Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 23:59:03.252 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-10-05 23:59:23.594 00:00:10.373 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:00:03.419 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-10-06 00:00:24.026 00:00:10.366 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-10-05 23:56:38.260 00:05:01.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:01:03.633 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56056 10 6452 1 2025-10-06 00:01:24.432 00:00:10.345 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-10-05 23:57:38.263 00:05:01.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:02:03.855 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53028 10 6452 1 2025-10-06 00:02:24.839 00:00:10.348 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:03:21.927 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:03:04.045 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-10-06 00:03:21.870 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:03:25.232 00:00:10.727 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:04:04.254 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 12 10369 1 2025-10-06 00:04:26.008 00:00:10.405 TCP 23.104.0.1:47866 -> 1.101.0.1:3000 15 1926 1 2025-10-06 00:05:04.494 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37328 10 6452 1 2025-10-06 00:05:26.447 00:00:11.013 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:06:04.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41630 10 6452 1 2025-10-06 00:02:38.260 00:05:01.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:06:27.509 00:00:11.304 TCP 23.104.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:07:04.926 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-10-06 00:07:28.856 00:00:10.382 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:03:38.264 00:05:01.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:08:05.154 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60618 10 6452 1 2025-10-06 00:08:22.161 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:08:22.044 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:08:29.275 00:00:10.371 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:09:05.380 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43170 10 6452 1 2025-10-06 00:09:29.683 00:00:10.368 TCP 23.104.0.1:32812 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:10:05.564 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54032 10 6452 1 2025-10-06 00:10:30.106 00:00:10.362 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:11:05.774 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37152 10 6452 1 2025-10-06 00:11:30.507 00:00:10.366 TCP 23.104.0.1:51154 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:12:05.988 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-10-06 00:08:38.264 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:12:30.911 00:00:10.369 TCP 23.104.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:13:06.232 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44972 10 6452 1 2025-10-06 00:13:22.383 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:13:22.066 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:09:38.268 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:13:31.320 00:00:10.363 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:14:06.439 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-10-06 00:14:31.726 00:00:10.368 TCP 23.104.0.1:48884 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:15:06.606 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-10-06 00:15:32.134 00:00:10.364 TCP 23.104.0.1:41184 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:16:06.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-10-06 00:16:32.541 00:00:10.572 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:17:06.984 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43454 10 6452 1 2025-10-06 00:17:33.151 00:00:10.325 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:18:07.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-10-06 00:18:22.653 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:18:22.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:14:38.268 00:05:01.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:18:33.516 00:00:10.367 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:19:07.435 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:40382 10 6452 1 2025-10-06 00:15:38.270 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:19:33.928 00:00:10.385 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:20:08.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-10-06 00:20:34.350 00:00:10.327 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:21:08.440 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-10-06 00:21:34.714 00:00:10.377 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:22:08.614 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-10-06 00:22:35.130 00:00:10.323 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:23:08.821 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42538 10 6452 1 2025-10-06 00:23:22.294 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:23:22.261 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:23:35.487 00:00:10.365 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:24:09.060 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-10-06 00:20:38.268 00:05:01.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:24:35.895 00:00:10.383 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:25:09.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-10-06 00:21:38.271 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:25:36.313 00:00:10.372 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:26:09.456 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51762 10 6452 1 2025-10-06 00:26:36.730 00:00:10.366 TCP 23.104.0.1:49964 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:27:09.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6452 1 2025-10-06 00:27:37.135 00:00:10.367 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:28:09.844 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-10-06 00:28:22.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:28:22.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:28:37.538 00:00:10.364 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:29:10.080 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-10-06 00:29:37.940 00:00:10.370 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:30:10.303 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-10-06 00:26:38.270 00:05:01.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:30:38.349 00:00:10.386 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:31:10.476 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-10-06 00:27:38.274 00:05:01.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:31:38.758 00:00:10.383 TCP 23.104.0.1:44812 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:32:10.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-10-06 00:32:39.183 00:00:10.381 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:33:10.905 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42564 10 6452 1 2025-10-06 00:33:22.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:33:22.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:33:39.622 00:00:10.326 TCP 23.104.0.1:53016 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:34:11.124 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-06 00:34:39.985 00:00:10.323 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:35:11.302 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-10-06 00:35:40.350 00:00:10.363 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:36:11.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48490 10 6452 1 2025-10-06 00:32:38.273 00:05:01.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:36:40.749 00:00:10.429 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:37:11.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-10-06 00:33:38.276 00:05:01.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:37:41.215 00:00:10.330 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:38:22.744 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:38:11.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-10-06 00:38:22.616 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:38:41.592 00:00:10.366 TCP 23.104.0.1:39962 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:39:12.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-10-06 00:39:41.995 00:00:10.364 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:40:12.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-10-06 00:40:42.402 00:00:10.366 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:41:12.550 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50038 10 6452 1 2025-10-06 00:41:42.809 00:00:10.367 TCP 23.104.0.1:35348 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:42:12.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35932 10 6452 1 2025-10-06 00:38:38.274 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:42:43.214 00:00:10.363 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:43:22.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:43:12.946 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-10-06 00:43:22.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:39:38.277 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:43:43.622 00:00:10.335 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:44:13.186 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46532 10 6452 1 2025-10-06 00:44:43.996 00:00:10.368 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:45:13.362 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-10-06 00:45:44.399 00:00:10.368 TCP 23.104.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:46:13.586 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-10-06 00:46:44.810 00:00:10.340 TCP 23.104.0.1:57184 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:47:13.760 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-10-06 00:47:45.187 00:00:10.442 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:48:13.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-10-06 00:48:22.857 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:48:22.566 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:44:38.275 00:05:01.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:48:45.670 00:00:10.361 TCP 23.104.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:49:14.172 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41562 10 6452 1 2025-10-06 00:45:38.277 00:05:01.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:49:46.102 00:00:10.369 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:50:14.347 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56446 10 6452 1 2025-10-06 00:50:46.508 00:00:10.368 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:51:14.554 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-10-06 00:51:46.919 00:00:10.384 TCP 23.104.0.1:49898 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:52:14.770 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6452 1 2025-10-06 00:52:47.340 00:00:10.371 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:53:22.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:53:22.930 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:53:15.138 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33648 10 6452 1 2025-10-06 00:53:47.748 00:00:10.400 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:54:15.350 00:00:10.824 TCP 1.101.0.1:3000 -> 22.102.0.1:57474 10 6452 1 2025-10-06 00:50:38.278 00:05:01.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 00:54:48.185 00:00:10.367 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:55:16.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-10-06 00:51:38.280 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 00:55:48.589 00:00:10.376 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 12 1559 1 2025-10-06 00:56:16.426 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-10-06 00:56:49.007 00:00:10.359 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:57:16.602 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:57192 10 6452 1 2025-10-06 00:57:49.410 00:00:10.951 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-10-06 00:58:23.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 00:58:23.160 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 00:58:16.972 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6452 1 Summary: total flows: 163, total bytes: 501229, total packets: 1568, avg bps: 1081, avg pps: 0, avg bpp: 319 Time window: 2025-10-05 23:56:38 - 2025-10-06 00:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0027s Wall: 0.0024s flows/second: 67191.3 Runtime: 0.0024s