Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 23:58:59.118 00:00:10.320 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-10-08 23:59:01.040 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36950 10 6452 1 2025-10-08 23:59:48.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 23:59:48.502 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 23:59:59.480 00:00:10.327 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:00:01.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-10-08 23:56:39.598 00:05:02.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:00:59.846 00:00:10.377 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:01:01.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-10-08 23:57:39.601 00:05:02.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:02:00.261 00:00:10.325 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:02:01.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-10-09 00:03:00.628 00:00:10.329 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:03:01.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-10-09 00:04:00.995 00:00:10.365 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:04:02.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49838 10 6452 1 2025-10-09 00:04:48.673 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:04:48.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:05:01.395 00:00:10.371 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:05:02.334 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47784 10 6452 1 2025-10-09 00:06:01.805 00:00:10.369 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:06:02.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-10-09 00:02:39.599 00:05:02.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:07:02.214 00:00:10.361 TCP 23.104.0.1:34734 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:07:02.762 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45242 10 6452 1 2025-10-09 00:03:39.602 00:05:02.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:08:02.973 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-10-09 00:08:02.611 00:00:10.374 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:09:03.016 00:00:10.356 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:09:03.197 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34602 10 6452 1 2025-10-09 00:09:48.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:09:48.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:10:03.418 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6452 1 2025-10-09 00:10:03.408 00:00:10.368 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:11:03.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-10-09 00:11:03.812 00:00:10.333 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:12:04.182 00:00:10.368 TCP 23.104.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:12:03.846 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34788 10 6452 1 2025-10-09 00:08:39.600 00:05:02.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:13:04.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-10-09 00:13:04.586 00:00:10.365 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:09:39.603 00:05:02.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:14:04.992 00:00:10.327 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:14:04.274 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-10-09 00:14:48.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:14:48.831 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:15:05.351 00:00:10.374 TCP 23.104.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:15:04.481 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-10-09 00:16:05.765 00:00:10.359 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:16:04.708 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-10-09 00:17:04.931 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-10-09 00:17:06.175 00:00:10.373 TCP 23.104.0.1:51492 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:18:06.592 00:00:10.392 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:18:05.158 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-10-09 00:14:39.602 00:05:02.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:19:05.364 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-10-09 00:19:07.026 00:00:10.382 TCP 23.104.0.1:32820 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:15:39.604 00:05:02.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:19:48.993 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:19:49.023 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:20:05.578 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-10-09 00:20:07.448 00:00:10.368 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:21:05.791 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52740 10 6452 1 2025-10-09 00:21:07.854 00:00:10.382 TCP 23.104.0.1:37030 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:22:05.959 00:00:10.350 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 12 6556 1 2025-10-09 00:22:08.275 00:00:10.374 TCP 23.104.0.1:38582 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:23:06.347 00:00:10.609 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-10-09 00:23:08.688 00:00:10.588 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:24:06.990 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-10-09 00:24:09.315 00:00:10.372 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:20:39.603 00:05:02.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:24:49.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:24:49.146 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:25:07.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-10-09 00:25:09.719 00:00:10.372 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:21:39.606 00:05:02.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:26:10.131 00:00:10.368 TCP 23.104.0.1:60594 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:26:07.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-10-09 00:27:07.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41044 10 6452 1 2025-10-09 00:27:10.539 00:00:10.362 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:28:10.946 00:00:10.373 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:28:07.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48166 10 6452 1 2025-10-09 00:29:08.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-10-09 00:29:11.354 00:00:10.367 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:29:49.064 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:29:49.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:30:08.294 00:00:11.161 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-10-09 00:30:11.758 00:00:10.383 TCP 23.104.0.1:34810 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:26:39.604 00:05:02.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:31:09.506 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-10-09 00:31:12.181 00:00:10.406 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:27:39.608 00:05:02.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:32:09.723 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-10-09 00:32:12.637 00:00:10.374 TCP 23.104.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:33:09.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60236 10 6452 1 2025-10-09 00:33:13.063 00:00:10.369 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:34:10.173 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-10-09 00:34:13.469 00:00:10.368 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:34:49.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:34:49.779 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:35:10.400 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:36612 12 10375 1 2025-10-09 00:35:13.876 00:00:10.438 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 15 1926 1 2025-10-09 00:36:10.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-10-09 00:36:14.350 00:00:10.365 TCP 23.104.0.1:42620 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:32:39.607 00:05:02.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:37:10.868 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42590 10 6452 1 2025-10-09 00:37:14.752 00:00:10.384 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:33:39.608 00:05:02.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:38:11.095 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56466 10 6452 1 2025-10-09 00:38:15.171 00:00:10.370 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:39:11.308 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50266 10 6452 1 2025-10-09 00:39:15.576 00:00:10.367 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:39:49.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:39:49.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:40:11.532 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59820 10 6452 1 2025-10-09 00:40:15.972 00:00:10.374 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:41:11.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6452 1 2025-10-09 00:41:16.382 00:00:10.382 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:42:11.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-10-09 00:42:16.782 00:00:10.368 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:38:39.607 00:05:02.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:43:12.145 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-09 00:43:17.191 00:00:10.364 TCP 23.104.0.1:60842 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:39:39.610 00:05:02.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:44:12.314 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-10-09 00:44:17.594 00:00:10.440 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:44:49.498 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:44:49.346 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:45:12.535 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-10-09 00:45:18.100 00:00:10.363 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:46:12.748 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-10-09 00:46:18.498 00:00:10.397 TCP 23.104.0.1:33826 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:47:12.961 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6452 1 2025-10-09 00:47:18.929 00:00:10.343 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:48:13.191 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-10-09 00:48:19.310 00:00:10.369 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:44:39.608 00:05:02.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:49:13.414 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-10-09 00:49:19.716 00:00:10.378 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:45:39.610 00:05:02.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:49:49.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:49:49.385 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:50:13.630 00:00:11.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35524 10 6452 1 2025-10-09 00:50:20.129 00:00:10.327 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:51:14.870 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-10-09 00:51:20.496 00:00:10.326 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:52:15.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 12 6556 1 2025-10-09 00:52:20.852 00:00:10.380 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:53:15.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-10-09 00:53:21.273 00:00:10.366 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:54:15.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-10-09 00:54:21.710 00:00:10.377 TCP 23.104.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:54:49.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-09 00:50:39.611 00:05:02.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-09 00:54:49.743 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-09 00:55:15.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-10-09 00:55:22.127 00:00:10.363 TCP 23.104.0.1:34694 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:51:39.613 00:05:02.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-09 00:56:15.950 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:33514 10 6452 1 2025-10-09 00:56:22.533 00:00:10.366 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:57:16.246 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6452 1 2025-10-09 00:57:22.938 00:00:10.338 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-10-09 00:58:16.454 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2025-10-09 00:58:23.312 00:00:10.368 TCP 23.104.0.1:52914 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1083, avg pps: 0, avg bpp: 317 Time window: 2025-10-08 23:56:39 - 2025-10-09 00:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0018s Wall: 0.0014s flows/second: 116469.0 Runtime: 0.0014s