Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 07:58:58.033 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-10-18 07:59:04.522 00:00:10.364 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-10-18 07:59:17.995 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 07:59:18.167 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 07:59:58.261 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45560 10 6452 1 2025-10-18 08:00:04.927 00:00:10.373 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-10-18 07:56:44.072 00:05:02.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 07:56:44.071 00:05:02.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:00:58.488 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-10-18 08:01:05.340 00:00:10.321 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:01:58.717 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53900 10 6452 1 2025-10-18 08:02:05.700 00:00:10.324 TCP 23.104.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:02:58.934 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-10-18 08:03:06.087 00:00:10.325 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:03:59.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-10-18 08:04:18.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:04:06.450 00:00:10.377 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:04:18.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:04:59.353 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54374 10 6452 1 2025-10-18 08:05:06.861 00:00:10.330 TCP 23.104.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:05:59.522 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-10-18 08:06:07.232 00:00:10.375 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:02:44.073 00:05:02.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:02:44.073 00:05:02.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:06:59.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2025-10-18 08:07:07.645 00:00:10.370 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:07:59.907 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-10-18 08:08:08.064 00:00:10.366 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:09:00.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-10-18 08:09:08.466 00:00:10.396 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:09:18.457 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:09:18.400 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:10:00.335 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-10-18 08:10:08.899 00:00:10.376 TCP 23.104.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:11:00.550 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54532 10 6452 1 2025-10-18 08:11:09.314 00:00:10.367 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:12:00.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-10-18 08:12:09.718 00:00:10.363 TCP 23.104.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:08:44.073 00:05:02.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:08:44.074 00:05:02.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:13:00.938 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-10-18 08:13:10.114 00:00:10.329 TCP 23.104.0.1:49716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:14:01.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-10-18 08:14:18.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:14:10.478 00:00:10.367 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:14:18.475 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:15:01.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-10-18 08:15:10.885 00:00:10.389 TCP 23.104.0.1:48944 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:16:01.548 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-10-18 08:16:11.316 00:00:10.365 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:17:01.757 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33210 10 6452 1 2025-10-18 08:17:11.719 00:00:10.332 TCP 23.104.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:18:01.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 12 6556 1 2025-10-18 08:18:12.101 00:00:10.363 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:14:44.075 00:05:02.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:14:44.072 00:05:02.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:19:02.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-10-18 08:19:18.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:19:18.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:19:12.507 00:00:10.322 TCP 23.104.0.1:37994 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:20:02.399 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-10-18 08:20:12.866 00:00:10.543 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:21:02.838 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-10-18 08:21:13.450 00:00:10.358 TCP 23.104.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:22:03.027 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39046 10 6452 1 2025-10-18 08:22:13.847 00:00:10.348 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:23:03.260 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-10-18 08:23:14.230 00:00:10.368 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:24:03.477 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60586 10 6452 1 2025-10-18 08:24:18.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:24:18.725 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:24:14.630 00:00:10.322 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:20:44.073 00:05:02.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:20:44.076 00:05:02.522 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:25:03.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-10-18 08:25:14.991 00:00:10.371 TCP 23.104.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:26:03.903 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-10-18 08:26:15.396 00:00:10.365 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:27:04.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-10-18 08:27:15.798 00:00:10.351 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:28:04.336 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 12 10375 1 2025-10-18 08:28:16.185 00:00:10.436 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 15 1926 1 2025-10-18 08:29:18.482 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:29:04.572 00:00:10.439 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-10-18 08:29:18.545 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:29:16.660 00:00:10.365 TCP 23.104.0.1:59054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:30:05.068 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-10-18 08:30:17.097 00:00:10.374 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:26:44.077 00:05:02.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:26:44.074 00:05:02.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:31:05.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49494 10 6452 1 2025-10-18 08:31:17.511 00:00:10.366 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:32:05.501 00:00:10.935 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-10-18 08:32:17.922 00:00:18.476 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:33:06.481 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-10-18 08:33:26.509 00:00:10.323 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:34:06.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-10-18 08:34:18.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:34:18.791 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:34:26.869 00:00:10.369 TCP 23.104.0.1:33876 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:35:06.863 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-10-18 08:35:27.277 00:00:11.028 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:36:07.100 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37898 10 6452 1 2025-10-18 08:36:28.347 00:00:10.360 TCP 23.104.0.1:56146 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:32:44.079 00:05:02.522 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:32:44.076 00:05:02.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:37:07.312 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:57366 11 6504 1 2025-10-18 08:37:28.750 00:00:10.366 TCP 23.104.0.1:41522 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:38:07.579 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-10-18 08:38:29.155 00:00:15.881 TCP 23.104.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:39:07.768 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-10-18 08:39:18.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:39:18.961 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:39:35.103 00:00:10.361 TCP 23.104.0.1:32818 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:40:07.954 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-10-18 08:40:35.501 00:00:10.364 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:41:08.190 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6452 1 2025-10-18 08:41:35.902 00:00:10.370 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:42:08.398 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-10-18 08:38:44.080 00:05:02.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:38:44.082 00:05:02.519 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:42:36.314 00:00:10.437 TCP 23.104.0.1:41150 -> 1.101.0.1:3000 15 1926 1 2025-10-18 08:43:08.614 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43600 12 10369 1 2025-10-18 08:43:36.791 00:00:10.362 TCP 23.104.0.1:41288 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:44:19.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:44:08.853 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-10-18 08:44:19.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:44:37.196 00:00:10.363 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:45:09.076 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-10-18 08:45:37.603 00:00:10.367 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:46:09.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35632 10 6452 1 2025-10-18 08:46:38.012 00:00:10.363 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:47:09.466 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-10-18 08:47:38.416 00:00:10.362 TCP 23.104.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:48:09.642 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52506 10 6452 1 2025-10-18 08:44:44.081 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:44:44.083 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:48:38.817 00:00:10.368 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:49:19.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:49:09.813 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-10-18 08:49:19.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:49:39.222 00:00:10.364 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:50:10.030 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-10-18 08:50:39.623 00:00:10.365 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:51:10.203 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58126 10 6452 1 2025-10-18 08:51:40.030 00:00:10.362 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:52:10.377 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-10-18 08:52:40.432 00:00:10.321 TCP 23.104.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:53:10.586 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46260 10 6452 1 2025-10-18 08:53:40.791 00:00:10.376 TCP 23.104.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:54:10.798 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59354 10 6452 1 2025-10-18 08:54:19.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 08:54:19.337 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 08:50:44.081 00:05:02.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 08:50:44.083 00:05:02.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 08:54:41.199 00:00:10.370 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:55:11.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-10-18 08:55:41.607 00:00:10.366 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:56:11.244 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6452 1 2025-10-18 08:56:42.013 00:00:10.360 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:57:11.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6452 1 2025-10-18 08:57:42.408 00:00:10.365 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-10-18 08:58:11.670 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 10 6452 1 Summary: total flows: 163, total bytes: 505675, total packets: 1576, avg bps: 1094, avg pps: 0, avg bpp: 320 Time window: 2025-10-18 07:56:44 - 2025-10-18 08:58:21 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0011s Wall: 0.0026s flows/second: 62185.9 Runtime: 0.0026s