Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 10:59:04.354 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-10-11 10:59:17.110 00:00:10.370 TCP 23.104.0.1:44258 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:00:04.578 00:00:10.291 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-10-11 11:00:17.516 00:00:10.442 TCP 23.104.0.1:36962 -> 1.101.0.1:3000 15 1926 1 2025-10-11 10:56:40.727 00:05:02.376 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 10:56:40.730 00:05:02.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:00:59.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:00:59.787 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:01:04.912 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 12 10375 1 2025-10-11 11:01:17.998 00:00:10.366 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:02:05.159 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-10-11 11:02:18.405 00:00:10.367 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:03:05.335 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-10-11 11:03:18.808 00:00:10.363 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:04:05.523 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-10-11 11:04:19.213 00:00:10.361 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:05:05.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-10-11 11:05:19.620 00:00:10.369 TCP 23.104.0.1:52334 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:05:59.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:05:59.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:06:05.955 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 12 6556 1 2025-10-11 11:06:20.023 00:00:10.321 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:02:40.731 00:05:02.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:02:40.734 00:05:02.372 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:07:06.188 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42058 10 6452 1 2025-10-11 11:07:20.387 00:00:10.362 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:08:06.395 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-10-11 11:08:20.794 00:00:10.367 TCP 23.104.0.1:52356 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:09:06.606 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-10-11 11:09:21.208 00:00:10.418 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:10:06.822 00:00:10.403 TCP 1.101.0.1:3000 -> 22.102.0.1:44298 10 6452 1 2025-10-11 11:10:21.669 00:00:10.359 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:10:59.585 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:10:59.651 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:11:07.260 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-10-11 11:11:22.101 00:00:10.643 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:12:07.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41458 10 6452 1 2025-10-11 11:12:22.784 00:00:10.318 TCP 23.104.0.1:42328 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:08:40.733 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:08:40.735 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:13:07.647 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45324 10 6452 1 2025-10-11 11:13:23.146 00:00:10.367 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:14:07.863 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-10-11 11:14:23.554 00:00:10.331 TCP 23.104.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:15:08.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-10-11 11:15:23.952 00:00:10.338 TCP 23.104.0.1:41970 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:15:59.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:15:59.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:16:08.308 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-10-11 11:16:24.332 00:00:10.369 TCP 23.104.0.1:38098 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:17:08.525 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55326 10 6452 1 2025-10-11 11:17:24.738 00:00:10.371 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:18:08.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6452 1 2025-10-11 11:18:25.147 00:00:10.364 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:14:40.736 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:14:40.735 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:19:08.922 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51402 10 6452 1 2025-10-11 11:19:25.547 00:00:19.511 TCP 23.104.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:20:09.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56688 10 6452 1 2025-10-11 11:20:35.104 00:00:10.321 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:21:00.040 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:20:59.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:21:09.326 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-10-11 11:21:35.467 00:00:10.361 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:22:09.534 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48040 10 6452 1 2025-10-11 11:22:35.863 00:00:10.365 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:23:09.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-10-11 11:23:36.271 00:00:10.364 TCP 23.104.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:24:09.966 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32896 10 6452 1 2025-10-11 11:20:40.738 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:20:40.737 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:24:36.674 00:00:10.386 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:25:10.201 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57766 10 6452 1 2025-10-11 11:25:37.103 00:00:10.363 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:26:00.031 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:26:00.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:26:10.386 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-10-11 11:26:37.505 00:00:10.364 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:27:10.600 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-10-11 11:27:37.906 00:00:10.369 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:28:10.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 10 6452 1 2025-10-11 11:28:38.323 00:00:10.368 TCP 23.104.0.1:40860 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:29:10.983 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-10-11 11:29:38.732 00:00:10.372 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:30:11.163 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53792 10 6452 1 2025-10-11 11:26:40.739 00:05:02.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:26:40.742 00:05:02.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:30:39.140 00:00:10.326 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:31:00.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:31:00.183 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:31:11.380 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-10-11 11:31:39.502 00:00:10.364 TCP 23.104.0.1:53308 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:32:11.589 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-10-11 11:32:39.907 00:00:10.323 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:33:12.155 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6452 1 2025-10-11 11:33:40.273 00:00:10.369 TCP 23.104.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:34:12.333 00:00:10.455 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-10-11 11:34:40.679 00:00:10.364 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:35:12.827 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-10-11 11:35:41.100 00:00:10.364 TCP 23.104.0.1:45076 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:36:00.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:36:00.387 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:36:13.002 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59834 10 6452 1 2025-10-11 11:32:40.741 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:32:40.744 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:36:41.509 00:00:10.365 TCP 23.104.0.1:54494 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:37:13.173 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-10-11 11:37:41.914 00:00:10.365 TCP 23.104.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:38:13.342 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-10-11 11:38:42.322 00:00:10.358 TCP 23.104.0.1:34760 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:39:13.552 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-10-11 11:39:42.719 00:00:10.373 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:40:13.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-10-11 11:41:00.376 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:40:43.130 00:00:10.361 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:41:00.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:41:13.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-10-11 11:41:43.537 00:00:10.382 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:42:14.220 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-10-11 11:38:40.746 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:38:40.743 00:05:02.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:42:43.960 00:00:10.367 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:43:14.398 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45362 10 6452 1 2025-10-11 11:43:44.373 00:00:10.363 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:44:14.629 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58098 10 6452 1 2025-10-11 11:44:44.773 00:00:10.372 TCP 23.104.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:45:14.850 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36102 10 6452 1 2025-10-11 11:46:00.397 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:45:45.188 00:00:10.363 TCP 23.104.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:46:00.565 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:46:15.091 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-10-11 11:46:45.597 00:00:10.365 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:47:15.316 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 10 6452 1 2025-10-11 11:47:46.002 00:00:10.369 TCP 23.104.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:48:15.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6452 1 2025-10-11 11:44:40.748 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:44:40.745 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:48:46.405 00:00:10.367 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:49:15.740 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-10-11 11:49:46.810 00:00:10.381 TCP 23.104.0.1:55136 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:50:15.961 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 12 6556 1 2025-10-11 11:51:00.637 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:50:47.231 00:00:10.366 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:51:00.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:51:16.194 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6452 1 2025-10-11 11:51:47.641 00:00:10.366 TCP 23.104.0.1:49206 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:52:16.409 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-10-11 11:52:48.059 00:00:10.377 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:53:16.626 00:00:10.940 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-10-11 11:53:48.474 00:00:10.365 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:54:17.600 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-10-11 11:50:40.748 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 11:50:40.750 00:05:02.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 11:54:48.881 00:00:10.347 TCP 23.104.0.1:36112 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:55:17.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39530 10 6452 1 2025-10-11 11:56:00.445 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 11:55:49.264 00:00:10.368 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:56:00.396 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 11:56:18.042 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58618 10 6452 1 2025-10-11 11:56:49.672 00:00:10.375 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:57:18.265 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-10-11 11:57:50.106 00:00:10.363 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-10-11 11:58:18.482 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 Summary: total flows: 163, total bytes: 501391, total packets: 1571, avg bps: 1081, avg pps: 0, avg bpp: 319 Time window: 2025-10-11 10:56:40 - 2025-10-11 11:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0034s Wall: 0.0031s flows/second: 51895.5 Runtime: 0.0032s