Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 19:59:17.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50282 10 6452 1 2025-10-18 19:59:32.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 19:59:32.644 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 19:59:39.991 00:00:10.324 TCP 23.104.0.1:51766 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:00:18.007 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-10-18 20:00:40.350 00:00:10.357 TCP 23.104.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-10-18 19:56:44.292 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 19:56:44.289 00:05:02.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:01:18.183 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37420 10 6452 1 2025-10-18 20:01:40.748 00:00:10.373 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:02:18.403 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2025-10-18 20:02:41.158 00:00:10.439 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 15 1926 1 2025-10-18 20:03:18.627 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 12 10375 1 2025-10-18 20:03:41.638 00:00:10.365 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:04:18.832 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 2025-10-18 20:04:32.751 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:04:32.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:04:42.049 00:00:10.324 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:05:19.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43430 10 6452 1 2025-10-18 20:05:42.414 00:00:10.328 TCP 23.104.0.1:49474 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:06:19.291 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53554 10 6452 1 2025-10-18 20:02:44.290 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:02:44.292 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:06:42.780 00:00:10.326 TCP 23.104.0.1:57568 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:07:19.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-10-18 20:07:43.145 00:00:10.326 TCP 23.104.0.1:37656 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:08:19.742 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-10-18 20:08:43.512 00:00:10.362 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:09:19.959 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-10-18 20:09:33.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:09:33.368 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:09:43.912 00:00:10.324 TCP 23.104.0.1:40980 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:10:20.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-10-18 20:10:44.281 00:00:10.389 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:11:20.405 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36104 10 6452 1 2025-10-18 20:11:44.715 00:00:10.326 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:12:20.624 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-10-18 20:08:44.293 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:08:44.291 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:12:45.099 00:00:10.318 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:13:20.794 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50616 10 6452 1 2025-10-18 20:13:45.457 00:00:10.365 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:14:21.016 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-10-18 20:14:32.852 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:14:32.897 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:14:45.866 00:00:10.371 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:15:21.237 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-10-18 20:15:46.277 00:00:10.367 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:16:21.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-10-18 20:16:46.686 00:00:10.364 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:17:21.685 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-10-18 20:17:47.106 00:00:10.323 TCP 23.104.0.1:50720 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:18:21.907 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58506 10 6452 1 2025-10-18 20:14:44.295 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:14:44.292 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:18:47.468 00:00:10.365 TCP 23.104.0.1:44272 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:19:22.126 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-10-18 20:19:32.843 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:19:33.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:19:47.871 00:00:10.370 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:20:22.351 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-10-18 20:20:48.281 00:00:10.370 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:21:22.563 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-10-18 20:21:48.689 00:00:10.369 TCP 23.104.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:22:22.777 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6452 1 2025-10-18 20:22:49.109 00:00:10.363 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:23:22.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56860 10 6452 1 2025-10-18 20:23:49.509 00:00:10.363 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:24:32.991 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:24:33.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:24:23.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-10-18 20:20:44.299 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:20:44.297 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:24:49.909 00:00:10.377 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:25:23.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-10-18 20:25:50.322 00:00:10.371 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:26:23.647 00:00:10.761 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-10-18 20:26:50.726 00:00:10.328 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:27:24.447 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50688 10 6452 1 2025-10-18 20:27:51.107 00:00:10.367 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:28:24.626 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56372 10 6452 1 2025-10-18 20:28:51.512 00:00:10.367 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:29:24.840 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-10-18 20:29:33.252 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:29:33.308 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:29:51.924 00:00:10.387 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:30:25.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35428 10 6452 1 2025-10-18 20:26:44.297 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:26:44.300 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:30:52.346 00:00:14.823 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:31:25.293 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-10-18 20:31:57.209 00:00:10.359 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:32:25.512 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2025-10-18 20:32:57.606 00:00:10.367 TCP 23.104.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:33:25.678 00:00:10.472 TCP 1.101.0.1:3000 -> 22.102.0.1:43714 10 6452 1 2025-10-18 20:33:58.011 00:00:10.369 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:34:33.283 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:34:26.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6452 1 2025-10-18 20:34:33.128 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:34:58.422 00:00:10.365 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:35:26.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 10 6452 1 2025-10-18 20:35:58.826 00:00:10.360 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:36:26.614 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39648 10 6452 1 2025-10-18 20:32:44.303 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:32:44.301 00:05:02.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:36:59.227 00:00:10.363 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:37:26.824 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 10 6452 1 2025-10-18 20:37:59.630 00:00:10.368 TCP 23.104.0.1:45288 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:38:26.992 00:00:11.359 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-10-18 20:39:00.036 00:00:10.325 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:39:33.884 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:39:33.690 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:39:28.386 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-10-18 20:40:00.398 00:00:10.369 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:40:28.612 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-10-18 20:41:00.806 00:00:10.363 TCP 23.104.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:41:28.787 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44310 10 6452 1 2025-10-18 20:42:01.210 00:00:10.362 TCP 23.104.0.1:44618 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:42:29.000 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-10-18 20:38:44.304 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:38:44.301 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:43:01.609 00:00:10.322 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:43:29.224 00:00:10.609 TCP 1.101.0.1:3000 -> 22.102.0.1:38716 10 6452 1 2025-10-18 20:44:01.963 00:00:10.330 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:44:33.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:44:33.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:44:29.883 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-10-18 20:45:02.330 00:00:10.368 TCP 23.104.0.1:40248 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:45:30.109 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38332 10 6452 1 2025-10-18 20:46:02.737 00:00:10.370 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:46:30.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-10-18 20:47:03.145 00:00:10.363 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:47:30.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-10-18 20:48:03.543 00:00:10.368 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:48:30.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37556 10 6452 1 2025-10-18 20:44:44.303 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:44:44.306 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:49:03.950 00:00:10.370 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:49:33.681 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:49:33.475 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:49:30.935 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:41622 10 6452 1 2025-10-18 20:50:04.360 00:00:10.328 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:50:31.198 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39084 10 6452 1 2025-10-18 20:51:04.727 00:00:10.373 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:51:31.421 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51172 10 6452 1 2025-10-18 20:52:05.136 00:00:10.379 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:52:31.642 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38758 10 6452 1 2025-10-18 20:53:05.562 00:00:10.358 TCP 23.104.0.1:57512 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:53:31.858 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54776 10 6452 1 2025-10-18 20:54:05.961 00:00:10.367 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:54:33.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:54:33.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:54:32.095 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-10-18 20:50:44.304 00:05:02.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:50:44.306 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 20:55:06.368 00:00:10.374 TCP 23.104.0.1:59124 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:55:32.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-10-18 20:56:06.777 00:00:10.326 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:56:32.543 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-10-18 20:57:07.141 00:00:10.366 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:57:32.759 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48442 10 6452 1 2025-10-18 20:58:07.551 00:00:10.366 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:58:32.983 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-10-18 19:56:44 - 2025-10-18 20:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0015s Wall: 0.0025s flows/second: 64479.1 Runtime: 0.0025s