Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 07:59:23.115 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-10-14 07:59:40.219 00:00:10.365 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:00:23.339 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-10-14 07:56:42.066 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 07:56:42.069 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:00:40.622 00:00:10.367 TCP 23.104.0.1:48240 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:01:23.565 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-10-14 08:01:41.018 00:00:10.363 TCP 23.104.0.1:35758 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:02:22.794 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:02:22.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:02:23.744 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 10 6452 1 2025-10-14 08:02:41.419 00:00:10.366 TCP 23.104.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:03:23.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50020 10 6452 1 2025-10-14 08:03:41.824 00:00:10.361 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:04:24.180 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-10-14 08:04:42.225 00:00:10.325 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:05:24.398 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6452 1 2025-10-14 08:05:42.591 00:00:10.361 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:06:24.579 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 13 13955 1 2025-10-14 08:02:42.068 00:05:02.447 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:02:42.070 00:05:02.441 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:06:42.989 00:00:10.437 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 15 1926 1 2025-10-14 08:07:22.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:07:22.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:07:24.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-10-14 08:07:43.463 00:00:10.325 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:08:24.981 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 10 6452 1 2025-10-14 08:08:43.827 00:00:10.350 TCP 23.104.0.1:40840 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:09:25.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45908 10 6452 1 2025-10-14 08:09:44.219 00:00:10.366 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:10:25.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32956 10 6452 1 2025-10-14 08:10:44.622 00:00:10.362 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:11:25.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50860 10 6452 1 2025-10-14 08:11:45.028 00:00:10.366 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:12:22.820 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:12:22.923 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:12:25.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-10-14 08:08:42.067 00:05:02.449 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:08:42.072 00:05:02.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:12:45.430 00:00:10.360 TCP 23.104.0.1:45712 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:13:26.039 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-10-14 08:13:45.829 00:00:10.386 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:14:26.254 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42976 10 6452 1 2025-10-14 08:14:46.254 00:00:10.339 TCP 23.104.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:15:26.469 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-10-14 08:15:46.637 00:00:10.367 TCP 23.104.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:16:26.679 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54300 12 10375 1 2025-10-14 08:16:47.053 00:00:10.444 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 15 1926 1 2025-10-14 08:17:22.794 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:17:23.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:17:26.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39204 10 6452 1 2025-10-14 08:17:47.539 00:00:10.372 TCP 23.104.0.1:33182 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:18:27.123 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-10-14 08:14:42.069 00:05:02.448 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:14:42.071 00:05:02.443 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:18:47.952 00:00:10.368 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:19:27.344 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-10-14 08:19:48.361 00:00:10.320 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:20:27.556 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53954 10 6452 1 2025-10-14 08:20:48.721 00:00:10.367 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:21:27.766 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45468 10 6452 1 2025-10-14 08:21:49.130 00:00:10.369 TCP 23.104.0.1:42666 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:22:23.020 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:22:22.962 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:22:27.941 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-10-14 08:22:49.535 00:00:10.363 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:23:28.131 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 2025-10-14 08:23:49.938 00:00:10.373 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:24:28.349 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-10-14 08:20:42.070 00:05:02.450 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:20:42.073 00:05:02.444 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:24:50.350 00:00:10.365 TCP 23.104.0.1:57770 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:25:28.587 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-10-14 08:25:50.752 00:00:10.324 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:26:28.832 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-10-14 08:26:51.113 00:00:10.366 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:27:23.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:27:23.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:27:29.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45672 10 6452 1 2025-10-14 08:27:51.513 00:00:10.366 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:28:29.298 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35902 10 6452 1 2025-10-14 08:28:51.917 00:00:10.346 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:29:29.474 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-10-14 08:29:52.296 00:00:10.370 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:30:29.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-10-14 08:26:42.072 00:05:02.451 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:26:42.077 00:05:02.445 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:30:52.699 00:00:10.369 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:31:29.906 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46940 10 6452 1 2025-10-14 08:31:53.110 00:00:10.368 TCP 23.104.0.1:51656 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:32:23.260 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:32:23.228 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:32:30.117 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-10-14 08:32:53.518 00:00:10.369 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:33:30.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-10-14 08:33:53.923 00:00:10.340 TCP 23.104.0.1:48376 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:34:30.501 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57634 10 6452 1 2025-10-14 08:34:54.302 00:00:10.363 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:35:30.716 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-10-14 08:35:54.701 00:00:10.365 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:32:42.078 00:05:02.444 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:36:30.929 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:55190 10 6452 1 2025-10-14 08:32:42.076 00:05:02.449 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:36:55.112 00:00:10.327 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:37:23.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:37:23.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:37:31.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 10 6452 1 2025-10-14 08:37:55.475 00:00:10.377 TCP 23.104.0.1:56102 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:38:31.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60358 10 6452 1 2025-10-14 08:38:55.895 00:00:10.371 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:39:31.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-10-14 08:39:56.307 00:00:10.367 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:40:31.775 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-10-14 08:40:56.714 00:00:10.466 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:41:31.987 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-10-14 08:41:57.221 00:00:10.366 TCP 23.104.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:42:23.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:42:23.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:42:32.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38186 10 6452 1 2025-10-14 08:38:42.086 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:38:42.089 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:42:57.632 00:00:10.366 TCP 23.104.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:43:32.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-10-14 08:43:58.047 00:00:10.321 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:44:32.638 00:00:10.692 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-10-14 08:44:58.408 00:00:10.372 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:45:33.370 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-10-14 08:45:58.822 00:00:10.402 TCP 23.104.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:46:33.583 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-10-14 08:46:59.265 00:00:10.346 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:47:23.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:47:23.578 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:47:33.800 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52582 10 6452 1 2025-10-14 08:47:59.649 00:00:10.357 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:44:42.090 00:05:02.434 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:48:34.028 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-10-14 08:44:42.088 00:05:02.439 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:49:00.044 00:00:10.320 TCP 23.104.0.1:41676 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:49:34.269 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-10-14 08:50:00.401 00:00:10.375 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:50:34.440 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42606 10 6452 1 2025-10-14 08:51:00.814 00:00:10.442 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 15 1926 1 2025-10-14 08:51:34.658 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 12 10369 1 2025-10-14 08:52:01.299 00:00:10.670 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:52:23.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:52:23.674 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:52:34.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-10-14 08:53:02.010 00:00:10.360 TCP 23.104.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:53:35.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-10-14 08:54:02.406 00:00:10.366 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:50:42.090 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 08:50:42.088 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 08:54:35.332 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-10-14 08:55:02.811 00:00:10.372 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:55:35.499 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-10-14 08:56:03.225 00:00:10.320 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:56:35.719 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-10-14 08:57:03.583 00:00:10.320 TCP 23.104.0.1:37616 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:57:23.840 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 08:57:23.898 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 08:57:35.931 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-10-14 08:58:03.942 00:00:10.367 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-10-14 08:58:36.155 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33104 10 6452 1 Summary: total flows: 163, total bytes: 513441, total packets: 1580, avg bps: 1102, avg pps: 0, avg bpp: 324 Time window: 2025-10-14 07:56:42 - 2025-10-14 08:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0025s flows/second: 65567.4 Runtime: 0.0025s