Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 03:59:14.347 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2025-10-19 03:59:25.212 00:00:10.748 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:59:42.659 00:00:00.128 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 03:59:42.189 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:00:14.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6452 1 2025-10-19 04:00:25.997 00:00:10.325 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-10-19 03:56:44.456 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 03:56:44.454 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:01:14.740 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-10-19 04:01:26.363 00:00:10.374 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:02:14.966 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 12 6556 1 2025-10-19 04:02:26.773 00:00:10.408 TCP 23.104.0.1:35800 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:03:15.210 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39928 10 6452 1 2025-10-19 04:03:27.215 00:00:10.367 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:04:15.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-10-19 04:04:27.618 00:00:10.364 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:04:42.399 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:04:42.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:05:15.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-10-19 04:05:28.023 00:00:10.318 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:06:15.848 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52548 10 6452 1 2025-10-19 04:06:28.379 00:00:10.363 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:02:44.455 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:02:44.457 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:07:16.083 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-10-19 04:07:28.779 00:00:10.365 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:08:16.253 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35622 10 6452 1 2025-10-19 04:08:29.181 00:00:10.458 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:09:16.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 10 6452 1 2025-10-19 04:09:29.679 00:00:10.362 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:09:42.547 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:09:42.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:10:16.694 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50710 10 6452 1 2025-10-19 04:10:30.104 00:00:10.366 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:11:16.907 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-10-19 04:11:30.504 00:00:10.359 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:12:17.119 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49540 10 6452 1 2025-10-19 04:12:30.904 00:00:10.327 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:08:44.455 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:08:44.459 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:13:17.371 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 12 10375 1 2025-10-19 04:13:31.268 00:00:10.438 TCP 23.104.0.1:42636 -> 1.101.0.1:3000 15 1926 1 2025-10-19 04:14:17.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47458 10 6452 1 2025-10-19 04:14:42.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:14:31.753 00:00:10.374 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:14:42.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:15:17.841 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-10-19 04:15:32.169 00:00:10.367 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:16:18.027 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-10-19 04:16:32.578 00:00:10.326 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:17:18.243 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-10-19 04:17:32.939 00:00:10.332 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:18:18.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6452 1 2025-10-19 04:18:33.310 00:00:10.372 TCP 23.104.0.1:36944 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:14:44.460 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:14:44.457 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:19:18.680 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-10-19 04:19:42.742 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:19:33.719 00:00:10.372 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:19:42.555 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:20:18.898 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36230 10 6452 1 2025-10-19 04:20:34.129 00:00:10.366 TCP 23.104.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:21:19.103 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50814 10 6452 1 2025-10-19 04:21:34.537 00:00:10.381 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:22:19.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-10-19 04:22:34.952 00:00:10.334 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:23:19.558 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-10-19 04:23:35.321 00:00:10.360 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:24:19.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-10-19 04:24:42.848 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:24:42.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:24:35.724 00:00:10.367 TCP 23.104.0.1:53538 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:20:44.459 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:20:44.461 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:25:20.003 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-10-19 04:25:36.127 00:00:10.364 TCP 23.104.0.1:54966 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:26:20.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-10-19 04:26:36.536 00:00:10.371 TCP 23.104.0.1:60934 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:27:20.439 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35274 10 6452 1 2025-10-19 04:27:36.951 00:00:10.383 TCP 23.104.0.1:37634 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:28:20.658 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6452 1 2025-10-19 04:28:37.370 00:00:10.391 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:29:20.870 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-10-19 04:29:42.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:29:42.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:29:37.799 00:00:10.365 TCP 23.104.0.1:42538 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:30:21.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34310 10 6452 1 2025-10-19 04:30:38.202 00:00:10.361 TCP 23.104.0.1:56736 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:26:44.462 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:26:44.460 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:31:21.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-10-19 04:31:38.602 00:00:10.324 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:32:21.527 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53872 10 6452 1 2025-10-19 04:32:38.965 00:00:10.376 TCP 23.104.0.1:51694 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:33:21.758 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54468 10 6452 1 2025-10-19 04:33:39.380 00:00:10.322 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:34:21.976 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 13 6608 1 2025-10-19 04:34:42.996 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:34:42.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:34:39.738 00:00:10.364 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:35:22.224 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-10-19 04:35:40.137 00:00:10.370 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:36:23.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52418 10 6452 1 2025-10-19 04:32:44.461 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:32:44.464 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:36:40.540 00:00:10.334 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:37:23.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 12 6556 1 2025-10-19 04:37:40.911 00:00:10.404 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 15 1926 1 2025-10-19 04:38:23.519 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 12 10375 1 2025-10-19 04:38:41.355 00:00:10.365 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:39:23.716 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-10-19 04:39:42.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:39:43.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:39:41.764 00:00:10.335 TCP 23.104.0.1:44668 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:40:23.925 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-10-19 04:40:42.139 00:00:10.322 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:41:24.169 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-10-19 04:41:42.505 00:00:10.365 TCP 23.104.0.1:39820 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:42:24.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-10-19 04:38:44.472 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:38:44.469 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:42:42.907 00:00:10.369 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:43:24.624 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44730 10 6452 1 2025-10-19 04:43:43.309 00:00:10.323 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:44:24.855 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-10-19 04:44:43.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:44:43.122 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:44:43.667 00:00:10.370 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:45:25.125 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56940 10 6452 1 2025-10-19 04:45:44.094 00:00:10.366 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:46:25.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-10-19 04:46:44.499 00:00:10.370 TCP 23.104.0.1:48100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:47:25.559 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57692 10 6452 1 2025-10-19 04:47:44.908 00:00:10.370 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:48:25.784 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 10 6452 1 2025-10-19 04:44:44.474 00:05:02.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:44:44.472 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:48:45.313 00:00:12.926 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:49:26.000 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44062 10 6452 1 2025-10-19 04:49:43.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:49:43.020 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:49:48.284 00:00:10.365 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:50:26.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-10-19 04:50:48.693 00:00:10.367 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:51:26.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-10-19 04:51:49.104 00:00:10.363 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:52:26.612 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37132 10 6452 1 2025-10-19 04:52:49.507 00:00:10.337 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:53:26.837 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40154 10 6452 1 2025-10-19 04:53:49.883 00:00:10.386 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:54:27.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-10-19 04:54:43.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 04:54:43.207 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 04:50:44.471 00:05:02.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 04:50:44.475 00:05:02.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 04:54:50.306 00:00:10.366 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:55:27.289 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-10-19 04:55:50.709 00:00:10.372 TCP 23.104.0.1:59632 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:56:27.502 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-10-19 04:56:51.117 00:00:10.364 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:57:27.718 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-10-19 04:57:51.528 00:00:10.368 TCP 23.104.0.1:42168 -> 1.101.0.1:3000 11 1507 1 2025-10-19 04:58:27.931 00:00:10.926 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 Summary: total flows: 163, total bytes: 505889, total packets: 1580, avg bps: 1089, avg pps: 0, avg bpp: 320 Time window: 2025-10-19 03:56:44 - 2025-10-19 04:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0011s Wall: 0.0025s flows/second: 65807.3 Runtime: 0.0025s