Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 23:59:19.955 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 23:59:19.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 23:59:08.701 00:00:10.363 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-10-07 23:59:22.214 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-10-08 00:00:09.108 00:00:10.330 TCP 23.104.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:00:22.427 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45360 10 6452 1 2025-10-07 23:56:39.197 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:01:09.482 00:00:10.362 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:01:22.665 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40726 10 6452 1 2025-10-07 23:57:39.200 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:02:09.887 00:00:10.385 TCP 23.104.0.1:52932 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:02:22.845 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56966 10 6452 1 2025-10-08 00:03:10.306 00:00:10.386 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:03:23.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39378 10 6452 1 2025-10-08 00:04:19.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:04:10.705 00:00:10.321 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:04:19.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:04:23.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 10 6452 1 2025-10-08 00:05:11.073 00:00:10.327 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:05:23.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-10-08 00:06:11.441 00:00:10.365 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:06:23.722 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-10-08 00:02:39.200 00:05:02.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:07:11.843 00:00:10.391 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:07:23.938 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-10-08 00:03:39.201 00:05:02.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:08:12.269 00:00:10.370 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:08:24.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-10-08 00:09:19.827 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:09:19.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:09:12.681 00:00:10.329 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:09:24.388 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 10 6452 1 2025-10-08 00:10:13.063 00:00:10.362 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:10:24.560 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-10-08 00:11:13.461 00:00:10.364 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:11:24.768 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-10-08 00:12:13.866 00:00:10.368 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:12:24.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-10-08 00:08:39.200 00:05:02.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:13:14.272 00:00:10.323 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:13:25.176 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:53618 10 6452 1 2025-10-08 00:09:39.204 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:14:19.964 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:14:20.085 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:14:14.638 00:00:10.428 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:14:25.594 00:00:15.569 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-10-08 00:15:15.110 00:00:10.330 TCP 23.104.0.1:44322 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:15:31.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-10-08 00:16:15.479 00:00:10.365 TCP 23.104.0.1:46882 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:16:31.415 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-10-08 00:17:15.895 00:00:10.378 TCP 23.104.0.1:59684 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:17:31.638 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6452 1 2025-10-08 00:18:16.312 00:00:10.374 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:18:31.815 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-10-08 00:14:39.202 00:05:02.015 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:19:20.350 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:19:20.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:19:16.720 00:00:10.370 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:15:39.204 00:05:02.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:19:32.031 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44778 10 6452 1 2025-10-08 00:20:17.132 00:00:10.370 TCP 23.104.0.1:40040 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:20:32.253 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57404 10 6452 1 2025-10-08 00:21:17.541 00:00:10.372 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:21:32.432 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-10-08 00:22:17.965 00:00:10.382 TCP 23.104.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:22:32.645 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-10-08 00:23:18.388 00:00:10.319 TCP 23.104.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:23:32.861 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-10-08 00:24:20.008 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:24:20.241 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:24:18.746 00:00:10.327 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:20:39.202 00:05:02.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:24:33.089 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40008 10 6452 1 2025-10-08 00:25:19.111 00:00:10.368 TCP 23.104.0.1:53064 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:21:39.206 00:05:02.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:25:33.299 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6452 1 2025-10-08 00:26:19.519 00:00:10.373 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:26:33.520 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34978 10 6452 1 2025-10-08 00:27:19.927 00:00:10.376 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:27:33.701 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-10-08 00:28:20.341 00:00:10.369 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:28:33.877 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-10-08 00:29:20.360 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:29:20.322 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:29:20.750 00:00:10.326 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:29:34.088 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-10-08 00:30:21.139 00:00:10.365 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:26:39.206 00:05:02.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:30:34.264 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60516 10 6452 1 2025-10-08 00:31:21.543 00:00:10.366 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:27:39.208 00:05:02.012 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:31:34.482 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6452 1 2025-10-08 00:32:21.957 00:00:10.363 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:32:34.651 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-10-08 00:33:22.360 00:00:10.361 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:33:34.882 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58638 10 6452 1 2025-10-08 00:34:20.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:34:20.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:34:22.764 00:00:10.377 TCP 23.104.0.1:58804 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:34:35.117 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-10-08 00:35:23.203 00:00:10.364 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:35:35.328 00:00:11.513 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6452 1 2025-10-08 00:36:23.609 00:00:10.359 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:32:39.207 00:05:02.019 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:36:36.880 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-08 00:37:24.010 00:00:10.360 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:33:39.210 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:37:37.114 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48252 10 6452 1 2025-10-08 00:38:24.410 00:00:10.598 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:38:37.331 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-10-08 00:39:20.362 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:39:20.375 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:39:25.057 00:00:10.370 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:39:37.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 6452 1 2025-10-08 00:40:25.462 00:00:11.047 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:40:37.757 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-10-08 00:41:26.547 00:00:10.654 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:41:37.973 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-10-08 00:42:27.242 00:00:10.369 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:38:39.210 00:05:02.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:42:38.167 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-10-08 00:43:27.654 00:00:10.363 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:39:39.213 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:43:38.343 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-10-08 00:44:20.639 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:44:20.838 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:44:28.061 00:00:10.362 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:44:38.554 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 2025-10-08 00:45:28.465 00:00:10.366 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:45:38.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-10-08 00:46:28.869 00:00:10.370 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:46:38.969 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42256 10 6452 1 2025-10-08 00:47:29.276 00:00:10.364 TCP 23.104.0.1:55798 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:47:39.195 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-10-08 00:48:29.677 00:00:10.369 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:44:39.211 00:05:02.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:48:39.367 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-10-08 00:49:20.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:49:20.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:45:39.213 00:05:02.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:49:30.095 00:00:10.365 TCP 23.104.0.1:42580 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:49:39.579 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 10 6452 1 2025-10-08 00:50:30.501 00:00:10.365 TCP 23.104.0.1:51224 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:50:39.745 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-10-08 00:51:30.924 00:00:10.383 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:51:39.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-10-08 00:52:31.350 00:00:10.365 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:52:40.128 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-10-08 00:53:31.758 00:00:10.374 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:53:40.343 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52070 10 6452 1 2025-10-08 00:54:20.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 00:54:20.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 00:50:39.212 00:05:02.019 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 00:54:32.174 00:00:10.362 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:54:40.523 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-10-08 00:51:39.216 00:05:02.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 00:55:32.577 00:00:10.323 TCP 23.104.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:55:40.736 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-10-08 00:56:32.938 00:00:10.377 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:56:40.955 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 11 6813 1 2025-10-08 00:57:33.351 00:00:10.323 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:57:41.185 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55734 10 6452 1 2025-10-08 00:58:33.707 00:00:10.371 TCP 23.104.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-10-08 00:58:41.362 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43668 10 6452 1 Summary: total flows: 164, total bytes: 498709, total packets: 1573, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-10-07 23:56:39 - 2025-10-08 00:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 66854.5 Runtime: 0.0025s