Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-09 23:59:08.272 00:00:10.365 TCP 23.104.0.1:38112 -> 1.101.0.1:3000 11 1507 1 2025-09-09 23:59:08.680 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46186 10 6452 1 2025-09-09 23:55:26.111 00:04:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-09 23:54:26.113 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 00:00:08.673 00:00:10.323 TCP 23.104.0.1:44498 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:00:08.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6452 1 2025-09-10 00:00:51.105 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:00:50.995 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:01:09.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-09-10 00:01:09.037 00:00:10.363 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:02:09.323 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-09-10 00:02:09.442 00:00:10.361 TCP 23.104.0.1:34804 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:00:26.900 00:02:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 5 317 1 2025-09-10 00:03:09.868 00:00:10.371 TCP 23.104.0.1:52984 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:03:09.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-09-10 00:04:09.755 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-09-10 00:04:10.279 00:00:10.364 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:00:26.112 00:04:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:05:09.944 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-09-10 00:05:10.682 00:00:10.333 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:05:51.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:05:51.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:06:10.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-09-10 00:06:11.086 00:00:10.366 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:07:10.343 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43662 10 6452 1 2025-09-10 00:07:11.494 00:00:10.376 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:03:26.115 00:04:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:08:10.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40766 10 6452 1 2025-09-10 00:08:11.910 00:00:10.377 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:09:10.731 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-09-10 00:09:12.322 00:00:10.317 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:10:10.906 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-09-10 00:05:26.113 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-10 00:10:12.681 00:00:10.332 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:10:51.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:10:51.154 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:11:11.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50348 10 6452 1 2025-09-10 00:11:13.055 00:00:10.364 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:12:11.335 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-09-10 00:08:26.116 00:04:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:12:13.460 00:00:10.322 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:13:11.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52534 10 6452 1 2025-09-10 00:13:13.825 00:00:10.401 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:14:11.731 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-09-10 00:14:14.264 00:00:10.360 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:15:14.663 00:00:10.364 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:15:11.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-09-10 00:15:51.405 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:15:51.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:16:12.179 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-09-10 00:11:26.904 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-09-10 00:16:15.093 00:00:10.373 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:17:12.349 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-09-10 00:17:15.504 00:00:10.325 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:18:15.865 00:00:10.371 TCP 23.104.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:13:26.118 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 00:18:12.555 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51678 10 6452 1 2025-09-10 00:19:12.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6452 1 2025-09-10 00:19:16.273 00:00:10.361 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:20:12.946 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46144 10 6452 1 2025-09-10 00:20:16.673 00:00:10.325 TCP 23.104.0.1:42562 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:20:51.468 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:20:51.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:18:26.117 00:03:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 8 492 1 2025-09-10 00:21:13.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-09-10 00:21:17.035 00:00:10.361 TCP 23.104.0.1:44560 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:22:13.395 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 10 6452 1 2025-09-10 00:22:17.435 00:00:10.366 TCP 23.104.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:23:13.606 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-09-10 00:23:17.837 00:00:10.388 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:19:26.904 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-09-10 00:24:13.817 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-09-10 00:24:18.263 00:00:10.365 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:25:14.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51072 10 6452 1 2025-09-10 00:25:18.667 00:00:10.323 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:25:51.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:25:51.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:26:14.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59438 10 6452 1 2025-09-10 00:22:26.116 00:04:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:26:19.027 00:00:10.362 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:27:14.507 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59270 10 6452 1 2025-09-10 00:27:19.425 00:00:10.325 TCP 23.104.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:28:14.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58990 10 6452 1 2025-09-10 00:28:19.792 00:00:10.368 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:29:14.929 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-09-10 00:26:26.119 00:03:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 8 492 1 2025-09-10 00:29:20.206 00:00:10.367 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:30:15.159 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-09-10 00:30:20.614 00:00:10.366 TCP 23.104.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:30:51.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:30:51.824 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:31:15.366 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-09-10 00:27:26.117 00:04:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:31:21.020 00:00:10.364 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:32:15.579 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-09-10 00:32:21.427 00:00:10.366 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:33:15.755 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-09-10 00:33:21.829 00:00:10.388 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:34:16.491 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-09-10 00:30:26.120 00:04:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:34:22.255 00:00:10.367 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:35:16.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-09-10 00:35:22.665 00:00:10.365 TCP 23.104.0.1:58542 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:35:51.890 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:35:51.929 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:32:26.119 00:04:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:36:16.916 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-09-10 00:36:23.096 00:00:10.365 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:37:17.125 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-09-10 00:37:23.503 00:00:10.361 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:38:17.361 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 12 10367 1 2025-09-10 00:38:23.902 00:00:10.403 TCP 23.104.0.1:42484 -> 1.101.0.1:3000 15 1926 1 2025-09-10 00:35:26.122 00:04:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:39:17.572 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-09-10 00:39:24.346 00:00:10.367 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:40:17.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-09-10 00:40:24.749 00:00:10.327 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:40:51.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:40:52.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:37:26.123 00:04:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:41:18.013 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-09-10 00:41:25.112 00:00:10.365 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:42:18.235 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 11 6813 1 2025-09-10 00:42:25.518 00:00:10.365 TCP 23.104.0.1:37890 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:43:18.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39616 10 6452 1 2025-09-10 00:43:25.918 00:00:10.399 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:40:26.126 00:04:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:44:18.690 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48912 10 6452 1 2025-09-10 00:44:26.361 00:00:10.436 TCP 23.104.0.1:48114 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:45:18.862 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45600 10 6452 1 2025-09-10 00:45:26.836 00:00:10.390 TCP 23.104.0.1:52886 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:45:52.222 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:45:52.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:46:19.062 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40050 10 6452 1 2025-09-10 00:46:27.266 00:00:10.322 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:42:26.124 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-09-10 00:47:19.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-09-10 00:47:27.640 00:00:10.362 TCP 23.104.0.1:55176 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:48:19.453 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:48816 10 6452 1 2025-09-10 00:48:28.051 00:00:10.325 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:45:26.126 00:04:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-09-10 00:49:19.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-09-10 00:49:28.413 00:00:10.362 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:50:20.027 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33910 10 6452 1 2025-09-10 00:50:28.813 00:00:10.366 TCP 23.104.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:50:52.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:50:52.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:51:20.267 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43000 10 6452 1 2025-09-10 00:51:29.218 00:00:10.366 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:52:20.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44528 10 6452 1 2025-09-10 00:52:29.625 00:00:10.376 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:48:26.928 00:05:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-09-10 00:53:20.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-09-10 00:53:30.029 00:00:10.365 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:54:20.864 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-09-10 00:54:30.429 00:00:10.329 TCP 23.104.0.1:46846 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:50:26.127 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-09-10 00:55:21.151 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 10 6452 1 2025-09-10 00:55:30.792 00:00:10.322 TCP 23.104.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:55:52.093 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 00:55:52.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 00:56:21.364 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6452 1 2025-09-10 00:56:31.150 00:00:10.360 TCP 23.104.0.1:37938 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:57:21.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-09-10 00:57:31.548 00:00:10.364 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-09-10 00:54:26.125 00:04:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-09-10 00:58:21.745 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-09-10 00:58:31.949 00:00:10.370 TCP 23.104.0.1:50680 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 168, total bytes: 503833, total packets: 1592, avg bps: 1045, avg pps: 0, avg bpp: 316 Time window: 2025-09-09 23:54:26 - 2025-09-10 00:58:42 Total flows processed: 168, passed: 168, Blocks skipped: 0, Bytes read: 17536 Sys: 0.0038s User: 0.0000s Wall: 0.0018s flows/second: 94165.9 Runtime: 0.0018s