Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 14:59:07.774 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-10-14 14:59:40.334 00:00:10.366 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:00:08.044 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-10-14 14:56:42.229 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 14:56:42.226 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:00:40.742 00:00:10.394 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:01:08.260 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58390 10 6452 1 2025-10-14 15:01:41.174 00:00:10.362 TCP 23.104.0.1:55072 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:02:08.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-10-14 15:02:30.838 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:02:31.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:02:41.577 00:00:10.362 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:03:08.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53658 10 6452 1 2025-10-14 15:03:41.975 00:00:10.366 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:04:08.896 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-10-14 15:04:42.385 00:00:10.368 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:05:09.110 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-10-14 15:05:42.794 00:00:10.337 TCP 23.104.0.1:58028 -> 1.101.0.1:3000 12 1559 1 2025-10-14 15:06:09.280 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6452 1 2025-10-14 15:02:42.231 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:02:42.229 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:06:43.167 00:00:10.369 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:07:09.456 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-10-14 15:07:31.019 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:07:31.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:07:43.571 00:00:10.362 TCP 23.104.0.1:44776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:08:09.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34546 10 6452 1 2025-10-14 15:08:43.971 00:00:10.371 TCP 23.104.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:09:09.849 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-10-14 15:09:44.385 00:00:10.416 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:10:10.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-10-14 15:10:44.840 00:00:10.348 TCP 23.104.0.1:36256 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:11:10.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-10-14 15:11:45.222 00:00:10.720 TCP 23.104.0.1:44596 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:12:10.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-10-14 15:12:31.670 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:12:31.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:08:42.230 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:08:42.234 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:12:45.977 00:00:10.374 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:13:10.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-10-14 15:13:46.388 00:00:10.361 TCP 23.104.0.1:47776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:14:10.876 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 12 6556 1 2025-10-14 15:14:46.786 00:00:10.325 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:15:11.097 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53688 10 6452 1 2025-10-14 15:15:47.148 00:00:10.321 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:16:11.319 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 12 10369 1 2025-10-14 15:16:47.508 00:00:10.446 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 15 1926 1 2025-10-14 15:17:11.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39694 10 6452 1 2025-10-14 15:17:31.387 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:17:31.490 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:17:47.995 00:00:10.321 TCP 23.104.0.1:58072 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:18:11.772 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33536 10 6452 1 2025-10-14 15:14:42.235 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:14:42.233 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:18:48.357 00:00:10.423 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:19:11.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50520 10 6452 1 2025-10-14 15:19:48.815 00:00:10.328 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:20:12.207 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-10-14 15:20:49.178 00:00:10.323 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:21:12.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-10-14 15:21:49.537 00:00:10.367 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:22:12.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-10-14 15:22:31.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:22:31.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:22:49.943 00:00:10.370 TCP 23.104.0.1:55228 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:23:12.864 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-10-14 15:23:50.351 00:00:10.363 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:24:13.100 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-10-14 15:20:42.234 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:20:42.237 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:24:50.752 00:00:10.385 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:25:13.321 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-10-14 15:25:51.176 00:00:10.363 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:26:13.558 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-10-14 15:26:51.585 00:00:10.370 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:27:31.670 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:27:13.765 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42216 10 6452 1 2025-10-14 15:27:31.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:27:51.997 00:00:10.364 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:28:13.978 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-10-14 15:28:52.403 00:00:10.371 TCP 23.104.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:29:14.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50862 10 6452 1 2025-10-14 15:29:52.818 00:00:10.373 TCP 23.104.0.1:35940 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:30:14.432 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47754 10 6452 1 2025-10-14 15:26:42.238 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:26:42.236 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:30:53.229 00:00:10.365 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:31:14.650 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-10-14 15:31:53.628 00:00:10.376 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:32:14.821 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-10-14 15:32:31.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:32:31.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:32:54.067 00:00:10.326 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:33:15.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-10-14 15:33:54.427 00:00:10.366 TCP 23.104.0.1:53546 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:34:15.285 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-10-14 15:34:54.830 00:00:10.387 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:35:15.455 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-10-14 15:35:55.258 00:00:10.369 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:36:15.671 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6452 1 2025-10-14 15:32:42.240 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:32:42.237 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:36:55.672 00:00:10.371 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:37:15.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6452 1 2025-10-14 15:37:31.740 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:37:31.770 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:37:56.102 00:00:10.521 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:38:16.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53322 10 6452 1 2025-10-14 15:38:56.664 00:00:10.367 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:39:16.322 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-10-14 15:39:57.099 00:00:10.364 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:40:16.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-10-14 15:40:57.503 00:00:10.427 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 15 1926 1 2025-10-14 15:41:16.746 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 12 10375 1 2025-10-14 15:41:57.943 00:00:10.386 TCP 23.104.0.1:47216 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:42:31.853 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:42:31.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:42:16.987 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-10-14 15:38:42.241 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:38:42.238 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:42:58.371 00:00:10.327 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:43:17.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-10-14 15:43:58.740 00:00:10.371 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:44:17.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57320 10 6452 1 2025-10-14 15:44:59.145 00:00:10.358 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:45:17.636 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-10-14 15:45:59.540 00:00:10.367 TCP 23.104.0.1:50626 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:46:17.807 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-10-14 15:46:59.943 00:00:10.379 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:47:18.027 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-10-14 15:47:31.850 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:47:32.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:48:00.360 00:00:10.365 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:48:18.247 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49864 10 6452 1 2025-10-14 15:44:42.251 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:44:42.249 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:49:00.767 00:00:10.373 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:49:18.506 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33122 10 6452 1 2025-10-14 15:50:01.178 00:00:10.365 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:50:18.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-10-14 15:51:01.581 00:00:10.364 TCP 23.104.0.1:36160 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:51:18.895 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-10-14 15:52:01.985 00:00:10.363 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:52:32.183 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:52:19.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6452 1 2025-10-14 15:52:32.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:53:02.388 00:00:10.364 TCP 23.104.0.1:57318 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:53:19.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-14 15:54:02.790 00:00:10.404 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:54:19.470 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46902 10 6452 1 2025-10-14 15:50:42.253 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 15:50:42.250 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 15:55:03.236 00:00:10.367 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:55:19.677 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-10-14 15:56:03.639 00:00:10.367 TCP 23.104.0.1:46520 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:56:19.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 10 6452 1 2025-10-14 15:57:04.056 00:00:10.379 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:57:32.171 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 15:57:20.086 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-10-14 15:57:32.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 15:58:04.469 00:00:10.327 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-10-14 15:58:20.311 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 Summary: total flows: 163, total bytes: 505675, total packets: 1576, avg bps: 1090, avg pps: 0, avg bpp: 320 Time window: 2025-10-14 14:56:42 - 2025-10-14 15:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0028s flows/second: 57698.7 Runtime: 0.0028s