 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:13:49.795 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6452 1 2025-10-11 14:14:46.095 00:00:10.364 TCP 23.104.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:14:50.009 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-10-11 14:15:50.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-10-11 14:16:03.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:15:46.496 00:00:11.121 TCP 23.104.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:16:03.151 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:16:47.651 00:00:10.371 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:16:50.444 00:00:10.884 TCP 1.101.0.1:3000 -> 22.102.0.1:58358 10 6452 1 2025-10-11 14:17:51.373 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 12 6556 1 2025-10-11 14:17:48.070 00:00:10.368 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:14:40.793 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:14:40.792 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:18:48.465 00:00:10.359 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:18:51.580 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-10-11 14:19:51.794 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-10-11 14:19:48.863 00:00:10.374 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:20:49.276 00:00:10.395 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 15 1926 1 2025-10-11 14:21:03.735 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:20:52.002 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59766 12 10369 1 2025-10-11 14:21:03.507 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:21:49.709 00:00:10.364 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:21:52.247 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-10-11 14:22:50.114 00:00:10.364 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:22:52.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37686 10 6452 1 2025-10-11 14:23:50.515 00:00:10.366 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:23:52.689 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32956 10 6452 1 2025-10-11 14:20:40.794 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:20:40.792 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:24:50.917 00:00:10.376 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:24:52.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-10-11 14:25:51.329 00:00:10.364 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:26:03.427 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:26:03.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:25:53.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54606 10 6452 1 2025-10-11 14:26:51.731 00:00:10.378 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:26:53.328 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-10-11 14:27:52.158 00:00:10.364 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:27:53.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-10-11 14:28:52.560 00:00:10.367 TCP 23.104.0.1:39298 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:28:53.761 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6452 1 2025-10-11 14:29:53.934 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-10-11 14:29:52.964 00:00:10.383 TCP 23.104.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:26:40.794 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:26:40.797 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:30:54.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35730 10 6452 1 2025-10-11 14:31:03.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:31:03.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:30:53.389 00:00:10.369 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:31:54.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41972 10 6452 1 2025-10-11 14:31:53.795 00:00:10.345 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:32:54.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6452 1 2025-10-11 14:32:54.174 00:00:10.370 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:33:54.584 00:00:10.367 TCP 23.104.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:33:54.781 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-10-11 14:34:54.989 00:00:10.366 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:34:55.004 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-10-11 14:36:04.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:35:55.391 00:00:10.324 TCP 23.104.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:36:04.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:35:55.226 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55538 10 6452 1 2025-10-11 14:32:40.795 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:32:40.799 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:36:55.754 00:00:10.382 TCP 23.104.0.1:48470 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:36:55.439 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-10-11 14:37:55.662 00:00:10.900 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 11 6504 1 2025-10-11 14:37:56.172 00:00:10.526 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:38:56.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-10-11 14:38:56.736 00:00:10.367 TCP 23.104.0.1:37278 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:39:56.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 10 6452 1 2025-10-11 14:39:57.141 00:00:10.365 TCP 23.104.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:41:03.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:41:03.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:40:57.541 00:00:10.368 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:40:57.024 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39170 10 6452 1 2025-10-11 14:41:57.944 00:00:10.646 TCP 23.104.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:41:57.200 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-10-11 14:38:40.796 00:05:02.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:38:40.799 00:05:02.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:42:57.415 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6452 1 2025-10-11 14:42:58.626 00:00:10.365 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:43:57.582 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-10-11 14:43:59.024 00:00:10.364 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:44:59.428 00:00:10.374 TCP 23.104.0.1:45412 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:44:57.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-10-11 14:46:04.153 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:46:03.974 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:45:58.010 00:00:10.838 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 12 10375 1 2025-10-11 14:45:59.837 00:00:10.462 TCP 23.104.0.1:36252 -> 1.101.0.1:3000 15 1926 1 2025-10-11 14:47:00.338 00:00:10.323 TCP 23.104.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:46:58.892 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-10-11 14:47:59.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60372 10 6452 1 2025-10-11 14:48:00.701 00:00:10.773 TCP 23.104.0.1:33952 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:44:40.798 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:44:40.800 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:48:59.323 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 10 6452 1 2025-10-11 14:49:01.509 00:00:10.327 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:49:59.534 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 10 6452 1 2025-10-11 14:50:01.873 00:00:10.331 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:51:04.107 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:51:04.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:50:59.743 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48752 10 6452 1 2025-10-11 14:51:02.238 00:00:10.368 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:51:59.963 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47674 12 6556 1 2025-10-11 14:52:02.655 00:00:10.369 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:53:00.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38306 10 6452 1 2025-10-11 14:53:03.065 00:00:10.363 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:54:00.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-10-11 14:54:03.473 00:00:10.365 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:50:40.796 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 14:50:40.801 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:55:00.633 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-10-11 14:55:03.884 00:00:10.577 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:56:04.351 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 14:56:04.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 14:56:00.847 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-10-11 14:56:04.494 00:00:10.324 TCP 23.104.0.1:46118 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:57:01.086 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-10-11 14:57:04.861 00:00:10.332 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:58:01.272 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-10-11 14:58:05.232 00:00:10.318 TCP 23.104.0.1:33200 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505779, total packets: 1578, avg bps: 1095, avg pps: 0, avg bpp: 320 Time window: 2025-10-11 13:56:40 - 2025-10-11 14:58:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0031s Wall: 0.0031s flows/second: 52679.3 Runtime: 0.0031s