Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 17:59:21.539 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-10-12 17:59:22.600 00:00:10.364 TCP 23.104.0.1:38996 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:00:21.708 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-10-12 18:00:23.007 00:00:10.324 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-10-12 17:56:41.294 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 17:56:41.291 00:05:02.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:01:36.793 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:01:21.925 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-10-12 18:01:36.936 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:01:23.372 00:00:10.322 TCP 23.104.0.1:59636 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:02:23.737 00:00:10.365 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:02:22.160 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-10-12 18:03:24.141 00:00:10.372 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:03:22.394 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52170 10 6452 1 2025-10-12 18:04:22.616 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45798 10 6452 1 2025-10-12 18:04:24.556 00:00:10.364 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:05:24.959 00:00:10.376 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:05:22.788 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-10-12 18:06:25.371 00:00:10.327 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:06:37.042 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:02:41.303 00:05:02.432 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:06:23.002 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-10-12 18:06:37.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:02:41.300 00:05:02.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:07:25.743 00:00:10.364 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:07:23.219 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-10-12 18:08:26.143 00:00:10.362 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:08:23.436 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-10-12 18:09:26.546 00:00:10.372 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:09:23.657 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6452 1 2025-10-12 18:10:23.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-10-12 18:10:26.954 00:00:10.365 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:11:37.220 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:11:27.359 00:00:10.363 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:11:24.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38948 10 6452 1 2025-10-12 18:11:37.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:12:24.297 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-10-12 18:12:27.775 00:00:10.374 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:08:41.307 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:08:41.304 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:13:24.518 00:00:10.795 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-10-12 18:13:28.184 00:00:10.323 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:14:25.342 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-10-12 18:14:28.543 00:00:10.789 TCP 23.104.0.1:58968 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:15:25.564 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-10-12 18:15:29.369 00:00:10.383 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:16:25.773 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-10-12 18:16:36.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:16:37.304 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:16:29.787 00:00:10.363 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:17:25.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-10-12 18:17:30.188 00:00:10.362 TCP 23.104.0.1:36826 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:18:26.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 10 6452 1 2025-10-12 18:18:30.589 00:00:10.363 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:14:41.310 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:14:41.309 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:19:26.426 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-10-12 18:19:30.989 00:00:10.373 TCP 23.104.0.1:51100 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:20:26.652 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-10-12 18:20:31.395 00:00:10.369 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:21:26.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-10-12 18:21:37.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:21:37.301 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:21:31.802 00:00:10.339 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:22:27.040 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-12 18:22:32.179 00:00:10.363 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:23:27.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-10-12 18:23:32.582 00:00:10.368 TCP 23.104.0.1:40778 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:24:27.464 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42024 10 6452 1 2025-10-12 18:20:41.310 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:24:32.984 00:00:10.366 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:20:41.312 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:25:27.681 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-10-12 18:25:33.392 00:00:10.362 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:26:37.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:26:27.885 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 2025-10-12 18:26:37.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:26:33.792 00:00:10.366 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:27:28.121 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-10-12 18:27:34.197 00:00:10.319 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:28:28.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 11 6492 1 2025-10-12 18:28:34.553 00:00:10.371 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:29:28.517 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-10-12 18:29:34.963 00:00:10.368 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:30:28.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44054 10 6452 1 2025-10-12 18:30:35.373 00:00:10.325 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:26:41.318 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:26:41.315 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:31:37.846 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:31:28.941 00:00:11.093 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-10-12 18:31:37.554 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:31:35.743 00:00:10.911 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:32:30.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 10 6452 1 2025-10-12 18:32:36.699 00:00:10.369 TCP 23.104.0.1:40358 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:33:30.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 10 6452 1 2025-10-12 18:33:37.117 00:00:10.373 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:34:30.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46686 10 6452 1 2025-10-12 18:34:37.536 00:00:10.364 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:35:30.726 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58532 10 6452 1 2025-10-12 18:35:37.939 00:00:10.373 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:36:37.728 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:32:41.318 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:36:37.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:36:30.893 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-10-12 18:32:41.315 00:05:02.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:36:38.356 00:00:10.368 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:37:31.108 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-10-12 18:37:38.764 00:00:10.327 TCP 23.104.0.1:38042 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:38:31.823 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53382 10 6452 1 2025-10-12 18:38:39.130 00:00:10.321 TCP 23.104.0.1:50868 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:39:31.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-10-12 18:39:39.491 00:00:10.365 TCP 23.104.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:40:32.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6452 1 2025-10-12 18:40:39.895 00:00:10.375 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:41:37.862 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:41:37.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:41:32.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-10-12 18:41:40.307 00:00:10.363 TCP 23.104.0.1:57672 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:42:32.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52782 10 6452 1 2025-10-12 18:38:41.317 00:05:02.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:38:41.319 00:05:02.432 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:42:40.707 00:00:10.364 TCP 23.104.0.1:44516 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:43:32.852 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-10-12 18:43:41.111 00:00:10.325 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:44:33.089 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-10-12 18:44:41.472 00:00:10.365 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:45:33.263 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-10-12 18:45:41.873 00:00:10.370 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:46:38.824 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:46:38.800 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:46:33.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-10-12 18:46:42.281 00:00:10.367 TCP 23.104.0.1:47296 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:47:33.686 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48950 10 6452 1 2025-10-12 18:47:42.683 00:00:10.373 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:48:33.896 00:00:10.853 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-10-12 18:44:41.318 00:05:02.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:44:41.321 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:48:43.108 00:00:10.359 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:49:34.790 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-10-12 18:49:43.506 00:00:10.359 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:50:35.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-10-12 18:50:43.904 00:00:10.372 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:51:38.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:51:37.899 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:51:35.240 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6452 1 2025-10-12 18:51:44.316 00:00:10.388 TCP 23.104.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:52:35.449 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-10-12 18:52:44.729 00:00:10.380 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:53:35.664 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40796 10 6452 1 2025-10-12 18:53:45.148 00:00:10.321 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:54:35.876 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-10-12 18:50:41.320 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 18:50:41.322 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 18:54:45.506 00:00:10.368 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:55:36.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-10-12 18:55:45.916 00:00:10.394 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:56:38.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 18:56:37.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 18:56:36.309 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60196 10 6452 1 2025-10-12 18:56:46.357 00:00:10.363 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:57:36.489 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52478 10 6452 1 2025-10-12 18:57:46.758 00:00:10.387 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-10-12 18:58:36.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 Summary: total flows: 163, total bytes: 496881, total packets: 1562, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-10-12 17:56:41 - 2025-10-12 18:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0036s flows/second: 45517.4 Runtime: 0.0036s