Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 23:59:00.581 00:00:10.446 TCP 23.104.0.1:38242 -> 1.101.0.1:3000 15 1926 1 2025-08-03 23:59:02.876 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 12 10367 1 2025-08-04 00:00:01.106 00:00:10.365 TCP 23.104.0.1:56530 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:00:03.163 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41152 10 6452 1 2025-08-04 00:01:01.505 00:00:10.369 TCP 23.104.0.1:40762 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:01:03.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-08-03 23:58:05.954 00:05:00.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:02:03.564 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44348 10 6452 1 2025-08-04 00:02:01.916 00:00:10.390 TCP 23.104.0.1:42046 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:02:54.816 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:02:54.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 23:59:05.955 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:03:03.771 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58512 10 6452 1 2025-08-04 00:03:02.352 00:00:10.369 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:04:04.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50844 10 6452 1 2025-08-04 00:04:02.753 00:00:10.374 TCP 23.104.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:05:03.162 00:00:10.327 TCP 23.104.0.1:39340 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:05:04.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-08-04 00:06:04.434 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-08-04 00:06:03.531 00:00:10.323 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:07:04.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6452 1 2025-08-04 00:07:03.894 00:00:10.377 TCP 23.104.0.1:51752 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:07:55.258 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:07:55.189 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:04:05.953 00:05:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:08:04.315 00:00:10.327 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:08:04.811 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-08-04 00:05:05.957 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:09:04.681 00:00:10.364 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:09:05.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35840 10 6452 1 2025-08-04 00:10:05.101 00:00:10.367 TCP 23.104.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:10:05.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-08-04 00:11:05.496 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35320 10 6452 1 2025-08-04 00:11:05.507 00:00:10.366 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:12:05.913 00:00:10.370 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:12:05.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 10 6452 1 2025-08-04 00:12:55.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:12:55.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:13:06.320 00:00:10.366 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:13:05.928 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-08-04 00:10:05.959 00:05:00.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:14:06.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-08-04 00:14:06.722 00:00:10.375 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:11:05.962 00:05:00.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:15:06.359 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-08-04 00:15:07.136 00:00:10.414 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:16:06.584 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-08-04 00:16:07.589 00:00:10.362 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:17:06.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-08-04 00:17:07.990 00:00:10.365 TCP 23.104.0.1:53084 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:17:55.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:17:55.192 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:18:07.028 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-08-04 00:18:08.397 00:00:10.360 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:19:07.246 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-08-04 00:19:08.795 00:00:10.364 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:16:05.958 00:05:00.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:20:07.419 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6452 1 2025-08-04 00:20:09.196 00:00:10.374 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:17:05.962 00:05:00.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:21:09.606 00:00:10.373 TCP 23.104.0.1:41908 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:21:07.634 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-08-04 00:22:10.019 00:00:10.366 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:22:07.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41580 10 6452 1 2025-08-04 00:22:55.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:22:55.259 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:23:10.426 00:00:10.429 TCP 23.104.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:23:08.036 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52610 10 6452 1 2025-08-04 00:24:10.898 00:00:10.377 TCP 23.104.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:24:08.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-08-04 00:25:11.310 00:00:10.367 TCP 23.104.0.1:53216 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:25:08.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-08-04 00:22:05.961 00:05:00.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:26:08.634 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6452 1 2025-08-04 00:26:11.709 00:00:10.363 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:23:05.964 00:05:00.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:27:08.847 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41174 10 6452 1 2025-08-04 00:27:12.111 00:00:10.364 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:27:55.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:27:55.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:28:09.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37942 10 6452 1 2025-08-04 00:28:12.512 00:00:10.364 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:29:09.297 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-08-04 00:29:12.912 00:00:10.365 TCP 23.104.0.1:52044 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:30:09.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-08-04 00:30:13.313 00:00:10.370 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:31:09.748 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45052 10 6452 1 2025-08-04 00:31:13.717 00:00:10.371 TCP 23.104.0.1:52770 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:28:05.961 00:05:00.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:32:09.960 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-08-04 00:32:14.127 00:00:10.362 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:32:55.895 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:32:55.609 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:29:05.966 00:05:00.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:33:10.144 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-08-04 00:33:14.530 00:00:10.373 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:34:10.321 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-08-04 00:34:14.949 00:00:10.373 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:35:10.537 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-08-04 00:35:15.353 00:00:10.325 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:36:10.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-08-04 00:36:15.717 00:00:10.382 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:37:10.963 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 12 6556 1 2025-08-04 00:37:16.137 00:00:10.364 TCP 23.104.0.1:55282 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:37:55.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:37:55.570 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:34:05.966 00:05:00.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:38:11.192 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 10 6452 1 2025-08-04 00:38:16.538 00:00:10.364 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:35:05.967 00:05:00.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:39:11.370 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51278 10 6452 1 2025-08-04 00:39:16.937 00:00:10.378 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:40:11.545 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-08-04 00:40:17.356 00:00:10.324 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:41:11.752 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-08-04 00:41:17.725 00:00:10.388 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:42:11.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-08-04 00:42:18.149 00:00:10.368 TCP 23.104.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:42:55.798 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:42:55.963 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:43:12.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49020 10 6452 1 2025-08-04 00:43:18.551 00:00:10.371 TCP 23.104.0.1:39228 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:40:05.966 00:05:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:44:12.436 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-08-04 00:44:18.959 00:00:10.366 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:41:05.970 00:05:00.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:45:12.660 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-08-04 00:45:19.360 00:00:10.327 TCP 23.104.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:46:12.880 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-08-04 00:46:19.726 00:00:10.366 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:47:13.093 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-08-04 00:47:20.132 00:00:10.397 TCP 23.104.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:47:55.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:47:56.010 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:48:13.263 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59646 10 6452 1 2025-08-04 00:48:20.568 00:00:10.419 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:49:13.476 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-08-04 00:49:21.029 00:00:10.363 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:46:05.968 00:05:00.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:50:13.689 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-08-04 00:50:21.432 00:00:10.326 TCP 23.104.0.1:43002 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:47:05.971 00:05:00.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:51:13.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-08-04 00:51:21.805 00:00:10.363 TCP 23.104.0.1:38730 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:52:14.125 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-08-04 00:52:22.204 00:00:10.375 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:52:56.108 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:52:56.114 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:53:14.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-08-04 00:53:22.615 00:00:10.337 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:54:14.548 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-08-04 00:54:22.976 00:00:10.372 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:55:14.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-08-04 00:55:23.383 00:00:10.369 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:52:05.969 00:05:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-04 00:56:14.969 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-08-04 00:56:23.789 00:00:10.363 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:53:05.973 00:05:00.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-04 00:57:15.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39354 10 6452 1 2025-08-04 00:57:24.189 00:00:10.367 TCP 23.104.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 00:57:55.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 00:57:56.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 00:58:15.421 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51940 10 6452 1 2025-08-04 00:58:24.591 00:00:10.368 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1108, avg pps: 0, avg bpp: 318 Time window: 2025-08-03 23:58:05 - 2025-08-04 00:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0026s flows/second: 63031.8 Runtime: 0.0026s