Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 06:58:53.433 00:00:10.368 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:59:18.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-09-03 06:59:53.838 00:00:10.395 TCP 23.104.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:00:18.740 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-09-03 07:00:54.271 00:00:10.374 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:01:18.956 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38804 10 6452 1 2025-09-03 07:01:54.682 00:00:10.372 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:02:19.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-09-03 07:02:30.140 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:02:30.044 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:02:55.107 00:00:10.362 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-09-03 06:59:22.774 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:03:19.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-09-03 07:03:55.512 00:00:10.367 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:00:22.771 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:04:19.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-09-03 07:04:55.913 00:00:10.402 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:05:19.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-09-03 07:05:56.354 00:00:10.322 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:06:20.041 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-09-03 07:06:56.719 00:00:10.368 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:07:30.453 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:07:20.255 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37614 10 6452 1 2025-09-03 07:07:30.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:07:57.130 00:00:10.367 TCP 23.104.0.1:58852 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:08:20.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-09-03 07:08:57.535 00:00:10.373 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:05:22.777 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:09:20.641 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-09-03 07:09:57.946 00:00:10.373 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:06:22.773 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:10:20.828 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51480 10 6452 1 2025-09-03 07:10:58.360 00:00:10.323 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:11:21.075 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59104 10 6452 1 2025-09-03 07:11:58.722 00:00:10.325 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:12:30.058 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:12:21.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-09-03 07:12:30.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:12:59.103 00:00:10.366 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:13:21.497 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-09-03 07:13:59.507 00:00:10.366 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:14:21.671 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-09-03 07:14:59.911 00:00:10.360 TCP 23.104.0.1:41774 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:11:22.784 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:15:21.903 00:00:10.406 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-09-03 07:16:00.312 00:00:10.359 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:12:22.783 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:16:22.349 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-09-03 07:17:00.708 00:00:10.364 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:17:30.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:17:30.427 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:17:22.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-09-03 07:18:01.116 00:00:10.339 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:18:22.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2025-09-03 07:19:01.493 00:00:10.323 TCP 23.104.0.1:46690 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:19:22.991 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58300 10 6452 1 2025-09-03 07:20:01.853 00:00:10.375 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:20:23.177 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-09-03 07:21:02.265 00:00:10.387 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:17:22.788 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:21:23.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47594 10 6452 1 2025-09-03 07:22:02.699 00:00:10.364 TCP 23.104.0.1:44264 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:18:22.785 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:22:30.561 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:22:30.516 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:22:23.563 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-09-03 07:23:03.111 00:00:10.375 TCP 23.104.0.1:41584 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:23:23.783 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-09-03 07:24:03.535 00:00:10.368 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:24:23.972 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-09-03 07:25:03.938 00:00:10.376 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:25:24.205 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-09-03 07:26:04.360 00:00:10.369 TCP 23.104.0.1:51028 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:26:24.442 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41334 10 6452 1 2025-09-03 07:27:04.771 00:00:10.374 TCP 23.104.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:23:22.792 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:27:30.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:27:30.809 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:27:24.659 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-09-03 07:28:05.181 00:00:10.367 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:24:22.789 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:28:24.877 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:54454 10 6452 1 2025-09-03 07:29:05.586 00:00:10.366 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:29:25.151 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35728 10 6452 1 2025-09-03 07:30:05.990 00:00:10.367 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:30:25.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-09-03 07:31:06.398 00:00:10.363 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:31:25.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-09-03 07:32:06.808 00:00:10.367 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:32:30.772 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:32:30.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:32:25.750 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44864 10 6452 1 2025-09-03 07:33:07.215 00:00:10.367 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:29:22.792 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:33:25.970 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:34554 10 6452 1 2025-09-03 07:34:07.618 00:00:10.361 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:30:22.790 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:34:26.455 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6452 1 2025-09-03 07:35:08.019 00:00:10.362 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:35:26.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-09-03 07:36:08.422 00:00:10.359 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:36:26.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-09-03 07:37:08.821 00:00:10.364 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:37:30.740 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:37:30.913 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:37:27.072 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-09-03 07:38:09.221 00:00:10.370 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:38:27.294 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-09-03 07:39:09.628 00:00:10.366 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:35:22.793 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:39:27.508 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51900 10 6452 1 2025-09-03 07:40:10.032 00:00:10.364 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:36:22.792 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:40:27.730 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-09-03 07:41:10.435 00:00:10.362 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:41:27.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-09-03 07:42:10.836 00:00:10.389 TCP 23.104.0.1:37396 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:42:31.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:42:30.916 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:42:28.121 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43500 10 6452 1 2025-09-03 07:43:11.263 00:00:10.497 TCP 23.104.0.1:53836 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:43:28.344 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-09-03 07:44:11.803 00:00:10.369 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:44:28.513 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38398 10 6452 1 2025-09-03 07:45:12.209 00:00:10.366 TCP 23.104.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:41:22.797 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:45:28.687 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48618 10 6452 1 2025-09-03 07:46:12.617 00:00:10.363 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:42:22.794 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:46:28.854 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-09-03 07:47:13.017 00:00:10.365 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:47:31.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:47:30.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:47:29.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-09-03 07:48:13.419 00:00:10.324 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:48:29.300 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-09-03 07:49:13.783 00:00:10.380 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:49:29.466 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55724 10 6452 1 2025-09-03 07:50:14.222 00:00:10.364 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:50:29.681 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44454 10 6452 1 2025-09-03 07:47:22.799 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:51:14.632 00:00:10.338 TCP 23.104.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:51:29.895 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-09-03 07:52:15.009 00:00:10.361 TCP 23.104.0.1:51912 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:48:22.796 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:52:31.434 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:52:31.182 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:52:30.090 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53242 10 6452 1 2025-09-03 07:53:15.408 00:00:10.366 TCP 23.104.0.1:47056 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:53:30.263 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-09-03 07:54:15.825 00:00:10.320 TCP 23.104.0.1:35468 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:54:30.473 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-09-03 07:55:16.182 00:00:10.371 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:55:30.681 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-09-03 07:56:16.593 00:00:10.363 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:56:30.898 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-09-03 07:53:22.800 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 07:57:17.002 00:00:10.367 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:57:31.266 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 07:57:31.158 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 07:57:31.112 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37898 10 6452 1 2025-09-03 07:54:22.797 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 07:58:17.407 00:00:10.328 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-09-03 07:58:31.282 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1098, avg pps: 0, avg bpp: 317 Time window: 2025-09-03 06:58:53 - 2025-09-03 07:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0000s Wall: 0.0021s flows/second: 78919.9 Runtime: 0.0021s