Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 18:58:50.543 00:00:10.371 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-09-04 18:55:23.647 00:05:00.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 18:59:20.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-09-04 18:59:50.951 00:00:10.366 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:00:20.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-09-04 19:00:51.359 00:00:10.369 TCP 23.104.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:01:20.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-09-04 19:01:51.768 00:00:10.374 TCP 23.104.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:02:20.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-09-04 19:02:52.185 00:00:10.377 TCP 23.104.0.1:41380 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:03:13.492 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:03:13.521 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:03:21.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-09-04 19:03:52.611 00:00:10.328 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:00:23.649 00:05:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:04:21.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-09-04 19:04:52.977 00:00:10.370 TCP 23.104.0.1:33168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:01:23.651 00:05:00.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:05:21.472 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-09-04 19:05:53.390 00:00:10.369 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:06:21.648 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55266 10 6452 1 2025-09-04 19:06:53.797 00:00:10.361 TCP 23.104.0.1:54162 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:07:21.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-09-04 19:07:54.196 00:00:10.725 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:08:13.882 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:08:13.737 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:08:22.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-09-04 19:08:54.955 00:00:10.369 TCP 23.104.0.1:49320 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:09:22.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41268 10 6452 1 2025-09-04 19:09:55.361 00:00:10.550 TCP 23.104.0.1:37456 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:06:23.656 00:05:00.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:10:22.507 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51076 10 6452 1 2025-09-04 19:10:55.948 00:00:10.366 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:07:23.659 00:05:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:11:22.677 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-09-04 19:11:56.355 00:00:10.331 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:12:22.889 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40606 10 6452 1 2025-09-04 19:12:56.725 00:00:10.376 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:13:13.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:13:13.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:13:23.108 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2025-09-04 19:13:57.140 00:00:10.364 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:14:23.279 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-09-04 19:14:57.560 00:00:10.367 TCP 23.104.0.1:33068 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:15:23.489 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38906 10 6452 1 2025-09-04 19:15:57.973 00:00:10.372 TCP 23.104.0.1:39498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:12:23.658 00:05:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:16:23.716 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-09-04 19:16:58.385 00:00:10.363 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:13:23.659 00:05:00.683 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:17:23.934 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-09-04 19:17:58.784 00:00:10.362 TCP 23.104.0.1:33444 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:18:13.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:18:13.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:18:24.203 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-09-04 19:18:59.186 00:00:10.372 TCP 23.104.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:19:24.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-04 19:19:59.602 00:00:10.384 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:20:24.630 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-09-04 19:21:00.045 00:00:10.362 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:21:24.800 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-09-04 19:22:00.450 00:00:10.361 TCP 23.104.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:18:23.660 00:05:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:22:25.016 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-09-04 19:23:13.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:23:00.850 00:00:10.381 TCP 23.104.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:23:13.897 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:19:23.663 00:05:00.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:23:25.241 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 10 6452 1 2025-09-04 19:24:01.269 00:00:10.363 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:24:25.419 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-09-04 19:25:01.672 00:00:10.363 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:25:25.659 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42388 10 6452 1 2025-09-04 19:26:02.109 00:00:10.366 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:26:25.896 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-09-04 19:27:02.518 00:00:10.324 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:27:26.115 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60424 10 6452 1 2025-09-04 19:28:13.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:28:02.876 00:00:10.326 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:28:14.057 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:24:23.661 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:28:26.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-09-04 19:29:03.245 00:00:10.365 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:25:23.666 00:05:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:29:26.509 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46230 10 6452 1 2025-09-04 19:30:03.656 00:00:10.368 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:30:26.720 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-09-04 19:31:04.066 00:00:10.364 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:31:26.894 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-09-04 19:32:04.473 00:00:10.381 TCP 23.104.0.1:43488 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:32:27.092 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48816 10 6452 1 2025-09-04 19:33:13.999 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:33:04.893 00:00:10.368 TCP 23.104.0.1:48098 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:33:13.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:33:27.266 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60318 10 6452 1 2025-09-04 19:34:05.298 00:00:10.360 TCP 23.104.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:30:23.665 00:05:00.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:34:27.477 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-09-04 19:35:05.696 00:00:10.372 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:31:23.667 00:05:00.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:35:27.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59738 10 6452 1 2025-09-04 19:36:06.114 00:00:10.365 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:36:27.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-09-04 19:37:06.519 00:00:10.366 TCP 23.104.0.1:43610 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:37:28.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39438 10 6452 1 2025-09-04 19:38:14.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:38:14.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:38:06.924 00:00:10.389 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:38:28.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40534 10 6452 1 2025-09-04 19:39:07.352 00:00:10.360 TCP 23.104.0.1:35410 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:39:28.558 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-09-04 19:40:07.754 00:00:10.341 TCP 23.104.0.1:36782 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:36:23.666 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:40:28.771 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-09-04 19:41:08.134 00:00:10.367 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:37:23.670 00:05:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:41:28.958 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48468 12 6556 1 2025-09-04 19:42:08.535 00:00:10.365 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:42:29.192 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6452 1 2025-09-04 19:43:14.377 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:43:14.213 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:43:08.937 00:00:10.339 TCP 23.104.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:43:29.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36680 10 6452 1 2025-09-04 19:44:09.315 00:00:10.367 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:44:29.628 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46772 10 6452 1 2025-09-04 19:45:09.719 00:00:10.373 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:45:29.849 00:00:10.820 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-09-04 19:46:10.132 00:00:10.367 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:42:23.668 00:05:00.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:46:30.708 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45864 10 6452 1 2025-09-04 19:47:10.534 00:00:10.363 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:43:23.670 00:05:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:47:30.922 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-09-04 19:48:14.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:48:14.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:48:10.935 00:00:10.375 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:48:31.134 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 2025-09-04 19:49:11.350 00:00:10.362 TCP 23.104.0.1:52186 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:49:31.348 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-09-04 19:50:11.752 00:00:10.340 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:50:31.559 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40010 10 6452 1 2025-09-04 19:51:12.135 00:00:10.420 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:51:31.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-09-04 19:52:12.596 00:00:10.330 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:48:23.670 00:05:00.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:52:32.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-09-04 19:53:14.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:53:14.440 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:53:12.962 00:00:10.361 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:49:23.671 00:05:00.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 19:53:32.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2025-09-04 19:54:13.360 00:00:10.366 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:54:32.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-09-04 19:55:13.766 00:00:10.334 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:55:32.647 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58256 10 6452 1 2025-09-04 19:56:14.137 00:00:10.319 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:56:32.870 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55300 10 6452 1 2025-09-04 19:57:14.493 00:00:10.363 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:57:33.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-09-04 19:58:14.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 19:58:14.653 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 19:54:23.668 00:05:00.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 19:58:14.898 00:00:10.365 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-09-04 19:58:33.285 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1038, avg pps: 0, avg bpp: 316 Time window: 2025-09-04 18:55:23 - 2025-09-04 19:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0010s Wall: 0.0018s flows/second: 90759.4 Runtime: 0.0018s