Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 10:59:26.810 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-10-19 10:59:36.349 00:00:10.378 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:59:50.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:59:50.646 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:00:27.040 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-10-19 10:56:44.573 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:00:36.761 00:00:10.382 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:56:44.576 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:01:27.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43710 10 6452 1 2025-10-19 11:01:37.184 00:00:10.363 TCP 23.104.0.1:37380 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:02:27.439 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-10-19 11:02:37.587 00:00:10.371 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:03:27.659 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34444 10 6452 1 2025-10-19 11:03:37.994 00:00:10.361 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:04:27.874 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-10-19 11:04:50.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:04:50.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:04:38.393 00:00:10.364 TCP 23.104.0.1:36638 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:05:28.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-10-19 11:05:38.803 00:00:10.375 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:06:28.308 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-10-19 11:06:39.221 00:00:10.364 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:02:44.581 00:05:02.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:02:44.578 00:05:02.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:07:28.484 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-10-19 11:07:39.621 00:00:10.370 TCP 23.104.0.1:34176 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:08:28.694 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 10 6452 1 2025-10-19 11:08:40.027 00:00:10.375 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:09:28.908 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-10-19 11:09:50.602 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:09:40.441 00:00:10.363 TCP 23.104.0.1:37896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:09:50.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:10:29.122 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 10 6452 1 2025-10-19 11:10:40.847 00:00:10.397 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:11:29.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53124 10 6452 1 2025-10-19 11:11:41.281 00:00:10.330 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:12:29.548 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-10-19 11:08:44.579 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:08:44.576 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:12:41.656 00:00:10.370 TCP 23.104.0.1:58220 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:13:29.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43888 10 6452 1 2025-10-19 11:13:42.078 00:00:10.364 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:14:29.937 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-10-19 11:14:51.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:14:50.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:14:42.482 00:00:10.326 TCP 23.104.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:15:30.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-10-19 11:15:42.852 00:00:10.384 TCP 23.104.0.1:51130 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:16:30.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59184 10 6452 1 2025-10-19 11:16:43.269 00:00:10.365 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:17:30.556 00:00:10.424 TCP 1.101.0.1:3000 -> 22.102.0.1:50468 10 6452 1 2025-10-19 11:17:43.673 00:00:10.370 TCP 23.104.0.1:34924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:18:31.023 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-10-19 11:14:44.580 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:14:44.577 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:18:44.097 00:00:10.322 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:19:31.234 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-19 11:19:50.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:19:50.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:19:44.457 00:00:10.368 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:20:31.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-10-19 11:20:44.876 00:00:10.331 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:21:31.624 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-10-19 11:21:45.242 00:00:10.368 TCP 23.104.0.1:52952 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:22:31.889 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-10-19 11:22:45.655 00:00:10.365 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:23:32.207 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-10-19 11:23:46.087 00:00:10.365 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:24:32.388 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-10-19 11:24:51.262 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:20:44.579 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:24:51.114 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:20:44.581 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:24:46.486 00:00:10.369 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:25:32.606 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-10-19 11:25:46.893 00:00:10.382 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:26:32.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53364 10 6452 1 2025-10-19 11:26:47.315 00:00:10.364 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:27:33.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-10-19 11:27:47.715 00:00:10.371 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:28:33.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 10 6452 1 2025-10-19 11:28:48.128 00:00:10.365 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:29:33.457 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-10-19 11:29:51.276 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:29:51.258 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:29:48.528 00:00:10.363 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:30:33.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37670 10 6452 1 2025-10-19 11:26:44.580 00:05:02.624 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:26:44.584 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:30:48.948 00:00:10.389 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:31:33.884 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-10-19 11:31:49.373 00:00:10.375 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:32:34.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-10-19 11:32:49.784 00:00:10.333 TCP 23.104.0.1:60870 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:33:34.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6452 1 2025-10-19 11:33:50.152 00:00:10.460 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:34:34.528 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44552 10 6452 1 2025-10-19 11:34:51.488 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:34:51.453 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:34:50.648 00:00:10.324 TCP 23.104.0.1:56006 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:35:34.750 00:00:10.657 TCP 1.101.0.1:3000 -> 22.102.0.1:39328 10 6452 1 2025-10-19 11:35:51.015 00:00:10.851 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:36:35.446 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47016 10 6452 1 2025-10-19 11:32:44.584 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:32:44.582 00:05:02.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:36:51.904 00:00:10.371 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:37:35.676 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-10-19 11:37:52.312 00:00:10.365 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:38:35.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55514 10 6452 1 2025-10-19 11:38:52.714 00:00:10.376 TCP 23.104.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:39:36.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 6452 1 2025-10-19 11:39:51.357 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:39:51.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:39:53.127 00:00:10.365 TCP 23.104.0.1:40092 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:40:36.325 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:38808 10 6452 1 2025-10-19 11:40:53.530 00:00:10.368 TCP 23.104.0.1:33306 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:41:36.581 00:00:10.659 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-10-19 11:41:53.936 00:00:10.383 TCP 23.104.0.1:55916 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:38:44.584 00:05:02.619 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:42:37.280 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-10-19 11:38:44.583 00:05:02.624 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:42:54.353 00:00:10.473 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 17 2241 1 2025-10-19 11:43:37.500 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 14 14292 1 2025-10-19 11:43:54.862 00:00:10.372 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:44:37.779 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-10-19 11:44:51.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:44:51.616 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:44:55.272 00:00:10.365 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:45:37.995 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-10-19 11:45:55.672 00:00:10.386 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:46:38.243 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6452 1 2025-10-19 11:46:56.105 00:00:10.362 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:47:38.458 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-10-19 11:47:56.507 00:00:10.359 TCP 23.104.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:44:44.587 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:48:38.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-10-19 11:44:44.589 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:48:56.905 00:00:10.328 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:49:38.848 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-10-19 11:49:51.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:49:51.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:49:57.272 00:00:10.325 TCP 23.104.0.1:51980 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:50:39.078 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-10-19 11:50:57.639 00:00:10.329 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:51:39.259 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-10-19 11:51:58.005 00:00:10.363 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:52:39.475 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-10-19 11:52:58.407 00:00:10.367 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:53:39.686 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-10-19 11:53:58.818 00:00:10.364 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:54:39.889 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-10-19 11:50:44.588 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 11:50:44.590 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 11:54:51.703 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 11:54:52.058 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 11:54:59.218 00:00:10.372 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:55:40.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-10-19 11:55:59.628 00:00:10.359 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:56:40.334 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-10-19 11:57:00.027 00:00:10.364 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:57:40.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-10-19 11:58:00.434 00:00:10.371 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-10-19 11:58:40.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 Summary: total flows: 163, total bytes: 505415, total packets: 1571, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-10-19 10:56:44 - 2025-10-19 11:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0054s User: 0.0000s Wall: 0.0017s flows/second: 93730.7 Runtime: 0.0018s