Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 17:58:45.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-10-18 17:58:46.802 00:00:10.371 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:59:30.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 17:59:30.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 17:59:45.813 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-10-18 17:59:47.207 00:00:10.367 TCP 23.104.0.1:34696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 17:56:44.259 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 17:56:44.258 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:00:45.988 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-10-18 18:00:47.610 00:00:10.371 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:01:46.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-10-18 18:01:48.022 00:00:10.364 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:02:46.444 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52632 10 6452 1 2025-10-18 18:02:48.426 00:00:10.368 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:03:46.657 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-10-18 18:03:48.832 00:00:10.373 TCP 23.104.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:04:30.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:04:30.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:04:46.835 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57862 10 6452 1 2025-10-18 18:04:49.249 00:00:10.370 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:05:49.654 00:00:10.321 TCP 23.104.0.1:56726 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:05:47.084 00:00:10.976 TCP 1.101.0.1:3000 -> 22.102.0.1:58220 10 6452 1 2025-10-18 18:02:44.262 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:02:44.260 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:06:48.094 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-10-18 18:06:50.013 00:00:10.373 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:07:50.425 00:00:10.363 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:07:48.314 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59932 10 6452 1 2025-10-18 18:08:50.828 00:00:10.633 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:08:48.480 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:57418 10 6452 1 2025-10-18 18:09:30.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:09:30.360 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:09:51.498 00:00:10.349 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:09:49.272 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59082 12 6556 1 2025-10-18 18:10:49.485 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2025-10-18 18:10:51.905 00:00:10.368 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:11:49.709 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49112 10 6452 1 2025-10-18 18:11:52.312 00:00:10.333 TCP 23.104.0.1:54990 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:08:44.263 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:08:44.264 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:12:49.937 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-10-18 18:12:52.679 00:00:10.333 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:13:50.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-10-18 18:13:53.047 00:00:10.327 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:14:30.728 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:14:30.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:14:50.380 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-10-18 18:14:53.410 00:00:10.523 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:15:50.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49576 10 6452 1 2025-10-18 18:15:53.972 00:00:10.389 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:16:50.801 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41716 10 6452 1 2025-10-18 18:16:54.373 00:00:10.364 TCP 23.104.0.1:35696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:17:50.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37144 10 6452 1 2025-10-18 18:17:54.771 00:00:10.545 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:14:44.263 00:05:02.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:14:44.266 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:18:51.210 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54018 10 6452 1 2025-10-18 18:18:55.353 00:00:10.324 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:19:30.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:19:30.686 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:19:51.428 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-10-18 18:19:55.714 00:00:10.364 TCP 23.104.0.1:39232 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:20:51.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-10-18 18:20:56.122 00:00:10.367 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:21:51.813 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60490 10 6452 1 2025-10-18 18:21:56.526 00:00:10.361 TCP 23.104.0.1:52560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:22:51.989 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40442 10 6452 1 2025-10-18 18:22:56.926 00:00:10.395 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:23:52.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-10-18 18:23:57.361 00:00:10.370 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:24:30.693 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:24:30.626 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:20:44.264 00:05:02.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:20:44.267 00:05:02.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:24:52.385 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41856 10 6452 1 2025-10-18 18:24:57.776 00:00:10.326 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:25:52.593 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-10-18 18:25:58.141 00:00:10.329 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:26:52.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-10-18 18:26:58.508 00:00:10.366 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:27:53.034 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-10-18 18:27:58.914 00:00:10.365 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:28:53.245 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-10-18 18:28:59.316 00:00:10.358 TCP 23.104.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:29:30.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:29:30.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:29:53.418 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-10-18 18:29:59.715 00:00:10.373 TCP 23.104.0.1:49890 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:26:44.264 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:26:44.267 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:30:53.587 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38420 10 6452 1 2025-10-18 18:31:00.127 00:00:10.368 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:31:53.759 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-10-18 18:32:00.533 00:00:10.767 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:32:54.023 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 12 10369 1 2025-10-18 18:33:01.340 00:00:10.438 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 15 1926 1 2025-10-18 18:33:54.276 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6452 1 2025-10-18 18:34:01.820 00:00:10.361 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:34:30.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:34:30.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:34:54.491 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 6452 1 2025-10-18 18:35:02.223 00:00:10.323 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:35:54.655 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40644 10 6452 1 2025-10-18 18:36:02.590 00:00:10.364 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:32:44.268 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:32:44.265 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:36:54.879 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-10-18 18:37:02.993 00:00:10.364 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:37:55.104 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43602 12 10369 1 2025-10-18 18:38:03.398 00:00:10.442 TCP 23.104.0.1:48976 -> 1.101.0.1:3000 15 1926 1 2025-10-18 18:38:55.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45690 10 6452 1 2025-10-18 18:39:03.885 00:00:10.375 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:39:31.035 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:39:30.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:39:55.560 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-10-18 18:40:04.314 00:00:10.326 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:40:55.853 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-10-18 18:41:04.684 00:00:10.393 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:41:56.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6452 1 2025-10-18 18:42:05.112 00:00:10.323 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:38:44.267 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:38:44.270 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:42:56.291 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59692 10 6452 1 2025-10-18 18:43:05.474 00:00:10.366 TCP 23.104.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:43:56.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6452 1 2025-10-18 18:44:05.876 00:00:10.371 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:44:31.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:44:31.158 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:44:56.713 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-10-18 18:45:06.278 00:00:10.367 TCP 23.104.0.1:58432 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:45:56.941 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 10 6452 1 2025-10-18 18:46:06.685 00:00:10.368 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:46:57.177 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-10-18 18:47:07.103 00:00:10.364 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:47:57.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-10-18 18:48:07.506 00:00:10.363 TCP 23.104.0.1:56044 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:44:44.272 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:44:44.270 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:48:57.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-10-18 18:49:07.906 00:00:10.371 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:49:31.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:49:31.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:49:57.810 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-10-18 18:50:08.324 00:00:10.336 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:50:58.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-10-18 18:51:08.707 00:00:10.376 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:51:58.237 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-10-18 18:52:09.130 00:00:10.370 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:52:58.416 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58214 10 6452 1 2025-10-18 18:53:09.537 00:00:10.360 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:53:58.589 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-10-18 18:54:09.942 00:00:10.374 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:54:31.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:54:31.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:50:44.271 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:50:44.275 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 18:54:58.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60390 10 6452 1 2025-10-18 18:55:10.353 00:00:10.369 TCP 23.104.0.1:59720 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:55:58.970 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6452 1 2025-10-18 18:56:10.758 00:00:12.849 TCP 23.104.0.1:43892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:56:59.198 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52512 10 6452 1 2025-10-18 18:57:13.643 00:00:10.370 TCP 23.104.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:57:59.373 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51112 10 6452 1 2025-10-18 18:58:14.060 00:00:10.363 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507124, total packets: 1586, avg bps: 1096, avg pps: 0, avg bpp: 319 Time window: 2025-10-18 17:56:44 - 2025-10-18 18:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0026s flows/second: 63939.9 Runtime: 0.0026s