Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 18:59:24.820 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-10-19 18:59:28.115 00:00:10.364 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:00:00.175 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:00:00.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:00:25.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-10-19 19:00:28.517 00:00:10.364 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-10-19 18:56:44.715 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 18:56:44.712 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:01:25.295 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-10-19 19:01:28.919 00:00:10.380 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:02:25.501 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-10-19 19:02:29.339 00:00:10.371 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:03:25.720 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60220 10 6452 1 2025-10-19 19:03:29.747 00:00:10.370 TCP 23.104.0.1:32858 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:04:25.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57834 10 6452 1 2025-10-19 19:04:30.148 00:00:10.327 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:05:00.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:05:00.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:05:26.115 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-10-19 19:05:30.511 00:00:10.330 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:06:26.326 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57158 10 6452 1 2025-10-19 19:06:30.879 00:00:10.325 TCP 23.104.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:02:44.722 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:02:44.720 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:07:26.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-10-19 19:07:31.239 00:00:10.365 TCP 23.104.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:08:26.745 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-10-19 19:08:31.644 00:00:10.369 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:09:26.961 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 12 6556 1 2025-10-19 19:09:32.056 00:00:10.364 TCP 23.104.0.1:59822 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:10:00.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:10:00.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:10:27.194 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56724 10 6452 1 2025-10-19 19:10:32.455 00:00:10.366 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:11:27.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41772 10 6452 1 2025-10-19 19:11:32.856 00:00:10.383 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:12:27.587 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40846 10 6452 1 2025-10-19 19:12:33.273 00:00:10.365 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:08:44.719 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:08:44.722 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:13:27.800 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 10 6452 1 2025-10-19 19:13:33.684 00:00:10.385 TCP 23.104.0.1:41140 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:14:28.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-10-19 19:14:34.116 00:00:10.327 TCP 23.104.0.1:45764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:15:00.532 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:15:00.459 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:15:28.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-10-19 19:15:34.483 00:00:10.371 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:16:28.439 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-10-19 19:16:34.890 00:00:10.376 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:17:28.665 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:44926 10 6452 1 2025-10-19 19:17:35.307 00:00:10.673 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:18:28.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60944 10 6452 1 2025-10-19 19:18:36.012 00:00:10.364 TCP 23.104.0.1:52996 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:14:44.721 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:14:44.722 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:19:29.182 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42994 10 6452 1 2025-10-19 19:19:36.415 00:00:11.209 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:20:00.762 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:20:00.774 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:20:29.401 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-10-19 19:20:37.660 00:00:10.370 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:21:29.585 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-10-19 19:21:38.097 00:00:10.372 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:22:29.767 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-10-19 19:22:38.507 00:00:10.367 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:23:29.933 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40938 10 6452 1 2025-10-19 19:23:38.912 00:00:10.459 TCP 23.104.0.1:58908 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:24:30.173 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-10-19 19:20:44.721 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:24:39.401 00:00:10.363 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:20:44.723 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:25:00.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:25:00.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:25:30.397 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-10-19 19:25:39.804 00:00:10.368 TCP 23.104.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:26:30.633 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35382 10 6452 1 2025-10-19 19:26:40.206 00:00:10.362 TCP 23.104.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:27:30.856 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-10-19 19:27:40.611 00:00:10.365 TCP 23.104.0.1:44984 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:28:31.056 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42670 10 6452 1 2025-10-19 19:28:41.015 00:00:10.363 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:29:31.266 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-10-19 19:29:41.417 00:00:10.362 TCP 23.104.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:30:00.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:30:01.049 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:30:31.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47538 10 6452 1 2025-10-19 19:26:44.725 00:05:02.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:26:44.727 00:05:02.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:30:41.820 00:00:10.378 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:31:31.699 00:00:23.233 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-10-19 19:31:42.238 00:00:12.744 TCP 23.104.0.1:53660 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:32:45.025 00:00:10.367 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:32:44.977 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:53402 13 6608 1 2025-10-19 19:33:45.430 00:00:10.364 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:33:45.231 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34986 10 6452 1 2025-10-19 19:34:45.447 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-10-19 19:35:01.126 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:34:45.838 00:00:10.345 TCP 23.104.0.1:59090 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:35:01.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:35:45.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-10-19 19:35:46.221 00:00:10.373 TCP 23.104.0.1:57446 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:32:44.728 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:32:44.725 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:36:46.619 00:00:10.369 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:36:45.885 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-10-19 19:37:46.102 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2025-10-19 19:37:47.027 00:00:10.773 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:38:46.321 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54670 10 6452 1 2025-10-19 19:38:47.840 00:00:10.346 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:39:46.493 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6452 1 2025-10-19 19:40:01.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:39:48.226 00:00:10.326 TCP 23.104.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:40:01.646 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:40:46.711 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-10-19 19:40:48.588 00:00:10.365 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:41:46.921 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 10 6452 1 2025-10-19 19:41:48.995 00:00:10.324 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:38:44.729 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:38:44.726 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:42:49.355 00:00:10.364 TCP 23.104.0.1:56484 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:42:47.127 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-10-19 19:43:47.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-10-19 19:43:49.761 00:00:10.374 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:44:47.576 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 2025-10-19 19:45:01.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:45:01.063 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:44:50.167 00:00:10.327 TCP 23.104.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:45:47.788 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41206 10 6452 1 2025-10-19 19:45:50.528 00:00:10.324 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:46:50.894 00:00:10.377 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:46:47.997 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-10-19 19:47:51.310 00:00:10.366 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:47:48.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-10-19 19:44:44.728 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:44:44.731 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:48:48.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-10-19 19:48:51.713 00:00:10.376 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:49:48.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-10-19 19:50:01.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:50:01.179 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:49:52.129 00:00:10.361 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:50:48.815 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-10-19 19:50:52.528 00:00:10.374 TCP 23.104.0.1:48896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:51:49.014 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-10-19 19:51:52.929 00:00:10.385 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:52:49.236 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34522 10 6452 1 2025-10-19 19:52:53.353 00:00:10.365 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:53:49.458 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42838 10 6452 1 2025-10-19 19:53:53.757 00:00:10.379 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:50:44.732 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 19:50:44.729 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:55:01.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:55:01.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:54:49.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-10-19 19:54:54.172 00:00:10.329 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:55:49.881 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-10-19 19:55:54.531 00:00:10.365 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:56:50.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6452 1 2025-10-19 19:56:54.933 00:00:10.332 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:57:50.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-10-19 19:57:55.303 00:00:10.367 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490649, total packets: 1556, avg bps: 1066, avg pps: 0, avg bpp: 315 Time window: 2025-10-19 18:56:44 - 2025-10-19 19:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0069s User: 0.0026s Wall: 0.0023s flows/second: 69080.6 Runtime: 0.0024s