Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 02:58:56.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-10-19 02:58:59.868 00:00:10.325 TCP 23.104.0.1:44582 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:59:40.946 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 02:59:41.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 02:59:56.288 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35596 10 6452 1 2025-10-19 03:00:00.230 00:00:10.367 TCP 23.104.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-10-19 02:56:44.437 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 02:56:44.433 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:00:56.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-10-19 03:01:00.637 00:00:10.365 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:01:56.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48264 10 6452 1 2025-10-19 03:02:01.043 00:00:10.362 TCP 23.104.0.1:46272 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:02:56.935 00:00:13.465 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-10-19 03:03:01.442 00:00:10.365 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:04:00.446 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-10-19 03:04:01.842 00:00:10.395 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:04:41.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:04:40.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:05:00.663 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-10-19 03:05:02.274 00:00:10.325 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:06:00.837 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6452 1 2025-10-19 03:06:02.642 00:00:10.369 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:02:44.437 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:02:44.439 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:07:01.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 10 6452 1 2025-10-19 03:07:03.057 00:00:10.365 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:08:01.288 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-10-19 03:08:03.453 00:00:10.367 TCP 23.104.0.1:60924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:09:01.462 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-10-19 03:09:03.854 00:00:10.365 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:09:41.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:09:41.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:10:01.673 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42932 10 6452 1 2025-10-19 03:10:04.259 00:00:10.364 TCP 23.104.0.1:57914 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:11:01.881 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-10-19 03:11:04.665 00:00:10.369 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:12:02.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-10-19 03:12:05.129 00:00:10.324 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:08:44.439 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:08:44.442 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:13:02.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54094 10 6452 1 2025-10-19 03:13:05.495 00:00:10.325 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:14:02.534 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:55756 10 6452 1 2025-10-19 03:14:05.858 00:00:10.372 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:14:41.433 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:14:41.312 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:15:02.720 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37594 10 6452 1 2025-10-19 03:15:06.270 00:00:10.381 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:16:02.946 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40966 10 6452 1 2025-10-19 03:16:06.707 00:00:10.321 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:17:03.192 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44052 10 6452 1 2025-10-19 03:17:07.121 00:00:10.327 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:18:03.372 00:00:10.766 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-10-19 03:18:07.485 00:00:10.369 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:14:44.443 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:14:44.441 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:19:04.172 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56274 10 6452 1 2025-10-19 03:19:07.893 00:00:10.371 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:19:41.301 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:19:41.334 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:20:04.381 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41478 10 6452 1 2025-10-19 03:20:08.307 00:00:10.830 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:21:04.602 00:00:10.862 TCP 1.101.0.1:3000 -> 22.102.0.1:50850 10 6452 1 2025-10-19 03:21:09.171 00:00:10.895 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:22:05.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-10-19 03:22:10.106 00:00:10.367 TCP 23.104.0.1:48758 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:23:05.718 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6452 1 2025-10-19 03:23:10.507 00:00:10.365 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:24:05.943 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53730 10 6452 1 2025-10-19 03:24:10.911 00:00:10.370 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:24:41.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:24:41.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:20:44.441 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:20:44.443 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:25:06.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-10-19 03:25:11.321 00:00:10.326 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:26:06.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51412 10 6452 1 2025-10-19 03:26:11.684 00:00:10.374 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:27:06.600 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-10-19 03:27:12.101 00:00:10.367 TCP 23.104.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:28:06.809 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58120 10 6452 1 2025-10-19 03:28:12.510 00:00:10.324 TCP 23.104.0.1:43626 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:29:07.043 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6452 1 2025-10-19 03:29:12.868 00:00:10.365 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:29:41.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:29:41.426 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:30:07.265 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-10-19 03:30:13.274 00:00:10.367 TCP 23.104.0.1:45184 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:26:44.444 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:26:44.447 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:31:07.487 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6452 1 2025-10-19 03:31:13.678 00:00:10.370 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:32:07.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55360 10 6452 1 2025-10-19 03:32:14.100 00:00:10.361 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:33:07.918 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52006 10 6452 1 2025-10-19 03:33:14.500 00:00:10.366 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:34:08.130 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-10-19 03:34:14.904 00:00:10.366 TCP 23.104.0.1:56890 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:34:41.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:34:41.504 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:35:08.347 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-10-19 03:35:15.307 00:00:10.366 TCP 23.104.0.1:55382 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:36:08.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50490 10 6452 1 2025-10-19 03:36:15.715 00:00:10.361 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:32:44.446 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:32:44.446 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:37:08.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6452 1 2025-10-19 03:37:16.114 00:00:10.363 TCP 23.104.0.1:58112 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:38:09.007 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-10-19 03:38:16.523 00:00:10.365 TCP 23.104.0.1:43048 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:39:09.193 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-10-19 03:39:16.931 00:00:10.363 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:39:41.673 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:39:42.103 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:40:09.400 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-10-19 03:40:17.340 00:00:10.368 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:41:09.575 00:00:10.738 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-10-19 03:41:17.751 00:00:10.438 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:42:10.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-10-19 03:42:18.227 00:00:10.360 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:38:44.450 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:38:44.449 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:43:10.563 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-10-19 03:43:18.626 00:00:10.366 TCP 23.104.0.1:55382 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:44:10.791 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-10-19 03:44:19.032 00:00:10.364 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:44:41.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:44:41.976 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:45:11.002 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43036 10 6452 1 2025-10-19 03:45:19.436 00:00:10.382 TCP 23.104.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:46:11.188 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34310 10 6452 1 2025-10-19 03:46:19.865 00:00:10.333 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:47:11.399 00:00:10.574 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6452 1 2025-10-19 03:47:20.239 00:00:10.359 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:48:12.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 10 6452 1 2025-10-19 03:48:20.638 00:00:10.370 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:44:44.450 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:44:44.454 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:49:12.229 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-10-19 03:49:21.051 00:00:10.366 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:49:41.942 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:49:42.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:50:12.449 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-10-19 03:50:21.451 00:00:10.364 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:51:12.663 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 10 6452 1 2025-10-19 03:51:21.859 00:00:10.374 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:52:12.837 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-10-19 03:52:22.276 00:00:10.365 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:53:13.015 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 12 10375 1 2025-10-19 03:53:22.676 00:00:10.456 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 15 1926 1 2025-10-19 03:54:13.259 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47306 10 6452 1 2025-10-19 03:54:23.176 00:00:10.381 TCP 23.104.0.1:55904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:54:42.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:54:42.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 03:50:44.453 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 03:50:44.455 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:55:13.480 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40850 10 6452 1 2025-10-19 03:55:23.598 00:00:10.363 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:56:13.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60766 10 6452 1 2025-10-19 03:56:24.005 00:00:10.366 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:57:13.912 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-10-19 03:57:24.419 00:00:10.374 TCP 23.104.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:58:14.130 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59932 10 6452 1 2025-10-19 03:58:24.831 00:00:10.342 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-19 02:56:44 - 2025-10-19 03:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0019s Wall: 0.0021s flows/second: 78802.4 Runtime: 0.0021s