Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 23:58:43.026 00:00:10.360 TCP 23.104.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-09-22 23:59:19.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-09-22 23:59:43.427 00:00:10.367 TCP 23.104.0.1:39170 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:00:19.327 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-09-22 23:56:32.199 00:05:01.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:00:43.833 00:00:10.386 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:01:19.542 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-09-22 23:57:32.203 00:05:01.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:01:44.258 00:00:10.354 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:02:06.703 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:02:06.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:02:19.751 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-09-23 00:02:44.652 00:00:10.364 TCP 23.104.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:03:19.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-09-23 00:03:45.061 00:00:10.365 TCP 23.104.0.1:55578 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:04:20.133 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38720 10 6452 1 2025-09-23 00:04:45.465 00:00:10.321 TCP 23.104.0.1:47046 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:05:20.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-09-23 00:05:45.826 00:00:10.390 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:06:20.572 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-09-23 00:02:32.202 00:05:01.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:06:46.251 00:00:10.370 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:07:06.742 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:07:06.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:07:20.790 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-09-23 00:03:32.205 00:05:01.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:07:46.657 00:00:10.324 TCP 23.104.0.1:40212 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:08:20.959 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 12 6556 1 2025-09-23 00:08:47.019 00:00:10.356 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:09:21.184 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-09-23 00:09:47.416 00:00:10.333 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:10:21.353 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-09-23 00:10:47.792 00:00:10.366 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:11:21.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-09-23 00:11:48.200 00:00:10.357 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:12:06.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:12:06.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:12:21.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 10 6452 1 2025-09-23 00:08:32.205 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:12:48.602 00:00:10.363 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:13:22.000 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6452 1 2025-09-23 00:09:32.208 00:05:01.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:13:49.005 00:00:10.362 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:14:22.220 00:00:10.448 TCP 1.101.0.1:3000 -> 22.102.0.1:37962 10 6452 1 2025-09-23 00:14:49.423 00:00:10.327 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:15:22.706 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-09-23 00:15:49.786 00:00:10.369 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:16:22.875 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-09-23 00:16:50.189 00:00:10.364 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:17:06.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:17:07.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:17:23.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-23 00:17:50.588 00:00:10.368 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:18:23.308 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-09-23 00:14:32.206 00:05:01.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:18:50.993 00:00:10.364 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:15:32.208 00:05:01.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:19:23.524 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56818 10 6452 1 2025-09-23 00:19:51.403 00:00:10.366 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:20:23.691 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50768 10 6452 1 2025-09-23 00:20:51.806 00:00:10.382 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:21:23.897 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-09-23 00:21:52.260 00:00:10.366 TCP 23.104.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:22:07.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:22:07.227 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:22:24.085 00:00:10.497 TCP 1.101.0.1:3000 -> 22.102.0.1:45420 10 6452 1 2025-09-23 00:22:52.664 00:00:10.364 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:23:24.618 00:00:10.353 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-09-23 00:23:53.095 00:00:10.371 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:24:25.024 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55866 10 6452 1 2025-09-23 00:20:32.207 00:05:01.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:24:53.499 00:00:10.373 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:21:32.210 00:05:01.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:25:25.241 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-09-23 00:25:53.909 00:00:10.368 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:26:25.451 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-09-23 00:26:54.315 00:00:10.618 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:27:07.225 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:27:07.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:27:25.672 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6452 1 2025-09-23 00:27:54.978 00:00:10.391 TCP 23.104.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:28:25.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-09-23 00:28:55.402 00:00:10.362 TCP 23.104.0.1:49604 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:29:26.106 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-09-23 00:29:55.801 00:00:10.368 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:30:26.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-09-23 00:26:32.209 00:05:01.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:30:56.207 00:00:10.364 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:31:26.534 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37528 12 6556 1 2025-09-23 00:27:32.210 00:05:01.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:31:56.610 00:00:10.369 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:32:07.171 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:32:07.086 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:32:26.757 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37858 10 6452 1 2025-09-23 00:32:57.018 00:00:10.364 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:33:26.968 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37476 10 6452 1 2025-09-23 00:33:57.419 00:00:10.359 TCP 23.104.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:34:27.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45864 10 6452 1 2025-09-23 00:34:57.818 00:00:10.328 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:35:27.406 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-09-23 00:35:58.185 00:00:10.320 TCP 23.104.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:32:32.235 00:05:01.393 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:36:27.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35104 10 6452 1 2025-09-23 00:37:07.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:36:58.546 00:00:10.365 TCP 23.104.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:37:07.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:33:32.237 00:05:01.388 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:37:27.840 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-09-23 00:37:58.947 00:00:10.372 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:38:28.094 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39158 10 6452 1 2025-09-23 00:38:59.356 00:00:10.367 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:39:28.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-09-23 00:39:59.762 00:00:10.372 TCP 23.104.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:40:28.518 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-09-23 00:41:00.175 00:00:10.781 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:41:28.728 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6452 1 2025-09-23 00:42:07.317 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:42:00.995 00:00:10.320 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:42:07.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:38:32.236 00:05:01.395 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:42:28.900 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-09-23 00:43:01.353 00:00:10.368 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:39:32.238 00:05:01.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:43:29.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-09-23 00:44:01.758 00:00:10.373 TCP 23.104.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:44:29.341 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49942 10 6452 1 2025-09-23 00:45:02.168 00:00:10.368 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:45:29.555 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-09-23 00:46:02.569 00:00:10.366 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:46:29.779 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-09-23 00:47:07.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:47:07.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:47:02.967 00:00:10.371 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:47:30.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-09-23 00:48:03.380 00:00:10.369 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:44:32.237 00:05:01.395 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:48:30.243 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-09-23 00:49:03.790 00:00:10.373 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:45:32.240 00:05:01.389 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:49:30.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-09-23 00:50:04.195 00:00:10.342 TCP 23.104.0.1:52418 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:50:30.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35792 10 6452 1 2025-09-23 00:51:04.583 00:00:10.330 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:51:30.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-09-23 00:52:07.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:52:07.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:52:04.963 00:00:10.367 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:52:31.112 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-09-23 00:53:05.362 00:00:10.369 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:53:31.320 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-09-23 00:54:05.771 00:00:10.332 TCP 23.104.0.1:47828 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:50:32.239 00:05:01.394 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 00:54:31.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-09-23 00:55:06.138 00:00:10.364 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:51:32.240 00:05:01.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 00:55:31.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-09-23 00:56:06.538 00:00:10.878 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:56:31.968 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-09-23 00:57:07.468 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 00:57:07.792 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 00:57:07.452 00:00:10.979 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:57:32.184 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-09-23 00:58:08.470 00:00:10.367 TCP 23.104.0.1:34338 -> 1.101.0.1:3000 11 1507 1 2025-09-23 00:58:32.400 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48552 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1069, avg pps: 0, avg bpp: 316 Time window: 2025-09-22 23:56:32 - 2025-09-23 00:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0008s Wall: 0.0026s flows/second: 63544.2 Runtime: 0.0026s