Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 18:58:47.763 00:00:10.327 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:59:33.651 00:00:10.701 TCP 1.101.0.1:3000 -> 22.102.0.1:45494 10 6452 1 2025-09-02 18:59:48.133 00:00:10.495 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:00:34.394 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-09-02 19:00:48.666 00:00:10.361 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:01:34.565 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-09-02 19:01:49.099 00:00:10.363 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:02:15.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:02:15.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:02:34.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-09-02 19:02:49.502 00:00:10.365 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-09-02 18:59:22.528 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:03:35.003 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-09-02 19:03:49.901 00:00:10.363 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:00:22.525 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:04:35.224 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-09-02 19:04:50.301 00:00:10.370 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:05:35.442 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-09-02 19:05:50.712 00:00:10.372 TCP 23.104.0.1:57218 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:06:35.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-09-02 19:06:51.127 00:00:10.368 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:07:15.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:07:15.949 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:07:35.879 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 6452 1 2025-09-02 19:07:51.531 00:00:10.440 TCP 23.104.0.1:54930 -> 1.101.0.1:3000 15 1926 1 2025-09-02 19:08:36.111 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 12 10367 1 2025-09-02 19:08:52.010 00:00:10.361 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:05:22.529 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:09:36.359 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44424 10 6452 1 2025-09-02 19:09:52.408 00:00:10.364 TCP 23.104.0.1:58524 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:06:22.526 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:10:36.571 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-09-02 19:10:52.814 00:00:10.340 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:11:36.740 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-09-02 19:11:53.189 00:00:10.364 TCP 23.104.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:12:16.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:12:15.897 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:12:36.915 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 10 6452 1 2025-09-02 19:12:53.591 00:00:10.366 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:13:37.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-09-02 19:13:53.996 00:00:10.327 TCP 23.104.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:14:37.342 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40700 10 6452 1 2025-09-02 19:14:54.367 00:00:10.365 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:11:22.529 00:05:00.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:15:37.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-09-02 19:15:54.775 00:00:10.366 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:12:22.526 00:05:00.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:16:37.772 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 6452 1 2025-09-02 19:16:55.179 00:00:10.363 TCP 23.104.0.1:32970 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:17:16.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:17:15.977 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:17:37.988 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-09-02 19:17:55.577 00:00:10.441 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 15 1926 1 2025-09-02 19:18:38.211 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 12 10365 1 2025-09-02 19:18:56.057 00:00:10.371 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:19:38.406 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-09-02 19:19:56.455 00:00:10.359 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:20:38.584 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39734 10 6452 1 2025-09-02 19:20:56.854 00:00:10.377 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:17:22.532 00:05:00.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:21:38.756 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-09-02 19:21:57.272 00:00:10.370 TCP 23.104.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:22:16.207 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:22:16.014 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:18:22.529 00:05:00.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:22:38.930 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-09-02 19:22:57.679 00:00:10.364 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:23:39.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-09-02 19:23:58.101 00:00:10.362 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:24:39.395 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49924 10 6452 1 2025-09-02 19:24:58.503 00:00:10.361 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:25:39.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-09-02 19:25:58.915 00:00:10.359 TCP 23.104.0.1:40686 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:26:39.826 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-09-02 19:26:59.315 00:00:10.370 TCP 23.104.0.1:47772 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:27:16.406 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:27:16.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:23:22.534 00:05:00.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:27:40.075 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48312 10 6452 1 2025-09-02 19:27:59.724 00:00:10.361 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:24:22.530 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:28:40.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-09-02 19:29:00.123 00:00:10.359 TCP 23.104.0.1:41418 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:29:40.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6452 1 2025-09-02 19:30:00.521 00:00:10.365 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:30:40.723 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-09-02 19:31:00.927 00:00:10.390 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:31:40.934 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-09-02 19:32:01.356 00:00:10.325 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:32:16.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:32:16.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:32:41.176 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-09-02 19:33:01.717 00:00:10.449 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 15 1926 1 2025-09-02 19:29:22.535 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:33:41.350 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54858 12 10365 1 2025-09-02 19:34:02.211 00:00:10.323 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:30:22.533 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:34:41.584 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-09-02 19:35:02.572 00:00:10.363 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:35:41.807 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-09-02 19:36:02.970 00:00:10.370 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:36:42.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45650 10 6452 1 2025-09-02 19:37:16.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:37:16.583 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:37:03.378 00:00:10.362 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:37:42.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-09-02 19:38:03.775 00:00:10.368 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:38:42.456 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-09-02 19:39:04.181 00:00:10.362 TCP 23.104.0.1:59760 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:35:22.536 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:39:42.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-09-02 19:40:04.583 00:00:10.386 TCP 23.104.0.1:52778 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:36:22.533 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:40:42.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52698 10 6452 1 2025-09-02 19:41:05.010 00:00:10.393 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:41:43.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2025-09-02 19:42:16.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:42:05.441 00:00:10.365 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:42:16.510 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:42:43.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-09-02 19:43:05.843 00:00:10.339 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:43:43.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54610 10 6452 1 2025-09-02 19:44:06.220 00:00:10.326 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:44:43.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-09-02 19:45:06.585 00:00:10.364 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:41:22.537 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:45:43.956 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 12 6556 1 2025-09-02 19:46:06.985 00:00:10.593 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:42:22.534 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:46:44.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55384 12 6556 1 2025-09-02 19:47:17.165 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:47:16.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:47:07.616 00:00:10.322 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:47:44.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36416 10 6452 1 2025-09-02 19:48:07.977 00:00:10.365 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:48:44.640 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-09-02 19:49:08.379 00:00:10.362 TCP 23.104.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:49:44.812 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55222 10 6452 1 2025-09-02 19:50:08.777 00:00:10.617 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:50:45.037 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-09-02 19:51:09.437 00:00:10.364 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:47:22.540 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:51:45.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35732 10 6452 1 2025-09-02 19:52:16.752 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:52:16.747 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:52:09.838 00:00:10.383 TCP 23.104.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:48:22.540 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 19:52:45.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-09-02 19:53:10.261 00:00:10.415 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:53:45.679 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-09-02 19:54:10.719 00:00:10.387 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:54:45.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-09-02 19:55:11.155 00:00:10.364 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:55:46.118 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44442 10 6452 1 2025-09-02 19:56:11.560 00:00:10.360 TCP 23.104.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:56:46.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-09-02 19:57:16.595 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 19:57:16.928 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 19:57:11.966 00:00:10.367 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:53:22.542 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 19:57:46.545 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49960 10 6452 1 2025-09-02 19:58:12.371 00:00:10.364 TCP 23.104.0.1:36548 -> 1.101.0.1:3000 11 1507 1 2025-09-02 19:54:22.540 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 505102, total packets: 1584, avg bps: 1111, avg pps: 0, avg bpp: 318 Time window: 2025-09-02 18:58:47 - 2025-09-02 19:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0031s flows/second: 53113.1 Runtime: 0.0031s