Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-08 20:58:42.769 00:00:10.366 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-09-08 20:58:53.485 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-09-08 20:59:43.176 00:00:10.368 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-09-08 20:59:53.694 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-09-08 21:00:18.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:00:18.867 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:00:43.579 00:00:10.323 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:00:53.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-09-08 21:01:43.942 00:00:10.373 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:01:54.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33554 10 6452 1 2025-09-08 21:02:44.357 00:00:10.326 TCP 23.104.0.1:48460 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:02:54.338 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-09-08 20:59:25.560 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:03:44.720 00:00:10.370 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:03:54.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42546 10 6452 1 2025-09-08 21:00:25.556 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:04:45.128 00:00:10.334 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:04:54.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-09-08 21:05:18.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:05:18.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:05:45.499 00:00:10.365 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:05:54.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-09-08 21:06:45.899 00:00:10.318 TCP 23.104.0.1:58240 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:06:55.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-09-08 21:07:46.258 00:00:10.362 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:07:55.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54536 10 6452 1 2025-09-08 21:08:46.665 00:00:10.325 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:08:55.641 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-09-08 21:05:25.559 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:09:47.036 00:00:10.371 TCP 23.104.0.1:34600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:09:55.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-09-08 21:10:18.784 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:10:19.019 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:06:25.559 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:10:47.456 00:00:10.325 TCP 23.104.0.1:50582 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:10:56.036 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39202 10 6452 1 2025-09-08 21:11:47.819 00:00:10.364 TCP 23.104.0.1:40762 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:11:56.205 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-09-08 21:12:48.220 00:00:10.366 TCP 23.104.0.1:50920 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:12:56.428 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47748 10 6452 1 2025-09-08 21:13:48.625 00:00:10.361 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:13:56.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-09-08 21:14:49.024 00:00:10.384 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:14:56.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 2025-09-08 21:15:18.893 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:15:18.972 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:11:25.562 00:05:00.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:15:49.468 00:00:10.367 TCP 23.104.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:15:57.031 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-09-08 21:12:25.561 00:05:00.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:16:49.878 00:00:10.363 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:16:57.254 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-09-08 21:17:50.278 00:00:10.363 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:17:57.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58582 10 6452 1 2025-09-08 21:18:50.682 00:00:10.367 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:18:57.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47470 10 6452 1 2025-09-08 21:19:51.104 00:00:10.709 TCP 23.104.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:19:57.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54934 10 6452 1 2025-09-08 21:20:18.919 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:20:19.002 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:20:51.850 00:00:10.383 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:20:58.096 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-09-08 21:17:25.569 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:21:52.270 00:00:10.364 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:21:58.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 2025-09-08 21:18:25.566 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:22:52.673 00:00:10.363 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:22:58.534 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-09-08 21:23:53.109 00:00:10.359 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:23:58.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42124 10 6452 1 2025-09-08 21:24:53.508 00:00:10.362 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:24:58.978 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 6452 1 2025-09-08 21:25:19.160 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:25:19.164 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:25:53.902 00:00:10.373 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:25:59.198 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56800 10 6452 1 2025-09-08 21:26:54.334 00:00:10.367 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:26:59.414 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:47634 11 6504 1 2025-09-08 21:23:25.569 00:05:00.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:27:54.745 00:00:10.363 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:27:59.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-09-08 21:24:25.568 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:28:55.148 00:00:10.363 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:28:59.901 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-09-08 21:29:55.556 00:00:10.358 TCP 23.104.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:30:00.093 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-09-08 21:30:19.220 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:30:19.058 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:30:55.948 00:00:10.368 TCP 23.104.0.1:44094 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:31:00.320 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34828 10 6452 1 2025-09-08 21:31:56.358 00:00:10.363 TCP 23.104.0.1:42666 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:32:00.547 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-09-08 21:33:00.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-09-08 21:32:56.755 00:00:10.389 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:29:25.572 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:34:00.998 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47008 10 6452 1 2025-09-08 21:33:57.187 00:00:10.366 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:30:25.571 00:05:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:34:57.590 00:00:10.372 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:35:01.225 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-09-08 21:35:19.802 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:35:19.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:36:01.449 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-09-08 21:35:58.003 00:00:10.362 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:36:58.403 00:00:10.364 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:37:01.665 00:00:10.572 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 10 6452 1 2025-09-08 21:37:58.808 00:00:10.357 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:38:02.271 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-09-08 21:38:59.206 00:00:10.369 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:39:02.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6452 1 2025-09-08 21:35:25.575 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:39:59.612 00:00:10.365 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:40:02.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45100 10 6452 1 2025-09-08 21:40:19.426 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:40:19.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:36:25.570 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:41:00.014 00:00:10.325 TCP 23.104.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:41:02.910 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46498 10 6452 1 2025-09-08 21:42:00.381 00:00:10.364 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:42:03.095 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-09-08 21:43:00.783 00:00:10.577 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:43:03.267 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-09-08 21:44:01.406 00:00:10.365 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:44:03.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-09-08 21:45:03.758 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-09-08 21:45:01.809 00:00:10.333 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:45:19.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:45:19.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:41:25.574 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:46:03.982 00:00:10.402 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-09-08 21:46:02.183 00:00:10.383 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:42:25.573 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:47:02.602 00:00:10.369 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:47:04.420 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-09-08 21:48:04.640 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-09-08 21:48:03.016 00:00:10.368 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:49:04.943 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-09-08 21:49:03.424 00:00:10.365 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:50:03.828 00:00:10.389 TCP 23.104.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:50:05.275 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-09-08 21:50:19.708 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:50:19.526 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:51:05.454 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-09-08 21:51:04.254 00:00:10.323 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:47:25.575 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:52:04.617 00:00:10.364 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:52:05.664 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33040 10 6452 1 2025-09-08 21:48:25.573 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-08 21:53:05.018 00:00:10.368 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:53:05.872 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-09-08 21:54:05.417 00:00:10.359 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:54:06.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38080 10 6452 1 2025-09-08 21:55:05.810 00:00:10.603 TCP 23.104.0.1:55832 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:55:06.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-09-08 21:55:19.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-08 21:55:19.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-08 21:56:06.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-08 21:56:06.458 00:00:10.369 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:57:06.750 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-09-08 21:57:06.866 00:00:10.365 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:53:25.576 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-08 21:58:07.270 00:00:10.338 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-09-08 21:58:06.978 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-09-08 21:54:25.574 00:05:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-09-08 20:58:42 - 2025-09-08 21:59:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0065s User: 0.0043s Wall: 0.0037s flows/second: 43922.2 Runtime: 0.0038s