Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 06:58:44.854 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6452 1 2025-10-15 06:59:30.714 00:00:10.372 TCP 23.104.0.1:46836 -> 1.101.0.1:3000 11 1507 1 2025-10-15 06:59:45.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-10-15 07:00:31.128 00:00:10.371 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-10-15 06:56:42.515 00:05:02.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 06:56:42.513 00:05:02.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:00:45.252 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-10-15 07:01:31.550 00:00:10.370 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:01:45.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39260 10 6452 1 2025-10-15 07:02:31.953 00:00:10.372 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:02:50.318 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:02:50.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:02:45.672 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-10-15 07:03:32.362 00:00:10.366 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:03:45.888 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-10-15 07:04:32.765 00:00:10.382 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:04:46.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-10-15 07:05:33.182 00:00:10.360 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:05:46.320 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-10-15 07:02:42.514 00:05:02.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:06:33.580 00:00:10.397 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 15 1926 1 2025-10-15 07:02:42.517 00:05:02.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:06:46.533 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 12 10369 1 2025-10-15 07:07:34.024 00:00:10.684 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:07:50.357 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:07:50.294 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:07:46.786 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-10-15 07:08:34.746 00:00:10.365 TCP 23.104.0.1:47504 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:08:47.003 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-10-15 07:09:35.152 00:00:10.362 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:09:47.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 6452 1 2025-10-15 07:10:35.555 00:00:10.368 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:10:47.415 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39384 10 6452 1 2025-10-15 07:11:35.962 00:00:10.363 TCP 23.104.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:11:47.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-10-15 07:08:42.516 00:05:02.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:08:42.519 00:05:02.483 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:12:36.363 00:00:10.368 TCP 23.104.0.1:44230 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:12:50.448 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:12:50.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:12:47.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44962 10 6452 1 2025-10-15 07:13:36.771 00:00:10.371 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:13:48.022 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35890 10 6452 1 2025-10-15 07:14:37.180 00:00:10.364 TCP 23.104.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:14:48.195 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-10-15 07:15:37.586 00:00:10.365 TCP 23.104.0.1:55724 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:15:48.368 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53938 10 6452 1 2025-10-15 07:16:37.991 00:00:10.365 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:16:48.540 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-10-15 07:17:50.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:17:38.395 00:00:10.363 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:17:50.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:17:48.712 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35616 10 6452 1 2025-10-15 07:14:42.519 00:05:02.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:14:42.521 00:05:02.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:18:38.800 00:00:10.363 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:18:48.884 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-10-15 07:19:39.207 00:00:10.364 TCP 23.104.0.1:46644 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:19:49.109 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52254 10 6452 1 2025-10-15 07:20:39.612 00:00:10.362 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:20:49.329 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 10 6452 1 2025-10-15 07:21:40.024 00:00:10.360 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:21:49.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35346 10 6452 1 2025-10-15 07:22:50.827 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:22:50.729 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:22:40.427 00:00:10.370 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:22:49.719 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47330 10 6452 1 2025-10-15 07:23:40.837 00:00:10.378 TCP 23.104.0.1:38572 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:23:49.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-10-15 07:20:42.522 00:05:02.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:20:42.521 00:05:02.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:24:41.254 00:00:10.369 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:24:50.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-10-15 07:25:41.670 00:00:10.395 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:25:50.322 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33574 10 6452 1 2025-10-15 07:26:42.122 00:00:10.332 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:26:50.533 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-10-15 07:27:50.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:27:50.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:27:42.493 00:00:10.367 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:27:50.708 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59738 10 6452 1 2025-10-15 07:28:42.904 00:00:10.374 TCP 23.104.0.1:49416 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:28:50.915 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-10-15 07:29:43.320 00:00:10.363 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:29:51.128 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60036 10 6452 1 2025-10-15 07:26:42.520 00:05:02.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:26:42.523 00:05:02.521 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:30:43.722 00:00:10.333 TCP 23.104.0.1:56126 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:30:51.333 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-10-15 07:31:44.102 00:00:10.438 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 15 1926 1 2025-10-15 07:31:51.549 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57046 12 10369 1 2025-10-15 07:32:51.375 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:32:51.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:32:44.578 00:00:10.366 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:32:51.769 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38850 10 6452 1 2025-10-15 07:33:44.991 00:00:10.366 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:33:51.940 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-10-15 07:34:45.400 00:00:10.371 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:34:52.174 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-10-15 07:35:45.808 00:00:10.368 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:35:52.360 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-10-15 07:32:42.520 00:05:02.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:32:42.524 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:36:46.213 00:00:10.377 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:36:52.581 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-10-15 07:37:51.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:37:50.967 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:37:46.629 00:00:10.324 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:37:52.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-10-15 07:38:46.994 00:00:10.371 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:38:52.966 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 12 6556 1 2025-10-15 07:39:47.399 00:00:10.365 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:39:53.190 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-10-15 07:40:47.800 00:00:10.386 TCP 23.104.0.1:49496 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:40:53.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52148 10 6452 1 2025-10-15 07:41:48.205 00:00:10.367 TCP 23.104.0.1:37814 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:41:53.617 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36168 10 6452 1 2025-10-15 07:38:42.523 00:05:02.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:38:42.526 00:05:02.522 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:42:51.287 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:42:51.230 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:42:48.611 00:00:10.412 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:42:53.823 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33660 10 6452 1 2025-10-15 07:43:49.095 00:00:10.367 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:43:54.055 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-10-15 07:44:49.502 00:00:10.374 TCP 23.104.0.1:37020 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:44:54.269 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-10-15 07:45:49.915 00:00:10.364 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:45:54.480 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-10-15 07:46:50.316 00:00:10.365 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:46:54.688 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-10-15 07:47:51.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:47:51.366 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:47:50.724 00:00:10.344 TCP 23.104.0.1:41824 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:47:54.912 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59344 10 6452 1 2025-10-15 07:44:42.527 00:05:02.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:44:42.528 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:48:51.109 00:00:10.322 TCP 23.104.0.1:44982 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:48:55.127 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-10-15 07:49:51.470 00:00:10.320 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:49:55.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-10-15 07:50:51.836 00:00:10.384 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:50:55.551 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36992 10 6452 1 2025-10-15 07:51:55.763 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-10-15 07:51:52.261 00:00:10.426 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:52:51.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:52:51.425 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:52:55.976 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-10-15 07:52:52.725 00:00:10.371 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:53:56.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6452 1 2025-10-15 07:53:53.134 00:00:10.326 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:50:42.529 00:05:02.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 07:50:42.527 00:05:02.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 07:54:53.492 00:00:10.362 TCP 23.104.0.1:45722 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:54:56.429 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-10-15 07:55:53.890 00:00:10.451 TCP 23.104.0.1:49850 -> 1.101.0.1:3000 15 1926 1 2025-10-15 07:55:56.641 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 12 10369 1 2025-10-15 07:56:54.377 00:00:10.363 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:56:56.885 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42796 10 6452 1 2025-10-15 07:57:51.367 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 07:57:51.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 07:57:54.783 00:00:10.371 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-10-15 07:57:57.107 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 Summary: total flows: 163, total bytes: 509953, total packets: 1581, avg bps: 1107, avg pps: 0, avg bpp: 322 Time window: 2025-10-15 06:56:42 - 2025-10-15 07:58:07 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0021s flows/second: 77216.1 Runtime: 0.0021s