Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 01:59:34.665 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52980 10 6452 1 2025-10-16 01:59:34.570 00:00:10.370 TCP 23.104.0.1:42776 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:00:34.976 00:00:10.364 TCP 23.104.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:56:42.876 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:56:42.875 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:00:34.886 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-10-16 02:01:35.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50440 10 6452 1 2025-10-16 02:01:35.381 00:00:10.367 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:02:35.778 00:00:10.364 TCP 23.104.0.1:60544 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:02:35.322 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-10-16 02:03:13.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:03:13.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:03:36.181 00:00:10.376 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:03:35.499 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-10-16 02:04:36.603 00:00:10.361 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:04:35.716 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-10-16 02:05:35.933 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-10-16 02:05:37.003 00:00:10.360 TCP 23.104.0.1:54190 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:02:42.877 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:06:36.171 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-10-16 02:02:42.875 00:05:02.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:06:37.404 00:00:10.328 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:07:36.383 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55592 10 6452 1 2025-10-16 02:07:37.774 00:00:10.371 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:08:14.060 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:08:13.328 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:08:36.591 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-10-16 02:08:38.186 00:00:10.374 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:09:36.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 10 6452 1 2025-10-16 02:09:38.590 00:00:10.365 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:10:38.995 00:00:10.337 TCP 23.104.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:10:37.030 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55390 10 6452 1 2025-10-16 02:11:39.375 00:00:10.328 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:11:37.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-10-16 02:08:42.878 00:05:02.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:12:39.742 00:00:10.325 TCP 23.104.0.1:37536 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:08:42.877 00:05:02.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:12:37.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46222 10 6452 1 2025-10-16 02:13:13.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:13:13.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:13:37.675 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51208 10 6452 1 2025-10-16 02:13:40.108 00:00:10.363 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:40.508 00:00:10.364 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:14:37.891 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39188 10 6452 1 2025-10-16 02:15:38.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49702 10 6452 1 2025-10-16 02:15:40.912 00:00:10.368 TCP 23.104.0.1:39462 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:16:41.315 00:00:10.368 TCP 23.104.0.1:54400 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:16:38.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-10-16 02:17:38.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-10-16 02:17:41.718 00:00:10.551 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:18:13.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:18:13.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:14:42.883 00:05:02.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:14:42.880 00:05:02.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:18:38.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44094 10 6452 1 2025-10-16 02:18:42.309 00:00:10.418 TCP 23.104.0.1:52788 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:19:38.936 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-10-16 02:19:42.767 00:00:10.323 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:20:39.168 00:00:10.390 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-10-16 02:20:43.131 00:00:10.363 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:21:39.601 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58130 10 6452 1 2025-10-16 02:21:43.528 00:00:10.365 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:22:39.768 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-10-16 02:22:43.931 00:00:10.386 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:23:13.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:23:13.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:23:39.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54240 10 6452 1 2025-10-16 02:23:44.349 00:00:10.363 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:20:42.884 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:20:42.882 00:05:02.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:24:40.224 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42384 10 6452 1 2025-10-16 02:24:44.750 00:00:10.378 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:25:40.398 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-10-16 02:25:45.167 00:00:10.365 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:26:40.620 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6452 1 2025-10-16 02:26:45.565 00:00:10.366 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:27:40.846 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32938 10 6452 1 2025-10-16 02:27:45.965 00:00:10.380 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:28:14.108 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:28:13.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:28:41.074 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-10-16 02:28:46.379 00:00:10.366 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:29:41.298 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-10-16 02:29:46.782 00:00:10.369 TCP 23.104.0.1:60836 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:26:42.883 00:05:02.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:26:42.886 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:30:41.474 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-10-16 02:30:47.185 00:00:10.371 TCP 23.104.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:31:41.691 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-10-16 02:31:47.586 00:00:10.368 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:32:41.905 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-10-16 02:32:47.987 00:00:10.368 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:33:13.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:33:14.108 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:33:42.115 00:00:10.701 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-10-16 02:33:48.398 00:00:10.365 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:34:42.854 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-10-16 02:34:48.797 00:00:10.377 TCP 23.104.0.1:41566 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:35:43.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39170 10 6452 1 2025-10-16 02:35:49.213 00:00:10.364 TCP 23.104.0.1:54738 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:32:42.888 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:32:42.885 00:05:02.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:36:43.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-10-16 02:36:49.615 00:00:10.368 TCP 23.104.0.1:33060 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:37:43.499 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 11 6492 1 2025-10-16 02:37:50.022 00:00:10.480 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:14.143 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:38:13.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:38:43.718 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55740 10 6452 1 2025-10-16 02:38:50.545 00:00:10.323 TCP 23.104.0.1:50838 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:39:43.940 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49734 10 6452 1 2025-10-16 02:39:50.910 00:00:10.359 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:40:44.183 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-10-16 02:40:51.307 00:00:10.365 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:41:44.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45808 10 6452 1 2025-10-16 02:41:51.713 00:00:10.375 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:38:42.890 00:05:02.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:38:42.888 00:05:02.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:42:44.568 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-10-16 02:42:52.137 00:00:10.367 TCP 23.104.0.1:48758 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:43:13.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:43:14.051 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:43:44.777 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-10-16 02:43:52.538 00:00:10.368 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:44:44.991 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52922 10 6452 1 2025-10-16 02:44:52.946 00:00:10.374 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:45:45.217 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-10-16 02:45:53.354 00:00:10.361 TCP 23.104.0.1:35378 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:46:45.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-10-16 02:46:53.756 00:00:10.335 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:47:45.645 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-10-16 02:47:54.129 00:00:10.362 TCP 23.104.0.1:58162 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:48:14.412 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:48:14.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:44:42.895 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:44:42.892 00:05:02.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:48:45.867 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-10-16 02:48:54.532 00:00:10.377 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:49:46.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40856 10 6452 1 2025-10-16 02:49:54.945 00:00:20.429 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:50:46.304 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-10-16 02:51:05.413 00:00:10.372 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:51:46.487 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49390 10 6452 1 2025-10-16 02:52:05.825 00:00:10.352 TCP 23.104.0.1:41262 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:52:46.668 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36152 10 6452 1 2025-10-16 02:53:14.587 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:53:06.194 00:00:10.365 TCP 23.104.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:53:14.314 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:53:46.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-10-16 02:54:06.601 00:00:10.383 TCP 23.104.0.1:51084 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:50:42.896 00:05:02.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:50:42.894 00:05:02.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 02:54:47.104 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-10-16 02:55:07.015 00:00:10.362 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:55:47.333 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-10-16 02:56:07.415 00:00:10.361 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:47.524 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-10-16 02:57:07.817 00:00:10.362 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:57:47.761 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-10-16 02:58:14.368 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 02:58:14.435 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 02:58:08.215 00:00:10.384 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490429, total packets: 1552, avg bps: 1061, avg pps: 0, avg bpp: 315 Time window: 2025-10-16 01:56:42 - 2025-10-16 02:58:18 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0040s User: 0.0010s Wall: 0.0021s flows/second: 77073.2 Runtime: 0.0022s