Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 15:58:48.934 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-10-12 15:59:31.113 00:00:10.364 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:59:49.160 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6452 1 2025-10-12 16:00:31.516 00:00:10.365 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-10-12 15:56:41.268 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 15:56:41.267 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:00:49.367 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39540 10 6452 1 2025-10-12 16:01:34.202 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:01:34.488 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:01:31.927 00:00:10.385 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:01:49.545 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-10-12 16:02:32.351 00:00:10.364 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:02:49.769 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59150 10 6452 1 2025-10-12 16:03:32.755 00:00:10.483 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:03:49.962 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-10-12 16:04:33.277 00:00:10.366 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:04:50.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-10-12 16:05:33.679 00:00:10.333 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:05:50.407 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-10-12 16:06:34.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:06:34.651 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:02:41.268 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:02:41.270 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:06:34.050 00:00:10.366 TCP 23.104.0.1:43304 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:06:50.622 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43366 10 6452 1 2025-10-12 16:07:34.457 00:00:10.363 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:07:50.832 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-10-12 16:08:34.859 00:00:10.375 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:08:51.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-10-12 16:09:35.273 00:00:10.364 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:09:51.287 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-10-12 16:10:35.681 00:00:10.366 TCP 23.104.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:10:51.500 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-10-12 16:11:34.740 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:11:34.872 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:11:36.103 00:00:10.367 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:11:51.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53560 10 6452 1 2025-10-12 16:08:41.273 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:12:36.511 00:00:10.384 TCP 23.104.0.1:35678 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:08:41.271 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:12:51.923 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-10-12 16:13:36.933 00:00:10.376 TCP 23.104.0.1:39022 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:13:52.156 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55662 10 6452 1 2025-10-12 16:14:37.350 00:00:10.358 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:14:52.331 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42532 10 6452 1 2025-10-12 16:15:37.744 00:00:10.360 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:15:52.540 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-10-12 16:16:34.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:16:35.087 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:16:38.146 00:00:10.369 TCP 23.104.0.1:51822 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:16:52.753 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45524 10 6452 1 2025-10-12 16:17:38.557 00:00:10.359 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:17:52.970 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-10-12 16:14:41.273 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:14:41.276 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:18:38.957 00:00:10.366 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:18:53.159 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35838 10 6452 1 2025-10-12 16:19:39.369 00:00:10.368 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:19:53.373 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-10-12 16:20:39.782 00:00:10.368 TCP 23.104.0.1:59310 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:20:53.592 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6452 1 2025-10-12 16:21:34.779 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:21:34.737 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:21:40.191 00:00:10.321 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:21:53.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-10-12 16:22:40.558 00:00:10.364 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 12 1559 1 2025-10-12 16:22:53.985 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-10-12 16:23:40.957 00:00:10.980 TCP 23.104.0.1:46540 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:23:54.212 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-10-12 16:20:41.274 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:20:41.276 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:24:41.978 00:00:10.365 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:24:54.586 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43910 10 6452 1 2025-10-12 16:25:42.383 00:00:10.365 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:25:54.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-10-12 16:26:34.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:26:35.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:26:42.785 00:00:10.376 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:26:54.975 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57406 10 6452 1 2025-10-12 16:27:43.200 00:00:11.056 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:27:55.207 00:00:14.914 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-10-12 16:28:44.300 00:00:10.368 TCP 23.104.0.1:39318 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:29:00.180 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-10-12 16:29:44.702 00:00:10.368 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:30:00.355 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54734 10 6452 1 2025-10-12 16:26:41.273 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:26:41.278 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:30:45.107 00:00:10.365 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:31:00.576 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-10-12 16:31:35.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:31:35.105 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:31:45.512 00:00:10.367 TCP 23.104.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:32:01.061 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-10-12 16:32:45.914 00:00:10.366 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:33:01.277 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-10-12 16:33:46.324 00:00:10.368 TCP 23.104.0.1:41314 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:34:01.492 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43424 10 6452 1 2025-10-12 16:34:46.729 00:00:10.366 TCP 23.104.0.1:53114 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:35:01.704 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-10-12 16:35:47.133 00:00:10.372 TCP 23.104.0.1:39072 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:36:01.925 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:35680 10 6452 1 2025-10-12 16:36:35.290 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:36:35.245 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:32:41.278 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:32:41.276 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:36:47.545 00:00:10.369 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:37:02.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36752 10 6452 1 2025-10-12 16:37:47.951 00:00:10.370 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:38:02.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41888 10 6452 1 2025-10-12 16:38:48.359 00:00:10.366 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:39:02.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46074 10 6452 1 2025-10-12 16:39:48.763 00:00:10.336 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:40:02.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-10-12 16:40:49.134 00:00:10.364 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:41:03.040 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-10-12 16:41:35.213 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:41:35.476 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:41:49.535 00:00:10.322 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:42:03.251 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60834 10 6452 1 2025-10-12 16:38:41.277 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:38:41.279 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:42:49.897 00:00:10.368 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:43:03.467 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36836 10 6452 1 2025-10-12 16:43:50.302 00:00:10.367 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:44:03.683 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-10-12 16:44:50.702 00:00:10.330 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:45:03.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52260 10 6452 1 2025-10-12 16:45:51.098 00:00:10.361 TCP 23.104.0.1:56978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:46:04.119 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52896 10 6452 1 2025-10-12 16:46:35.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:46:35.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:46:51.495 00:00:10.366 TCP 23.104.0.1:60096 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:47:04.287 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6452 1 2025-10-12 16:47:51.903 00:00:10.370 TCP 23.104.0.1:39394 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:48:04.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50378 10 6452 1 2025-10-12 16:44:41.280 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:44:41.278 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:48:52.314 00:00:10.369 TCP 23.104.0.1:45260 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:49:04.740 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59698 10 6452 1 2025-10-12 16:49:52.728 00:00:10.326 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:50:04.972 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37036 10 6452 1 2025-10-12 16:50:53.113 00:00:10.365 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:51:05.201 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46874 10 6452 1 2025-10-12 16:51:35.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:51:35.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:51:53.515 00:00:10.364 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:52:05.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57618 10 6452 1 2025-10-12 16:52:53.918 00:00:10.367 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:53:05.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34806 10 6452 1 2025-10-12 16:53:54.322 00:00:10.365 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:54:05.842 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 12 6556 1 2025-10-12 16:50:41.282 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 16:50:41.279 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 16:54:54.727 00:00:10.325 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:55:06.078 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54216 12 6556 1 2025-10-12 16:55:55.105 00:00:10.363 TCP 23.104.0.1:52088 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:56:06.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-10-12 16:56:35.616 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 16:56:35.699 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 16:56:55.506 00:00:11.123 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:57:06.521 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-10-12 16:57:56.665 00:00:10.533 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-10-12 16:58:06.734 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 Summary: total flows: 163, total bytes: 497101, total packets: 1566, avg bps: 1076, avg pps: 0, avg bpp: 317 Time window: 2025-10-12 15:56:41 - 2025-10-12 16:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0019s Wall: 0.0020s flows/second: 81128.7 Runtime: 0.0020s