Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 15:58:44.338 00:00:10.359 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:59:33.773 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55408 10 6452 1 2025-09-24 15:59:44.737 00:00:10.324 TCP 23.104.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:56:32.940 00:05:01.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:00:34.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-09-24 16:00:45.119 00:00:10.364 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-09-24 15:57:32.942 00:05:01.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:01:34.238 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-09-24 16:01:45.522 00:00:10.364 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:02:34.437 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-09-24 16:02:54.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:02:45.930 00:00:10.383 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:02:54.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:03:34.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-09-24 16:03:46.353 00:00:10.361 TCP 23.104.0.1:37850 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:04:34.862 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-09-24 16:04:46.755 00:00:10.340 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:05:35.104 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-09-24 16:05:47.134 00:00:10.361 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:02:32.946 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:06:35.325 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-09-24 16:06:47.535 00:00:10.320 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:03:32.950 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:07:35.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-09-24 16:07:54.875 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:07:54.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:07:47.899 00:00:10.335 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:08:36.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 10 6452 1 2025-09-24 16:08:48.274 00:00:10.363 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:09:36.324 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-09-24 16:09:48.676 00:00:10.324 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:10:36.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-09-24 16:10:49.051 00:00:10.335 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:11:36.748 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:58272 12 10365 1 2025-09-24 16:11:49.443 00:00:10.462 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 15 1926 1 2025-09-24 16:08:32.948 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:12:36.950 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53722 10 6452 1 2025-09-24 16:12:54.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:12:55.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:12:49.968 00:00:10.334 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:09:32.950 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:13:37.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58744 10 6452 1 2025-09-24 16:13:50.339 00:00:10.361 TCP 23.104.0.1:41366 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:14:37.392 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39072 10 6452 1 2025-09-24 16:14:50.744 00:00:10.329 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:15:37.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47426 10 6452 1 2025-09-24 16:15:51.112 00:00:10.368 TCP 23.104.0.1:46660 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:16:37.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-09-24 16:16:51.516 00:00:10.370 TCP 23.104.0.1:47968 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:17:38.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-09-24 16:17:55.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:17:55.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:17:51.922 00:00:10.348 TCP 23.104.0.1:38186 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:14:32.951 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:18:38.257 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-09-24 16:18:52.309 00:00:10.386 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:15:32.954 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:19:38.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46198 10 6452 1 2025-09-24 16:19:52.724 00:00:10.587 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:20:38.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-09-24 16:20:53.348 00:00:10.326 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:21:38.894 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-09-24 16:21:53.708 00:00:10.318 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:22:39.110 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38832 10 6452 1 2025-09-24 16:22:55.173 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:22:55.256 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:22:54.086 00:00:10.391 TCP 23.104.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:23:39.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-09-24 16:23:54.510 00:00:10.368 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:20:32.955 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:24:39.508 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33188 10 6452 1 2025-09-24 16:24:54.916 00:00:10.364 TCP 23.104.0.1:47364 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:21:32.958 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:25:39.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-09-24 16:25:55.317 00:00:10.969 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:26:39.889 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-09-24 16:26:56.321 00:00:10.365 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:27:55.330 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:27:40.119 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46538 10 6452 1 2025-09-24 16:27:55.327 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:27:56.723 00:00:10.371 TCP 23.104.0.1:58478 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:28:40.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34540 10 6452 1 2025-09-24 16:28:57.129 00:00:10.366 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:29:40.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-09-24 16:29:57.530 00:00:10.325 TCP 23.104.0.1:48654 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:26:32.956 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:30:40.776 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-09-24 16:30:57.896 00:00:10.378 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:27:32.959 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:31:40.941 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-09-24 16:31:58.304 00:00:10.365 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:32:41.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47916 10 6452 1 2025-09-24 16:32:55.519 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:32:55.445 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:32:58.706 00:00:10.320 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:33:41.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-09-24 16:33:59.092 00:00:10.753 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:34:41.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6452 1 2025-09-24 16:34:59.881 00:00:10.386 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:35:41.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-09-24 16:36:00.312 00:00:10.328 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:32:32.958 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:36:42.069 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33142 10 6452 1 2025-09-24 16:37:00.682 00:00:10.390 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:33:32.960 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:37:55.251 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:37:42.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-09-24 16:37:55.371 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:38:01.128 00:00:10.367 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:38:42.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-09-24 16:39:01.535 00:00:10.371 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:39:42.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-09-24 16:40:01.946 00:00:10.381 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:40:42.920 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39048 10 6452 1 2025-09-24 16:41:02.378 00:00:10.379 TCP 23.104.0.1:54634 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:41:43.131 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-09-24 16:42:02.792 00:00:10.368 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:38:32.962 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:42:55.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:42:43.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6452 1 2025-09-24 16:42:55.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:43:03.200 00:00:10.367 TCP 23.104.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:39:32.965 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:43:43.557 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-09-24 16:44:03.599 00:00:10.367 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:44:43.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-09-24 16:45:03.999 00:00:10.365 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:45:43.977 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42008 10 6452 1 2025-09-24 16:46:04.397 00:00:10.364 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:46:44.217 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-09-24 16:47:04.800 00:00:10.342 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:47:55.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:47:55.671 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:47:44.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-09-24 16:48:05.177 00:00:10.552 TCP 23.104.0.1:40520 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:44:32.964 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:48:44.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2025-09-24 16:49:05.770 00:00:10.365 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:45:32.966 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:49:44.862 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:54956 10 6452 1 2025-09-24 16:50:06.180 00:00:10.362 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:50:45.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-09-24 16:51:06.581 00:00:10.369 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:51:45.324 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-09-24 16:52:06.988 00:00:10.368 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:52:45.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-09-24 16:52:55.664 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:52:55.459 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:53:07.398 00:00:10.359 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:53:45.762 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-09-24 16:54:07.798 00:00:10.366 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:50:32.966 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 16:54:45.982 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-09-24 16:55:08.203 00:00:10.364 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:51:32.967 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 16:55:46.227 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-09-24 16:56:08.609 00:00:10.325 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:56:46.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6452 1 2025-09-24 16:57:08.968 00:00:10.381 TCP 23.104.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-09-24 16:57:55.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 16:57:46.657 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50522 10 6452 1 2025-09-24 16:57:55.800 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 16:58:09.391 00:00:10.323 TCP 23.104.0.1:50726 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496228, total packets: 1568, avg bps: 1070, avg pps: 0, avg bpp: 316 Time window: 2025-09-24 15:56:32 - 2025-09-24 16:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0010s Wall: 0.0030s flows/second: 54825.3 Runtime: 0.0030s