Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 23:59:04.644 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-10-06 23:59:25.507 00:00:10.474 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 17 2241 1 2025-10-07 00:00:04.854 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 14 14298 1 2025-10-07 00:00:26.019 00:00:10.367 TCP 23.104.0.1:45960 -> 1.101.0.1:3000 11 1507 1 2025-10-06 23:56:38.751 00:05:01.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:01:05.147 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60002 10 6452 1 2025-10-07 00:01:26.423 00:00:10.363 TCP 23.104.0.1:49472 -> 1.101.0.1:3000 11 1507 1 2025-10-06 23:57:38.755 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:02:05.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-10-07 00:02:26.823 00:00:10.370 TCP 23.104.0.1:50974 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:03:05.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-10-07 00:03:27.225 00:00:10.334 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:03:51.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:03:51.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:04:05.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-10-07 00:04:27.588 00:00:10.365 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:05:06.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-10-07 00:05:27.990 00:00:10.365 TCP 23.104.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:06:06.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-10-07 00:06:28.394 00:00:10.362 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:02:38.753 00:05:01.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:07:06.427 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-10-07 00:07:28.790 00:00:10.364 TCP 23.104.0.1:50986 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:03:38.755 00:05:01.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:08:06.642 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39530 10 6452 1 2025-10-07 00:08:29.197 00:00:10.492 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:08:51.105 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:08:51.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:09:06.867 00:00:10.696 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-10-07 00:09:29.734 00:00:10.368 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:10:07.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-10-07 00:10:30.144 00:00:10.329 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:11:07.810 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-10-07 00:11:30.509 00:00:10.369 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:12:07.989 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:56798 10 6452 1 2025-10-07 00:12:30.911 00:00:10.396 TCP 23.104.0.1:51300 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:08:38.753 00:05:01.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:13:08.191 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-10-07 00:13:31.337 00:00:10.365 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:09:38.758 00:05:01.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:13:51.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:13:51.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:14:08.402 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-10-07 00:14:31.738 00:00:10.369 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:15:08.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-10-07 00:15:32.148 00:00:10.349 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:16:08.791 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:46968 10 6452 1 2025-10-07 00:16:32.538 00:00:10.362 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:17:09.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-10-07 00:17:32.936 00:00:10.385 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:18:09.497 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-10-07 00:14:38.755 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:18:33.357 00:00:10.370 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:18:50.972 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:18:50.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:19:09.717 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-10-07 00:15:38.758 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:19:33.760 00:00:10.380 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:20:09.951 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-10-07 00:20:34.179 00:00:10.368 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:21:10.185 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-10-07 00:21:34.585 00:00:10.368 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:22:10.365 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-07 00:22:34.989 00:00:10.368 TCP 23.104.0.1:40628 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:23:10.576 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-10-07 00:23:35.394 00:00:10.363 TCP 23.104.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:23:51.456 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:23:51.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:24:10.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-10-07 00:20:38.757 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:24:35.796 00:00:10.365 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:25:10.962 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59584 12 6556 1 2025-10-07 00:21:38.762 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:25:36.201 00:00:10.365 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:26:11.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-10-07 00:26:36.605 00:00:10.363 TCP 23.104.0.1:53218 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:27:11.403 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-10-07 00:27:37.010 00:00:10.364 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:28:11.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39218 10 6452 1 2025-10-07 00:28:51.220 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:28:37.415 00:00:10.324 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:28:51.588 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:29:11.824 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42572 10 6452 1 2025-10-07 00:29:37.783 00:00:22.036 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:30:12.037 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-10-07 00:26:38.761 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:30:49.862 00:00:10.371 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:31:12.243 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37932 10 6452 1 2025-10-07 00:27:38.763 00:05:01.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:31:50.271 00:00:10.367 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:32:12.455 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-10-07 00:32:50.673 00:00:10.319 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:33:12.667 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-10-07 00:33:51.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:33:51.553 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:33:51.045 00:00:10.365 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:34:12.881 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6452 1 2025-10-07 00:34:51.452 00:00:10.360 TCP 23.104.0.1:56304 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:35:13.108 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60358 10 6452 1 2025-10-07 00:35:51.853 00:00:10.373 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:36:13.280 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-10-07 00:32:38.761 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:36:52.265 00:00:10.362 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:37:13.488 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 10 6452 1 2025-10-07 00:33:38.764 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:37:52.674 00:00:10.361 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:38:13.701 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47448 10 6452 1 2025-10-07 00:38:51.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:38:51.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:38:53.098 00:00:10.322 TCP 23.104.0.1:34644 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:39:13.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-10-07 00:39:53.459 00:00:10.320 TCP 23.104.0.1:36562 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:40:14.127 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 10 6452 1 2025-10-07 00:40:53.816 00:00:10.329 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:41:14.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6452 1 2025-10-07 00:41:54.184 00:00:10.363 TCP 23.104.0.1:52538 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:42:14.547 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-10-07 00:38:38.763 00:05:01.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:42:54.587 00:00:10.364 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:43:14.781 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-10-07 00:39:38.767 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:43:51.666 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:43:51.718 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:43:54.992 00:00:10.370 TCP 23.104.0.1:55058 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:44:15.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-10-07 00:44:55.401 00:00:10.328 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:45:15.217 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-10-07 00:45:55.767 00:00:10.370 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:46:15.423 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60834 10 6452 1 2025-10-07 00:46:56.182 00:00:10.325 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:47:15.604 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54726 10 6452 1 2025-10-07 00:47:56.538 00:00:10.323 TCP 23.104.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:48:15.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-10-07 00:44:38.764 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:48:51.930 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:48:51.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:48:56.901 00:00:10.365 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:49:16.068 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33174 10 6452 1 2025-10-07 00:45:38.767 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:49:57.319 00:00:10.379 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:50:16.241 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-10-07 00:50:57.743 00:00:10.372 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:51:16.406 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-10-07 00:51:58.157 00:00:10.357 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:52:16.581 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-10-07 00:52:58.558 00:00:10.317 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:53:16.787 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-10-07 00:53:51.919 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 00:53:51.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:53:58.916 00:00:10.371 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:54:17.014 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-10-07 00:50:38.765 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 00:54:59.326 00:00:10.321 TCP 23.104.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:55:17.227 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-10-07 00:51:38.769 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 00:55:59.688 00:00:10.366 TCP 23.104.0.1:52756 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:56:17.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-10-07 00:57:00.116 00:00:10.320 TCP 23.104.0.1:35696 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:57:17.657 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-10-07 00:58:00.476 00:00:10.325 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-10-07 00:58:17.871 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-10-07 00:58:51.943 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 00:58:51.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-10-06 23:56:38 - 2025-10-07 00:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0021s Wall: 0.0031s flows/second: 52428.8 Runtime: 0.0031s