Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 11:58:52.252 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36832 10 6452 1 2025-10-18 11:58:58.893 00:00:10.391 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:59:23.104 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 11:59:22.736 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 11:59:52.467 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60578 10 6452 1 2025-10-18 11:59:59.316 00:00:10.366 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-10-18 11:56:44.162 00:05:02.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 11:56:44.159 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:00:52.677 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-10-18 12:00:59.719 00:00:10.379 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:01:52.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-10-18 12:02:00.135 00:00:10.638 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:02:53.081 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-10-18 12:03:00.807 00:00:10.360 TCP 23.104.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:03:53.252 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46352 10 6452 1 2025-10-18 12:04:01.210 00:00:10.365 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:04:23.123 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:04:23.168 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:04:53.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33108 10 6452 1 2025-10-18 12:05:01.615 00:00:10.365 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:05:53.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-10-18 12:06:02.016 00:00:10.361 TCP 23.104.0.1:33820 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:02:44.159 00:05:02.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:02:44.163 00:05:02.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:06:53.901 00:00:10.796 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-10-18 12:07:02.417 00:00:10.368 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:07:54.735 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-10-18 12:08:02.825 00:00:10.364 TCP 23.104.0.1:54490 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:08:54.951 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 10 6452 1 2025-10-18 12:09:03.225 00:00:10.328 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:09:22.956 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:09:23.198 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:09:55.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-10-18 12:10:03.594 00:00:10.372 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:10:55.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-10-18 12:11:04.016 00:00:10.366 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:11:55.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-10-18 12:12:04.421 00:00:10.366 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:08:44.163 00:05:02.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:08:44.162 00:05:02.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:12:55.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-10-18 12:13:04.836 00:00:10.386 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:13:56.075 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-10-18 12:14:05.267 00:00:10.369 TCP 23.104.0.1:52418 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:14:23.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:14:23.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:14:56.281 00:00:10.439 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-10-18 12:15:05.675 00:00:10.332 TCP 23.104.0.1:48654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:15:56.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-10-18 12:16:06.064 00:00:10.365 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:16:56.975 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-10-18 12:17:06.466 00:00:10.374 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:17:57.203 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50784 10 6452 1 2025-10-18 12:18:06.880 00:00:10.353 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:14:44.166 00:05:02.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:14:44.165 00:05:02.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:18:57.376 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-10-18 12:19:07.269 00:00:10.324 TCP 23.104.0.1:40144 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:19:23.353 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:19:23.434 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:19:57.546 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-10-18 12:20:07.640 00:00:10.321 TCP 23.104.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:20:57.719 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2025-10-18 12:21:07.999 00:00:10.362 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:21:57.932 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34350 10 6452 1 2025-10-18 12:22:08.402 00:00:10.368 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:22:58.167 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50716 10 6452 1 2025-10-18 12:23:08.807 00:00:10.372 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:23:58.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-10-18 12:24:09.222 00:00:10.379 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:24:23.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:24:23.296 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:20:44.169 00:05:02.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:20:44.167 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:24:58.554 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-10-18 12:25:09.634 00:00:10.362 TCP 23.104.0.1:44516 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:25:58.765 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-10-18 12:26:10.036 00:00:10.370 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:26:58.948 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-10-18 12:27:10.445 00:00:10.363 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:27:59.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34382 10 6452 1 2025-10-18 12:28:10.851 00:00:10.378 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:28:59.387 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-10-18 12:29:11.267 00:00:10.361 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:29:23.469 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:29:23.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:29:59.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-10-18 12:30:11.665 00:00:10.986 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:26:44.171 00:05:02.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:26:44.169 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:30:59.819 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-10-18 12:31:12.691 00:00:10.323 TCP 23.104.0.1:38636 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:31:59.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-10-18 12:32:13.062 00:00:10.367 TCP 23.104.0.1:55620 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:33:00.219 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40668 10 6452 1 2025-10-18 12:33:13.467 00:00:10.323 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:34:00.453 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6452 1 2025-10-18 12:34:23.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:34:13.834 00:00:10.360 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:34:23.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:35:00.666 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-10-18 12:35:14.228 00:00:10.327 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:36:00.894 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-10-18 12:36:14.592 00:00:10.322 TCP 23.104.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:32:44.171 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:32:44.175 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:37:01.111 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-10-18 12:37:14.953 00:00:10.366 TCP 23.104.0.1:50480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:38:01.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-10-18 12:38:15.361 00:00:10.365 TCP 23.104.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:39:01.499 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-10-18 12:39:23.899 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:39:23.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:39:15.767 00:00:10.378 TCP 23.104.0.1:55324 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:40:01.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41258 10 6452 1 2025-10-18 12:40:16.183 00:00:10.365 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:41:01.890 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48774 10 6452 1 2025-10-18 12:41:16.585 00:00:10.366 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:42:02.106 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-10-18 12:42:16.993 00:00:10.367 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:38:44.171 00:05:02.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:38:44.174 00:05:02.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:43:02.324 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-10-18 12:43:17.396 00:00:10.359 TCP 23.104.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:44:02.541 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-10-18 12:44:23.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:44:24.064 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:44:17.793 00:00:10.369 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:45:02.713 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-10-18 12:45:18.203 00:00:11.086 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:46:02.888 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-10-18 12:46:19.333 00:00:10.367 TCP 23.104.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:47:03.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-10-18 12:47:19.744 00:00:10.324 TCP 23.104.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:48:03.333 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-10-18 12:48:20.113 00:00:10.368 TCP 23.104.0.1:59936 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:44:44.177 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:44:44.179 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:49:03.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6452 1 2025-10-18 12:49:24.183 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:49:23.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:49:20.523 00:00:10.362 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:50:03.748 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6452 1 2025-10-18 12:50:20.925 00:00:10.341 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:51:03.970 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-10-18 12:51:21.307 00:00:11.046 TCP 23.104.0.1:54280 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:52:04.157 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-10-18 12:52:22.405 00:00:10.364 TCP 23.104.0.1:58176 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:53:04.325 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54854 10 6452 1 2025-10-18 12:53:22.806 00:00:10.337 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:54:04.492 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-10-18 12:54:24.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:54:24.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:54:23.182 00:00:10.366 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:50:44.177 00:05:02.511 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:50:44.181 00:05:02.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 12:55:04.913 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-10-18 12:55:23.590 00:00:10.364 TCP 23.104.0.1:33806 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:56:05.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-10-18 12:56:23.991 00:00:10.328 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:57:05.338 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50692 10 6452 1 2025-10-18 12:57:24.354 00:00:10.363 TCP 23.104.0.1:56100 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:58:05.553 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55474 10 6452 1 2025-10-18 12:58:24.752 00:00:10.363 TCP 23.104.0.1:51976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1074, avg pps: 0, avg bpp: 317 Time window: 2025-10-18 11:56:44 - 2025-10-18 12:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0000s Wall: 0.0020s flows/second: 80915.9 Runtime: 0.0021s