Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 23:58:41.995 00:00:10.939 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-10-04 23:58:46.823 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-10-04 23:59:42.973 00:00:10.363 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-10-04 23:59:47.067 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-10-04 23:56:37.728 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:00:43.374 00:00:10.370 TCP 23.104.0.1:57276 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:00:47.281 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-10-04 23:57:37.731 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:01:43.785 00:00:10.325 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:01:47.488 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-10-05 00:02:53.185 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:02:44.148 00:00:10.360 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:02:53.130 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:02:47.695 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36446 10 6452 1 2025-10-05 00:03:44.547 00:00:10.362 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:03:47.908 00:00:10.392 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-10-05 00:04:44.953 00:00:10.327 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:04:48.336 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-05 00:05:45.315 00:00:10.364 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:05:48.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34338 10 6452 1 2025-10-05 00:02:37.729 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:06:45.719 00:00:10.371 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:06:48.722 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49770 10 6452 1 2025-10-05 00:03:37.732 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:07:53.132 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:07:46.131 00:00:10.362 TCP 23.104.0.1:52028 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:07:53.300 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:07:48.937 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 10 6452 1 2025-10-05 00:08:46.536 00:00:10.321 TCP 23.104.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:08:49.178 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-10-05 00:09:49.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-10-05 00:09:46.900 00:00:10.367 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:10:47.309 00:00:10.366 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:10:49.559 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44726 10 6452 1 2025-10-05 00:11:49.735 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-10-05 00:11:47.711 00:00:10.415 TCP 23.104.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:08:37.729 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:12:53.378 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:12:53.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:12:48.167 00:00:10.363 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:12:49.916 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39378 10 6452 1 2025-10-05 00:09:37.732 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:13:48.565 00:00:10.328 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:13:50.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-10-05 00:14:50.308 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6452 1 2025-10-05 00:14:48.928 00:00:10.340 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:15:50.481 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-10-05 00:15:49.309 00:00:10.365 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:16:49.714 00:00:10.375 TCP 23.104.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:16:50.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34512 10 6452 1 2025-10-05 00:17:53.503 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:17:53.529 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:17:50.869 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33078 10 6452 1 2025-10-05 00:17:50.126 00:00:10.656 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:14:37.735 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:18:51.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59858 10 6452 1 2025-10-05 00:18:50.820 00:00:10.367 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:15:37.737 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:19:51.226 00:00:10.390 TCP 23.104.0.1:47092 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:19:51.333 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44182 10 6452 1 2025-10-05 00:20:51.577 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-10-05 00:20:51.657 00:00:10.368 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:21:52.094 00:00:10.331 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:21:51.806 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57854 10 6452 1 2025-10-05 00:22:54.043 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:22:53.426 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:22:52.457 00:00:10.321 TCP 23.104.0.1:36466 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:22:52.089 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-10-05 00:23:52.263 00:00:11.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34028 10 6452 1 2025-10-05 00:23:52.816 00:00:10.726 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:20:37.738 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:24:53.580 00:00:10.366 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:24:53.487 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-10-05 00:21:37.741 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:25:53.713 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-10-05 00:25:53.988 00:00:10.892 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:26:54.920 00:00:10.376 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:26:53.933 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-10-05 00:27:53.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:27:53.734 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:27:55.340 00:00:10.363 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:27:54.169 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-10-05 00:28:54.386 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36642 10 6452 1 2025-10-05 00:28:55.744 00:00:10.362 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:29:56.146 00:00:10.364 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:29:54.611 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58770 10 6452 1 2025-10-05 00:26:37.740 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:30:56.553 00:00:10.362 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:30:54.783 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-10-05 00:27:37.744 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:31:55.001 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44802 10 6452 1 2025-10-05 00:31:56.953 00:00:10.370 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:32:53.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:32:53.889 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:32:55.232 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-10-05 00:32:57.359 00:00:10.324 TCP 23.104.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:33:55.445 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-10-05 00:33:57.720 00:00:10.374 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:34:55.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-10-05 00:34:58.132 00:00:10.369 TCP 23.104.0.1:46614 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:35:55.880 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-10-05 00:35:58.541 00:00:10.364 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:32:37.740 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:36:56.083 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-10-05 00:36:58.945 00:00:10.369 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:33:37.743 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:37:53.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:37:53.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:37:56.250 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-10-05 00:37:59.353 00:00:10.366 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:38:56.425 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-10-05 00:38:59.752 00:00:10.371 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:39:56.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6452 1 2025-10-05 00:40:00.160 00:00:10.320 TCP 23.104.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:40:56.815 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 10 6452 1 2025-10-05 00:41:00.519 00:00:10.360 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:42:00.920 00:00:10.380 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:41:57.039 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:34092 10 6452 1 2025-10-05 00:38:37.741 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:42:54.737 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:42:54.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:43:01.336 00:00:10.368 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:42:57.312 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59200 10 6452 1 2025-10-05 00:39:37.744 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:43:57.540 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:52020 12 10375 1 2025-10-05 00:44:01.746 00:00:10.440 TCP 23.104.0.1:41294 -> 1.101.0.1:3000 15 1926 1 2025-10-05 00:44:57.790 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40774 10 6452 1 2025-10-05 00:45:02.220 00:00:10.362 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:45:58.034 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-10-05 00:46:02.620 00:00:14.729 TCP 23.104.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:46:58.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-10-05 00:47:07.387 00:00:10.361 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:47:54.026 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:47:54.142 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:47:58.749 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-10-05 00:48:07.787 00:00:10.368 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:44:37.741 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:48:58.973 00:00:16.570 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-10-05 00:49:08.194 00:00:10.364 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:45:37.745 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:50:05.593 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6452 1 2025-10-05 00:50:08.603 00:00:10.393 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:51:05.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-10-05 00:51:09.064 00:00:10.373 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:52:06.024 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-10-05 00:52:09.478 00:00:10.363 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:52:54.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:52:54.014 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:53:06.193 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-10-05 00:53:09.885 00:00:10.374 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:54:06.413 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-10-05 00:54:10.295 00:00:10.600 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:50:37.745 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 00:55:06.628 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 10 6452 1 2025-10-05 00:55:10.934 00:00:10.343 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:51:37.747 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 00:56:06.797 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 2025-10-05 00:56:11.311 00:00:10.366 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:57:07.008 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-10-05 00:57:11.714 00:00:10.327 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-10-05 00:57:54.328 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 00:57:54.395 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 00:58:07.184 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40668 10 6452 1 2025-10-05 00:58:12.099 00:00:10.364 TCP 23.104.0.1:34854 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1085, avg pps: 0, avg bpp: 318 Time window: 2025-10-04 23:56:37 - 2025-10-05 00:58:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0031s Wall: 0.0020s flows/second: 80189.5 Runtime: 0.0021s