Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 19:58:50.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-10-12 19:59:20.943 00:00:10.375 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:59:50.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-10-12 20:00:21.355 00:00:10.366 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 19:56:41.343 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 19:56:41.347 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:00:50.931 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56394 10 6452 1 2025-10-12 20:01:21.762 00:00:10.382 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:01:39.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:01:39.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:01:51.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34130 10 6452 1 2025-10-12 20:02:22.181 00:00:10.370 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:02:51.383 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-10-12 20:03:22.584 00:00:10.366 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:03:51.609 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-10-12 20:04:22.991 00:00:10.328 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:04:51.816 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-10-12 20:05:23.358 00:00:10.369 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:05:52.042 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36128 10 6452 1 2025-10-12 20:06:23.760 00:00:10.384 TCP 23.104.0.1:50584 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:06:39.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:02:41.351 00:05:02.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:06:39.350 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:02:41.348 00:05:02.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:06:52.231 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53716 10 6452 1 2025-10-12 20:07:24.183 00:00:10.366 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:07:52.469 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-10-12 20:08:24.589 00:00:10.367 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:08:52.642 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-10-12 20:09:24.996 00:00:10.361 TCP 23.104.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:09:52.864 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56706 10 6452 1 2025-10-12 20:10:25.395 00:00:10.325 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:10:53.096 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-10-12 20:11:25.757 00:00:10.378 TCP 23.104.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:11:39.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:11:39.469 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:11:53.311 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-10-12 20:12:26.176 00:00:10.364 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:08:41.352 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:08:41.350 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:12:53.481 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35152 10 6452 1 2025-10-12 20:13:26.577 00:00:10.368 TCP 23.104.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:13:53.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34688 10 6452 1 2025-10-12 20:14:26.982 00:00:10.367 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:14:53.904 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-10-12 20:15:27.387 00:00:10.364 TCP 23.104.0.1:51022 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:15:54.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6452 1 2025-10-12 20:16:39.966 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:16:27.788 00:00:10.371 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:16:39.857 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:16:54.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-10-12 20:17:28.198 00:00:10.362 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:17:54.504 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-10-12 20:18:28.591 00:00:11.390 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:14:41.351 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:14:41.354 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:18:54.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-10-12 20:19:30.024 00:00:10.319 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:19:54.936 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-10-12 20:20:30.386 00:00:10.363 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:20:55.164 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33128 10 6452 1 2025-10-12 20:21:39.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:21:30.788 00:00:10.371 TCP 23.104.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:21:39.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:21:55.379 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56894 10 6452 1 2025-10-12 20:22:31.193 00:00:10.366 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:22:55.599 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-10-12 20:23:31.594 00:00:10.369 TCP 23.104.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:23:55.772 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57666 10 6452 1 2025-10-12 20:20:41.351 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:24:32.002 00:00:10.362 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:20:41.354 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:24:56.003 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-10-12 20:25:32.399 00:00:10.367 TCP 23.104.0.1:49882 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:25:56.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-10-12 20:26:39.689 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:26:39.948 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:26:32.804 00:00:10.367 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:26:56.426 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-10-12 20:27:33.214 00:00:10.368 TCP 23.104.0.1:54814 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:27:56.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52388 10 6452 1 2025-10-12 20:28:33.619 00:00:10.362 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:28:56.848 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33786 10 6452 1 2025-10-12 20:29:34.021 00:00:10.364 TCP 23.104.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:29:57.027 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-10-12 20:30:34.420 00:00:10.365 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:26:41.357 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:26:41.356 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:30:57.490 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59496 10 6452 1 2025-10-12 20:31:39.845 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:31:39.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:31:34.829 00:00:10.379 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:31:57.661 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-10-12 20:32:35.244 00:00:10.363 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:32:57.885 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-10-12 20:33:35.647 00:00:10.368 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:33:58.089 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40494 10 6452 1 2025-10-12 20:34:36.068 00:00:10.367 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:34:58.307 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38290 10 6452 1 2025-10-12 20:35:36.470 00:00:11.374 TCP 23.104.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:35:58.492 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-10-12 20:36:40.087 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:36:40.023 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:32:41.357 00:05:02.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:32:41.355 00:05:02.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:36:37.882 00:00:10.387 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:36:58.706 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-10-12 20:37:38.303 00:00:10.328 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:37:59.071 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-10-12 20:38:38.673 00:00:10.361 TCP 23.104.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:38:59.245 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-10-12 20:39:39.107 00:00:10.325 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:39:59.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-10-12 20:40:39.468 00:00:10.381 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:40:59.671 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-10-12 20:41:40.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:41:40.487 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:41:39.881 00:00:10.387 TCP 23.104.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:41:59.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-10-12 20:38:41.357 00:05:02.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:38:41.360 00:05:02.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:42:40.315 00:00:10.379 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:43:00.106 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47526 10 6452 1 2025-10-12 20:43:40.722 00:00:10.377 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:44:00.320 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37626 10 6452 1 2025-10-12 20:44:41.136 00:00:10.327 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:45:00.536 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-10-12 20:45:41.504 00:00:10.368 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:46:00.753 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 12 10375 1 2025-10-12 20:46:40.167 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:46:40.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:46:41.909 00:00:10.442 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 15 1926 1 2025-10-12 20:47:00.989 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6452 1 2025-10-12 20:47:42.388 00:00:10.364 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:48:01.233 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-10-12 20:44:41.359 00:05:02.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:44:41.358 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:48:42.790 00:00:10.359 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:49:01.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-10-12 20:49:43.190 00:00:10.365 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:50:01.614 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44712 10 6452 1 2025-10-12 20:50:43.593 00:00:10.367 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:51:01.826 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48086 10 6452 1 2025-10-12 20:51:40.229 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:51:40.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:51:44.003 00:00:10.361 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:52:02.042 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-10-12 20:52:44.406 00:00:10.362 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:53:02.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-10-12 20:53:44.812 00:00:10.366 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:54:02.467 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-10-12 20:50:41.359 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 20:50:41.361 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 20:54:45.212 00:00:10.358 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:55:02.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-10-12 20:55:45.606 00:00:10.365 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:56:02.854 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-10-12 20:56:40.336 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 20:56:40.394 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 20:56:46.017 00:00:10.361 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:57:03.033 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-10-12 20:57:46.420 00:00:10.372 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-10-12 20:58:03.250 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1085, avg pps: 0, avg bpp: 319 Time window: 2025-10-12 19:56:41 - 2025-10-12 20:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0029s Wall: 0.0025s flows/second: 65756.6 Runtime: 0.0025s