Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 23:58:48.796 00:00:10.334 TCP 23.104.0.1:44976 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:58:48.702 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47510 10 6452 1 2025-09-07 23:59:46.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 23:59:45.851 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 23:59:49.171 00:00:10.365 TCP 23.104.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:59:48.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-09-08 00:00:49.100 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56272 10 6452 1 2025-09-08 00:00:49.569 00:00:10.366 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-09-07 23:56:25.165 00:06:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:01:49.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49736 10 6452 1 2025-09-08 00:01:49.978 00:00:10.371 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:02:50.385 00:00:10.376 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:02:49.504 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-09-08 00:03:50.804 00:00:10.377 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:03:49.737 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-09-07 23:59:25.164 00:06:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:04:46.226 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:04:46.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:04:49.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-09-08 00:04:51.219 00:00:10.365 TCP 23.104.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:05:50.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-09-08 00:05:51.623 00:00:10.322 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:06:50.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-09-08 00:06:51.986 00:00:10.364 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:07:50.606 00:00:10.766 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2025-09-08 00:07:52.387 00:00:10.599 TCP 23.104.0.1:35540 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:03:25.166 00:06:00.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:08:51.412 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-09-08 00:08:53.028 00:00:10.364 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:09:46.146 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:09:46.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:09:51.585 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39438 10 6452 1 2025-09-08 00:09:53.432 00:00:10.369 TCP 23.104.0.1:48316 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:10:51.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55792 10 6452 1 2025-09-08 00:10:53.836 00:00:10.358 TCP 23.104.0.1:34326 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:06:25.165 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:11:54.231 00:00:10.364 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:11:52.037 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-09-08 00:12:54.645 00:00:10.324 TCP 23.104.0.1:39282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:12:52.265 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-09-08 00:13:52.436 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56030 10 6452 1 2025-09-08 00:13:55.009 00:00:10.319 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:14:46.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:14:46.091 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:14:55.372 00:00:10.364 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:14:52.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-09-08 00:10:25.167 00:06:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:15:52.826 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-09-08 00:15:55.779 00:00:10.365 TCP 23.104.0.1:49924 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:16:53.071 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-09-08 00:16:56.184 00:00:10.377 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:17:56.599 00:00:10.365 TCP 23.104.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:17:53.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-09-08 00:13:25.167 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:18:53.512 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42416 10 6452 1 2025-09-08 00:18:57.006 00:00:10.319 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:19:46.438 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:19:46.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:19:53.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-09-08 00:19:57.362 00:00:10.369 TCP 23.104.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:20:53.899 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43838 10 6452 1 2025-09-08 00:20:57.769 00:00:10.335 TCP 23.104.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:21:54.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-09-08 00:21:58.142 00:00:10.319 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:17:25.171 00:06:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:22:54.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-09-08 00:22:58.498 00:00:10.322 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:23:54.495 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39696 10 6452 1 2025-09-08 00:23:58.857 00:00:10.378 TCP 23.104.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:24:46.817 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:24:46.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:24:54.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52324 10 6452 1 2025-09-08 00:24:59.269 00:00:10.326 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:20:25.171 00:06:00.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:25:54.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46524 10 6452 1 2025-09-08 00:25:59.636 00:00:10.365 TCP 23.104.0.1:53066 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:26:55.137 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-09-08 00:27:00.048 00:00:10.371 TCP 23.104.0.1:53188 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:27:55.355 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-09-08 00:28:00.458 00:00:10.360 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:28:55.559 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59836 10 6452 1 2025-09-08 00:29:00.857 00:00:10.382 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:24:25.174 00:06:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:29:46.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:29:46.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:29:55.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-09-08 00:30:01.278 00:00:10.370 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:30:55.945 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6452 1 2025-09-08 00:31:01.689 00:00:10.367 TCP 23.104.0.1:35286 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:31:56.202 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 2025-09-08 00:32:02.108 00:00:10.366 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:27:25.172 00:06:00.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:32:56.422 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41546 10 6452 1 2025-09-08 00:33:02.512 00:00:10.392 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:33:56.644 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 10 6452 1 2025-09-08 00:34:02.942 00:00:10.372 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:34:46.828 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:34:46.834 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:34:56.873 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 10 6452 1 2025-09-08 00:35:03.354 00:00:10.360 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:35:57.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48372 10 6452 1 2025-09-08 00:36:03.755 00:00:10.377 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:31:25.180 00:06:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:36:57.346 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-09-08 00:37:04.175 00:00:10.366 TCP 23.104.0.1:51024 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:37:57.517 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-09-08 00:38:04.575 00:00:10.328 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:38:57.724 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-09-08 00:39:04.947 00:00:10.377 TCP 23.104.0.1:44964 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:34:25.181 00:06:00.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:39:46.875 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:39:46.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:39:57.898 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34892 10 6452 1 2025-09-08 00:40:05.369 00:00:10.327 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:40:58.095 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-09-08 00:41:05.744 00:00:10.365 TCP 23.104.0.1:60554 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:41:58.311 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-09-08 00:42:06.152 00:00:10.365 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:42:58.693 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-09-08 00:43:06.555 00:00:10.325 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:38:25.187 00:06:00.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:43:58.909 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40792 10 6452 1 2025-09-08 00:44:06.924 00:00:10.389 TCP 23.104.0.1:46624 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:44:46.972 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:44:46.999 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:44:59.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37398 10 6452 1 2025-09-08 00:45:07.347 00:00:10.367 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:45:59.308 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55260 10 6452 1 2025-09-08 00:46:07.748 00:00:10.366 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:41:25.185 00:06:00.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:46:59.516 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-09-08 00:47:08.150 00:00:10.369 TCP 23.104.0.1:47774 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:48:08.558 00:00:10.359 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:47:59.693 00:00:17.644 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-09-08 00:49:07.389 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-09-08 00:49:08.959 00:00:10.326 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:49:46.947 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:49:47.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:50:09.328 00:00:10.363 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:50:07.609 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-09-08 00:45:25.188 00:06:00.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:51:09.726 00:00:10.372 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:51:07.825 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-09-08 00:52:08.069 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-09-08 00:52:10.133 00:00:10.364 TCP 23.104.0.1:46272 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:53:10.533 00:00:10.387 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:53:08.300 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-09-08 00:48:25.187 00:06:00.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-08 00:54:08.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-09-08 00:54:10.947 00:00:10.368 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:54:47.450 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 00:54:47.288 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 00:55:11.357 00:00:10.362 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:55:08.692 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-09-08 00:56:08.919 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-09-08 00:56:11.761 00:00:10.331 TCP 23.104.0.1:38342 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:57:09.123 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42068 10 6452 1 2025-09-08 00:57:12.128 00:00:10.365 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-09-08 00:52:25.190 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-08 00:58:09.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56982 10 6452 1 2025-09-08 00:58:12.526 00:00:10.373 TCP 23.104.0.1:59010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 498225, total packets: 1570, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-09-07 23:56:25 - 2025-09-08 00:58:25 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0032s User: 0.0016s Wall: 0.0028s flows/second: 58375.1 Runtime: 0.0028s