Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 01:58:42.614 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34734 10 6452 1 2025-10-19 01:59:39.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:59:39.746 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:59:35.917 00:00:10.376 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:59:42.824 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-10-19 02:00:36.327 00:00:10.367 TCP 23.104.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:56:44.418 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:56:44.420 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:00:42.993 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-10-19 02:01:36.734 00:00:10.370 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:01:43.179 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55250 10 6452 1 2025-10-19 02:02:37.145 00:00:10.362 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:02:43.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-10-19 02:03:37.544 00:00:10.366 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:03:43.619 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42042 10 6452 1 2025-10-19 02:04:39.916 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:04:39.970 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:04:37.947 00:00:10.370 TCP 23.104.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:04:43.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-10-19 02:05:38.348 00:00:10.330 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:05:44.085 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-10-19 02:06:38.711 00:00:10.326 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:02:44.423 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:02:44.419 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:06:44.302 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-10-19 02:07:39.095 00:00:10.363 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:07:44.519 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 11 6504 1 2025-10-19 02:08:39.498 00:00:10.370 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:08:44.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-10-19 02:09:40.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:09:40.024 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:09:39.909 00:00:10.367 TCP 23.104.0.1:54140 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:09:45.007 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 10 6452 1 2025-10-19 02:10:40.316 00:00:10.327 TCP 23.104.0.1:56144 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:10:45.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-10-19 02:11:40.683 00:00:10.368 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:11:45.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50034 10 6452 1 2025-10-19 02:08:44.421 00:05:02.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:08:44.424 00:05:02.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:12:41.106 00:00:10.406 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 15 1926 1 2025-10-19 02:12:45.650 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50866 12 10369 1 2025-10-19 02:13:41.550 00:00:10.368 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:13:45.889 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-10-19 02:14:41.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:14:41.051 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:14:46.114 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49824 10 6452 1 2025-10-19 02:14:41.951 00:00:10.325 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:15:46.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-10-19 02:15:42.317 00:00:10.378 TCP 23.104.0.1:38134 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:16:46.501 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-10-19 02:16:42.735 00:00:10.368 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:17:43.142 00:00:10.374 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:17:46.719 00:00:10.474 TCP 1.101.0.1:3000 -> 22.102.0.1:52960 10 6452 1 2025-10-19 02:14:44.425 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:14:44.428 00:05:02.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:18:43.561 00:00:10.361 TCP 23.104.0.1:42440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:18:47.237 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6452 1 2025-10-19 02:19:40.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:19:40.276 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:19:43.966 00:00:10.372 TCP 23.104.0.1:48970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:19:47.454 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43172 10 6452 1 2025-10-19 02:20:44.375 00:00:10.377 TCP 23.104.0.1:39676 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:20:47.674 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-10-19 02:21:44.783 00:00:10.331 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:21:47.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 10 6452 1 2025-10-19 02:22:45.149 00:00:10.325 TCP 23.104.0.1:34418 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:22:48.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 10 6452 1 2025-10-19 02:23:45.514 00:00:10.331 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:23:48.329 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-10-19 02:24:40.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:24:40.227 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:20:44.428 00:05:02.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:20:44.424 00:05:02.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:24:45.881 00:00:10.386 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:24:48.552 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-10-19 02:25:46.301 00:00:10.363 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:25:48.770 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 10 6452 1 2025-10-19 02:26:46.700 00:00:10.370 TCP 23.104.0.1:45748 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:26:48.989 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:44160 10 6452 1 2025-10-19 02:27:47.108 00:00:10.362 TCP 23.104.0.1:49020 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:27:49.189 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2025-10-19 02:28:47.512 00:00:10.429 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:28:49.405 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-10-19 02:29:40.296 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:29:40.305 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:29:49.619 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-10-19 02:29:47.974 00:00:10.376 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:26:44.431 00:05:02.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:26:44.427 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:30:49.837 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37264 11 6492 1 2025-10-19 02:30:48.388 00:00:10.325 TCP 23.104.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:31:50.004 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38698 10 6452 1 2025-10-19 02:31:48.750 00:00:10.325 TCP 23.104.0.1:47232 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:32:50.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-10-19 02:32:49.112 00:00:10.427 TCP 23.104.0.1:48596 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:33:50.435 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-10-19 02:33:49.576 00:00:10.376 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:34:40.590 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:34:40.617 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:34:49.995 00:00:10.374 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:34:50.662 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-10-19 02:35:50.403 00:00:10.367 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:35:50.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-10-19 02:32:44.430 00:05:02.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:32:44.428 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:36:51.109 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59474 10 6452 1 2025-10-19 02:36:50.807 00:00:10.365 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:37:51.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42012 10 6452 1 2025-10-19 02:37:51.209 00:00:10.364 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:38:51.496 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52396 10 6452 1 2025-10-19 02:38:51.611 00:00:10.359 TCP 23.104.0.1:45058 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:39:40.772 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:39:40.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:39:51.705 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-10-19 02:39:52.010 00:00:10.367 TCP 23.104.0.1:42912 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:40:52.415 00:00:10.358 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:40:51.880 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-10-19 02:41:52.099 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-10-19 02:41:52.813 00:00:10.364 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:38:44.428 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:38:44.431 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:42:52.363 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 12 10375 1 2025-10-19 02:42:53.216 00:00:10.440 TCP 23.104.0.1:35272 -> 1.101.0.1:3000 15 1926 1 2025-10-19 02:43:53.694 00:00:10.365 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:43:52.642 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46924 10 6452 1 2025-10-19 02:44:40.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:44:40.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:44:52.855 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-10-19 02:44:54.103 00:00:10.363 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:45:54.505 00:00:10.362 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:45:53.032 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 10 6452 1 2025-10-19 02:46:54.906 00:00:10.369 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:46:53.247 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37340 10 6452 1 2025-10-19 02:47:53.432 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-10-19 02:47:55.315 00:00:10.331 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:44:44.434 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:44:44.431 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:48:55.690 00:00:10.383 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:48:53.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-10-19 02:49:40.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:49:40.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:49:56.126 00:00:10.360 TCP 23.104.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:49:53.979 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-10-19 02:50:56.525 00:00:10.370 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:50:54.226 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34838 10 6452 1 2025-10-19 02:51:54.448 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 10 6452 1 2025-10-19 02:51:56.926 00:00:10.392 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:52:54.666 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:42282 14 14286 1 2025-10-19 02:52:57.352 00:00:10.516 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 17 2241 1 2025-10-19 02:53:54.938 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-10-19 02:53:57.909 00:00:10.367 TCP 23.104.0.1:38490 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:54:40.702 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:54:40.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:50:44.435 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:50:44.432 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 02:54:55.184 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-10-19 02:54:58.316 00:00:10.372 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:55:55.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-10-19 02:55:58.723 00:00:10.332 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:56:55.619 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40842 10 6452 1 2025-10-19 02:56:59.103 00:00:10.367 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:57:55.847 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-10-19 02:57:59.504 00:00:10.325 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 514179, total packets: 1585, avg bps: 1116, avg pps: 0, avg bpp: 324 Time window: 2025-10-19 01:56:44 - 2025-10-19 02:58:09 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0060s User: 0.0000s Wall: 0.0038s flows/second: 42716.1 Runtime: 0.0038s