Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 17:58:45.617 00:00:10.372 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-09-20 17:59:32.247 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-09-20 17:59:46.028 00:00:10.843 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-09-20 17:56:31.220 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:00:32.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60164 10 6452 1 2025-09-20 18:01:01.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:00:46.910 00:00:10.430 TCP 23.104.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:01:01.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 17:57:31.222 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:01:32.673 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-09-20 18:01:47.376 00:00:10.374 TCP 23.104.0.1:42932 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:02:32.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-09-20 18:02:47.787 00:00:10.371 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:03:33.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-09-20 18:03:48.197 00:00:10.365 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:04:33.329 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-09-20 18:04:48.600 00:00:10.325 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:05:33.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-09-20 18:06:01.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:06:01.719 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:05:48.962 00:00:10.362 TCP 23.104.0.1:39894 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:02:31.220 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:06:33.760 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-09-20 18:06:49.366 00:00:10.324 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:03:31.223 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:07:33.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48352 10 6452 1 2025-09-20 18:07:49.728 00:00:10.365 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:08:34.169 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6452 1 2025-09-20 18:08:50.133 00:00:10.333 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:09:34.383 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6452 1 2025-09-20 18:09:50.505 00:00:10.363 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:10:34.591 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6452 1 2025-09-20 18:11:01.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:10:50.920 00:00:10.394 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:11:01.685 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:11:34.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-09-20 18:11:51.353 00:00:10.321 TCP 23.104.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:08:31.221 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:12:35.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42130 10 6452 1 2025-09-20 18:12:51.714 00:00:10.373 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:09:31.224 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:13:35.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-09-20 18:13:52.130 00:00:10.366 TCP 23.104.0.1:47490 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:14:35.452 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34146 10 6452 1 2025-09-20 18:14:52.533 00:00:10.381 TCP 23.104.0.1:37554 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:15:35.662 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-09-20 18:16:01.943 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:16:01.996 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:15:52.953 00:00:16.486 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:16:35.875 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6452 1 2025-09-20 18:16:59.502 00:00:10.324 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:17:36.073 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57474 10 6452 1 2025-09-20 18:17:59.864 00:00:10.370 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:14:31.222 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:18:36.292 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-09-20 18:19:00.271 00:00:10.318 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:15:31.225 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:19:36.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35578 10 6452 1 2025-09-20 18:20:00.626 00:00:10.322 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:20:36.767 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-09-20 18:21:01.854 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:21:02.053 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:21:00.988 00:00:10.326 TCP 23.104.0.1:44574 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:21:36.944 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-09-20 18:22:01.350 00:00:10.368 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:22:37.163 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2025-09-20 18:23:01.755 00:00:10.392 TCP 23.104.0.1:54558 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:23:37.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-09-20 18:24:02.182 00:00:10.360 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:20:31.223 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:24:37.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-09-20 18:25:02.584 00:00:10.322 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:21:31.226 00:05:01.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:25:37.817 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6452 1 2025-09-20 18:26:02.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:26:02.062 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:26:02.942 00:00:10.376 TCP 23.104.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:26:38.050 00:00:10.387 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-09-20 18:27:03.356 00:00:10.364 TCP 23.104.0.1:47300 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:27:38.477 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-09-20 18:28:03.756 00:00:10.368 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:28:38.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54472 10 6452 1 2025-09-20 18:29:04.164 00:00:10.365 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:29:38.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48624 10 6452 1 2025-09-20 18:30:04.569 00:00:10.325 TCP 23.104.0.1:43114 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:26:31.224 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:30:39.120 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-09-20 18:31:02.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:31:02.357 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:31:04.939 00:00:10.372 TCP 23.104.0.1:54532 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:27:31.226 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:31:39.334 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33582 10 6452 1 2025-09-20 18:32:05.349 00:00:10.363 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:32:39.542 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47338 10 6452 1 2025-09-20 18:33:05.750 00:00:10.382 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:33:39.766 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-09-20 18:34:06.173 00:00:10.365 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:34:39.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-09-20 18:35:06.574 00:00:10.367 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:35:40.212 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-09-20 18:36:02.421 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:36:02.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:36:06.993 00:00:10.365 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:32:31.227 00:05:01.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:36:40.421 00:00:12.730 TCP 1.101.0.1:3000 -> 22.102.0.1:39598 10 6452 1 2025-09-20 18:37:07.391 00:00:10.364 TCP 23.104.0.1:43108 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:33:31.227 00:05:01.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:37:43.191 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-09-20 18:38:07.790 00:00:10.366 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:38:43.412 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6452 1 2025-09-20 18:39:08.196 00:00:10.323 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:39:43.628 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-09-20 18:40:08.557 00:00:10.386 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:40:43.847 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-09-20 18:41:02.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:41:02.555 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:41:08.978 00:00:10.321 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:41:44.079 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-09-20 18:42:09.336 00:00:10.368 TCP 23.104.0.1:44328 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:38:31.227 00:05:01.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:42:44.306 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-09-20 18:43:09.742 00:00:10.336 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:39:31.231 00:05:01.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:43:44.528 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:40124 10 6452 1 2025-09-20 18:44:10.139 00:00:10.365 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:44:44.729 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54512 10 6452 1 2025-09-20 18:45:10.543 00:00:10.365 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:45:44.940 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:38762 10 6452 1 2025-09-20 18:46:02.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:46:02.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:46:10.948 00:00:10.370 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:46:45.139 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-20 18:47:11.357 00:00:10.367 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:47:45.353 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 10 6452 1 2025-09-20 18:48:11.769 00:00:10.365 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:44:31.228 00:05:01.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:48:45.568 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47748 10 6452 1 2025-09-20 18:49:12.171 00:00:10.365 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:45:31.230 00:05:01.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:49:45.793 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-09-20 18:50:12.572 00:00:10.365 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:50:46.006 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 10 6452 1 2025-09-20 18:51:02.723 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:51:02.500 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:51:12.975 00:00:10.443 TCP 23.104.0.1:54104 -> 1.101.0.1:3000 15 1926 1 2025-09-20 18:51:46.187 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51976 12 10367 1 2025-09-20 18:52:13.459 00:00:10.360 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:52:46.423 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-09-20 18:53:13.859 00:00:10.372 TCP 23.104.0.1:33252 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:53:46.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-09-20 18:54:14.271 00:00:10.368 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:50:31.230 00:05:01.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 18:54:46.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-09-20 18:55:14.678 00:00:10.367 TCP 23.104.0.1:35436 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:51:31.234 00:05:01.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 18:55:47.037 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58752 10 6452 1 2025-09-20 18:56:02.565 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 18:56:02.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 18:56:15.108 00:00:10.364 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:56:47.250 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-09-20 18:57:15.507 00:00:10.329 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-09-20 18:57:47.428 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43752 10 6452 1 2025-09-20 18:58:15.872 00:00:10.366 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496230, total packets: 1568, avg bps: 1068, avg pps: 0, avg bpp: 316 Time window: 2025-09-20 17:56:31 - 2025-09-20 18:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0021s flows/second: 78062.5 Runtime: 0.0021s