Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 23:58:52.014 00:00:10.370 TCP 23.104.0.1:36456 -> 1.101.0.1:3000 11 1507 1 2025-09-21 23:58:56.911 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50612 10 6452 1 2025-09-21 23:59:52.418 00:00:10.683 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-09-21 23:59:57.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55228 10 6452 1 2025-09-21 23:56:31.735 00:05:01.382 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:00:53.142 00:00:10.366 TCP 23.104.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:00:57.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 10 6452 1 2025-09-21 23:57:31.739 00:05:01.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:01:37.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:01:37.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:01:53.550 00:00:10.367 TCP 23.104.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:01:57.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-09-22 00:02:53.952 00:00:10.332 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:02:57.730 00:00:10.569 TCP 1.101.0.1:3000 -> 22.102.0.1:50766 10 6452 1 2025-09-22 00:03:54.325 00:00:10.369 TCP 23.104.0.1:39620 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:03:58.343 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-09-22 00:04:54.723 00:00:10.376 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:04:58.566 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-09-22 00:05:55.136 00:00:10.371 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:05:58.741 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-09-22 00:02:31.737 00:05:01.383 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:06:37.692 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:06:37.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:06:55.539 00:00:10.369 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:06:58.949 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-09-22 00:03:31.740 00:05:01.378 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:07:55.939 00:00:10.329 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:07:59.136 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 10 6452 1 2025-09-22 00:08:56.304 00:00:10.331 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:08:59.349 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-09-22 00:09:56.675 00:00:10.361 TCP 23.104.0.1:58796 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:09:59.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-09-22 00:10:59.732 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-09-22 00:10:57.102 00:00:10.367 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:11:37.643 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:11:37.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:11:57.511 00:00:10.327 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:11:59.940 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-09-22 00:08:31.738 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:12:57.876 00:00:10.367 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:13:00.174 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-09-22 00:09:31.740 00:05:01.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:14:00.402 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40486 10 6452 1 2025-09-22 00:13:58.280 00:00:10.370 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:15:00.617 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-09-22 00:14:58.685 00:00:10.329 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:16:00.831 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-09-22 00:15:59.057 00:00:10.329 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:16:38.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:16:37.767 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:17:01.065 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-09-22 00:16:59.429 00:00:10.364 TCP 23.104.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:17:59.831 00:00:10.379 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:18:01.287 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-09-22 00:14:31.741 00:05:01.384 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:19:00.257 00:00:10.363 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:19:01.461 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-09-22 00:15:31.744 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:20:00.664 00:00:10.325 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:20:01.630 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55472 10 6452 1 2025-09-22 00:21:01.030 00:00:10.323 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:21:01.843 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-09-22 00:21:38.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:21:38.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:22:01.395 00:00:10.365 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:22:02.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45942 10 6452 1 2025-09-22 00:23:02.298 00:00:10.644 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-09-22 00:23:01.798 00:00:10.362 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:24:02.979 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-09-22 00:24:02.200 00:00:10.361 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:20:31.742 00:05:01.384 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:25:02.603 00:00:10.320 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:25:03.220 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44670 10 6452 1 2025-09-22 00:21:31.744 00:05:01.379 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:26:03.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34314 10 6452 1 2025-09-22 00:26:02.964 00:00:10.386 TCP 23.104.0.1:54314 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:26:37.937 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:26:38.415 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:27:03.385 00:00:10.367 TCP 23.104.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:27:03.603 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50784 10 6452 1 2025-09-22 00:28:03.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-09-22 00:28:03.794 00:00:10.366 TCP 23.104.0.1:36434 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:29:03.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43194 10 6452 1 2025-09-22 00:29:04.197 00:00:10.332 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:30:04.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-09-22 00:30:04.568 00:00:10.320 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:26:31.743 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:31:04.935 00:00:10.375 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:31:04.426 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-09-22 00:31:38.383 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:27:31.747 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:31:38.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:32:04.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-09-22 00:32:05.350 00:00:10.323 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:33:04.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-09-22 00:33:05.711 00:00:10.381 TCP 23.104.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:34:05.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52660 10 6452 1 2025-09-22 00:34:06.125 00:00:10.367 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:35:05.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-09-22 00:35:06.529 00:00:10.360 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:36:05.471 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53404 10 6452 1 2025-09-22 00:36:06.931 00:00:10.343 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:36:38.108 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:32:31.744 00:05:01.387 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:36:38.446 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:37:05.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55216 10 6452 1 2025-09-22 00:37:07.309 00:00:10.369 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:33:31.748 00:05:01.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:38:05.936 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-09-22 00:38:07.719 00:00:10.323 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:39:06.125 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-09-22 00:39:08.118 00:00:10.363 TCP 23.104.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:40:06.338 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-22 00:40:08.534 00:00:10.324 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:41:06.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48900 10 6452 1 2025-09-22 00:41:08.896 00:00:10.371 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:41:38.424 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:41:38.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:42:06.741 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37412 10 6452 1 2025-09-22 00:42:09.303 00:00:10.373 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:38:31.747 00:05:01.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:43:06.911 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57196 10 6452 1 2025-09-22 00:43:09.718 00:00:10.369 TCP 23.104.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:39:31.750 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:44:10.126 00:00:10.470 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:44:07.131 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-09-22 00:45:10.635 00:00:10.328 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:45:07.338 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53084 10 6452 1 2025-09-22 00:46:10.998 00:00:10.324 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:46:07.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-09-22 00:46:38.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:46:38.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:47:11.361 00:00:10.364 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:47:07.726 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-09-22 00:48:07.940 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-09-22 00:48:11.759 00:00:10.364 TCP 23.104.0.1:57898 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:44:31.747 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:49:08.136 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-09-22 00:49:12.156 00:00:10.371 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:45:31.751 00:05:01.379 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:50:08.352 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-09-22 00:50:12.572 00:00:10.363 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:51:08.574 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-09-22 00:51:13.000 00:00:10.318 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:51:38.719 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:51:38.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:52:08.793 00:00:11.010 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-09-22 00:52:13.364 00:00:10.365 TCP 23.104.0.1:43656 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:53:09.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-09-22 00:53:13.770 00:00:10.386 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:54:10.076 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:49958 10 6452 1 2025-09-22 00:54:14.192 00:00:10.328 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:50:31.751 00:05:01.383 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 00:55:10.279 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-09-22 00:55:14.552 00:00:10.368 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:51:31.755 00:05:01.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 00:56:10.492 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34806 12 10367 1 2025-09-22 00:56:14.969 00:00:10.447 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 15 1926 1 2025-09-22 00:56:38.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 00:56:38.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 00:57:10.737 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-09-22 00:57:15.452 00:00:10.361 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-09-22 00:58:10.956 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:38050 11 6504 1 2025-09-22 00:58:15.853 00:00:10.393 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-09-21 23:56:31 - 2025-09-22 00:58:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0056s User: 0.0000s Wall: 0.0027s flows/second: 60075.6 Runtime: 0.0027s