Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 05:59:38.969 00:00:14.048 TCP 23.104.0.1:38870 -> 1.101.0.1:3000 11 1507 1 2025-10-16 05:59:38.570 00:00:14.290 TCP 1.101.0.1:3000 -> 22.102.0.1:47050 10 6452 1 2025-10-16 05:56:42.953 00:05:02.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 05:56:42.952 00:05:02.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:00:42.900 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-10-16 06:00:43.060 00:00:10.368 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:01:43.462 00:00:10.360 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:01:43.119 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-10-16 06:02:43.858 00:00:10.377 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:02:43.338 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-10-16 06:03:18.248 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:03:17.911 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:03:43.563 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-10-16 06:03:44.276 00:00:10.364 TCP 23.104.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:04:44.676 00:00:10.322 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:04:43.787 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-10-16 06:05:45.043 00:00:10.992 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:05:44.007 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-10-16 06:02:42.951 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:02:42.955 00:05:02.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:06:46.101 00:00:10.436 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 15 1926 1 2025-10-16 06:06:44.191 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57638 12 10375 1 2025-10-16 06:07:44.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6452 1 2025-10-16 06:07:46.577 00:00:10.366 TCP 23.104.0.1:57184 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:08:18.108 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:08:18.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:08:44.647 00:00:10.846 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-10-16 06:08:46.979 00:00:10.957 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:09:45.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-10-16 06:09:47.972 00:00:10.387 TCP 23.104.0.1:40960 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:10:45.748 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-10-16 06:10:48.393 00:00:10.322 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:11:45.968 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6452 1 2025-10-16 06:11:48.757 00:00:10.847 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:08:42.954 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:08:42.957 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:12:46.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-10-16 06:12:49.650 00:00:10.369 TCP 23.104.0.1:33600 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:13:18.378 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:13:18.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:13:46.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-10-16 06:13:50.055 00:00:10.371 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:14:46.615 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-10-16 06:14:50.466 00:00:10.361 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:15:50.867 00:00:10.370 TCP 23.104.0.1:43714 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:15:46.831 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52900 10 6452 1 2025-10-16 06:16:51.275 00:00:10.365 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:16:47.064 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52448 10 6452 1 2025-10-16 06:17:47.279 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-10-16 06:17:51.677 00:00:10.368 TCP 23.104.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:18:18.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:18:18.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:14:42.955 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:14:42.958 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:18:47.488 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-10-16 06:18:52.102 00:00:11.134 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:19:47.701 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-10-16 06:19:53.269 00:00:10.364 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:20:47.917 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 2025-10-16 06:20:53.673 00:00:10.370 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:21:48.148 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-10-16 06:21:54.107 00:00:10.363 TCP 23.104.0.1:37376 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:22:48.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-10-16 06:22:54.516 00:00:10.362 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:23:18.875 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:23:18.568 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:23:48.548 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-10-16 06:23:54.920 00:00:10.365 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:20:42.955 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:20:42.958 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:24:48.753 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-10-16 06:24:55.324 00:00:10.365 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:25:48.975 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-10-16 06:25:55.729 00:00:10.323 TCP 23.104.0.1:33518 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:26:49.222 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-10-16 06:26:56.108 00:00:10.364 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:27:49.440 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-10-16 06:27:56.512 00:00:10.366 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:28:18.503 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:28:18.583 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:28:49.663 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55192 10 6452 1 2025-10-16 06:28:56.922 00:00:10.397 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:29:49.892 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-10-16 06:29:57.369 00:00:10.372 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:26:42.959 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:26:42.957 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:30:50.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36634 10 6452 1 2025-10-16 06:30:57.801 00:00:10.341 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:31:50.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60254 10 6452 1 2025-10-16 06:31:58.176 00:00:10.367 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:32:50.518 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-10-16 06:32:58.580 00:00:10.363 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:33:18.548 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:33:18.812 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:33:50.690 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-10-16 06:33:58.986 00:00:10.372 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:34:50.906 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-10-16 06:34:59.393 00:00:10.623 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:35:51.134 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 10 6452 1 2025-10-16 06:36:00.057 00:00:10.360 TCP 23.104.0.1:36476 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:32:42.961 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:32:42.958 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:36:51.340 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 12 10375 1 2025-10-16 06:37:00.457 00:00:10.438 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 15 1926 1 2025-10-16 06:37:51.596 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-16 06:38:00.929 00:00:10.386 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:38:18.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:38:18.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:38:51.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-10-16 06:39:01.351 00:00:10.369 TCP 23.104.0.1:33540 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:39:52.033 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-10-16 06:40:01.759 00:00:10.330 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:40:52.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-10-16 06:41:02.126 00:00:10.369 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:41:52.533 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-10-16 06:42:02.532 00:00:10.360 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:38:42.960 00:05:02.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:38:42.961 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:42:52.708 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6452 1 2025-10-16 06:43:02.935 00:00:10.385 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:43:18.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:43:18.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:43:52.921 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-10-16 06:44:03.359 00:00:10.366 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:44:53.130 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-10-16 06:45:03.763 00:00:10.372 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:45:53.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53656 10 6452 1 2025-10-16 06:46:04.174 00:00:10.368 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:46:53.514 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41716 10 6452 1 2025-10-16 06:47:04.584 00:00:10.374 TCP 23.104.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:47:53.737 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-10-16 06:48:04.996 00:00:10.364 TCP 23.104.0.1:50246 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:48:19.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:48:18.795 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:44:42.963 00:05:02.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:44:42.960 00:05:02.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:48:53.930 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52580 10 6452 1 2025-10-16 06:49:05.400 00:00:10.363 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:49:54.157 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-10-16 06:50:05.801 00:00:10.367 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:50:54.370 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-10-16 06:51:06.204 00:00:10.367 TCP 23.104.0.1:57602 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:51:54.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-10-16 06:52:06.607 00:00:10.328 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:52:54.759 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-10-16 06:53:19.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:53:06.971 00:00:10.327 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:53:19.272 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 06:53:54.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-10-16 06:54:07.337 00:00:10.322 TCP 23.104.0.1:35290 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:50:42.963 00:05:02.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 06:50:42.965 00:05:02.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 06:54:55.221 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59900 10 6452 1 2025-10-16 06:55:07.697 00:00:10.365 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:55:55.430 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-10-16 06:56:08.109 00:00:10.320 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:56:55.643 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33854 10 6452 1 2025-10-16 06:57:08.470 00:00:10.329 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:57:55.853 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41962 10 6452 1 2025-10-16 06:58:19.312 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 06:58:08.840 00:00:10.387 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-10-16 06:58:19.132 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 499073, total packets: 1563, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-10-16 05:56:42 - 2025-10-16 06:58:19 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0020s Wall: 0.0026s flows/second: 62263.1 Runtime: 0.0026s