Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 23:58:54.767 00:00:10.370 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-10-01 23:58:52.515 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-10-01 23:59:55.174 00:00:10.376 TCP 23.104.0.1:60572 -> 1.101.0.1:3000 11 1507 1 2025-10-01 23:59:52.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38742 10 6452 1 2025-10-01 23:56:36.342 00:05:01.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:00:55.589 00:00:10.362 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:00:52.951 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-10-02 00:01:26.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:01:26.616 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 23:57:36.345 00:05:01.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:01:53.180 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-10-02 00:01:55.990 00:00:10.370 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:02:56.401 00:00:10.325 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:02:53.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-10-02 00:03:53.607 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-10-02 00:03:56.763 00:00:10.367 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:04:53.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-10-02 00:04:57.171 00:00:10.366 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:05:54.037 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-10-02 00:05:57.577 00:00:10.325 TCP 23.104.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:06:26.755 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:06:26.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:02:36.346 00:05:01.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:06:54.245 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-10-02 00:06:57.940 00:00:10.673 TCP 23.104.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:03:36.348 00:05:01.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:07:54.674 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-10-02 00:07:58.650 00:00:10.361 TCP 23.104.0.1:35556 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:08:54.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 10 6452 1 2025-10-02 00:08:59.060 00:00:10.446 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:09:55.114 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-10-02 00:09:59.545 00:00:10.376 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:10:55.285 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56248 10 6452 1 2025-10-02 00:10:59.957 00:00:10.686 TCP 23.104.0.1:43432 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:11:26.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:11:26.603 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:11:55.502 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-10-02 00:12:00.681 00:00:10.381 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:08:36.346 00:05:01.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:12:55.674 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59096 10 6452 1 2025-10-02 00:13:01.107 00:00:10.365 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:09:36.351 00:05:01.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:13:55.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40286 10 6452 1 2025-10-02 00:14:01.511 00:00:10.332 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:14:56.137 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-10-02 00:15:01.886 00:00:10.442 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:15:56.347 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-10-02 00:16:02.370 00:00:10.372 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:16:26.953 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:16:26.742 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:16:56.515 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-10-02 00:17:02.785 00:00:10.326 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:17:56.730 00:00:10.966 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-10-02 00:18:03.152 00:00:10.346 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:14:36.349 00:05:01.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:18:57.737 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59972 10 6452 1 2025-10-02 00:19:03.542 00:00:10.321 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:15:36.352 00:05:01.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:19:57.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-10-02 00:20:03.902 00:00:10.364 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:20:58.123 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-10-02 00:21:04.306 00:00:10.566 TCP 23.104.0.1:44514 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:21:27.005 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:21:27.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:21:58.293 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-10-02 00:22:04.910 00:00:10.366 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:22:58.460 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48166 10 6452 1 2025-10-02 00:23:05.319 00:00:10.372 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:23:58.632 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43538 10 6452 1 2025-10-02 00:24:05.734 00:00:10.366 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:20:36.351 00:05:01.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:24:58.869 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60070 10 6452 1 2025-10-02 00:25:06.140 00:00:10.359 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:21:36.354 00:05:01.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:25:59.103 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-10-02 00:26:06.542 00:00:10.367 TCP 23.104.0.1:56610 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:26:26.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:26:27.147 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:26:59.315 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45224 10 6452 1 2025-10-02 00:27:06.951 00:00:10.363 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:27:59.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 10 6452 1 2025-10-02 00:28:07.355 00:00:10.375 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:28:59.703 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-10-02 00:29:07.767 00:00:10.369 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:29:59.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-10-02 00:30:08.173 00:00:10.374 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:26:36.352 00:05:01.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:31:00.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42130 10 6452 1 2025-10-02 00:31:08.580 00:00:10.329 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:31:27.482 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:31:27.528 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:27:36.355 00:05:01.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:32:00.345 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-10-02 00:32:08.948 00:00:10.378 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:33:00.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-10-02 00:33:09.369 00:00:10.361 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:34:00.740 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6452 1 2025-10-02 00:34:09.772 00:00:10.367 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:35:00.969 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53376 10 6452 1 2025-10-02 00:35:10.177 00:00:10.366 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:36:01.161 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-10-02 00:36:10.578 00:00:10.324 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:36:26.876 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:36:27.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:32:36.355 00:05:01.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:37:01.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 10 6452 1 2025-10-02 00:37:10.939 00:00:10.329 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:33:36.357 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:38:01.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-10-02 00:38:11.309 00:00:10.364 TCP 23.104.0.1:35848 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:39:01.807 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-10-02 00:39:11.712 00:00:10.327 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:40:02.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6452 1 2025-10-02 00:40:12.106 00:00:10.324 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:41:02.249 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-10-02 00:41:12.467 00:00:10.363 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:41:27.378 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:41:27.373 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:42:02.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-10-02 00:42:12.871 00:00:10.368 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:38:36.355 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:43:02.635 00:00:10.630 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-10-02 00:43:13.296 00:00:10.362 TCP 23.104.0.1:51092 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:39:36.358 00:05:01.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:44:03.297 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 10 6452 1 2025-10-02 00:44:13.695 00:00:10.373 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:45:03.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-10-02 00:45:14.111 00:00:10.369 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:46:04.043 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44350 10 6452 1 2025-10-02 00:46:14.526 00:00:10.367 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:46:27.121 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:46:27.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:47:04.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-10-02 00:47:14.933 00:00:10.333 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:48:04.464 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33574 10 6452 1 2025-10-02 00:48:15.301 00:00:10.364 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:44:36.356 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:49:04.683 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-10-02 00:49:15.732 00:00:10.372 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:45:36.359 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:50:04.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6452 1 2025-10-02 00:50:16.144 00:00:10.324 TCP 23.104.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:51:05.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-10-02 00:51:16.506 00:00:10.364 TCP 23.104.0.1:59662 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:51:27.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:51:27.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:52:05.318 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49492 10 6452 1 2025-10-02 00:52:16.907 00:00:10.364 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:53:05.531 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-10-02 00:53:17.310 00:00:10.368 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:54:05.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-10-02 00:54:17.720 00:00:10.606 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:50:36.357 00:05:01.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 00:55:05.956 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-10-02 00:55:18.365 00:00:10.362 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:51:36.358 00:05:01.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 00:56:06.184 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60318 10 6452 1 2025-10-02 00:56:18.768 00:00:10.370 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:56:27.821 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 00:56:27.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 00:57:06.356 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-10-02 00:57:19.173 00:00:10.366 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-10-02 00:58:06.566 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-10-02 00:58:19.577 00:00:10.321 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1073, avg pps: 0, avg bpp: 317 Time window: 2025-10-01 23:56:36 - 2025-10-02 00:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0061s User: 0.0000s Wall: 0.0026s flows/second: 64136.7 Runtime: 0.0026s