Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 12:59:05.779 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6452 1 2025-10-18 12:59:24.085 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 12:59:24.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 12:59:25.149 00:00:10.328 TCP 23.104.0.1:52634 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:00:05.996 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-10-18 13:00:25.512 00:00:10.371 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-10-18 12:56:44.179 00:05:02.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 12:56:44.182 00:05:02.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:01:06.184 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45864 10 6452 1 2025-10-18 13:01:25.920 00:00:11.325 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:02:06.408 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38730 10 6452 1 2025-10-18 13:02:27.287 00:00:10.433 TCP 23.104.0.1:42158 -> 1.101.0.1:3000 15 1926 1 2025-10-18 13:03:06.636 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 12 10375 1 2025-10-18 13:03:27.763 00:00:10.370 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:04:06.877 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6452 1 2025-10-18 13:04:24.539 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:04:24.551 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:04:28.169 00:00:10.370 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:05:07.104 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53116 10 6452 1 2025-10-18 13:05:28.578 00:00:10.322 TCP 23.104.0.1:53172 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:06:07.327 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33356 10 6452 1 2025-10-18 13:06:28.959 00:00:10.328 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:02:44.184 00:05:02.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:02:44.181 00:05:02.509 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:07:07.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36154 10 6452 1 2025-10-18 13:07:29.327 00:00:10.363 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:08:07.717 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-10-18 13:08:29.730 00:00:10.373 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:09:07.930 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-10-18 13:09:24.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:09:24.474 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:09:30.141 00:00:10.368 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:10:08.126 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-10-18 13:10:30.545 00:00:10.370 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:11:08.298 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47024 10 6452 1 2025-10-18 13:11:30.948 00:00:10.382 TCP 23.104.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:12:08.470 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-10-18 13:12:31.367 00:00:10.363 TCP 23.104.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:08:44.184 00:05:02.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:08:44.182 00:05:02.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:13:08.681 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 2025-10-18 13:13:31.766 00:00:10.375 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:14:08.897 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-10-18 13:14:24.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:14:24.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:14:32.181 00:00:10.360 TCP 23.104.0.1:43860 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:15:09.112 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-10-18 13:15:32.581 00:00:10.371 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:16:09.320 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44042 10 6452 1 2025-10-18 13:16:32.987 00:00:10.369 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:17:09.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6452 1 2025-10-18 13:17:33.393 00:00:10.367 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:18:09.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-10-18 13:18:33.795 00:00:10.369 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:14:44.187 00:05:02.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:14:44.184 00:05:02.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:19:09.945 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41968 10 6452 1 2025-10-18 13:19:24.677 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:19:24.496 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:19:34.200 00:00:10.378 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:20:10.172 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-10-18 13:20:34.616 00:00:10.365 TCP 23.104.0.1:56730 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:21:10.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-10-18 13:21:35.022 00:00:10.370 TCP 23.104.0.1:34900 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:22:10.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-10-18 13:22:35.429 00:00:10.365 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:23:10.811 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46052 10 6452 1 2025-10-18 13:23:35.832 00:00:10.371 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:24:11.029 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-10-18 13:24:24.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:24:24.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:24:36.244 00:00:10.367 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:20:44.186 00:05:02.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:20:44.188 00:05:02.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:25:11.201 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44728 10 6452 1 2025-10-18 13:25:36.649 00:00:10.375 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:26:11.414 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-10-18 13:26:37.092 00:00:10.365 TCP 23.104.0.1:50868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:27:11.641 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-10-18 13:27:37.497 00:00:10.441 TCP 23.104.0.1:36982 -> 1.101.0.1:3000 15 1926 1 2025-10-18 13:28:11.867 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53656 12 10375 1 2025-10-18 13:28:37.971 00:00:10.328 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:29:24.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:29:12.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44502 10 6452 1 2025-10-18 13:29:24.862 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:29:38.336 00:00:10.324 TCP 23.104.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:30:12.333 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-10-18 13:26:44.187 00:05:02.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:26:44.190 00:05:02.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:30:38.696 00:00:10.325 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:31:12.500 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-10-18 13:31:39.071 00:00:10.378 TCP 23.104.0.1:42640 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:32:12.714 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-10-18 13:32:39.483 00:00:10.370 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:33:12.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39522 10 6452 1 2025-10-18 13:33:39.887 00:00:10.377 TCP 23.104.0.1:58636 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:34:13.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-10-18 13:34:24.837 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:34:25.017 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:34:40.297 00:00:10.372 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:35:13.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-10-18 13:35:40.706 00:00:10.368 TCP 23.104.0.1:51216 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:36:13.553 00:00:10.469 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-10-18 13:32:44.189 00:05:02.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:36:41.111 00:00:10.363 TCP 23.104.0.1:36018 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:32:44.191 00:05:02.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:37:14.083 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6452 1 2025-10-18 13:37:41.509 00:00:10.372 TCP 23.104.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:38:14.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-10-18 13:38:41.916 00:00:10.359 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:39:25.065 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:39:24.944 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:39:14.511 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38802 10 6452 1 2025-10-18 13:39:42.314 00:00:10.363 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:40:14.685 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-10-18 13:40:42.716 00:00:10.378 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:41:14.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-10-18 13:41:43.136 00:00:10.365 TCP 23.104.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:42:15.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 10 6452 1 2025-10-18 13:38:44.190 00:05:02.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:38:44.192 00:05:02.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:42:43.537 00:00:10.369 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:43:15.330 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50678 10 6452 1 2025-10-18 13:43:43.947 00:00:10.370 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:44:24.893 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:44:15.558 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-10-18 13:44:24.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:44:44.364 00:00:10.367 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:45:15.766 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-10-18 13:45:44.770 00:00:10.327 TCP 23.104.0.1:42788 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:46:15.940 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:42752 10 6452 1 2025-10-18 13:46:45.135 00:00:10.362 TCP 23.104.0.1:39388 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:47:16.139 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6452 1 2025-10-18 13:47:45.537 00:00:10.363 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:48:16.308 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-10-18 13:44:44.195 00:05:02.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:44:44.193 00:05:02.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:48:45.939 00:00:10.376 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:49:25.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:49:16.524 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36222 10 6452 1 2025-10-18 13:49:25.354 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:49:46.354 00:00:10.362 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:50:16.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-10-18 13:50:46.753 00:00:10.389 TCP 23.104.0.1:51304 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:51:16.957 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-10-18 13:51:47.179 00:00:10.365 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:52:17.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 10 6452 1 2025-10-18 13:52:47.578 00:00:10.365 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:53:17.392 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:40054 10 6452 1 2025-10-18 13:53:47.981 00:00:10.379 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:54:25.232 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 13:54:25.272 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 13:54:17.750 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2025-10-18 13:50:44.197 00:05:02.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 13:50:44.193 00:05:02.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 13:54:48.402 00:00:10.373 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:55:17.972 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-10-18 13:55:48.815 00:00:10.365 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:56:18.201 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38902 10 6452 1 2025-10-18 13:56:49.223 00:00:10.366 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:57:18.415 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60792 10 6452 1 2025-10-18 13:57:49.644 00:00:10.363 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 13:58:18.642 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42478 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1091, avg pps: 0, avg bpp: 321 Time window: 2025-10-18 12:56:44 - 2025-10-18 13:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0018s Wall: 0.0020s flows/second: 79896.2 Runtime: 0.0021s