Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 19:58:50.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6452 1 2025-10-19 19:58:55.708 00:00:10.326 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:00:01.362 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 19:59:50.741 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-10-19 20:00:01.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 19:59:56.098 00:00:10.368 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 19:56:44.730 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 19:56:44.733 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:00:50.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-10-19 20:00:56.507 00:00:10.324 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:01:51.181 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-10-19 20:01:56.873 00:00:10.382 TCP 23.104.0.1:38552 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:02:51.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-10-19 20:02:57.299 00:00:10.322 TCP 23.104.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:03:51.756 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 10 6452 1 2025-10-19 20:03:57.663 00:00:10.322 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:05:01.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:05:02.062 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:04:51.975 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-10-19 20:04:58.025 00:00:10.366 TCP 23.104.0.1:54558 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:05:52.217 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-10-19 20:05:58.428 00:00:10.329 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:02:44.731 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:02:44.734 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:06:52.443 00:00:11.385 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-10-19 20:06:58.790 00:00:10.362 TCP 23.104.0.1:41002 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:07:53.876 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:56612 12 10375 1 2025-10-19 20:07:59.193 00:00:10.438 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:08:54.121 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-10-19 20:08:59.672 00:00:10.327 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:10:01.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:10:01.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:09:54.339 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-10-19 20:10:00.043 00:00:10.363 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:10:54.524 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51776 10 6452 1 2025-10-19 20:11:00.446 00:00:10.364 TCP 23.104.0.1:39134 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:11:54.750 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-10-19 20:12:00.848 00:00:10.384 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:08:44.735 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:08:44.738 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:12:54.922 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 12 10369 1 2025-10-19 20:13:01.269 00:00:10.443 TCP 23.104.0.1:40202 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:13:55.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2025-10-19 20:14:01.751 00:00:10.385 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:15:01.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:15:01.691 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:14:55.380 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-10-19 20:15:02.174 00:00:10.373 TCP 23.104.0.1:34908 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:15:55.605 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-10-19 20:16:02.583 00:00:10.368 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:16:55.824 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-10-19 20:17:02.987 00:00:10.365 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:17:56.269 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-10-19 20:18:03.389 00:00:10.364 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:14:44.741 00:05:02.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:14:44.738 00:05:02.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:18:56.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59524 10 6452 1 2025-10-19 20:19:03.795 00:00:10.332 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:20:01.722 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:20:01.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:19:56.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-10-19 20:20:04.167 00:00:10.363 TCP 23.104.0.1:60718 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:20:56.870 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-10-19 20:21:04.569 00:00:10.324 TCP 23.104.0.1:33700 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:21:57.056 00:00:10.768 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-10-19 20:22:04.932 00:00:10.607 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:22:57.868 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43744 10 6452 1 2025-10-19 20:23:05.586 00:00:10.379 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:23:58.099 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-10-19 20:24:06.003 00:00:10.363 TCP 23.104.0.1:33208 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:20:44.738 00:05:02.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:20:44.740 00:05:02.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:25:02.667 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:25:02.695 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:24:58.313 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 10 6452 1 2025-10-19 20:25:06.404 00:00:10.366 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:25:58.544 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54140 10 6452 1 2025-10-19 20:26:06.822 00:00:10.365 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:26:58.758 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-10-19 20:27:07.225 00:00:10.365 TCP 23.104.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:27:58.980 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44438 10 6452 1 2025-10-19 20:28:07.630 00:00:10.371 TCP 23.104.0.1:34066 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:28:59.222 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6452 1 2025-10-19 20:29:08.050 00:00:10.366 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:30:01.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:30:02.235 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:29:59.447 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-10-19 20:30:08.455 00:00:10.372 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:26:44.740 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:26:44.743 00:05:02.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:30:59.672 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-10-19 20:31:08.866 00:00:10.337 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:31:59.892 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42406 10 6452 1 2025-10-19 20:32:09.250 00:00:10.363 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:33:00.126 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 12 10375 1 2025-10-19 20:33:09.654 00:00:10.444 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 15 1926 1 2025-10-19 20:34:00.326 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55058 10 6452 1 2025-10-19 20:34:10.143 00:00:10.373 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:35:02.268 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:35:02.164 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:35:00.538 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-10-19 20:35:10.553 00:00:10.360 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:36:00.748 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-10-19 20:36:10.958 00:00:10.323 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:32:44.741 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:32:44.743 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:37:00.926 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-10-19 20:37:11.322 00:00:10.359 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:38:01.167 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43724 10 6452 1 2025-10-19 20:38:11.720 00:00:10.383 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:39:01.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38490 10 6452 1 2025-10-19 20:39:12.141 00:00:10.367 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:40:02.270 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:40:02.400 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:40:01.549 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34604 10 6452 1 2025-10-19 20:40:12.550 00:00:10.326 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:41:01.726 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51318 10 6452 1 2025-10-19 20:41:12.914 00:00:10.321 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:42:01.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46738 10 6452 1 2025-10-19 20:42:13.279 00:00:10.367 TCP 23.104.0.1:53596 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:38:44.742 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:38:44.745 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:43:02.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-10-19 20:43:13.683 00:00:10.325 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:44:02.393 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-10-19 20:44:14.058 00:00:10.373 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:45:02.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:45:02.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:45:02.568 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47640 10 6452 1 2025-10-19 20:45:14.462 00:00:10.367 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:46:02.780 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-10-19 20:46:14.867 00:00:10.371 TCP 23.104.0.1:42952 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:47:02.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-10-19 20:47:15.273 00:00:10.323 TCP 23.104.0.1:52324 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:48:03.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-10-19 20:48:15.634 00:00:10.362 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:44:44.745 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:44:44.743 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:49:03.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-10-19 20:49:16.036 00:00:10.366 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:50:02.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:50:02.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:50:03.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58026 10 6452 1 2025-10-19 20:50:16.437 00:00:10.368 TCP 23.104.0.1:54366 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:51:03.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43818 10 6452 1 2025-10-19 20:51:16.845 00:00:10.337 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:52:04.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-10-19 20:52:17.225 00:00:10.470 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:53:04.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-10-19 20:53:17.742 00:00:10.367 TCP 23.104.0.1:52910 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:54:04.510 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42714 10 6452 1 2025-10-19 20:54:18.143 00:00:10.376 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:50:44.744 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 20:50:44.745 00:05:02.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:55:02.665 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 20:55:02.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 20:55:04.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47196 10 6452 1 2025-10-19 20:55:18.559 00:00:10.368 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:56:04.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-10-19 20:56:18.967 00:00:10.338 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:57:05.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53630 10 6452 1 2025-10-19 20:57:19.347 00:00:10.324 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:58:05.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46058 10 6452 1 2025-10-19 20:58:19.709 00:00:10.383 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511368, total packets: 1590, avg bps: 1104, avg pps: 0, avg bpp: 321 Time window: 2025-10-19 19:56:44 - 2025-10-19 20:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0010s Wall: 0.0023s flows/second: 71178.2 Runtime: 0.0023s