Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 16:58:58.103 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-10-19 16:59:21.361 00:00:10.365 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-10-19 16:59:57.957 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 16:59:57.932 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 16:59:58.315 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-10-19 17:00:21.774 00:00:10.452 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-10-19 16:56:44.675 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 16:56:44.677 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:00:58.677 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-10-19 17:01:22.269 00:00:10.323 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:01:58.888 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-10-19 17:02:22.632 00:00:10.362 TCP 23.104.0.1:38548 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:02:59.108 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 12 10369 1 2025-10-19 17:03:23.035 00:00:10.444 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 15 1926 1 2025-10-19 17:03:59.307 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34370 10 6452 1 2025-10-19 17:04:23.521 00:00:10.372 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:04:58.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:04:57.942 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:04:59.484 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-10-19 17:05:23.936 00:00:10.338 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:05:59.727 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-10-19 17:06:24.313 00:00:10.323 TCP 23.104.0.1:34216 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:02:44.678 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:02:44.676 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:06:59.900 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-10-19 17:07:24.678 00:00:10.371 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:08:00.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-10-19 17:08:25.114 00:00:10.366 TCP 23.104.0.1:60110 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:09:00.336 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40398 10 6452 1 2025-10-19 17:09:25.516 00:00:10.368 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:09:58.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:09:58.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:10:00.563 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-10-19 17:10:25.921 00:00:10.387 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:11:00.781 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34148 10 6452 1 2025-10-19 17:11:26.344 00:00:10.323 TCP 23.104.0.1:59520 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:12:00.949 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-10-19 17:12:26.710 00:00:10.364 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:08:44.680 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:08:44.679 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:13:01.140 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36264 10 6452 1 2025-10-19 17:13:27.112 00:00:10.367 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:14:01.354 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6452 1 2025-10-19 17:14:27.520 00:00:10.324 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:14:58.013 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:14:57.929 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:15:01.566 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34414 10 6452 1 2025-10-19 17:15:27.885 00:00:10.717 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:16:01.778 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-10-19 17:16:28.640 00:00:10.363 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:17:01.989 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-10-19 17:17:29.047 00:00:10.366 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:18:02.217 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:57030 10 6452 1 2025-10-19 17:18:29.453 00:00:10.334 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:14:44.682 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:14:44.679 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:19:02.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52164 10 6452 1 2025-10-19 17:19:29.826 00:00:10.366 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:19:58.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:19:58.331 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:20:02.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60650 10 6452 1 2025-10-19 17:20:30.228 00:00:10.367 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:21:02.815 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6452 1 2025-10-19 17:21:30.632 00:00:10.373 TCP 23.104.0.1:56932 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:22:03.069 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55768 10 6452 1 2025-10-19 17:22:31.047 00:00:10.365 TCP 23.104.0.1:45118 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:23:03.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50708 10 6452 1 2025-10-19 17:23:31.450 00:00:10.370 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:24:03.496 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-10-19 17:24:31.855 00:00:10.336 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:20:44.683 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:20:44.680 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:24:58.565 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:24:58.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:25:03.966 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-10-19 17:25:32.226 00:00:10.365 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:26:04.209 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-10-19 17:26:32.629 00:00:10.365 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:27:04.436 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-10-19 17:27:33.031 00:00:10.368 TCP 23.104.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:28:04.650 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50054 10 6452 1 2025-10-19 17:28:33.438 00:00:10.380 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:29:04.868 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51220 10 6452 1 2025-10-19 17:29:33.879 00:00:10.398 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:29:58.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:29:58.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:30:05.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-10-19 17:26:44.682 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:30:34.315 00:00:10.327 TCP 23.104.0.1:37540 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:26:44.684 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:31:05.324 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-10-19 17:31:34.680 00:00:10.368 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:32:05.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-10-19 17:32:35.108 00:00:10.369 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:33:05.761 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6452 1 2025-10-19 17:33:35.515 00:00:10.376 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:34:05.985 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-10-19 17:34:35.932 00:00:10.379 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:34:58.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:34:58.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:35:06.229 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-10-19 17:35:36.347 00:00:10.365 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:36:06.446 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32954 10 6452 1 2025-10-19 17:32:44.683 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:36:36.750 00:00:10.326 TCP 23.104.0.1:56310 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:32:44.685 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:37:06.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-10-19 17:37:37.117 00:00:10.933 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:38:06.882 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:45890 12 10375 1 2025-10-19 17:38:38.105 00:00:10.446 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 15 1926 1 2025-10-19 17:39:07.127 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38668 10 6452 1 2025-10-19 17:39:38.589 00:00:10.368 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:39:58.562 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:39:58.766 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:40:07.348 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40938 10 6452 1 2025-10-19 17:40:38.998 00:00:10.370 TCP 23.104.0.1:56426 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:41:07.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37534 10 6452 1 2025-10-19 17:41:39.404 00:00:10.326 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:42:07.780 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-10-19 17:42:39.767 00:00:10.375 TCP 23.104.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:38:44.688 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:38:44.685 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:43:07.986 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52618 10 6452 1 2025-10-19 17:43:40.185 00:00:10.367 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:44:08.225 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-10-19 17:44:40.594 00:00:10.365 TCP 23.104.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:44:58.560 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:44:58.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:45:08.465 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-10-19 17:45:41.002 00:00:10.385 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:46:08.688 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-10-19 17:46:41.439 00:00:10.324 TCP 23.104.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:47:08.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-10-19 17:47:41.802 00:00:10.369 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:48:09.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-10-19 17:44:44.687 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:44:44.690 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:48:42.207 00:00:10.367 TCP 23.104.0.1:41590 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:49:09.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-10-19 17:49:42.613 00:00:10.361 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:49:58.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:49:58.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:50:09.518 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-10-19 17:50:43.011 00:00:10.369 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:51:09.692 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 10 6452 1 2025-10-19 17:51:43.419 00:00:10.367 TCP 23.104.0.1:33362 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:52:09.865 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57424 10 6452 1 2025-10-19 17:52:43.824 00:00:10.360 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:53:10.069 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-10-19 17:53:44.225 00:00:10.369 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:54:10.280 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-10-19 17:50:44.688 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 17:50:44.690 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 17:54:44.628 00:00:10.367 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:54:58.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 17:54:58.691 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 17:55:10.502 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-10-19 17:55:45.029 00:00:10.804 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:56:10.727 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-10-19 17:56:45.869 00:00:10.382 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:57:10.950 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-10-19 17:57:46.289 00:00:10.333 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-10-19 17:58:11.190 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1093, avg pps: 0, avg bpp: 321 Time window: 2025-10-19 16:56:44 - 2025-10-19 17:58:21 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0022s Wall: 0.0022s flows/second: 72769.7 Runtime: 0.0023s