Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 14:59:01.488 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33886 10 6452 1 2025-10-11 14:59:05.595 00:00:10.378 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:00:01.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-10-11 15:00:06.032 00:00:10.370 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-10-11 14:56:40.801 00:05:02.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 14:56:40.798 00:05:02.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:01:04.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:01:04.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:01:01.923 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47736 10 6452 1 2025-10-11 15:01:06.443 00:00:10.368 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:02:02.127 00:00:10.399 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-10-11 15:02:06.850 00:00:10.376 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:03:02.562 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2025-10-11 15:03:07.264 00:00:10.375 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:04:02.781 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-10-11 15:04:07.678 00:00:10.540 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:05:03.005 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-10-11 15:05:08.255 00:00:10.455 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:06:04.599 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:06:04.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:06:03.222 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 14 14286 1 2025-10-11 15:06:08.752 00:00:10.520 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 17 2241 1 2025-10-11 15:02:40.802 00:05:02.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:02:40.800 00:05:02.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:07:03.491 00:00:10.703 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-10-11 15:07:09.314 00:00:10.363 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:08:04.234 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-10-11 15:08:09.712 00:00:14.902 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:09:04.448 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-10-11 15:09:14.653 00:00:10.332 TCP 23.104.0.1:40508 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:10:04.620 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-10-11 15:10:15.022 00:00:10.363 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:11:04.768 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:11:04.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:11:04.791 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-10-11 15:11:15.421 00:00:10.364 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:12:04.997 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37480 10 6452 1 2025-10-11 15:12:15.823 00:00:10.367 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:08:40.803 00:05:02.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:08:40.800 00:05:02.373 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:13:05.180 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59488 10 6452 1 2025-10-11 15:13:16.225 00:00:10.365 TCP 23.104.0.1:58444 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:14:05.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54726 10 6452 1 2025-10-11 15:14:16.628 00:00:10.363 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:15:05.614 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-10-11 15:15:17.028 00:00:10.364 TCP 23.104.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:16:04.970 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:16:04.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:16:06.316 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52864 10 6452 1 2025-10-11 15:16:17.432 00:00:10.330 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:17:06.526 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-11 15:17:17.795 00:00:10.366 TCP 23.104.0.1:33414 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:18:06.706 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-10-11 15:18:18.202 00:00:10.363 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:14:40.803 00:05:02.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:14:40.801 00:05:02.375 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:19:06.932 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:59268 10 6452 1 2025-10-11 15:19:18.604 00:00:10.366 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:20:07.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59732 10 6452 1 2025-10-11 15:20:19.011 00:00:10.367 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:21:04.689 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:21:04.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:21:07.342 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45706 10 6452 1 2025-10-11 15:21:19.418 00:00:10.365 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:22:07.557 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-10-11 15:22:19.822 00:00:10.363 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:23:07.730 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-10-11 15:23:20.223 00:00:10.365 TCP 23.104.0.1:53306 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:24:07.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-10-11 15:24:20.624 00:00:10.336 TCP 23.104.0.1:55186 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:20:40.805 00:05:02.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:20:40.802 00:05:02.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:25:08.180 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-10-11 15:25:20.999 00:00:10.364 TCP 23.104.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:26:05.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:26:04.891 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:26:08.351 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42316 10 6452 1 2025-10-11 15:26:21.402 00:00:10.385 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:27:08.521 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37132 10 6452 1 2025-10-11 15:27:21.827 00:00:10.347 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:28:08.740 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 10 6452 1 2025-10-11 15:28:22.210 00:00:10.363 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:29:08.957 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 12 6556 1 2025-10-11 15:29:22.612 00:00:10.324 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:30:09.182 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-10-11 15:30:22.968 00:00:10.385 TCP 23.104.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:26:40.803 00:05:02.376 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:26:40.805 00:05:02.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:31:04.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:31:04.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:31:09.387 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-10-11 15:31:23.399 00:00:10.372 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:32:09.560 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-10-11 15:32:23.811 00:00:10.341 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:33:09.732 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-10-11 15:33:24.196 00:00:10.358 TCP 23.104.0.1:55914 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:34:09.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-10-11 15:34:24.593 00:00:10.366 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:35:10.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-10-11 15:35:25.001 00:00:10.373 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:36:04.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:36:04.876 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:36:10.329 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 10 6452 1 2025-10-11 15:36:25.418 00:00:10.328 TCP 23.104.0.1:48752 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:32:40.804 00:05:02.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:32:40.808 00:05:02.372 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:37:10.510 00:00:11.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-10-11 15:37:25.789 00:00:10.374 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:38:11.744 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-10-11 15:38:26.198 00:00:10.327 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:39:12.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40502 10 6452 1 2025-10-11 15:39:26.561 00:00:10.321 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:40:12.395 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-10-11 15:40:26.922 00:00:10.373 TCP 23.104.0.1:54744 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:41:05.218 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:41:04.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:41:12.602 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-10-11 15:41:27.332 00:00:10.370 TCP 23.104.0.1:35592 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:42:12.817 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44580 10 6452 1 2025-10-11 15:42:27.742 00:00:10.371 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:38:40.804 00:05:02.379 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:38:40.807 00:05:02.373 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:43:12.994 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36024 10 6452 1 2025-10-11 15:43:28.146 00:00:10.362 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:44:13.184 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-10-11 15:44:28.552 00:00:17.670 TCP 23.104.0.1:37986 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:45:13.366 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-10-11 15:45:36.266 00:00:10.361 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:46:05.321 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:46:05.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:46:13.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-10-11 15:46:36.663 00:00:10.362 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:47:13.780 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47590 10 6452 1 2025-10-11 15:47:37.094 00:00:10.336 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:48:13.994 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-10-11 15:44:40.806 00:05:02.379 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:44:40.810 00:05:02.374 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:48:37.463 00:00:10.366 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:49:14.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-10-11 15:49:37.866 00:00:10.376 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:50:14.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-10-11 15:50:38.277 00:00:10.362 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:51:05.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:51:05.397 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:51:14.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58086 10 6452 1 2025-10-11 15:51:38.674 00:00:10.367 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:52:14.845 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-10-11 15:52:39.105 00:00:10.363 TCP 23.104.0.1:47208 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:53:15.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-10-11 15:53:39.506 00:00:10.365 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:54:15.300 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33876 10 6452 1 2025-10-11 15:50:40.807 00:05:02.383 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 15:50:40.810 00:05:02.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 15:54:39.914 00:00:10.360 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:55:15.469 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-10-11 15:55:40.316 00:00:10.324 TCP 23.104.0.1:37586 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:56:05.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 15:56:05.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 15:56:15.639 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-10-11 15:56:40.680 00:00:10.372 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:57:16.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37272 10 6452 1 2025-10-11 15:57:41.103 00:00:10.363 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-10-11 15:58:16.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39818 10 6452 1 Summary: total flows: 163, total bytes: 505513, total packets: 1573, avg bps: 1091, avg pps: 0, avg bpp: 321 Time window: 2025-10-11 14:56:40 - 2025-10-11 15:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0024s flows/second: 68230.7 Runtime: 0.0024s