Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 17:58:43.733 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-10-11 17:59:41.587 00:00:15.687 TCP 23.104.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-10-11 17:59:43.903 00:00:13.337 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6452 1 2025-10-11 17:56:40.840 00:05:02.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 17:56:40.844 00:05:02.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:00:47.314 00:00:10.362 TCP 23.104.0.1:56890 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:00:47.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-10-11 18:01:07.875 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:01:08.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:01:47.720 00:00:10.322 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:01:47.495 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55986 10 6452 1 2025-10-11 18:02:48.107 00:00:10.367 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:02:47.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-10-11 18:03:48.510 00:00:10.366 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:03:47.930 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-10-11 18:04:48.914 00:00:10.388 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:04:48.180 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54222 10 6452 1 2025-10-11 18:05:48.395 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40190 10 6452 1 2025-10-11 18:05:49.342 00:00:10.323 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:06:08.087 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:06:07.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:02:40.844 00:05:02.396 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:02:40.846 00:05:02.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:06:49.705 00:00:10.364 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:06:48.614 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43700 10 6452 1 2025-10-11 18:07:48.800 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-10-11 18:07:50.111 00:00:10.365 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:08:49.015 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57458 10 6452 1 2025-10-11 18:08:50.512 00:00:10.323 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:09:50.869 00:00:10.368 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:09:49.239 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45688 10 6452 1 2025-10-11 18:10:49.414 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-10-11 18:10:51.277 00:00:10.363 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:11:08.191 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:11:08.114 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:11:49.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-10-11 18:11:51.676 00:00:10.364 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:08:40.848 00:05:02.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:08:40.846 00:05:02.395 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:12:49.848 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-10-11 18:12:52.109 00:00:10.383 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:13:50.079 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-10-11 18:13:52.527 00:00:10.373 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:14:50.302 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-10-11 18:14:52.933 00:00:10.376 TCP 23.104.0.1:58738 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:15:50.531 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 12 10375 1 2025-10-11 18:15:53.344 00:00:10.397 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 15 1926 1 2025-10-11 18:16:08.446 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:16:08.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:16:50.771 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-10-11 18:16:53.781 00:00:10.369 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:17:50.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44316 10 6452 1 2025-10-11 18:17:54.191 00:00:10.378 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:14:40.847 00:05:02.395 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:14:40.849 00:05:02.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:18:51.223 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:37118 10 6452 1 2025-10-11 18:18:54.602 00:00:10.471 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:19:51.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55202 10 6452 1 2025-10-11 18:19:55.114 00:00:10.366 TCP 23.104.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:20:55.512 00:00:10.367 TCP 23.104.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:20:51.880 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58146 10 6452 1 2025-10-11 18:21:08.413 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:21:08.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:21:55.922 00:00:10.380 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:21:52.109 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-10-11 18:22:56.339 00:00:10.383 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:22:52.339 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-10-11 18:23:52.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-10-11 18:23:56.764 00:00:10.373 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:20:40.854 00:05:02.389 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:20:40.852 00:05:02.394 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:24:52.725 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-10-11 18:24:57.175 00:00:10.363 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:25:52.898 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-10-11 18:26:08.576 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:26:08.485 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:25:57.576 00:00:10.368 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:26:53.087 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54326 10 6452 1 2025-10-11 18:26:57.983 00:00:10.427 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:27:53.311 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:55428 10 6452 1 2025-10-11 18:27:58.450 00:00:10.368 TCP 23.104.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:28:53.562 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2025-10-11 18:28:58.853 00:00:10.382 TCP 23.104.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:29:53.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-10-11 18:29:59.273 00:00:10.366 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:26:40.854 00:05:02.403 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:26:40.852 00:05:02.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:31:09.143 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:30:59.677 00:00:10.330 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:30:53.952 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:39594 10 6452 1 2025-10-11 18:31:09.048 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:31:54.152 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-10-11 18:32:00.053 00:00:10.336 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:32:54.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-10-11 18:33:00.416 00:00:10.367 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:33:54.534 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6452 1 2025-10-11 18:34:00.820 00:00:10.361 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:34:54.764 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-10-11 18:35:01.221 00:00:10.368 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:35:54.981 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38140 10 6452 1 2025-10-11 18:36:08.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:36:01.635 00:00:10.364 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:36:08.678 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:32:40.856 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:32:40.854 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:36:55.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2025-10-11 18:37:02.035 00:00:10.363 TCP 23.104.0.1:45382 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:38:02.439 00:00:10.574 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:37:55.432 00:00:17.485 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-10-11 18:39:03.056 00:00:10.367 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:39:02.961 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 6452 1 2025-10-11 18:40:03.466 00:00:10.369 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:40:03.154 00:00:10.470 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-10-11 18:41:08.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:41:08.642 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:41:03.875 00:00:10.363 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:41:03.659 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:42952 10 6452 1 2025-10-11 18:42:03.860 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-10-11 18:42:04.275 00:00:10.364 TCP 23.104.0.1:41384 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:38:40.855 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:38:40.858 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:43:04.680 00:00:10.361 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:43:04.087 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-10-11 18:44:05.099 00:00:10.320 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:44:04.308 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-10-11 18:45:04.562 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-10-11 18:45:05.457 00:00:10.369 TCP 23.104.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:46:08.880 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:46:04.781 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 12 10369 1 2025-10-11 18:46:09.012 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:46:05.861 00:00:10.407 TCP 23.104.0.1:40940 -> 1.101.0.1:3000 15 1926 1 2025-10-11 18:47:05.030 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46424 10 6452 1 2025-10-11 18:47:06.308 00:00:10.368 TCP 23.104.0.1:47264 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:48:05.237 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:40372 10 6452 1 2025-10-11 18:48:06.711 00:00:10.384 TCP 23.104.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:44:40.858 00:05:02.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:44:40.857 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:49:06.041 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-10-11 18:49:07.136 00:00:10.368 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:50:06.262 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:60316 10 6452 1 2025-10-11 18:50:07.543 00:00:10.369 TCP 23.104.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:51:09.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:51:09.010 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:51:06.518 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-10-11 18:51:07.949 00:00:10.326 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:52:06.735 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-10-11 18:52:08.316 00:00:10.324 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:53:06.956 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39318 10 6452 1 2025-10-11 18:53:08.682 00:00:10.374 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:54:09.107 00:00:10.364 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:54:07.182 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43016 10 6452 1 2025-10-11 18:50:40.859 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 18:50:40.856 00:05:02.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 18:55:07.364 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-10-11 18:55:09.512 00:00:10.331 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:56:09.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 18:56:09.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 18:56:07.586 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-10-11 18:56:09.879 00:00:10.366 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:57:10.282 00:00:10.368 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-10-11 18:57:07.807 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54634 10 6452 1 2025-10-11 18:58:08.055 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-10-11 18:58:10.692 00:00:10.366 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1092, avg pps: 0, avg bpp: 321 Time window: 2025-10-11 17:56:40 - 2025-10-11 18:58:21 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0036s Wall: 0.0048s flows/second: 33902.2 Runtime: 0.0048s