Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 19:59:22.374 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-10-11 19:59:37.355 00:00:10.326 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:00:22.593 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-10-11 19:56:40.885 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 19:56:40.884 00:05:02.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:00:37.715 00:00:10.375 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:01:10.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:01:10.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:01:22.767 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-10-11 20:01:38.136 00:00:10.327 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:02:22.975 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53792 10 6452 1 2025-10-11 20:02:38.500 00:00:10.328 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:03:23.201 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48702 10 6452 1 2025-10-11 20:03:38.869 00:00:10.379 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:04:23.373 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-10-11 20:04:39.290 00:00:10.363 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:05:23.601 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38218 10 6452 1 2025-10-11 20:05:39.691 00:00:10.379 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:06:10.636 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:06:10.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:06:23.811 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-10-11 20:02:40.887 00:05:02.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:02:40.885 00:05:02.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:06:40.108 00:00:11.073 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:07:23.987 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:34998 10 6452 1 2025-10-11 20:07:41.220 00:00:10.366 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:08:24.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37024 10 6452 1 2025-10-11 20:08:41.621 00:00:10.324 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:09:24.406 00:00:10.673 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-10-11 20:09:41.986 00:00:10.331 TCP 23.104.0.1:52790 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:10:25.127 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42124 10 6452 1 2025-10-11 20:10:42.356 00:00:10.328 TCP 23.104.0.1:46302 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:11:10.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:11:10.630 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:11:25.352 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-10-11 20:11:42.721 00:00:10.328 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:12:25.529 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-10-11 20:08:40.888 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:08:40.885 00:05:02.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:12:43.103 00:00:10.362 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:13:25.705 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6452 1 2025-10-11 20:13:43.510 00:00:10.367 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:14:25.961 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55452 10 6452 1 2025-10-11 20:14:43.918 00:00:10.384 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:15:26.178 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-10-11 20:15:44.337 00:00:10.368 TCP 23.104.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:16:10.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:16:10.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:16:26.406 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-10-11 20:16:44.742 00:00:10.367 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:17:26.663 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-10-11 20:17:45.147 00:00:10.372 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:18:26.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43410 10 6452 1 2025-10-11 20:14:40.891 00:05:02.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:14:40.893 00:05:02.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:18:45.561 00:00:10.372 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:19:27.100 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38118 10 6452 1 2025-10-11 20:19:45.969 00:00:10.367 TCP 23.104.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:20:27.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-10-11 20:20:46.373 00:00:10.324 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:21:10.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:21:10.703 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:21:27.526 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-10-11 20:21:46.732 00:00:10.368 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:22:27.748 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-10-11 20:22:47.137 00:00:10.373 TCP 23.104.0.1:48164 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:23:27.963 00:00:11.289 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-10-11 20:23:47.550 00:00:10.386 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:20:40.894 00:05:02.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:24:29.288 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51446 10 6452 1 2025-10-11 20:20:40.891 00:05:02.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:24:47.976 00:00:10.375 TCP 23.104.0.1:59390 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:25:29.516 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44082 10 6452 1 2025-10-11 20:25:48.384 00:00:10.365 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:26:10.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:26:10.857 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:26:29.724 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37366 10 6452 1 2025-10-11 20:26:48.793 00:00:10.420 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:27:29.934 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-10-11 20:27:49.250 00:00:10.363 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:28:30.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-10-11 20:28:49.647 00:00:10.325 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:29:30.386 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-10-11 20:29:50.016 00:00:10.369 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:30:30.620 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 10 6452 1 2025-10-11 20:26:40.895 00:05:02.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:26:40.894 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:30:50.430 00:00:10.319 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:31:10.910 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:31:10.867 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:31:30.845 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-10-11 20:31:50.789 00:00:10.364 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:32:31.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-10-11 20:32:51.190 00:00:10.363 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:33:31.307 00:00:16.702 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 6452 1 2025-10-11 20:33:51.593 00:00:10.366 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:34:38.076 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-10-11 20:34:51.996 00:00:10.364 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:35:38.279 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6452 1 2025-10-11 20:35:52.402 00:00:10.366 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:36:11.090 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:36:11.200 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:32:40.898 00:05:02.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:32:40.895 00:05:02.404 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:36:38.488 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-10-11 20:36:52.804 00:00:10.367 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:37:38.707 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33380 10 6452 1 2025-10-11 20:37:53.208 00:00:10.364 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:38:38.923 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-10-11 20:38:53.607 00:00:10.362 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:39:39.175 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-10-11 20:39:54.010 00:00:10.363 TCP 23.104.0.1:41804 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:40:39.401 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37774 10 6452 1 2025-10-11 20:40:54.408 00:00:10.362 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:41:11.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:41:11.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:41:39.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-10-11 20:41:54.810 00:00:10.364 TCP 23.104.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:38:40.902 00:05:02.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:38:40.898 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:42:39.861 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-10-11 20:42:55.215 00:00:10.321 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:43:40.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-10-11 20:43:55.575 00:00:10.377 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:44:40.301 00:00:10.563 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-10-11 20:44:55.988 00:00:10.371 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:45:40.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 10 6452 1 2025-10-11 20:45:56.402 00:00:10.365 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:46:11.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:46:11.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:46:41.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-10-11 20:46:56.808 00:00:10.367 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:47:41.329 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-10-11 20:47:57.213 00:00:10.367 TCP 23.104.0.1:58662 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:44:40.901 00:05:02.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:44:40.899 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:48:41.543 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:43356 10 6452 1 2025-10-11 20:48:57.625 00:00:10.364 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:49:41.708 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-10-11 20:49:58.028 00:00:10.364 TCP 23.104.0.1:38850 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:50:41.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-10-11 20:51:11.443 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:51:11.511 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:50:58.430 00:00:10.372 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:51:42.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6452 1 2025-10-11 20:51:58.840 00:00:10.376 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:52:42.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32862 10 6452 1 2025-10-11 20:52:59.253 00:00:10.371 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:53:42.558 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-10-11 20:53:59.658 00:00:10.324 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:50:40.901 00:05:02.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 20:50:40.903 00:05:02.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:54:42.775 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-10-11 20:55:00.019 00:00:10.320 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:55:42.944 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-10-11 20:56:11.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 20:56:00.376 00:00:10.843 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:56:11.523 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 20:56:43.189 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60332 10 6452 1 2025-10-11 20:57:01.258 00:00:10.359 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:57:43.408 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-10-11 20:58:01.661 00:00:10.368 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1062, avg pps: 0, avg bpp: 316 Time window: 2025-10-11 19:56:40 - 2025-10-11 20:58:12 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0060s User: 0.0000s Wall: 0.0020s flows/second: 81579.7 Runtime: 0.0020s