Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 18:58:59.583 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-10-18 18:59:14.461 00:00:10.323 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:59:31.443 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 18:59:31.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 18:59:59.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-10-18 19:00:14.820 00:00:10.326 TCP 23.104.0.1:37412 -> 1.101.0.1:3000 11 1507 1 2025-10-18 18:56:44.273 00:05:02.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 18:56:44.276 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:01:00.025 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-10-18 19:01:15.184 00:00:10.364 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:02:00.266 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-10-18 19:02:15.584 00:00:10.767 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:03:00.757 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39726 12 10369 1 2025-10-18 19:03:16.394 00:00:10.446 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 15 1926 1 2025-10-18 19:04:00.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 10 6452 1 2025-10-18 19:04:31.569 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:04:31.453 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:04:16.878 00:00:10.328 TCP 23.104.0.1:38588 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:05:01.212 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37256 10 6452 1 2025-10-18 19:05:17.244 00:00:10.367 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:06:01.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-10-18 19:06:17.653 00:00:10.326 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:02:44.278 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:02:44.275 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:07:01.602 00:00:15.125 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-10-18 19:07:18.018 00:00:10.366 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:08:06.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-10-18 19:08:18.422 00:00:10.361 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:09:06.984 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:54470 10 6452 1 2025-10-18 19:09:31.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:09:31.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:09:18.823 00:00:10.363 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:10:07.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-10-18 19:10:19.237 00:00:10.397 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:11:07.391 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-10-18 19:11:19.690 00:00:10.322 TCP 23.104.0.1:59360 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:12:07.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-10-18 19:12:20.062 00:00:10.365 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:08:44.275 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:08:44.278 00:05:02.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:13:07.824 00:00:10.416 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-10-18 19:13:20.473 00:00:10.360 TCP 23.104.0.1:36174 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:14:08.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-10-18 19:14:31.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:14:20.868 00:00:10.364 TCP 23.104.0.1:54834 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:14:31.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:15:08.488 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-10-18 19:15:21.267 00:00:10.357 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:16:08.706 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-10-18 19:16:21.674 00:00:10.368 TCP 23.104.0.1:41604 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:17:08.932 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2025-10-18 19:17:22.105 00:00:10.324 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:18:09.142 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-10-18 19:18:22.470 00:00:10.368 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:14:44.279 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:14:44.280 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:19:09.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50236 10 6452 1 2025-10-18 19:19:31.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:19:32.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:19:22.875 00:00:10.864 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:20:09.566 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-10-18 19:20:23.775 00:00:10.326 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:21:09.776 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-10-18 19:21:24.137 00:00:10.364 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:22:09.988 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-10-18 19:22:24.542 00:00:10.330 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:23:10.214 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 10 6452 1 2025-10-18 19:23:24.902 00:00:10.365 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:24:10.444 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40370 10 6452 1 2025-10-18 19:24:31.899 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:24:31.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:24:25.307 00:00:10.362 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:20:44.282 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:20:44.279 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:25:10.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47400 10 6452 1 2025-10-18 19:25:25.711 00:00:10.360 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:26:10.875 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-10-18 19:26:26.110 00:00:10.369 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:27:11.100 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59668 10 6452 1 2025-10-18 19:27:26.512 00:00:10.428 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:28:11.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-10-18 19:28:26.990 00:00:10.366 TCP 23.104.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:29:11.525 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-10-18 19:29:31.880 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:29:32.055 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:29:27.391 00:00:10.378 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:30:11.744 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-10-18 19:30:27.802 00:00:10.365 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:26:44.283 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:26:44.281 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:31:11.962 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-10-18 19:31:28.203 00:00:10.324 TCP 23.104.0.1:53462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:32:12.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54160 10 6452 1 2025-10-18 19:32:28.565 00:00:10.373 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:33:12.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58022 10 6452 1 2025-10-18 19:33:28.981 00:00:10.326 TCP 23.104.0.1:39946 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:34:12.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60406 10 6452 1 2025-10-18 19:34:32.048 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:34:32.172 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:34:29.344 00:00:10.362 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:35:12.826 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-10-18 19:35:29.747 00:00:10.363 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:36:12.996 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-10-18 19:36:30.148 00:00:10.362 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:32:44.286 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:32:44.283 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:37:13.216 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6452 1 2025-10-18 19:37:30.550 00:00:10.378 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:38:13.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-10-18 19:38:30.966 00:00:10.382 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:39:13.677 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-10-18 19:39:32.284 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:39:32.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:39:31.394 00:00:10.365 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:40:13.901 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-10-18 19:40:31.797 00:00:10.366 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:41:14.123 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-10-18 19:41:32.201 00:00:10.362 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:42:14.335 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52328 10 6452 1 2025-10-18 19:38:44.283 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:42:32.600 00:00:10.362 TCP 23.104.0.1:32924 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:38:44.285 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:43:14.506 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-10-18 19:43:33.000 00:00:10.365 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:44:14.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-10-18 19:44:32.346 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:44:32.464 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:44:33.410 00:00:10.365 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:45:14.946 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-10-18 19:45:33.811 00:00:10.370 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:46:15.168 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-10-18 19:46:34.214 00:00:10.370 TCP 23.104.0.1:53842 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:47:15.334 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34578 10 6452 1 2025-10-18 19:47:34.621 00:00:10.887 TCP 23.104.0.1:46500 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:48:15.549 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-10-18 19:48:35.545 00:00:10.362 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:44:44.284 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:44:44.288 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:49:15.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-10-18 19:49:32.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:49:32.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:49:35.956 00:00:10.369 TCP 23.104.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:50:15.970 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6452 1 2025-10-18 19:50:36.365 00:00:10.368 TCP 23.104.0.1:59668 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:51:16.200 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:42108 10 6452 1 2025-10-18 19:51:36.768 00:00:10.381 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:52:16.401 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-10-18 19:52:37.180 00:00:10.366 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:53:16.578 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-10-18 19:53:37.585 00:00:10.361 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:54:16.766 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-10-18 19:54:32.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:54:32.486 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:50:44.286 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 19:50:44.288 00:05:02.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:54:37.992 00:00:10.374 TCP 23.104.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:55:16.937 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-10-18 19:55:38.399 00:00:10.326 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:56:17.191 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-10-18 19:56:38.772 00:00:10.375 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:57:17.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-10-18 19:57:39.185 00:00:10.367 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:58:17.621 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-10-18 19:58:39.590 00:00:10.370 TCP 23.104.0.1:42660 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1079, avg pps: 0, avg bpp: 318 Time window: 2025-10-18 18:56:44 - 2025-10-18 19:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0024s flows/second: 67570.3 Runtime: 0.0024s