Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 18:59:00.005 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57796 10 6661 1 2025-10-14 18:59:26.914 00:00:11.236 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:00:00.182 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6661 1 2025-10-14 18:56:42.306 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:00:28.190 00:00:10.360 TCP 23.104.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-10-14 18:56:42.309 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:01:00.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6661 1 2025-10-14 19:01:28.598 00:00:10.368 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:02:00.565 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6661 1 2025-10-14 19:02:35.897 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:02:35.887 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:02:29.009 00:00:10.357 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:03:00.779 00:00:10.957 TCP 1.101.0.1:3000 -> 22.102.0.1:41562 10 6661 1 2025-10-14 19:03:29.409 00:00:10.355 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:04:01.775 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6661 1 2025-10-14 19:04:29.806 00:00:10.369 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:05:01.947 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6661 1 2025-10-14 19:05:30.214 00:00:10.365 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:06:02.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 12 6765 1 2025-10-14 19:06:30.614 00:00:10.371 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:02:42.306 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:02:42.309 00:05:02.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:07:02.392 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6661 1 2025-10-14 19:07:36.038 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:07:36.092 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:07:31.026 00:00:10.369 TCP 23.104.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:08:02.638 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6661 1 2025-10-14 19:08:31.430 00:00:10.319 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:09:02.813 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33012 10 6661 1 2025-10-14 19:09:31.790 00:00:10.326 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:10:03.063 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6661 1 2025-10-14 19:10:32.151 00:00:10.333 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:11:03.280 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6661 1 2025-10-14 19:11:32.523 00:00:10.363 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:12:03.448 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6661 1 2025-10-14 19:12:36.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:12:35.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:08:42.310 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:12:32.926 00:00:10.388 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:08:42.308 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:13:03.671 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37358 10 6661 1 2025-10-14 19:13:33.349 00:00:10.365 TCP 23.104.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:14:03.886 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55178 10 6661 1 2025-10-14 19:14:33.748 00:00:10.365 TCP 23.104.0.1:51778 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:15:04.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6661 1 2025-10-14 19:15:34.150 00:00:10.380 TCP 23.104.0.1:41852 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:16:04.289 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6661 1 2025-10-14 19:16:34.571 00:00:10.791 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:17:04.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 10 6661 1 2025-10-14 19:17:35.954 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:17:36.093 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:17:35.402 00:00:10.368 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:18:04.721 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6661 1 2025-10-14 19:14:42.310 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:18:35.811 00:00:10.327 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:14:42.313 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:19:04.942 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6661 1 2025-10-14 19:19:36.175 00:00:10.374 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:20:05.184 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6661 1 2025-10-14 19:20:36.587 00:00:10.359 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:21:05.413 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6661 1 2025-10-14 19:21:36.985 00:00:10.331 TCP 23.104.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:22:05.589 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6661 1 2025-10-14 19:22:36.272 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:22:36.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:22:37.381 00:00:10.364 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:23:05.758 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6661 1 2025-10-14 19:23:37.782 00:00:10.367 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:24:05.968 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35500 10 6661 1 2025-10-14 19:20:42.310 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:20:42.313 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:24:38.192 00:00:11.223 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:25:06.192 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6661 1 2025-10-14 19:25:39.453 00:00:10.363 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:26:06.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6661 1 2025-10-14 19:26:39.857 00:00:10.376 TCP 23.104.0.1:57628 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:27:06.589 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43162 10 6661 1 2025-10-14 19:27:36.348 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:27:36.267 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:27:40.272 00:00:10.326 TCP 23.104.0.1:38706 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:28:06.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36508 10 6661 1 2025-10-14 19:28:40.637 00:00:10.362 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:29:07.019 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6661 1 2025-10-14 19:29:41.041 00:00:10.367 TCP 23.104.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:30:07.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53516 10 6661 1 2025-10-14 19:26:42.314 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:26:42.316 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:30:41.448 00:00:10.363 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:31:07.445 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6661 1 2025-10-14 19:31:41.851 00:00:10.380 TCP 23.104.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:32:07.658 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6661 1 2025-10-14 19:32:36.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:32:36.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:32:42.270 00:00:10.370 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:33:07.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6661 1 2025-10-14 19:33:42.681 00:00:10.331 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:34:08.101 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6661 1 2025-10-14 19:34:43.049 00:00:10.325 TCP 23.104.0.1:53416 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:35:08.316 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6661 1 2025-10-14 19:35:43.412 00:00:10.365 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:36:08.542 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6661 1 2025-10-14 19:32:42.316 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:32:42.313 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:36:43.816 00:00:10.364 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:37:08.714 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6661 1 2025-10-14 19:37:36.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:37:36.457 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:37:44.219 00:00:10.320 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:38:08.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6661 1 2025-10-14 19:38:44.578 00:00:10.363 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:39:09.170 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6661 1 2025-10-14 19:39:44.978 00:00:10.368 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:40:09.382 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60808 10 6661 1 2025-10-14 19:40:45.382 00:00:10.372 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:41:09.606 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6661 1 2025-10-14 19:41:45.805 00:00:10.368 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:42:09.793 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36224 10 6661 1 2025-10-14 19:42:36.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:42:36.798 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:38:42.316 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:38:42.320 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:42:46.214 00:00:10.370 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:43:10.003 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6661 1 2025-10-14 19:43:46.624 00:00:10.366 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:44:10.180 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6661 1 2025-10-14 19:44:47.030 00:00:10.362 TCP 23.104.0.1:59068 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:45:10.401 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6661 1 2025-10-14 19:45:47.432 00:00:10.367 TCP 23.104.0.1:37516 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:46:10.575 00:00:10.800 TCP 1.101.0.1:3000 -> 22.102.0.1:40408 12 6765 1 2025-10-14 19:46:47.834 00:00:10.343 TCP 23.104.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:47:11.418 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6661 1 2025-10-14 19:47:36.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:47:36.763 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:47:48.217 00:00:10.365 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:48:11.631 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38256 10 6661 1 2025-10-14 19:44:42.319 00:05:02.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:44:42.316 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:48:48.620 00:00:10.420 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:49:11.850 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 11 6701 1 2025-10-14 19:49:49.113 00:00:10.366 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:50:12.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6661 1 2025-10-14 19:50:49.519 00:00:10.398 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:51:12.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6661 1 2025-10-14 19:51:49.966 00:00:10.368 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:52:12.510 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6661 1 2025-10-14 19:52:36.671 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:52:36.843 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:52:50.372 00:00:10.324 TCP 23.104.0.1:50626 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:53:12.680 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6661 1 2025-10-14 19:53:50.734 00:00:10.369 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:54:12.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42942 10 6661 1 2025-10-14 19:50:42.330 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 19:50:42.326 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 19:54:51.142 00:00:10.427 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:55:13.112 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6661 1 2025-10-14 19:55:51.607 00:00:10.362 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:56:13.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6661 1 2025-10-14 19:56:52.012 00:00:10.365 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:57:13.536 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43750 10 6661 1 2025-10-14 19:57:37.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 19:57:36.998 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 19:57:52.418 00:00:10.481 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-10-14 19:58:13.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6661 1 Summary: total flows: 163, total bytes: 509629, total packets: 1566, avg bps: 1101, avg pps: 0, avg bpp: 325 Time window: 2025-10-14 18:56:42 - 2025-10-14 19:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0023s Wall: 0.0024s flows/second: 68319.3 Runtime: 0.0024s