Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 00:58:47.438 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45716 10 6452 1 2025-10-18 00:59:09.798 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 00:58:59.695 00:00:10.367 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:59:09.834 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 00:59:47.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-10-18 01:00:00.110 00:00:10.364 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-10-18 00:56:43.870 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 00:56:43.866 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:00:47.870 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-10-18 01:01:00.516 00:00:10.367 TCP 23.104.0.1:56132 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:01:48.101 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-10-18 01:02:00.920 00:00:10.374 TCP 23.104.0.1:50446 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:02:48.281 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-10-18 01:03:01.339 00:00:10.413 TCP 23.104.0.1:45514 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:03:48.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59090 10 6452 1 2025-10-18 01:04:09.893 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:04:09.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:04:01.789 00:00:10.319 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:04:48.714 00:00:10.653 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-10-18 01:05:02.147 00:00:10.326 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:05:49.407 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-10-18 01:06:02.517 00:00:10.810 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:02:43.871 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:02:43.874 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:06:49.579 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39804 10 6452 1 2025-10-18 01:07:03.367 00:00:10.359 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:07:49.798 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-10-18 01:08:03.766 00:00:10.336 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:08:50.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-10-18 01:09:10.000 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:09:09.955 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:09:04.136 00:00:10.368 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:09:50.256 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41766 10 6452 1 2025-10-18 01:10:04.536 00:00:10.324 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:10:50.465 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-10-18 01:11:04.900 00:00:10.374 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:11:50.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6452 1 2025-10-18 01:12:05.309 00:00:10.368 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:08:43.876 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:08:43.873 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:12:50.898 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-10-18 01:13:05.714 00:00:10.376 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:13:51.116 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-10-18 01:14:09.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:14:10.050 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:14:06.125 00:00:10.364 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:14:51.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-10-18 01:15:06.529 00:00:10.608 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:15:51.554 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-10-18 01:16:07.180 00:00:10.364 TCP 23.104.0.1:49442 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:16:51.769 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6452 1 2025-10-18 01:17:07.585 00:00:10.367 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:17:51.979 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-10-18 01:18:07.997 00:00:10.365 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:14:43.874 00:05:02.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:14:43.876 00:05:02.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:18:52.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54488 10 6452 1 2025-10-18 01:19:10.056 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:19:10.264 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:19:08.400 00:00:10.370 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:19:52.439 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49002 10 6452 1 2025-10-18 01:20:08.810 00:00:10.374 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:20:52.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-10-18 01:21:09.228 00:00:10.367 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:21:52.870 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-10-18 01:22:09.636 00:00:10.329 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:22:53.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44080 10 6452 1 2025-10-18 01:23:10.016 00:00:10.364 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:23:53.313 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-10-18 01:24:10.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:24:10.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:24:10.421 00:00:10.364 TCP 23.104.0.1:35984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:20:43.875 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:20:43.878 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:24:53.525 00:00:10.692 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-10-18 01:25:10.822 00:00:10.324 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:25:54.257 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 2025-10-18 01:26:11.188 00:00:10.326 TCP 23.104.0.1:45286 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:26:54.467 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 12 10375 1 2025-10-18 01:27:11.556 00:00:10.446 TCP 23.104.0.1:36064 -> 1.101.0.1:3000 15 1926 1 2025-10-18 01:27:54.704 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-10-18 01:28:12.036 00:00:10.363 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:28:54.915 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:46134 10 6452 1 2025-10-18 01:29:10.312 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:29:10.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:29:12.440 00:00:10.365 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:29:55.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41430 10 6452 1 2025-10-18 01:30:12.841 00:00:10.384 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:26:43.888 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:26:43.885 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:30:55.317 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-10-18 01:31:13.264 00:00:10.359 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:31:55.523 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 12 10369 1 2025-10-18 01:32:13.663 00:00:10.442 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 15 1926 1 2025-10-18 01:32:55.762 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-10-18 01:33:14.143 00:00:10.362 TCP 23.104.0.1:34654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:33:55.991 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-10-18 01:34:10.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:34:10.338 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:34:14.544 00:00:10.362 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:34:56.216 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-10-18 01:35:14.943 00:00:10.374 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:35:56.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-10-18 01:36:15.349 00:00:10.323 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:32:43.891 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:32:43.890 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:36:56.603 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-10-18 01:37:15.705 00:00:10.324 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:37:56.817 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51542 10 6452 1 2025-10-18 01:38:16.097 00:00:10.363 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:39:10.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:38:57.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41842 10 6452 1 2025-10-18 01:39:10.631 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:39:16.498 00:00:10.364 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:39:57.260 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-10-18 01:40:16.900 00:00:10.378 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:40:57.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52086 10 6452 1 2025-10-18 01:41:17.315 00:00:10.368 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:41:57.686 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-10-18 01:42:17.719 00:00:10.373 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:38:43.891 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:38:43.893 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:42:57.895 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43648 10 6452 1 2025-10-18 01:43:18.125 00:00:10.376 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:44:10.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:43:58.084 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40904 10 6452 1 2025-10-18 01:44:10.718 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:44:18.524 00:00:10.360 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:44:58.255 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54526 10 6452 1 2025-10-18 01:45:18.926 00:00:10.349 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:45:58.471 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39960 10 6452 1 2025-10-18 01:46:19.314 00:00:10.329 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:46:58.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55704 10 6452 1 2025-10-18 01:47:19.675 00:00:10.367 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:47:58.889 00:00:10.298 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-10-18 01:48:20.108 00:00:10.327 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:44:43.892 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:44:43.894 00:05:02.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:49:10.734 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:49:10.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:48:59.223 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-10-18 01:49:20.475 00:00:10.364 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:49:59.399 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6452 1 2025-10-18 01:50:20.882 00:00:10.338 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:50:59.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58602 10 6452 1 2025-10-18 01:51:21.261 00:00:10.324 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:51:59.786 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52580 10 6452 1 2025-10-18 01:52:21.628 00:00:10.328 TCP 23.104.0.1:47254 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:53:00.011 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2025-10-18 01:53:22.007 00:00:10.365 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:54:10.604 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 01:54:10.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 01:54:00.233 00:00:10.403 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6452 1 2025-10-18 01:54:22.413 00:00:10.323 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:50:43.897 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 01:50:43.894 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 01:55:00.678 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-10-18 01:55:22.775 00:00:10.374 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:56:00.888 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6452 1 2025-10-18 01:56:23.189 00:00:10.330 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:57:01.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-10-18 01:57:23.562 00:00:10.365 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 01:58:01.305 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53116 10 6452 1 2025-10-18 01:58:23.966 00:00:10.387 TCP 23.104.0.1:37396 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1093, avg pps: 0, avg bpp: 320 Time window: 2025-10-18 00:56:43 - 2025-10-18 01:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0019s flows/second: 87270.5 Runtime: 0.0019s