Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 00:59:10.511 00:00:10.327 TCP 23.104.0.1:40642 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:59:12.499 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-09-02 01:00:10.883 00:00:10.366 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:00:12.714 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44296 10 6452 1 2025-09-02 01:01:11.293 00:00:10.327 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:01:12.882 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-09-02 01:01:53.923 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:01:54.155 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:02:11.662 00:00:10.366 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-09-02 00:57:22.235 00:06:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:02:13.105 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-09-02 01:03:13.315 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-09-02 01:03:12.090 00:00:10.323 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:04:13.523 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-09-02 01:04:12.453 00:00:10.359 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:05:13.702 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-09-02 01:00:22.236 00:06:00.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:05:12.853 00:00:10.378 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:06:13.876 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42458 10 6452 1 2025-09-02 01:06:13.269 00:00:10.363 TCP 23.104.0.1:47586 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:06:54.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:06:54.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:07:13.668 00:00:10.368 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:07:14.074 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-09-02 01:08:14.289 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-09-02 01:08:14.108 00:00:10.342 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:09:14.511 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53704 11 6504 1 2025-09-02 01:09:14.497 00:00:10.366 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:04:22.238 00:06:00.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:10:14.743 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-09-02 01:10:14.903 00:00:10.376 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:11:15.314 00:00:10.371 TCP 23.104.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:11:14.969 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6452 1 2025-09-02 01:11:54.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:11:54.360 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:12:15.206 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-09-02 01:07:22.236 00:06:00.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:12:15.725 00:00:10.371 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:13:16.134 00:00:10.376 TCP 23.104.0.1:37108 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:13:15.384 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6452 1 2025-09-02 01:14:16.548 00:00:10.364 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:14:15.593 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-09-02 01:15:15.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44856 10 6452 1 2025-09-02 01:15:16.947 00:00:10.365 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:11:22.238 00:06:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:16:16.022 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33906 10 6452 1 2025-09-02 01:16:17.354 00:00:10.367 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:16:54.592 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:16:54.613 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:17:16.232 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58702 10 6452 1 2025-09-02 01:17:17.760 00:00:10.370 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:18:16.415 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53382 10 6452 1 2025-09-02 01:18:18.168 00:00:10.357 TCP 23.104.0.1:43886 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:19:16.596 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-09-02 01:14:22.237 00:06:00.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:19:18.563 00:00:10.322 TCP 23.104.0.1:37626 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:20:16.764 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-09-02 01:20:18.925 00:00:10.394 TCP 23.104.0.1:58982 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:21:19.359 00:00:10.367 TCP 23.104.0.1:41636 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:21:16.989 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-09-02 01:21:54.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:21:54.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:22:19.758 00:00:10.382 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:22:17.171 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-09-02 01:18:22.241 00:06:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:23:20.178 00:00:10.361 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:23:17.381 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-09-02 01:24:20.585 00:00:10.373 TCP 23.104.0.1:51964 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:24:17.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-09-02 01:25:17.812 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-09-02 01:25:21.004 00:00:10.368 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:21:22.238 00:06:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:26:21.408 00:00:10.362 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:26:18.043 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-09-02 01:26:54.804 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:26:54.629 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:27:18.250 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-09-02 01:27:21.812 00:00:10.363 TCP 23.104.0.1:39862 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:28:18.464 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:38942 10 6452 1 2025-09-02 01:28:22.213 00:00:10.368 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:29:18.979 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 10 6452 1 2025-09-02 01:29:22.613 00:00:10.371 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:25:22.242 00:06:00.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:30:19.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-09-02 01:30:23.019 00:00:10.366 TCP 23.104.0.1:43078 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:31:19.434 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-09-02 01:31:23.422 00:00:10.365 TCP 23.104.0.1:55930 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:31:54.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:31:54.469 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:32:19.650 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-09-02 01:32:23.830 00:00:10.392 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:28:22.239 00:06:00.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:33:19.821 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53596 12 10367 1 2025-09-02 01:33:24.259 00:00:10.436 TCP 23.104.0.1:49936 -> 1.101.0.1:3000 15 1926 1 2025-09-02 01:34:20.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-09-02 01:34:24.735 00:00:10.370 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:35:20.314 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-09-02 01:35:25.144 00:00:10.361 TCP 23.104.0.1:46610 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:36:20.542 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:42054 10 6452 1 2025-09-02 01:36:25.542 00:00:10.371 TCP 23.104.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:36:55.151 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:36:54.939 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:32:22.245 00:06:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:37:20.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-09-02 01:37:25.947 00:00:10.369 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:38:21.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38440 12 6556 1 2025-09-02 01:38:26.353 00:00:10.364 TCP 23.104.0.1:45606 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:39:21.252 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-09-02 01:39:26.755 00:00:10.338 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:35:22.242 00:06:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:40:21.445 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43028 10 6452 1 2025-09-02 01:40:27.141 00:00:10.366 TCP 23.104.0.1:46288 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:41:21.660 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35468 10 6452 1 2025-09-02 01:41:27.547 00:00:10.372 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:41:54.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:41:54.742 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:42:21.875 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33670 10 6452 1 2025-09-02 01:42:27.974 00:00:10.376 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:43:22.096 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 10 6452 1 2025-09-02 01:43:28.391 00:00:10.364 TCP 23.104.0.1:49176 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:39:22.248 00:06:00.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:44:22.307 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55260 10 6452 1 2025-09-02 01:44:28.796 00:00:10.362 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:45:22.476 00:00:10.694 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-09-02 01:45:29.198 00:00:10.366 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:46:23.201 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54170 10 6452 1 2025-09-02 01:46:29.599 00:00:10.363 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:46:54.818 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:46:54.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:42:22.246 00:06:00.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:47:23.448 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-09-02 01:47:30.008 00:00:10.363 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:48:23.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55782 10 6452 1 2025-09-02 01:48:30.408 00:00:10.367 TCP 23.104.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:49:23.871 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-09-02 01:49:30.820 00:00:10.327 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:50:24.093 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-09-02 01:50:31.182 00:00:10.362 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:46:22.249 00:06:00.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:51:24.265 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-09-02 01:51:31.584 00:00:10.367 TCP 23.104.0.1:56284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:51:54.916 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:51:55.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:52:24.484 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42038 10 6452 1 2025-09-02 01:52:31.988 00:00:10.369 TCP 23.104.0.1:52656 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:53:24.706 00:00:10.264 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-09-02 01:53:32.397 00:00:10.377 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:49:22.246 00:06:00.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-02 01:54:25.010 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-09-02 01:54:32.815 00:00:10.328 TCP 23.104.0.1:45172 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:55:25.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-09-02 01:55:33.181 00:00:10.363 TCP 23.104.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:56:25.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59272 10 6452 1 2025-09-02 01:56:33.580 00:00:11.020 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:56:54.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 01:56:54.947 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 01:57:25.608 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 10 6452 1 2025-09-02 01:57:34.639 00:00:10.368 TCP 23.104.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-09-02 01:53:22.249 00:06:00.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-02 01:58:25.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 10 6452 1 2025-09-02 01:58:35.052 00:00:10.377 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502715, total packets: 1579, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-09-02 00:57:22 - 2025-09-02 01:59:22 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0039s User: 0.0010s Wall: 0.0021s flows/second: 77663.4 Runtime: 0.0021s