Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 22:58:52.805 00:00:10.360 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:59:37.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 2025-09-13 22:59:53.201 00:00:10.364 TCP 23.104.0.1:35954 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:00:38.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56530 10 6452 1 2025-09-13 23:00:53.602 00:00:10.363 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:01:38.306 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-09-13 23:01:54.009 00:00:10.368 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:02:45.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:02:45.727 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:02:38.479 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-09-13 23:02:54.415 00:00:10.367 TCP 23.104.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:03:38.695 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-09-13 23:03:54.823 00:00:10.363 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:59:28.091 00:06:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:04:38.906 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37570 10 6452 1 2025-09-13 23:04:55.224 00:00:10.363 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:00:28.094 00:06:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:05:39.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59198 10 6452 1 2025-09-13 23:05:55.626 00:00:10.366 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:06:39.358 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50746 10 6452 1 2025-09-13 23:06:56.031 00:00:10.366 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:07:45.746 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:07:45.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:07:39.574 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59532 10 6452 1 2025-09-13 23:07:56.440 00:00:10.366 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:08:39.785 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53242 10 6452 1 2025-09-13 23:08:56.843 00:00:10.348 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:09:39.957 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-09-13 23:09:57.231 00:00:10.370 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:10:40.174 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-09-13 23:10:57.642 00:00:10.373 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:06:28.093 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:11:40.386 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-09-13 23:11:58.064 00:00:10.376 TCP 23.104.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:07:28.097 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:12:45.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:12:45.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:12:40.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60920 10 6452 1 2025-09-13 23:12:58.490 00:00:10.368 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:13:40.811 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-09-13 23:13:58.893 00:00:10.372 TCP 23.104.0.1:49420 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:14:41.038 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49284 10 6452 1 2025-09-13 23:14:59.306 00:00:10.385 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:15:41.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 10 6452 1 2025-09-13 23:15:59.727 00:00:10.327 TCP 23.104.0.1:55354 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:16:41.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-09-13 23:17:00.107 00:00:10.361 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:17:45.534 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:17:45.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:17:41.710 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-09-13 23:18:00.505 00:00:10.368 TCP 23.104.0.1:60502 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:13:28.094 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:18:41.923 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2025-09-13 23:19:00.912 00:00:10.363 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:14:28.097 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:19:42.129 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40486 10 6452 1 2025-09-13 23:20:01.315 00:00:10.367 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:20:42.304 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-09-13 23:21:01.719 00:00:10.383 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:21:42.484 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-09-13 23:22:02.140 00:00:10.362 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:22:46.136 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:22:46.295 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:22:42.872 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-09-13 23:23:02.542 00:00:10.383 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:23:43.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-09-13 23:24:02.969 00:00:10.374 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:24:43.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54558 10 6452 1 2025-09-13 23:25:03.379 00:00:10.369 TCP 23.104.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:20:28.099 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:25:43.537 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-09-13 23:26:03.787 00:00:10.379 TCP 23.104.0.1:39594 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:21:28.100 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:26:43.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47046 10 6452 1 2025-09-13 23:27:04.196 00:00:10.362 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:27:45.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:27:45.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:27:43.930 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6452 1 2025-09-13 23:28:04.594 00:00:10.641 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:28:44.149 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60640 10 6452 1 2025-09-13 23:29:05.274 00:00:10.365 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:29:44.365 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33078 10 6452 1 2025-09-13 23:30:05.671 00:00:10.380 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:30:44.584 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60434 10 6452 1 2025-09-13 23:31:06.109 00:00:10.363 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:31:44.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60354 10 6452 1 2025-09-13 23:32:06.512 00:00:10.373 TCP 23.104.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:27:28.099 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:32:46.250 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:32:46.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:32:45.009 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51484 10 6452 1 2025-09-13 23:33:06.924 00:00:10.379 TCP 23.104.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:28:28.102 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:33:45.230 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36030 10 6452 1 2025-09-13 23:34:07.343 00:00:10.379 TCP 23.104.0.1:56520 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:34:45.409 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-09-13 23:35:07.762 00:00:10.373 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:35:45.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44748 10 6452 1 2025-09-13 23:36:08.175 00:00:10.344 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:36:45.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-09-13 23:37:08.559 00:00:10.367 TCP 23.104.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:37:46.096 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:37:46.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:37:46.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58174 10 6452 1 2025-09-13 23:38:08.967 00:00:10.396 TCP 23.104.0.1:49992 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:38:46.293 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-09-13 23:39:09.429 00:00:10.363 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:34:28.101 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:39:46.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52408 10 6452 1 2025-09-13 23:40:09.830 00:00:10.402 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:35:28.104 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:40:46.740 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-09-13 23:41:10.268 00:00:10.329 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:41:46.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-09-13 23:42:10.635 00:00:10.363 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:42:46.334 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:42:46.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:42:47.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 2025-09-13 23:43:11.040 00:00:10.365 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:43:47.403 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48382 10 6452 1 2025-09-13 23:44:11.446 00:00:10.367 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:44:47.577 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56622 10 6452 1 2025-09-13 23:45:11.849 00:00:10.373 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:45:47.750 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-09-13 23:46:12.262 00:00:10.933 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:41:28.102 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:46:47.978 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:51246 10 6452 1 2025-09-13 23:47:13.232 00:00:10.359 TCP 23.104.0.1:51316 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:42:28.105 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:47:46.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:47:46.303 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:47:48.177 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-09-13 23:48:13.629 00:00:10.368 TCP 23.104.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:48:48.662 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-09-13 23:49:14.031 00:00:10.627 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:49:48.884 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-09-13 23:50:14.692 00:00:10.325 TCP 23.104.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:50:49.604 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-09-13 23:51:15.056 00:00:10.364 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:51:49.779 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-09-13 23:52:15.461 00:00:10.363 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:52:46.326 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:52:46.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:52:49.998 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6452 1 2025-09-13 23:53:15.865 00:00:10.372 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:48:28.104 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 23:53:50.222 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 12 10365 1 2025-09-13 23:54:16.269 00:00:10.396 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 15 1926 1 2025-09-13 23:49:28.108 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 23:54:50.462 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-09-13 23:55:16.708 00:00:10.362 TCP 23.104.0.1:32918 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:55:50.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-09-13 23:56:17.110 00:00:10.362 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:56:50.890 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46026 10 6452 1 2025-09-13 23:57:17.517 00:00:10.366 TCP 23.104.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:57:46.540 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 23:57:46.423 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 23:57:51.120 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 10 6452 1 2025-09-13 23:58:17.922 00:00:10.387 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 495244, total packets: 1552, avg bps: 1108, avg pps: 0, avg bpp: 319 Time window: 2025-09-13 22:58:52 - 2025-09-13 23:58:28 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0019s User: 0.0019s Wall: 0.0015s flows/second: 108614.7 Runtime: 0.0015s