Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 04:58:56.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48246 10 6452 1 2025-10-18 04:59:14.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 04:59:14.617 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 04:59:17.833 00:00:10.338 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-10-18 04:59:56.418 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-10-18 05:00:18.208 00:00:10.366 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-10-18 04:56:43.974 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 04:56:43.976 00:05:02.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:00:56.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56126 10 6452 1 2025-10-18 05:01:18.614 00:00:10.370 TCP 23.104.0.1:40702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:01:56.813 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-10-18 05:02:19.022 00:00:10.364 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:02:56.980 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 2025-10-18 05:03:19.427 00:00:10.935 TCP 23.104.0.1:39740 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:03:57.166 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-10-18 05:04:14.712 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:04:14.730 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:04:20.410 00:00:10.365 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:04:57.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-10-18 05:05:20.810 00:00:10.368 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:05:57.553 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-10-18 05:06:21.219 00:00:10.332 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:02:43.978 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:02:43.976 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:06:57.797 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33142 10 6452 1 2025-10-18 05:07:21.586 00:00:10.325 TCP 23.104.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:07:58.028 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-10-18 05:08:21.948 00:00:10.366 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:08:58.235 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-10-18 05:09:14.708 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:09:14.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:09:22.360 00:00:10.363 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:09:58.419 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-10-18 05:10:22.761 00:00:10.333 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:10:58.631 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-10-18 05:11:23.134 00:00:10.382 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:11:58.817 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-10-18 05:12:23.558 00:00:10.388 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:08:43.977 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:08:43.979 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:12:59.058 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 10 6452 1 2025-10-18 05:13:23.985 00:00:12.351 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 13 1611 1 2025-10-18 05:13:59.272 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-10-18 05:14:15.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:14:15.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:14:26.377 00:00:10.320 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:14:59.490 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-10-18 05:15:26.735 00:00:10.326 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:15:59.709 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-10-18 05:16:27.110 00:00:10.364 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:16:59.928 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60224 10 6452 1 2025-10-18 05:17:27.513 00:00:10.364 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:18:00.171 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39308 10 6452 1 2025-10-18 05:18:27.918 00:00:10.369 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:14:43.984 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:14:43.977 00:05:02.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:19:00.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51784 10 6452 1 2025-10-18 05:19:15.141 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:19:14.991 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:19:28.324 00:00:10.372 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:20:00.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-10-18 05:20:28.730 00:00:10.368 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:21:00.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54752 10 6452 1 2025-10-18 05:21:29.138 00:00:10.369 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:22:01.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34550 10 6452 1 2025-10-18 05:22:29.546 00:00:10.365 TCP 23.104.0.1:49474 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:23:01.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-10-18 05:23:29.949 00:00:10.325 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:24:01.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-10-18 05:24:15.106 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:24:15.179 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:24:30.314 00:00:10.362 TCP 23.104.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:20:43.980 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:20:43.983 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:25:01.673 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6452 1 2025-10-18 05:25:30.717 00:00:10.371 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:26:01.886 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-10-18 05:26:31.123 00:00:10.322 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:27:02.107 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-10-18 05:27:31.484 00:00:10.381 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:28:02.333 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48110 10 6452 1 2025-10-18 05:28:31.905 00:00:10.328 TCP 23.104.0.1:57892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:29:15.343 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:29:15.288 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:29:02.551 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46640 10 6452 1 2025-10-18 05:29:32.276 00:00:10.325 TCP 23.104.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:30:02.726 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-10-18 05:26:43.981 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:30:32.639 00:00:10.331 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:26:43.984 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:31:02.950 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51136 10 6452 1 2025-10-18 05:31:33.011 00:00:10.363 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:32:03.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-10-18 05:32:33.412 00:00:10.440 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 15 1926 1 2025-10-18 05:33:03.381 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 12 10369 1 2025-10-18 05:33:33.888 00:00:10.344 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:34:15.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:34:03.585 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-10-18 05:34:15.422 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:34:34.270 00:00:10.322 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:35:03.787 00:00:10.590 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-10-18 05:35:34.630 00:00:10.325 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:36:04.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-10-18 05:36:34.992 00:00:10.367 TCP 23.104.0.1:43100 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:32:43.982 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:32:43.986 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:37:04.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-10-18 05:37:35.398 00:00:10.365 TCP 23.104.0.1:52646 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:38:04.844 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-10-18 05:38:35.800 00:00:10.366 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:39:15.185 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:39:05.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55010 10 6452 1 2025-10-18 05:39:15.080 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:39:36.203 00:00:10.364 TCP 23.104.0.1:46042 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:40:05.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42358 10 6452 1 2025-10-18 05:40:36.602 00:00:10.369 TCP 23.104.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:41:05.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41780 10 6452 1 2025-10-18 05:41:37.010 00:00:10.362 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:42:05.739 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-10-18 05:38:43.987 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:38:43.988 00:05:02.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:42:37.411 00:00:10.378 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:43:05.973 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6452 1 2025-10-18 05:43:37.849 00:00:10.394 TCP 23.104.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:44:06.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 10 6452 1 2025-10-18 05:44:15.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:44:15.503 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:44:38.287 00:00:11.246 TCP 23.104.0.1:39916 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:45:06.418 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-10-18 05:45:39.585 00:00:10.361 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:46:06.587 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48362 10 6452 1 2025-10-18 05:46:39.984 00:00:10.367 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:47:06.798 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-10-18 05:47:40.389 00:00:10.326 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:48:07.012 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-10-18 05:44:43.989 00:05:02.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:48:40.759 00:00:10.377 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:44:43.986 00:05:02.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:49:15.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:49:15.621 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:49:07.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-10-18 05:49:41.184 00:00:10.361 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:50:07.399 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 2025-10-18 05:50:41.583 00:00:10.413 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:51:07.614 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-10-18 05:51:42.047 00:00:10.366 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:52:07.843 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-10-18 05:52:42.451 00:00:10.365 TCP 23.104.0.1:58042 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:53:08.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6452 1 2025-10-18 05:53:42.860 00:00:10.333 TCP 23.104.0.1:38160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:54:15.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 05:54:15.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 05:54:08.296 00:00:10.475 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-10-18 05:50:43.989 00:05:02.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 05:50:43.992 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 05:54:43.233 00:00:10.364 TCP 23.104.0.1:49812 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:55:08.815 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-10-18 05:55:43.639 00:00:10.321 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:56:08.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-10-18 05:56:44.004 00:00:10.322 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:57:09.217 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-10-18 05:57:44.365 00:00:22.129 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-10-18 05:58:09.398 00:00:10.868 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-10-18 04:56:43 - 2025-10-18 05:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0010s Wall: 0.0020s flows/second: 80526.7 Runtime: 0.0020s