Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 17:59:18.843 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-10-20 17:59:30.355 00:00:10.369 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:00:27.901 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:00:19.027 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42416 10 6452 1 2025-10-20 18:00:27.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:00:30.762 00:00:10.330 TCP 23.104.0.1:59206 -> 1.101.0.1:3000 11 1507 1 2025-10-20 17:55:47.819 00:05:57.329 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 17:56:45.147 00:05:02.678 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:01:19.238 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:36338 10 6452 1 2025-10-20 18:01:31.131 00:00:10.323 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:02:19.593 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-10-20 18:02:31.498 00:00:10.364 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:03:19.819 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54620 10 6452 1 2025-10-20 18:03:31.898 00:00:10.370 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:04:20.033 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55844 10 6452 1 2025-10-20 18:04:32.301 00:00:10.362 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:05:28.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:05:20.253 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-10-20 18:05:28.038 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:05:32.699 00:00:10.365 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:06:20.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-10-20 18:06:33.105 00:00:10.861 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:01:47.821 00:05:57.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:02:45.153 00:05:02.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:07:20.741 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-10-20 18:07:34.003 00:00:10.366 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:08:20.981 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6452 1 2025-10-20 18:08:34.406 00:00:10.362 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:09:21.164 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52896 10 6452 1 2025-10-20 18:09:34.809 00:00:10.366 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:10:21.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-10-20 18:10:28.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:10:28.582 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:10:35.214 00:00:10.369 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:11:21.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-10-20 18:11:35.616 00:00:11.239 TCP 23.104.0.1:45904 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:12:21.811 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-10-20 18:07:47.843 00:05:57.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:08:45.157 00:05:02.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:12:36.894 00:00:10.365 TCP 23.104.0.1:44026 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:13:22.038 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44556 10 6452 1 2025-10-20 18:13:37.295 00:00:10.323 TCP 23.104.0.1:36446 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:14:22.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44914 10 6452 1 2025-10-20 18:14:37.655 00:00:10.324 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:15:28.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:15:28.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:15:22.435 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6452 1 2025-10-20 18:15:38.017 00:00:10.367 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:16:22.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-10-20 18:16:38.422 00:00:10.364 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:17:22.818 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:34640 10 6452 1 2025-10-20 18:17:38.826 00:00:10.399 TCP 23.104.0.1:53804 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:18:23.100 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39116 10 6452 1 2025-10-20 18:13:47.844 00:05:57.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:14:45.159 00:05:02.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:18:39.269 00:00:10.362 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:19:23.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-10-20 18:19:39.670 00:00:10.324 TCP 23.104.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:20:28.529 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:20:28.458 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:20:23.542 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-10-20 18:20:40.031 00:00:10.422 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:21:23.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-10-20 18:21:40.512 00:00:10.364 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:22:23.963 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 12 6556 1 2025-10-20 18:22:40.923 00:00:10.383 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:23:24.193 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-10-20 18:23:41.342 00:00:10.372 TCP 23.104.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:24:24.403 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46134 10 6452 1 2025-10-20 18:19:47.848 00:05:57.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:20:45.160 00:05:02.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:24:41.755 00:00:10.383 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:25:28.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:25:28.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:25:24.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-10-20 18:25:42.174 00:00:10.433 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:26:24.838 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-10-20 18:26:42.616 00:00:10.369 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:27:25.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43366 10 6452 1 2025-10-20 18:27:43.019 00:00:10.361 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:28:25.308 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6452 1 2025-10-20 18:28:43.418 00:00:10.364 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:29:25.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-10-20 18:29:43.826 00:00:10.373 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:30:28.797 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:30:29.009 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:30:25.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-10-20 18:25:47.848 00:05:57.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:26:45.163 00:05:02.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:30:44.240 00:00:10.369 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:31:25.907 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57376 10 6452 1 2025-10-20 18:31:44.644 00:00:10.322 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:32:26.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-10-20 18:32:45.009 00:00:10.362 TCP 23.104.0.1:51394 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:33:26.346 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:47184 10 6452 1 2025-10-20 18:33:45.412 00:00:10.364 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:34:26.652 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-10-20 18:34:45.813 00:00:10.371 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:35:28.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:35:28.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:35:26.872 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-10-20 18:35:46.226 00:00:10.364 TCP 23.104.0.1:33940 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:36:27.092 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-10-20 18:31:47.858 00:05:57.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:32:45.164 00:05:02.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:36:46.630 00:00:10.323 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:37:27.305 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-10-20 18:37:46.994 00:00:10.367 TCP 23.104.0.1:45316 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:38:27.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 10 6452 1 2025-10-20 18:38:47.401 00:00:10.361 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:39:27.740 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-10-20 18:39:47.810 00:00:10.366 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:40:28.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:40:28.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:40:27.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6452 1 2025-10-20 18:40:48.212 00:00:10.321 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:41:28.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-10-20 18:41:48.573 00:00:10.324 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:42:28.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6452 1 2025-10-20 18:37:47.851 00:05:57.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:38:45.166 00:05:02.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:42:48.935 00:00:10.790 TCP 23.104.0.1:33480 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:43:28.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-10-20 18:43:49.764 00:00:10.375 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:44:28.821 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-10-20 18:44:50.173 00:00:10.369 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:45:28.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:45:28.975 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:45:29.046 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-10-20 18:45:50.576 00:00:10.368 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:46:29.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-10-20 18:46:50.978 00:00:10.366 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:47:29.444 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54248 10 6452 1 2025-10-20 18:47:51.393 00:00:10.374 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:48:29.625 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51500 12 10375 1 2025-10-20 18:43:47.853 00:05:57.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:44:45.168 00:05:02.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:48:51.801 00:00:10.440 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 15 1926 1 2025-10-20 18:49:29.863 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-10-20 18:49:52.284 00:00:10.693 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:50:28.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:50:28.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:50:30.057 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40410 10 6452 1 2025-10-20 18:50:53.017 00:00:10.324 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:51:30.271 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-10-20 18:51:53.385 00:00:10.377 TCP 23.104.0.1:55242 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:52:30.449 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33206 10 6452 1 2025-10-20 18:52:53.809 00:00:10.376 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:53:30.674 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57068 10 6452 1 2025-10-20 18:53:54.230 00:00:10.364 TCP 23.104.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:54:30.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-10-20 18:49:47.857 00:05:57.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 18:50:45.168 00:05:02.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 18:54:54.638 00:00:10.374 TCP 23.104.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:55:29.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 18:55:28.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 18:55:31.112 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-10-20 18:55:55.056 00:00:10.363 TCP 23.104.0.1:39946 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:56:31.337 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-10-20 18:56:55.458 00:00:10.360 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:57:31.559 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-10-20 18:57:55.865 00:00:10.381 TCP 23.104.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-10-20 18:58:31.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1062, avg pps: 0, avg bpp: 319 Time window: 2025-10-20 17:55:47 - 2025-10-20 18:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0027s flows/second: 59295.0 Runtime: 0.0028s