Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 12:58:50.184 00:00:10.365 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:59:39.717 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:39258 10 6452 1 2025-10-14 12:59:50.598 00:00:10.366 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-10-14 12:56:42.198 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 12:56:42.200 00:05:02.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:00:40.519 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 2025-10-14 13:00:51.004 00:00:10.363 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:01:40.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-10-14 13:01:51.413 00:00:10.369 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:02:28.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:02:28.646 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:02:40.947 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59864 10 6452 1 2025-10-14 13:02:51.819 00:00:10.366 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:03:41.180 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-10-14 13:03:52.220 00:00:10.366 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:04:41.398 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-10-14 13:04:52.633 00:00:10.369 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:05:41.574 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50322 10 6452 1 2025-10-14 13:05:53.050 00:00:10.368 TCP 23.104.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:02:42.199 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:02:42.201 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:06:41.779 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-10-14 13:06:53.455 00:00:10.481 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:07:28.796 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:07:28.634 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:07:41.997 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-10-14 13:07:53.973 00:00:10.372 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:08:42.216 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-10-14 13:08:54.383 00:00:10.370 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:09:42.438 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35672 10 6452 1 2025-10-14 13:09:54.788 00:00:10.369 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:10:42.649 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-10-14 13:10:55.195 00:00:10.364 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:11:42.866 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6452 1 2025-10-14 13:11:55.596 00:00:10.365 TCP 23.104.0.1:54544 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:12:28.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:12:28.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:08:42.199 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:08:42.201 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:12:43.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6452 1 2025-10-14 13:12:56.009 00:00:10.371 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:13:43.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54368 10 6452 1 2025-10-14 13:13:56.422 00:00:10.327 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:14:43.504 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40504 10 6452 1 2025-10-14 13:14:56.792 00:00:10.367 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:15:43.678 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41938 10 6452 1 2025-10-14 13:15:57.196 00:00:10.325 TCP 23.104.0.1:36674 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:16:43.899 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35894 10 6452 1 2025-10-14 13:16:57.558 00:00:10.366 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:17:28.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:17:29.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:17:44.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-10-14 13:17:57.960 00:00:10.370 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:14:42.200 00:05:02.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:14:42.204 00:05:02.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:18:44.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2025-10-14 13:18:58.374 00:00:10.372 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:19:44.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47400 10 6452 1 2025-10-14 13:19:58.784 00:00:10.364 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:20:44.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6452 1 2025-10-14 13:20:59.192 00:00:10.369 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:21:44.942 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-10-14 13:21:59.597 00:00:10.365 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:22:29.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:22:28.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:22:45.137 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6452 1 2025-10-14 13:23:00.000 00:00:10.365 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:23:45.354 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-10-14 13:24:00.402 00:00:10.373 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:20:42.202 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:20:42.204 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:24:45.575 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-10-14 13:25:00.803 00:00:10.343 TCP 23.104.0.1:35632 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:25:45.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37898 10 6452 1 2025-10-14 13:26:01.185 00:00:10.369 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:26:45.996 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42944 10 6452 1 2025-10-14 13:27:01.591 00:00:10.369 TCP 23.104.0.1:46574 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:27:29.406 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:27:29.474 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:27:46.214 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58922 10 6452 1 2025-10-14 13:28:02.002 00:00:10.645 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:28:46.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50922 10 6452 1 2025-10-14 13:29:02.688 00:00:10.322 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:29:46.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 10 6452 1 2025-10-14 13:30:03.058 00:00:10.368 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:26:42.203 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:26:42.205 00:05:02.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:30:46.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46438 10 6452 1 2025-10-14 13:31:03.467 00:00:10.398 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 15 1926 1 2025-10-14 13:31:47.081 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 12 10369 1 2025-10-14 13:32:03.901 00:00:10.330 TCP 23.104.0.1:49802 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:32:29.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:32:29.481 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:32:47.277 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-10-14 13:33:04.270 00:00:10.368 TCP 23.104.0.1:51420 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:33:47.490 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-10-14 13:34:04.676 00:00:10.365 TCP 23.104.0.1:52340 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:34:47.715 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-10-14 13:35:05.102 00:00:10.364 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:35:47.927 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41964 10 6452 1 2025-10-14 13:36:05.498 00:00:10.368 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:32:42.206 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:32:42.203 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:36:48.147 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-10-14 13:37:05.900 00:00:10.373 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:37:29.444 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:37:29.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:37:48.367 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-10-14 13:38:06.310 00:00:10.370 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:38:48.583 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59884 10 6452 1 2025-10-14 13:39:06.718 00:00:10.370 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:39:48.795 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-10-14 13:40:07.127 00:00:10.365 TCP 23.104.0.1:58226 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:40:49.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59614 10 6452 1 2025-10-14 13:41:07.531 00:00:10.358 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:41:49.241 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-10-14 13:42:07.926 00:00:10.402 TCP 23.104.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:42:29.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:42:29.684 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:38:42.206 00:05:02.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:38:42.209 00:05:02.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:42:49.473 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-10-14 13:43:08.365 00:00:10.322 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:43:49.695 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-10-14 13:44:08.721 00:00:10.328 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:44:49.910 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-10-14 13:45:09.105 00:00:10.365 TCP 23.104.0.1:60868 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:45:50.121 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-10-14 13:46:09.511 00:00:10.359 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:46:50.292 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-10-14 13:47:09.915 00:00:10.365 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:47:29.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:47:29.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:47:50.506 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60334 10 6452 1 2025-10-14 13:48:10.320 00:00:10.361 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:44:42.207 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:44:42.208 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:48:50.712 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-10-14 13:49:10.721 00:00:10.376 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:49:50.927 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56676 10 6452 1 2025-10-14 13:50:11.137 00:00:10.366 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:50:51.133 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-10-14 13:51:11.544 00:00:10.372 TCP 23.104.0.1:54078 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:51:51.348 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48750 10 6452 1 2025-10-14 13:52:11.955 00:00:11.051 TCP 23.104.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:52:29.526 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:52:29.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:52:51.578 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-10-14 13:53:13.052 00:00:10.889 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:53:51.791 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34972 10 6452 1 2025-10-14 13:54:13.976 00:00:10.366 TCP 23.104.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:50:42.207 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 13:50:42.211 00:05:02.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 13:54:51.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-10-14 13:55:14.382 00:00:10.367 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:55:52.196 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48536 10 6452 1 2025-10-14 13:56:14.784 00:00:10.371 TCP 23.104.0.1:58404 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:56:52.379 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-10-14 13:57:15.187 00:00:10.345 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-10-14 13:57:29.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 13:57:29.861 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 13:57:52.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-10-14 13:58:15.556 00:00:10.377 TCP 23.104.0.1:54808 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496232, total packets: 1568, avg bps: 1071, avg pps: 0, avg bpp: 316 Time window: 2025-10-14 12:56:42 - 2025-10-14 13:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0013s Wall: 0.0024s flows/second: 67750.6 Runtime: 0.0024s