Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 12:58:47.979 00:00:10.331 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-08-24 12:59:34.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6452 1 2025-08-24 12:59:48.349 00:00:10.613 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:00:34.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-08-24 13:00:49.006 00:00:10.369 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-08-24 12:57:16.805 00:05:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:01:34.732 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-08-24 13:01:49.426 00:00:10.367 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-08-24 12:58:16.801 00:05:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:02:48.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:02:34.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46894 10 6452 1 2025-08-24 13:02:47.961 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:02:49.836 00:00:10.345 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:03:35.182 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-08-24 13:03:50.218 00:00:10.365 TCP 23.104.0.1:39788 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:04:35.353 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-08-24 13:04:50.616 00:00:10.367 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:05:35.563 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-08-24 13:05:51.022 00:00:10.366 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:06:35.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-08-24 13:06:51.427 00:00:10.364 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:03:16.808 00:05:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:07:36.003 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-08-24 13:07:48.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:07:48.342 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:07:51.851 00:00:10.375 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:04:16.806 00:05:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:08:36.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-24 13:08:52.266 00:00:10.327 TCP 23.104.0.1:37688 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:09:36.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-08-24 13:09:52.626 00:00:10.363 TCP 23.104.0.1:43432 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:10:36.651 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-08-24 13:10:53.028 00:00:10.363 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:11:36.831 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-08-24 13:11:53.430 00:00:10.363 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:12:48.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:12:37.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-08-24 13:12:48.317 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:12:53.837 00:00:10.391 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:09:16.809 00:05:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:13:37.299 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6452 1 2025-08-24 13:13:54.267 00:00:10.371 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:10:16.807 00:05:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:14:37.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53116 10 6452 1 2025-08-24 13:14:54.671 00:00:10.363 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:15:37.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-08-24 13:15:55.094 00:00:10.328 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:16:37.975 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:54440 10 6452 1 2025-08-24 13:16:55.456 00:00:10.366 TCP 23.104.0.1:55774 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:17:48.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:17:38.174 00:00:10.530 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-08-24 13:17:48.486 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:17:55.854 00:00:10.375 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:18:38.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35102 10 6452 1 2025-08-24 13:18:56.266 00:00:10.615 TCP 23.104.0.1:51766 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:15:16.811 00:05:00.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:19:38.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-08-24 13:19:56.917 00:00:10.378 TCP 23.104.0.1:35970 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:16:16.809 00:05:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:20:39.180 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58824 10 6452 1 2025-08-24 13:20:57.329 00:00:10.329 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:21:39.360 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 12 10367 1 2025-08-24 13:21:57.692 00:00:10.451 TCP 23.104.0.1:52830 -> 1.101.0.1:3000 15 1926 1 2025-08-24 13:22:39.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 11 6504 1 2025-08-24 13:22:48.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:22:48.458 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:22:58.167 00:00:10.363 TCP 23.104.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:23:39.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51046 10 6452 1 2025-08-24 13:23:58.568 00:00:10.366 TCP 23.104.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:24:39.984 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-08-24 13:24:58.973 00:00:10.365 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:21:16.812 00:05:00.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:25:40.202 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-08-24 13:25:59.376 00:00:10.362 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:22:16.810 00:05:00.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:26:40.406 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6452 1 2025-08-24 13:26:59.776 00:00:10.372 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:27:48.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:27:40.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47764 10 6452 1 2025-08-24 13:27:48.822 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:28:00.206 00:00:10.364 TCP 23.104.0.1:39914 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:28:40.793 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-08-24 13:29:00.611 00:00:10.373 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:29:40.969 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-08-24 13:30:01.031 00:00:10.381 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:30:41.193 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-08-24 13:31:01.458 00:00:10.367 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:27:16.814 00:05:00.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:31:41.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6452 1 2025-08-24 13:32:01.871 00:00:10.370 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:28:16.811 00:05:00.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:32:48.816 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:32:41.620 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-08-24 13:32:48.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:33:02.283 00:00:10.365 TCP 23.104.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:33:41.797 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52308 10 6452 1 2025-08-24 13:34:02.689 00:00:10.366 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:34:41.973 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-08-24 13:35:03.108 00:00:10.324 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:35:42.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59672 10 6452 1 2025-08-24 13:36:03.476 00:00:10.362 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:36:42.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6452 1 2025-08-24 13:37:03.879 00:00:10.378 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:33:16.815 00:05:00.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:37:48.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:37:48.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:37:42.597 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-08-24 13:38:04.292 00:00:10.324 TCP 23.104.0.1:57316 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:34:16.813 00:05:00.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:38:42.811 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-08-24 13:39:04.655 00:00:10.704 TCP 23.104.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:39:42.996 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-08-24 13:40:05.398 00:00:10.367 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:40:43.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-08-24 13:41:05.797 00:00:10.349 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:41:43.445 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6452 1 2025-08-24 13:42:06.176 00:00:10.365 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:42:49.303 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:42:49.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:42:43.618 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37250 10 6452 1 2025-08-24 13:43:06.583 00:00:10.363 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:39:16.815 00:05:00.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:43:43.792 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34384 10 6452 1 2025-08-24 13:44:06.986 00:00:10.327 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:40:16.812 00:05:00.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:44:44.000 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-08-24 13:45:07.352 00:00:10.368 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:45:44.461 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-08-24 13:46:07.755 00:00:10.371 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:46:44.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-08-24 13:47:08.167 00:00:10.325 TCP 23.104.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:47:48.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:47:49.322 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:47:44.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-08-24 13:48:08.532 00:00:10.368 TCP 23.104.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:48:45.080 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 11 6504 1 2025-08-24 13:49:08.945 00:00:10.372 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:45:16.816 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:49:45.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2025-08-24 13:46:16.814 00:05:00.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:50:09.358 00:00:10.321 TCP 23.104.0.1:50674 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:50:45.557 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-08-24 13:51:09.717 00:00:10.374 TCP 23.104.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:51:45.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-08-24 13:52:10.131 00:00:10.369 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:52:49.103 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:52:49.386 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:52:45.941 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-08-24 13:53:10.543 00:00:10.326 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:53:46.170 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57228 10 6452 1 2025-08-24 13:54:10.911 00:00:10.377 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:54:46.383 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6452 1 2025-08-24 13:51:16.818 00:05:00.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-24 13:55:11.328 00:00:10.366 TCP 23.104.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:55:46.601 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-08-24 13:52:16.817 00:05:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 13:56:11.732 00:00:10.369 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:56:46.823 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 10 6452 1 2025-08-24 13:57:12.141 00:00:10.366 TCP 23.104.0.1:52910 -> 1.101.0.1:3000 11 1507 1 2025-08-24 13:57:49.350 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 13:57:49.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 13:57:47.076 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6452 1 2025-08-24 13:58:12.545 00:00:10.326 TCP 23.104.0.1:35312 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496334, total packets: 1570, avg bps: 1083, avg pps: 0, avg bpp: 316 Time window: 2025-08-24 12:57:16 - 2025-08-24 13:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0007s Wall: 0.0025s flows/second: 65329.3 Runtime: 0.0025s