Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 23:59:07.891 00:00:10.378 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:59:39.320 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-09-12 00:00:08.305 00:00:10.364 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:55:27.106 00:06:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:00:39.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42434 10 6452 1 2025-09-12 00:01:08.711 00:00:10.365 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-09-11 23:56:27.102 00:06:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:01:39.752 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-09-12 00:01:49.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:01:49.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:02:09.119 00:00:10.363 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:02:39.973 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39514 10 6452 1 2025-09-12 00:03:09.519 00:00:10.367 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:03:40.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-09-12 00:04:09.926 00:00:10.389 TCP 23.104.0.1:40632 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:04:40.422 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51696 10 6452 1 2025-09-12 00:05:10.352 00:00:10.327 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:05:40.635 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48664 10 6452 1 2025-09-12 00:06:10.722 00:00:10.592 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:06:49.045 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:06:40.845 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-09-12 00:06:48.702 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:07:11.353 00:00:10.374 TCP 23.104.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:02:27.106 00:06:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:07:41.083 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-09-12 00:08:11.767 00:00:10.372 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:03:27.103 00:06:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:08:41.254 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47144 12 10367 1 2025-09-12 00:09:12.173 00:00:10.449 TCP 23.104.0.1:54892 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:09:41.491 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6452 1 2025-09-12 00:10:12.669 00:00:10.365 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:10:41.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-09-12 00:11:13.108 00:00:10.364 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:11:49.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:11:49.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:11:41.933 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55868 10 6452 1 2025-09-12 00:12:13.510 00:00:10.365 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:12:42.169 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-09-12 00:13:13.912 00:00:10.368 TCP 23.104.0.1:54034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:13:42.351 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 10 6452 1 2025-09-12 00:14:14.319 00:00:10.364 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:09:27.106 00:06:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:14:42.529 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-09-12 00:15:14.722 00:00:10.382 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:10:27.106 00:06:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:15:42.699 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-09-12 00:16:15.144 00:00:10.365 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:16:49.149 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:16:49.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:16:42.908 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-09-12 00:17:15.547 00:00:10.369 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:17:43.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-09-12 00:18:15.948 00:00:10.372 TCP 23.104.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:18:43.350 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35612 10 6452 1 2025-09-12 00:19:16.364 00:00:10.371 TCP 23.104.0.1:44990 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:19:43.576 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-09-12 00:20:16.775 00:00:10.370 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:20:43.795 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-09-12 00:21:17.184 00:00:10.323 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:16:27.110 00:06:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:21:49.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:21:49.606 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:21:44.033 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46844 10 6452 1 2025-09-12 00:17:27.107 00:06:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:22:17.543 00:00:10.364 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:22:44.212 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-09-12 00:23:17.941 00:00:10.453 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:23:44.434 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:45666 12 10367 1 2025-09-12 00:24:18.432 00:00:10.371 TCP 23.104.0.1:52662 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:24:44.682 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41570 10 6452 1 2025-09-12 00:25:18.840 00:00:10.401 TCP 23.104.0.1:40724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:25:44.898 00:00:10.338 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-09-12 00:26:19.272 00:00:10.367 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:26:49.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:26:49.566 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:26:45.278 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-12 00:27:19.675 00:00:10.371 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:27:45.502 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-09-12 00:23:27.110 00:06:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:28:20.105 00:00:10.370 TCP 23.104.0.1:52542 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:28:45.729 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-09-12 00:24:27.108 00:06:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:29:20.513 00:00:10.365 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:29:45.930 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-09-12 00:30:20.915 00:00:10.366 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:30:46.155 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-09-12 00:31:21.320 00:00:10.328 TCP 23.104.0.1:40138 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:31:49.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:31:49.566 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:31:46.384 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54342 10 6452 1 2025-09-12 00:32:21.690 00:00:10.323 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:32:46.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43016 10 6452 1 2025-09-12 00:33:22.062 00:00:10.368 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:33:46.814 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-09-12 00:34:22.475 00:00:10.322 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:34:46.989 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-09-12 00:30:27.112 00:06:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:35:22.836 00:00:10.402 TCP 23.104.0.1:50128 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:35:47.216 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-09-12 00:31:27.111 00:06:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:36:23.280 00:00:10.364 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:36:49.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:36:49.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:36:47.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6452 1 2025-09-12 00:37:23.693 00:00:10.328 TCP 23.104.0.1:37468 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:37:47.654 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55248 10 6452 1 2025-09-12 00:38:24.070 00:00:10.321 TCP 23.104.0.1:44800 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:38:47.819 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-09-12 00:39:24.428 00:00:10.368 TCP 23.104.0.1:45806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:39:48.041 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-09-12 00:40:24.842 00:00:10.348 TCP 23.104.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:40:48.264 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6452 1 2025-09-12 00:41:25.228 00:00:10.366 TCP 23.104.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:41:49.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:41:49.727 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:41:48.484 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-09-12 00:37:27.115 00:06:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:42:25.633 00:00:10.360 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:42:48.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-09-12 00:38:27.112 00:06:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:43:26.034 00:00:10.364 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:43:48.909 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58846 10 6452 1 2025-09-12 00:44:26.437 00:00:10.325 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:44:49.127 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41198 10 6452 1 2025-09-12 00:45:26.802 00:00:10.369 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:45:49.313 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-09-12 00:46:27.205 00:00:10.329 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:46:49.929 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:46:49.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:46:49.494 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35732 10 6452 1 2025-09-12 00:47:27.568 00:00:10.369 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:47:49.711 00:00:11.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-09-12 00:48:27.974 00:00:10.440 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 15 1926 1 2025-09-12 00:48:50.899 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48268 12 10365 1 2025-09-12 00:44:27.116 00:06:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:49:28.456 00:00:10.366 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:49:51.139 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-09-12 00:45:27.115 00:06:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:50:28.862 00:00:10.369 TCP 23.104.0.1:55104 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:50:51.353 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60882 10 6452 1 2025-09-12 00:51:29.269 00:00:10.316 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:51:50.043 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:51:49.877 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:51:51.569 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60560 10 6452 1 2025-09-12 00:52:29.623 00:00:10.365 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:52:51.789 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42186 10 6452 1 2025-09-12 00:53:30.025 00:00:10.450 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:53:52.012 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-09-12 00:54:30.522 00:00:10.366 TCP 23.104.0.1:55094 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:54:52.231 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6452 1 2025-09-12 00:55:30.928 00:00:10.409 TCP 23.104.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:55:52.405 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2025-09-12 00:51:27.118 00:06:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-12 00:56:31.398 00:00:10.365 TCP 23.104.0.1:55382 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:56:49.827 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 00:56:49.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 00:56:52.615 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-09-12 00:52:27.116 00:06:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-12 00:57:31.810 00:00:10.363 TCP 23.104.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-09-12 00:57:52.836 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52402 10 6452 1 2025-09-12 00:58:32.212 00:00:10.324 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 505634, total packets: 1592, avg bps: 1065, avg pps: 0, avg bpp: 317 Time window: 2025-09-11 23:55:27 - 2025-09-12 00:58:42 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 77290.0 Runtime: 0.0021s