Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 05:58:49.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-10-19 05:59:17.703 00:00:10.368 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-10-19 05:59:44.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 05:59:45.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 05:59:49.439 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35680 10 6452 1 2025-10-19 06:00:18.105 00:00:10.370 TCP 23.104.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-10-19 05:56:44.494 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 05:56:44.491 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:00:49.660 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-10-19 06:01:18.514 00:00:10.361 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:01:49.873 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 10 6452 1 2025-10-19 06:02:18.913 00:00:10.364 TCP 23.104.0.1:35996 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:02:50.075 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50144 10 6452 1 2025-10-19 06:03:19.315 00:00:10.367 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:03:50.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59588 10 6452 1 2025-10-19 06:04:19.723 00:00:10.387 TCP 23.104.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:04:44.728 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:04:44.684 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:04:50.514 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-10-19 06:05:20.150 00:00:10.367 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:05:50.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41028 10 6452 1 2025-10-19 06:06:20.561 00:00:10.365 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:02:44.494 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:02:44.491 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:06:50.910 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-10-19 06:07:20.961 00:00:10.368 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:07:51.118 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2025-10-19 06:08:21.370 00:00:10.365 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:08:51.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-10-19 06:09:21.774 00:00:10.370 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:09:44.595 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:09:44.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:09:51.507 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 10 6452 1 2025-10-19 06:10:22.181 00:00:10.323 TCP 23.104.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:10:51.725 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 10 6452 1 2025-10-19 06:11:22.546 00:00:10.371 TCP 23.104.0.1:48254 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:11:51.947 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-10-19 06:12:22.960 00:00:10.366 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:08:44.494 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:08:44.496 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:12:52.170 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58792 10 6452 1 2025-10-19 06:13:23.360 00:00:10.774 TCP 23.104.0.1:49432 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:13:52.352 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6452 1 2025-10-19 06:14:24.172 00:00:10.813 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:14:45.030 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:14:44.765 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:14:52.530 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46428 10 6452 1 2025-10-19 06:15:25.032 00:00:10.365 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:15:52.739 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-10-19 06:16:25.433 00:00:10.377 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:16:52.950 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50742 10 6452 1 2025-10-19 06:17:25.855 00:00:10.699 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:17:53.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-10-19 06:18:26.587 00:00:10.365 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:14:44.501 00:05:02.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:14:44.500 00:05:02.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:18:53.394 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39708 10 6452 1 2025-10-19 06:19:44.935 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:19:27.001 00:00:10.361 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:19:45.047 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:19:53.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-10-19 06:20:27.393 00:00:10.363 TCP 23.104.0.1:48376 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:20:53.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-10-19 06:21:27.794 00:00:10.365 TCP 23.104.0.1:42812 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:21:54.034 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-10-19 06:22:28.197 00:00:10.378 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:22:54.241 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59348 10 6452 1 2025-10-19 06:23:28.618 00:00:10.368 TCP 23.104.0.1:44206 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:23:54.457 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-10-19 06:24:29.027 00:00:10.366 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:24:45.621 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:24:45.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:20:44.503 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:20:44.500 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:24:54.684 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-10-19 06:25:29.432 00:00:10.373 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:25:55.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49850 10 6452 1 2025-10-19 06:26:29.837 00:00:10.356 TCP 23.104.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:26:55.511 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-10-19 06:27:30.212 00:00:10.724 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:27:55.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-10-19 06:28:30.972 00:00:10.366 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:28:55.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-10-19 06:29:31.377 00:00:10.367 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:29:45.045 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:29:45.413 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:29:56.182 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-10-19 06:30:31.782 00:00:10.365 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:26:44.500 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:26:44.503 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:30:56.404 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52634 10 6452 1 2025-10-19 06:31:32.185 00:00:10.319 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:31:56.625 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-10-19 06:32:32.548 00:00:18.539 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:32:56.845 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53042 10 6452 1 2025-10-19 06:33:41.127 00:00:10.366 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:33:57.037 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-10-19 06:34:45.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:34:45.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:34:41.533 00:00:10.358 TCP 23.104.0.1:54398 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:34:57.222 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41000 10 6452 1 2025-10-19 06:35:41.933 00:00:10.375 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:35:57.450 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 10 6452 1 2025-10-19 06:32:44.506 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:32:44.504 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:36:42.349 00:00:10.362 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:36:57.670 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-10-19 06:37:42.757 00:00:10.384 TCP 23.104.0.1:46192 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:37:57.893 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52550 10 6452 1 2025-10-19 06:38:43.180 00:00:10.385 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:38:58.113 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-10-19 06:39:45.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:39:45.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:39:43.606 00:00:10.369 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:39:58.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-10-19 06:40:44.014 00:00:10.362 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:40:58.554 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-10-19 06:41:44.425 00:00:10.324 TCP 23.104.0.1:43026 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:41:59.205 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-10-19 06:38:44.508 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:38:44.505 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:42:44.791 00:00:10.364 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:42:59.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-10-19 06:43:45.198 00:00:10.371 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:43:59.607 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-10-19 06:44:45.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:44:45.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:44:45.602 00:00:10.369 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:44:59.820 00:00:10.266 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-10-19 06:45:46.011 00:00:10.365 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:46:00.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39788 10 6452 1 2025-10-19 06:46:46.415 00:00:10.367 TCP 23.104.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:47:00.344 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42354 10 6452 1 2025-10-19 06:47:46.816 00:00:10.365 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:48:00.564 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-10-19 06:44:44.506 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:44:44.508 00:05:02.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:48:47.216 00:00:10.362 TCP 23.104.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:49:00.770 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-10-19 06:49:45.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:49:45.485 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:49:47.611 00:00:10.363 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:50:00.978 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-10-19 06:50:48.020 00:00:10.377 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:51:01.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47458 10 6452 1 2025-10-19 06:51:48.434 00:00:10.364 TCP 23.104.0.1:45706 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:52:01.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-10-19 06:52:48.838 00:00:10.352 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:53:01.646 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48208 10 6452 1 2025-10-19 06:53:49.230 00:00:10.372 TCP 23.104.0.1:55824 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:54:01.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-10-19 06:54:45.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 06:54:45.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 06:50:44.506 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 06:50:44.508 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 06:54:49.638 00:00:10.358 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:55:02.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-10-19 06:55:50.035 00:00:10.371 TCP 23.104.0.1:58524 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:56:02.296 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50734 10 6452 1 2025-10-19 06:56:50.440 00:00:10.362 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:57:02.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-10-19 06:57:50.839 00:00:10.381 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-10-19 06:58:02.725 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-10-19 05:56:44 - 2025-10-19 06:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0023s flows/second: 71588.6 Runtime: 0.0023s