Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 23:58:46.684 00:00:10.371 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:59:18.408 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-09-14 23:59:47.106 00:00:10.364 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:00:18.626 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 10 6452 1 2025-09-14 23:56:28.516 00:05:00.948 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:00:47.509 00:00:10.327 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-09-14 23:57:28.519 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:01:18.799 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-09-15 00:01:47.878 00:00:10.395 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:02:18.970 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-09-15 00:02:48.310 00:00:10.364 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:03:15.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:03:15.548 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:03:19.208 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40866 10 6452 1 2025-09-15 00:03:48.714 00:00:10.362 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:04:19.440 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-09-15 00:04:49.111 00:00:10.366 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:05:19.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56658 10 6452 1 2025-09-15 00:05:49.517 00:00:10.367 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:02:28.517 00:05:00.953 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:06:19.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-09-15 00:06:49.925 00:00:11.741 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 13 1611 1 2025-09-15 00:03:28.520 00:05:00.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:07:20.044 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-09-15 00:07:51.702 00:00:10.366 TCP 23.104.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:08:15.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:08:15.559 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:08:20.261 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6452 1 2025-09-15 00:08:52.109 00:00:10.361 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:09:20.437 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 14 14280 1 2025-09-15 00:09:52.523 00:00:10.508 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 17 2241 1 2025-09-15 00:10:20.700 00:00:10.681 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-09-15 00:10:53.092 00:00:10.328 TCP 23.104.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:11:21.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-09-15 00:11:53.459 00:00:10.369 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:12:21.639 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51426 10 6452 1 2025-09-15 00:08:28.518 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:12:53.866 00:00:10.370 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:13:15.716 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:13:15.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:13:21.821 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-09-15 00:09:28.521 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:13:54.274 00:00:10.370 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:14:22.067 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33948 10 6452 1 2025-09-15 00:14:54.679 00:00:10.368 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:15:22.282 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-09-15 00:15:55.100 00:00:10.363 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:16:22.492 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-09-15 00:16:55.507 00:00:10.368 TCP 23.104.0.1:34540 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:17:22.666 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 10 6452 1 2025-09-15 00:17:55.912 00:00:10.369 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:18:15.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:18:16.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:14:28.519 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:18:22.876 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-09-15 00:18:56.315 00:00:10.364 TCP 23.104.0.1:50068 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:15:28.520 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:19:23.069 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-09-15 00:19:56.719 00:00:10.378 TCP 23.104.0.1:35912 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:20:23.279 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 10 6452 1 2025-09-15 00:20:57.137 00:00:17.167 TCP 23.104.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:21:23.507 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-09-15 00:22:04.342 00:00:10.360 TCP 23.104.0.1:49774 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:22:23.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-09-15 00:23:15.808 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:23:04.741 00:00:10.372 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:23:15.846 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:23:23.962 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-09-15 00:24:05.150 00:00:10.366 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:20:28.520 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:24:24.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-09-15 00:25:05.561 00:00:10.317 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:21:28.521 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:25:24.367 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 10 6452 1 2025-09-15 00:26:05.917 00:00:10.379 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:26:24.582 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58882 10 6452 1 2025-09-15 00:27:06.339 00:00:10.366 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:27:24.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 10 6452 1 2025-09-15 00:28:16.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:28:15.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:28:06.746 00:00:10.346 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:28:25.009 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-09-15 00:29:07.125 00:00:10.439 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 15 1926 1 2025-09-15 00:29:25.222 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:54004 12 10367 1 2025-09-15 00:30:07.604 00:00:10.368 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:26:28.522 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:30:25.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6452 1 2025-09-15 00:31:08.007 00:00:10.367 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:27:28.526 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:31:25.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-09-15 00:32:08.414 00:00:10.374 TCP 23.104.0.1:45258 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:32:25.856 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51176 10 6452 1 2025-09-15 00:33:16.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:33:16.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:33:08.832 00:00:10.389 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:33:26.041 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-09-15 00:34:09.268 00:00:10.364 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:34:26.209 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-09-15 00:35:09.672 00:00:10.368 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:35:26.833 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-09-15 00:36:10.105 00:00:10.364 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:32:28.525 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:36:27.070 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-09-15 00:37:10.507 00:00:10.384 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:33:28.526 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:37:27.244 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-09-15 00:38:16.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:38:16.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:38:10.931 00:00:10.386 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:38:27.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-09-15 00:39:11.362 00:00:10.358 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:39:27.674 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-09-15 00:40:11.763 00:00:10.377 TCP 23.104.0.1:57356 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:40:27.844 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-09-15 00:41:12.180 00:00:10.368 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:41:28.080 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50926 10 6452 1 2025-09-15 00:42:12.586 00:00:10.368 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:38:28.525 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:42:28.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38594 10 6452 1 2025-09-15 00:43:16.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:43:16.292 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:43:13.004 00:00:10.335 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:39:28.527 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:43:28.467 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-09-15 00:44:13.380 00:00:10.417 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:44:28.678 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41506 10 6452 1 2025-09-15 00:45:13.847 00:00:10.386 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:45:28.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-09-15 00:46:14.271 00:00:10.474 TCP 23.104.0.1:48438 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:46:29.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-09-15 00:47:14.784 00:00:10.367 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:47:29.320 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-09-15 00:48:16.544 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:48:16.605 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:48:15.190 00:00:10.367 TCP 23.104.0.1:51378 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:44:28.525 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:48:29.528 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-09-15 00:49:15.598 00:00:10.362 TCP 23.104.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:45:28.527 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:49:29.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-09-15 00:50:16.001 00:00:10.360 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:50:29.955 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-09-15 00:51:16.398 00:00:10.326 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:51:30.181 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-09-15 00:52:16.762 00:00:10.380 TCP 23.104.0.1:56178 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:52:30.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-09-15 00:53:16.704 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:53:16.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:53:17.183 00:00:10.358 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:53:30.633 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-09-15 00:50:28.530 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 00:54:17.583 00:00:10.368 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:54:30.838 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-09-15 00:51:28.531 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 00:55:17.982 00:00:10.366 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:55:31.077 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-09-15 00:56:18.379 00:00:10.370 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:56:31.283 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-09-15 00:57:18.787 00:00:10.368 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:57:31.488 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-09-15 00:58:16.898 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 00:58:17.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 00:58:19.187 00:00:10.366 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-09-15 00:58:31.702 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47104 10 6452 1 Summary: total flows: 164, total bytes: 511348, total packets: 1590, avg bps: 1095, avg pps: 0, avg bpp: 321 Time window: 2025-09-14 23:56:28 - 2025-09-15 00:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0020s Wall: 0.0021s flows/second: 76779.3 Runtime: 0.0022s