Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 23:58:59.914 00:00:10.362 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-09-03 23:59:03.774 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-09-04 00:00:00.314 00:00:10.338 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:00:03.952 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-09-03 23:55:23.189 00:06:00.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:01:00.699 00:00:10.364 TCP 23.104.0.1:50606 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:01:04.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-09-03 23:56:23.187 00:06:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:02:01.106 00:00:10.319 TCP 23.104.0.1:41170 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:02:04.383 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-09-04 00:02:50.636 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:02:50.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:03:01.460 00:00:10.363 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:03:04.591 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-04 00:04:04.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-09-04 00:04:01.861 00:00:10.333 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:05:02.236 00:00:10.321 TCP 23.104.0.1:44346 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:05:05.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-09-04 00:06:05.252 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55092 10 6452 1 2025-09-04 00:06:02.597 00:00:10.331 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:07:02.973 00:00:10.377 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:07:05.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6452 1 2025-09-04 00:02:23.190 00:06:00.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:07:50.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:07:50.850 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:08:05.641 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 14 14278 1 2025-09-04 00:08:03.389 00:00:10.512 TCP 23.104.0.1:43436 -> 1.101.0.1:3000 17 2241 1 2025-09-04 00:03:23.186 00:06:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:09:05.871 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39290 10 6452 1 2025-09-04 00:09:03.942 00:00:10.329 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:10:06.102 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6452 1 2025-09-04 00:10:04.313 00:00:10.370 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:11:04.714 00:00:10.375 TCP 23.104.0.1:48746 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:11:06.308 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-09-04 00:12:05.130 00:00:10.368 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:12:06.519 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-09-04 00:12:50.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:12:50.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:13:06.740 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41458 10 6452 1 2025-09-04 00:13:05.536 00:00:10.364 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:14:05.938 00:00:10.374 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:14:06.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-09-04 00:09:23.192 00:06:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:15:06.353 00:00:10.323 TCP 23.104.0.1:43668 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:15:07.138 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-09-04 00:10:23.189 00:06:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:16:06.715 00:00:10.373 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:16:07.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-09-04 00:17:07.557 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-09-04 00:17:07.134 00:00:10.371 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:17:50.991 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:17:51.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:18:07.555 00:00:10.366 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:18:07.790 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35212 10 6452 1 2025-09-04 00:19:08.000 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-09-04 00:19:07.962 00:00:10.366 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:20:08.370 00:00:10.324 TCP 23.104.0.1:48030 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:20:08.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-09-04 00:21:08.729 00:00:10.366 TCP 23.104.0.1:54980 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:21:08.397 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-09-04 00:16:23.193 00:06:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:22:08.565 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-09-04 00:22:09.134 00:00:10.395 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:17:23.193 00:06:00.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:22:51.274 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:22:51.281 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:23:09.569 00:00:10.399 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 15 1926 1 2025-09-04 00:23:08.781 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 12 10367 1 2025-09-04 00:24:10.009 00:00:10.365 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:24:09.025 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 10 6452 1 2025-09-04 00:25:09.197 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-09-04 00:25:10.409 00:00:10.363 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:26:10.809 00:00:10.335 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:26:09.368 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-09-04 00:27:09.577 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47566 10 6452 1 2025-09-04 00:27:11.182 00:00:10.363 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:27:51.239 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:27:51.359 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:28:09.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-09-04 00:28:11.579 00:00:10.366 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:23:23.197 00:06:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:29:10.003 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41622 10 6452 1 2025-09-04 00:24:23.193 00:06:00.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:29:11.982 00:00:10.371 TCP 23.104.0.1:48370 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:30:10.225 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6452 1 2025-09-04 00:30:12.389 00:00:10.376 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:31:10.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-09-04 00:31:12.801 00:00:10.363 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:32:10.650 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-09-04 00:32:13.231 00:00:10.362 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:32:51.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:32:51.079 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:33:10.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46930 10 6452 1 2025-09-04 00:33:13.631 00:00:10.361 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:34:11.088 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-09-04 00:34:14.037 00:00:10.364 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:35:11.262 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52254 10 6452 1 2025-09-04 00:35:14.441 00:00:10.366 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:30:23.198 00:06:00.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:36:11.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42828 10 6452 1 2025-09-04 00:31:23.195 00:06:00.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:36:14.841 00:00:10.399 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:37:11.687 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6452 1 2025-09-04 00:37:15.284 00:00:10.362 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:37:51.370 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:37:51.375 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:38:11.853 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-09-04 00:38:15.681 00:00:10.505 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:39:16.223 00:00:10.365 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:39:12.036 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-09-04 00:40:16.625 00:00:10.366 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:40:12.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-09-04 00:41:12.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-09-04 00:41:17.030 00:00:10.363 TCP 23.104.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:42:12.665 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38298 10 6452 1 2025-09-04 00:37:23.202 00:06:00.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:42:17.432 00:00:10.985 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:42:51.418 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:42:51.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:38:23.200 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:43:12.873 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33346 10 6452 1 2025-09-04 00:43:18.451 00:00:10.325 TCP 23.104.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:44:13.070 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59916 10 6452 1 2025-09-04 00:44:18.812 00:00:10.330 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:45:13.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60640 10 6452 1 2025-09-04 00:45:19.185 00:00:10.366 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:46:13.487 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-09-04 00:46:19.590 00:00:10.369 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:47:13.711 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-09-04 00:47:19.995 00:00:10.362 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:47:51.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:47:51.325 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:48:13.922 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38482 10 6452 1 2025-09-04 00:48:20.394 00:00:10.364 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:44:23.203 00:06:00.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:49:14.132 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-09-04 00:49:20.800 00:00:10.368 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:50:14.348 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-09-04 00:45:23.200 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:50:21.211 00:00:10.367 TCP 23.104.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:51:14.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-04 00:51:21.614 00:00:10.321 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:52:14.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40206 10 6452 1 2025-09-04 00:52:21.977 00:00:10.382 TCP 23.104.0.1:57302 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:52:51.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:52:51.729 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:53:14.943 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53698 10 6452 1 2025-09-04 00:53:22.400 00:00:10.371 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:54:15.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-09-04 00:54:22.804 00:00:10.365 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:55:15.410 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-09-04 00:55:23.208 00:00:10.324 TCP 23.104.0.1:51512 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:51:23.205 00:06:00.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 00:56:15.625 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6452 1 2025-09-04 00:56:23.577 00:00:10.365 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:57:15.798 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-09-04 00:52:23.203 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 00:57:23.975 00:00:10.382 TCP 23.104.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-09-04 00:57:51.698 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 00:57:52.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 00:58:15.970 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51538 10 6452 1 2025-09-04 00:58:24.390 00:00:10.542 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 511980, total packets: 1600, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-09-03 23:55:23 - 2025-09-04 00:58:34 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0020s Wall: 0.0032s flows/second: 50752.7 Runtime: 0.0032s