Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 11:58:53.304 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-10-02 11:59:11.001 00:00:10.334 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:59:53.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-10-02 12:00:11.438 00:00:10.324 TCP 23.104.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-10-02 11:56:36.589 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:00:53.721 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6452 1 2025-10-02 12:01:11.802 00:00:10.365 TCP 23.104.0.1:48134 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:01:40.755 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 11:57:36.592 00:05:01.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:01:40.868 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:01:53.935 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-10-02 12:02:12.203 00:00:10.360 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:02:54.167 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6452 1 2025-10-02 12:03:12.605 00:00:10.323 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:03:54.380 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-10-02 12:04:12.972 00:00:10.325 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:04:54.593 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-10-02 12:05:13.337 00:00:10.323 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:05:54.807 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45764 10 6452 1 2025-10-02 12:06:13.700 00:00:10.329 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:06:40.949 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:06:40.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:02:36.591 00:05:01.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:06:54.986 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-10-02 12:07:14.092 00:00:10.369 TCP 23.104.0.1:48198 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:03:36.595 00:05:01.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:07:55.176 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39050 10 6452 1 2025-10-02 12:08:14.497 00:00:10.363 TCP 23.104.0.1:39498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:08:55.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-10-02 12:09:14.900 00:00:10.370 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:09:55.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50176 10 6452 1 2025-10-02 12:10:15.318 00:00:10.364 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:10:55.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-10-02 12:11:15.724 00:00:10.369 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:11:41.259 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:11:40.917 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:11:56.068 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-10-02 12:12:16.133 00:00:10.376 TCP 23.104.0.1:51912 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:08:36.593 00:05:01.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:12:56.288 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-10-02 12:13:16.549 00:00:10.360 TCP 23.104.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:09:36.596 00:05:01.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:13:56.461 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52056 10 6452 1 2025-10-02 12:14:16.945 00:00:10.372 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:14:56.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33878 10 6452 1 2025-10-02 12:15:17.350 00:00:10.363 TCP 23.104.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:15:56.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-10-02 12:16:17.746 00:00:10.327 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:16:41.387 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:16:41.439 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:16:57.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-10-02 12:17:18.110 00:00:11.489 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:17:57.330 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:39562 10 6452 1 2025-10-02 12:18:19.640 00:00:10.363 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:14:36.596 00:05:01.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:18:57.532 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-10-02 12:19:20.046 00:00:10.363 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:15:36.600 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:19:57.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-10-02 12:20:20.448 00:00:10.332 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:20:57.972 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-10-02 12:21:20.815 00:00:10.331 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:21:41.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:21:41.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:21:58.201 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-10-02 12:22:21.180 00:00:10.367 TCP 23.104.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:22:58.410 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56504 10 6452 1 2025-10-02 12:23:21.586 00:00:10.372 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:23:58.623 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-10-02 12:24:21.994 00:00:10.325 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:20:36.598 00:05:01.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:24:58.837 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 6452 1 2025-10-02 12:25:22.358 00:00:10.329 TCP 23.104.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:21:36.600 00:05:01.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:25:59.064 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50742 10 6452 1 2025-10-02 12:26:22.729 00:00:10.378 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:26:41.320 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:26:41.351 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:26:59.279 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37272 10 6452 1 2025-10-02 12:27:23.143 00:00:10.366 TCP 23.104.0.1:42398 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:27:59.508 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 2025-10-02 12:28:23.544 00:00:10.361 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:28:59.720 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49106 10 6452 1 2025-10-02 12:29:23.944 00:00:10.365 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:29:59.934 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:41688 10 6452 1 2025-10-02 12:30:24.352 00:00:10.365 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:26:36.600 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:31:00.135 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-10-02 12:31:24.765 00:00:10.327 TCP 23.104.0.1:60896 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:31:41.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:27:36.604 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:31:41.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:32:00.359 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-10-02 12:32:25.128 00:00:10.366 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:33:00.541 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-10-02 12:33:25.527 00:00:10.362 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:34:00.756 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37414 10 6452 1 2025-10-02 12:34:25.932 00:00:10.385 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:35:00.975 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-10-02 12:35:26.356 00:00:10.327 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:36:01.177 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 10 6452 1 2025-10-02 12:36:41.548 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:36:26.714 00:00:10.330 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:36:41.687 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:32:36.603 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:37:01.350 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-10-02 12:33:36.605 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:37:27.105 00:00:10.362 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:38:01.524 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-10-02 12:38:27.513 00:00:10.365 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:39:01.735 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36040 10 6452 1 2025-10-02 12:39:27.913 00:00:10.323 TCP 23.104.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:40:01.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-10-02 12:40:28.271 00:00:10.365 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:41:02.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-10-02 12:41:41.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:41:28.671 00:00:10.364 TCP 23.104.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:41:41.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:42:02.336 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-10-02 12:42:29.098 00:00:10.361 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:38:36.602 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:43:02.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-10-02 12:43:29.497 00:00:10.363 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:39:36.605 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:44:02.765 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 10 6452 1 2025-10-02 12:44:29.899 00:00:10.373 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:45:02.935 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-10-02 12:45:30.310 00:00:10.365 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:46:03.161 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-10-02 12:46:41.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:46:41.836 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:46:30.714 00:00:10.368 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:47:03.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48526 10 6452 1 2025-10-02 12:47:31.116 00:00:10.383 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:48:03.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 10 6452 1 2025-10-02 12:48:31.543 00:00:10.370 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:44:36.605 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:49:03.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33698 10 6452 1 2025-10-02 12:45:36.609 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:49:31.952 00:00:10.364 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:50:03.980 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:36466 10 6452 1 2025-10-02 12:50:32.352 00:00:10.363 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:51:04.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-10-02 12:51:41.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:51:41.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:51:32.758 00:00:10.375 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:52:04.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41196 10 6452 1 2025-10-02 12:52:33.177 00:00:10.372 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:53:04.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6452 1 2025-10-02 12:53:33.589 00:00:10.372 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:54:04.816 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 2025-10-02 12:50:36.607 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 12:54:33.996 00:00:10.366 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:55:05.035 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37818 10 6452 1 2025-10-02 12:51:36.608 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 12:55:34.409 00:00:10.381 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:56:05.269 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-10-02 12:56:41.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 12:56:41.954 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 12:56:34.816 00:00:10.376 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:57:05.486 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34638 10 6452 1 2025-10-02 12:57:35.231 00:00:10.365 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-10-02 12:58:05.701 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-10-02 12:58:35.630 00:00:10.325 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1069, avg pps: 0, avg bpp: 317 Time window: 2025-10-02 11:56:36 - 2025-10-02 12:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 83539.7 Runtime: 0.0020s