Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 23:58:54.533 00:00:10.368 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:59:41.157 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-09-02 23:59:54.939 00:00:10.469 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:00:41.327 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-09-03 00:00:55.445 00:00:10.372 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:01:41.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36462 10 6452 1 2025-09-03 00:01:55.857 00:00:10.375 TCP 23.104.0.1:39338 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:02:21.552 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:02:21.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:02:41.751 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-09-03 00:02:56.269 00:00:10.365 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-09-02 23:59:22.638 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:03:41.927 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-09-03 00:03:56.673 00:00:10.320 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:00:22.635 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:04:42.141 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39576 10 6452 1 2025-09-03 00:04:57.036 00:00:10.364 TCP 23.104.0.1:57266 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:05:42.349 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33526 10 6452 1 2025-09-03 00:05:57.438 00:00:10.856 TCP 23.104.0.1:42790 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:06:42.559 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-09-03 00:06:58.331 00:00:10.363 TCP 23.104.0.1:58162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:07:21.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:07:22.020 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:07:42.780 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6452 1 2025-09-03 00:07:58.736 00:00:10.367 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:08:42.954 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 12 6556 1 2025-09-03 00:08:59.144 00:00:11.116 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:05:22.642 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:09:43.201 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-09-03 00:10:00.302 00:00:10.368 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:06:22.639 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:10:43.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-09-03 00:11:00.710 00:00:10.350 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:11:43.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-09-03 00:12:01.102 00:00:10.366 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:12:22.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:12:22.222 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:12:43.855 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-09-03 00:13:01.505 00:00:10.362 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:13:44.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34116 10 6452 1 2025-09-03 00:14:01.906 00:00:10.374 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:14:44.292 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55600 10 6452 1 2025-09-03 00:15:02.323 00:00:10.327 TCP 23.104.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:11:22.642 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:15:44.501 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6452 1 2025-09-03 00:16:02.687 00:00:10.376 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:12:22.640 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:16:44.682 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-09-03 00:17:03.105 00:00:10.364 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:17:21.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:17:21.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:17:44.864 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-09-03 00:18:03.505 00:00:10.329 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:18:45.063 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-09-03 00:19:03.869 00:00:10.368 TCP 23.104.0.1:32966 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:19:45.273 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6452 1 2025-09-03 00:20:04.279 00:00:10.370 TCP 23.104.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:20:45.482 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-09-03 00:21:04.696 00:00:10.368 TCP 23.104.0.1:42046 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:17:22.644 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:21:45.693 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6452 1 2025-09-03 00:22:05.110 00:00:10.327 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:22:22.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:22:22.063 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:18:22.642 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:22:45.863 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46016 12 10367 1 2025-09-03 00:23:05.474 00:00:10.439 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 15 1926 1 2025-09-03 00:23:46.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-09-03 00:24:05.956 00:00:10.372 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:24:46.302 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50196 10 6452 1 2025-09-03 00:25:06.379 00:00:10.322 TCP 23.104.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:25:46.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54956 10 6452 1 2025-09-03 00:26:06.736 00:00:10.368 TCP 23.104.0.1:50508 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:26:46.686 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-09-03 00:27:07.141 00:00:10.332 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:27:22.557 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:23:22.645 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:27:22.436 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:27:46.892 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60248 12 10367 1 2025-09-03 00:28:07.520 00:00:10.438 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 15 1926 1 2025-09-03 00:24:22.643 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:28:47.139 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6452 1 2025-09-03 00:29:07.994 00:00:10.369 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:29:47.351 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49140 10 6452 1 2025-09-03 00:30:08.403 00:00:10.365 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:30:47.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41030 10 6452 1 2025-09-03 00:31:08.805 00:00:10.364 TCP 23.104.0.1:48278 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:31:47.781 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-09-03 00:32:09.208 00:00:10.373 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:32:22.150 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:32:22.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:32:47.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42530 10 6452 1 2025-09-03 00:33:09.619 00:00:10.366 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:29:22.646 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:33:48.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-09-03 00:34:10.023 00:00:10.365 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:30:22.644 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:34:48.428 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-09-03 00:35:10.430 00:00:10.363 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:35:48.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34658 10 6452 1 2025-09-03 00:36:10.832 00:00:10.387 TCP 23.104.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:36:48.862 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36396 10 6452 1 2025-09-03 00:37:11.258 00:00:10.367 TCP 23.104.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:37:22.551 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:37:22.611 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:37:49.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-09-03 00:38:11.667 00:00:10.364 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:38:49.292 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33900 10 6452 1 2025-09-03 00:39:12.097 00:00:10.367 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:35:22.652 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:39:49.507 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59866 10 6452 1 2025-09-03 00:40:12.501 00:00:10.364 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:36:22.649 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:40:49.683 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56108 10 6452 1 2025-09-03 00:41:12.910 00:00:10.365 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:41:49.905 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55728 10 6452 1 2025-09-03 00:42:22.504 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:42:22.251 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:42:13.313 00:00:10.324 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:42:50.119 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38350 10 6452 1 2025-09-03 00:43:13.683 00:00:10.371 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:43:50.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-09-03 00:44:14.104 00:00:10.367 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:44:50.503 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59860 10 6452 1 2025-09-03 00:45:14.511 00:00:10.320 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:41:22.655 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:45:50.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-09-03 00:42:22.652 00:05:00.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:46:14.867 00:00:10.376 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:46:50.920 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:36114 10 6452 1 2025-09-03 00:47:22.680 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:47:22.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:47:15.274 00:00:10.329 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:47:51.105 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-09-03 00:48:15.640 00:00:10.364 TCP 23.104.0.1:50446 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:48:51.515 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-09-03 00:49:16.053 00:00:10.320 TCP 23.104.0.1:60750 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:49:51.753 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-09-03 00:50:16.411 00:00:10.364 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:50:51.966 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-09-03 00:47:22.657 00:05:00.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:51:16.814 00:00:10.369 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:51:52.150 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 10 6452 1 2025-09-03 00:52:22.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:48:22.655 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:52:22.641 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:52:17.222 00:00:10.341 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:52:52.365 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-09-03 00:53:17.606 00:00:10.379 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:53:52.580 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-09-03 00:54:18.025 00:00:10.361 TCP 23.104.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:54:52.755 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-09-03 00:55:18.426 00:00:10.366 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:55:52.973 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-09-03 00:56:18.828 00:00:10.390 TCP 23.104.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:56:53.239 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-09-03 00:57:22.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 00:57:22.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 00:53:22.656 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 00:57:19.251 00:00:10.368 TCP 23.104.0.1:48792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 00:57:53.459 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 12 10367 1 2025-09-03 00:54:22.654 00:05:00.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 00:58:19.660 00:00:10.445 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 505002, total packets: 1582, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-09-02 23:58:54 - 2025-09-03 00:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 76593.3 Runtime: 0.0021s