Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 22:58:45.734 00:00:10.375 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:59:39.798 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35286 10 6452 1 2025-08-13 22:59:46.142 00:00:10.363 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:56:10.902 00:05:00.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:00:40.029 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-08-13 23:00:46.553 00:00:10.366 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:57:10.906 00:05:00.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:01:40.238 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-08-13 23:01:46.959 00:00:10.374 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:02:42.413 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:02:42.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:02:40.448 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60630 10 6452 1 2025-08-13 23:02:47.384 00:00:10.370 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:03:40.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-08-13 23:03:47.817 00:00:10.364 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:04:40.879 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49898 10 6452 1 2025-08-13 23:04:48.226 00:00:10.362 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:05:41.096 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-08-13 23:05:48.631 00:00:10.365 TCP 23.104.0.1:56880 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:02:10.909 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:06:41.275 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-08-13 23:06:49.035 00:00:10.370 TCP 23.104.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:03:10.911 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:07:42.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:07:42.740 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:07:41.488 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57404 10 6452 1 2025-08-13 23:07:49.453 00:00:10.363 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:08:41.715 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-08-13 23:08:49.852 00:00:10.377 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:09:42.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-08-13 23:09:50.269 00:00:10.323 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:10:42.308 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-08-13 23:10:50.630 00:00:10.328 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:11:42.529 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55270 10 6452 1 2025-08-13 23:11:50.995 00:00:10.368 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:08:10.909 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:12:42.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:12:42.632 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:12:42.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 10 6452 1 2025-08-13 23:12:51.404 00:00:10.368 TCP 23.104.0.1:35996 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:09:10.912 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:13:42.905 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-08-13 23:13:51.807 00:00:10.369 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:14:43.128 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-08-13 23:14:52.210 00:00:10.369 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:15:43.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-08-13 23:15:52.622 00:00:10.335 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:16:43.549 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55062 10 6452 1 2025-08-13 23:16:52.995 00:00:10.324 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:17:42.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:17:42.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:17:43.760 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-08-13 23:17:53.357 00:00:10.362 TCP 23.104.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:14:10.910 00:05:00.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:18:43.934 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-08-13 23:18:53.755 00:00:10.382 TCP 23.104.0.1:48056 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:15:10.914 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:19:44.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-08-13 23:19:54.177 00:00:10.365 TCP 23.104.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:20:44.378 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:56896 12 10365 1 2025-08-13 23:20:54.580 00:00:10.401 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 15 1926 1 2025-08-13 23:21:44.577 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-08-13 23:21:55.020 00:00:10.369 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:22:42.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:22:42.970 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:22:44.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-08-13 23:22:55.422 00:00:10.326 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:23:45.006 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-08-13 23:23:55.786 00:00:10.324 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:20:10.921 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:24:45.216 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-08-13 23:24:56.148 00:00:10.365 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:21:10.924 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:25:45.430 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-08-13 23:25:56.553 00:00:10.362 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:26:45.638 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-08-13 23:26:56.958 00:00:10.382 TCP 23.104.0.1:33182 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:27:42.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:27:42.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:27:45.850 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-08-13 23:27:57.385 00:00:10.374 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:28:46.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-08-13 23:28:57.801 00:00:10.375 TCP 23.104.0.1:58430 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:29:46.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34452 10 6452 1 2025-08-13 23:29:58.220 00:00:10.364 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:26:10.923 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:30:46.509 00:00:11.967 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-08-13 23:30:58.627 00:00:10.365 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:27:10.926 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:31:48.520 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 10 6452 1 2025-08-13 23:31:59.061 00:00:10.329 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:32:42.948 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:32:43.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:32:48.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-08-13 23:32:59.426 00:00:10.325 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:33:48.958 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-08-13 23:33:59.789 00:00:10.370 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:34:49.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57366 10 6452 1 2025-08-13 23:35:00.204 00:00:10.368 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:35:49.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2025-08-13 23:36:00.612 00:00:10.369 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:32:10.923 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:36:49.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50500 10 6452 1 2025-08-13 23:37:01.025 00:00:10.320 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:33:10.925 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:37:43.153 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:37:43.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:37:49.837 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-08-13 23:38:01.384 00:00:10.364 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:38:50.071 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39766 10 6452 1 2025-08-13 23:39:01.784 00:00:10.370 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:39:50.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-08-13 23:40:02.198 00:00:10.370 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:40:50.504 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 10 6452 1 2025-08-13 23:41:02.605 00:00:10.362 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:41:50.677 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38118 10 6452 1 2025-08-13 23:38:10.926 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:42:03.008 00:00:10.362 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:42:43.407 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:42:43.381 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:42:50.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40038 10 6452 1 2025-08-13 23:39:10.928 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:43:03.413 00:00:10.360 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:43:51.124 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-13 23:44:03.817 00:00:10.368 TCP 23.104.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:44:51.346 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-08-13 23:45:04.224 00:00:10.367 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:45:51.577 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-08-13 23:46:04.635 00:00:10.367 TCP 23.104.0.1:47430 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:46:51.875 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-08-13 23:47:05.054 00:00:10.367 TCP 23.104.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:47:43.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:47:43.312 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:47:52.105 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36074 10 6452 1 2025-08-13 23:48:05.462 00:00:10.327 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:44:10.927 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:48:52.274 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-08-13 23:49:05.831 00:00:10.387 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:45:10.929 00:05:00.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:49:52.490 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40242 10 6452 1 2025-08-13 23:50:06.256 00:00:10.366 TCP 23.104.0.1:46810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:50:52.660 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-08-13 23:51:06.665 00:00:10.361 TCP 23.104.0.1:37648 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:51:52.876 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-08-13 23:52:07.086 00:00:10.364 TCP 23.104.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:52:43.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:52:43.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:52:53.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-08-13 23:53:07.488 00:00:10.333 TCP 23.104.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:53:53.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 2025-08-13 23:50:10.927 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 23:54:07.860 00:00:10.369 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:54:54.054 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40002 10 6452 1 2025-08-13 23:51:10.931 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 23:55:08.269 00:00:10.365 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:55:54.226 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-08-13 23:56:08.678 00:00:10.331 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:56:54.400 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-08-13 23:57:09.058 00:00:10.379 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-08-13 23:57:43.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 23:57:43.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 23:57:54.567 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-08-13 23:58:09.476 00:00:10.366 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496228, total packets: 1568, avg bps: 1064, avg pps: 0, avg bpp: 316 Time window: 2025-08-13 22:56:10 - 2025-08-13 23:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0032s flows/second: 51434.8 Runtime: 0.0032s