Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 23:59:04.438 00:00:10.364 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-10-29 23:59:09.195 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51928 10 6452 1 2025-10-29 23:59:55.521 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 23:59:55.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 23:55:49.309 00:05:03.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:00:04.841 00:00:10.389 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:00:09.415 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-10-29 23:55:52.703 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:01:05.266 00:00:10.340 TCP 23.104.0.1:59630 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:01:09.633 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-10-30 00:02:05.663 00:00:10.327 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:02:09.847 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-10-30 00:03:06.025 00:00:10.366 TCP 23.104.0.1:53766 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:03:10.025 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-10-30 00:04:06.431 00:00:15.913 TCP 23.104.0.1:35974 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:04:10.239 00:00:12.013 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-10-30 00:04:55.603 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:04:55.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:05:12.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-10-30 00:05:12.394 00:00:10.321 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:01:49.312 00:05:03.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:06:12.535 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42472 10 6452 1 2025-10-30 00:06:12.757 00:00:10.330 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:01:52.705 00:05:56.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:07:12.746 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51676 10 6452 1 2025-10-30 00:07:13.128 00:00:10.361 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:08:12.966 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-10-30 00:08:13.527 00:00:10.367 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:09:13.202 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-10-30 00:09:13.938 00:00:10.369 TCP 23.104.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:09:56.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:09:56.172 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:10:13.426 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-10-30 00:10:14.345 00:00:10.365 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:11:14.753 00:00:10.377 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:11:13.604 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60002 10 6452 1 2025-10-30 00:07:49.312 00:05:03.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:12:15.170 00:00:10.324 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:12:13.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-10-30 00:07:52.707 00:05:56.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:13:14.067 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 12 10375 1 2025-10-30 00:13:15.532 00:00:10.400 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 15 1926 1 2025-10-30 00:14:15.966 00:00:10.370 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:14:14.304 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40430 10 6452 1 2025-10-30 00:14:55.656 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:14:55.617 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:15:16.373 00:00:10.364 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:15:14.525 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-10-30 00:16:14.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38686 10 6452 1 2025-10-30 00:16:16.774 00:00:10.387 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:17:14.947 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48374 10 6452 1 2025-10-30 00:17:17.200 00:00:10.367 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:13:49.317 00:05:03.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:18:15.182 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-10-30 00:18:17.599 00:00:10.368 TCP 23.104.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:13:52.709 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:19:15.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-10-30 00:19:18.006 00:00:10.367 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:19:55.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:19:55.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:20:15.570 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-10-30 00:20:18.411 00:00:10.375 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:21:15.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56798 10 6452 1 2025-10-30 00:21:18.822 00:00:11.054 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:22:15.994 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-10-30 00:22:19.910 00:00:10.362 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:23:16.215 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-10-30 00:23:20.309 00:00:10.326 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:19:49.317 00:05:03.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:24:16.436 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45404 10 6452 1 2025-10-30 00:24:20.672 00:00:10.363 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:19:52.712 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:24:55.535 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:24:55.457 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:25:16.610 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-10-30 00:25:21.098 00:00:10.362 TCP 23.104.0.1:47080 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:26:16.877 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-10-30 00:26:21.504 00:00:10.362 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:27:17.082 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59568 10 6452 1 2025-10-30 00:27:21.907 00:00:10.367 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:28:17.293 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 10 6452 1 2025-10-30 00:28:22.310 00:00:10.321 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:29:17.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-10-30 00:29:22.670 00:00:10.368 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:29:55.998 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:25:49.319 00:05:03.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:29:55.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:30:17.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-10-30 00:30:23.063 00:00:10.367 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:25:52.711 00:05:56.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:31:17.977 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40118 10 6452 1 2025-10-30 00:31:23.469 00:00:10.391 TCP 23.104.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:32:18.213 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-10-30 00:32:23.901 00:00:10.332 TCP 23.104.0.1:51098 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:33:18.423 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-10-30 00:33:24.271 00:00:10.371 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:34:18.643 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41888 10 6452 1 2025-10-30 00:34:24.686 00:00:10.372 TCP 23.104.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:34:56.369 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:34:56.503 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:35:18.811 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-10-30 00:35:25.112 00:00:10.404 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:31:49.321 00:05:03.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:36:19.052 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-10-30 00:36:25.553 00:00:10.361 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:31:52.716 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:37:19.267 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-10-30 00:37:25.953 00:00:10.367 TCP 23.104.0.1:44872 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:38:19.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55568 10 6452 1 2025-10-30 00:38:26.360 00:00:10.359 TCP 23.104.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:39:19.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-10-30 00:39:26.756 00:00:10.387 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:39:56.209 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:39:56.247 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:40:19.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60900 10 6452 1 2025-10-30 00:40:27.181 00:00:10.323 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:41:20.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-10-30 00:41:27.542 00:00:10.372 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:37:49.322 00:05:03.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:42:20.327 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-10-30 00:42:27.952 00:00:10.463 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 15 1926 1 2025-10-30 00:37:52.719 00:05:56.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:43:20.818 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 12 10375 1 2025-10-30 00:43:28.444 00:00:10.363 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:44:21.028 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-10-30 00:44:28.842 00:00:10.381 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:44:56.523 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:44:56.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:45:21.240 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-10-30 00:45:29.259 00:00:10.367 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:46:21.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57952 10 6452 1 2025-10-30 00:46:29.666 00:00:10.322 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:47:21.664 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-10-30 00:47:30.026 00:00:10.322 TCP 23.104.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:43:49.323 00:05:03.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:48:21.840 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38370 10 6452 1 2025-10-30 00:48:30.386 00:00:10.363 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:43:52.719 00:05:56.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:49:22.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-10-30 00:49:30.790 00:00:10.356 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:49:56.589 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:49:56.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:50:22.287 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48362 10 6452 1 2025-10-30 00:50:31.185 00:00:10.361 TCP 23.104.0.1:43104 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:51:22.498 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-10-30 00:51:31.589 00:00:10.362 TCP 23.104.0.1:38660 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:52:22.725 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-10-30 00:52:31.997 00:00:10.383 TCP 23.104.0.1:51308 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:53:22.936 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-10-30 00:53:32.420 00:00:10.364 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:49:49.325 00:05:03.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 00:54:23.164 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-10-30 00:49:52.717 00:05:56.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 00:54:56.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 00:54:32.832 00:00:21.698 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:54:56.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 00:55:23.379 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-10-30 00:55:44.584 00:00:10.363 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:56:23.603 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-10-30 00:56:44.987 00:00:10.326 TCP 23.104.0.1:51656 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:57:23.822 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:40026 10 6452 1 2025-10-30 00:57:45.352 00:00:10.324 TCP 23.104.0.1:40248 -> 1.101.0.1:3000 11 1507 1 2025-10-30 00:58:24.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1074, avg pps: 0, avg bpp: 321 Time window: 2025-10-29 23:55:49 - 2025-10-30 00:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0011s Wall: 0.0021s flows/second: 76886.1 Runtime: 0.0021s