Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 15:59:15.884 00:00:10.377 TCP 23.104.0.1:35212 -> 1.101.0.1:3000 11 1507 1 2025-09-29 15:59:12.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-09-29 16:00:19.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:00:18.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:00:16.300 00:00:10.365 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:00:12.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-29 15:56:35.326 00:05:01.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:01:13.088 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49432 10 6452 1 2025-09-29 16:01:16.700 00:00:10.367 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2025-09-29 15:57:35.326 00:05:01.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:02:13.267 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-09-29 16:02:17.108 00:00:10.366 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:03:13.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-09-29 16:03:17.523 00:00:10.368 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:04:13.695 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-09-29 16:04:17.932 00:00:10.400 TCP 23.104.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:05:19.000 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:05:19.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:05:13.912 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-09-29 16:05:18.378 00:00:10.362 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:06:14.136 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-09-29 16:06:18.791 00:00:10.372 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:02:35.326 00:05:01.625 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:07:14.348 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50404 10 6452 1 2025-09-29 16:07:19.204 00:00:10.366 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:03:35.328 00:05:01.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:08:14.521 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-09-29 16:08:19.609 00:00:10.364 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:09:14.737 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-09-29 16:09:20.014 00:00:10.362 TCP 23.104.0.1:46826 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:10:19.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:10:19.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:10:14.939 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6452 1 2025-09-29 16:10:20.415 00:00:10.365 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:11:15.182 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33734 10 6452 1 2025-09-29 16:11:20.826 00:00:10.364 TCP 23.104.0.1:39040 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:12:15.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-09-29 16:12:21.232 00:00:10.365 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:08:35.326 00:05:01.628 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:13:15.604 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36024 10 6452 1 2025-09-29 16:13:21.633 00:00:10.359 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:09:35.328 00:05:01.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:14:15.817 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-09-29 16:14:22.032 00:00:10.371 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:15:19.304 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:15:19.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:15:15.989 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-09-29 16:15:22.441 00:00:10.361 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:16:16.221 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-09-29 16:16:22.839 00:00:10.374 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:17:16.437 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49754 10 6452 1 2025-09-29 16:17:23.251 00:00:10.364 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:18:16.616 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58262 10 6452 1 2025-09-29 16:18:23.655 00:00:10.367 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:14:35.326 00:05:01.627 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:19:16.789 00:00:10.533 TCP 1.101.0.1:3000 -> 22.102.0.1:57098 10 6452 1 2025-09-29 16:19:24.092 00:00:10.366 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:15:35.329 00:05:01.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:20:19.458 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:20:19.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:20:17.358 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56286 10 6452 1 2025-09-29 16:20:24.499 00:00:10.363 TCP 23.104.0.1:37802 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:21:17.589 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-09-29 16:21:24.900 00:00:10.366 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:22:17.821 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 6452 1 2025-09-29 16:22:25.302 00:00:10.366 TCP 23.104.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:23:18.072 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48116 10 6452 1 2025-09-29 16:23:25.707 00:00:10.362 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:24:18.253 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-09-29 16:24:26.109 00:00:10.363 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:20:35.327 00:05:01.628 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:25:19.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:25:19.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:25:18.476 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-09-29 16:25:26.515 00:00:10.324 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:21:35.330 00:05:01.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:26:18.698 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-09-29 16:26:26.883 00:00:10.384 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:27:18.910 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 12 10375 1 2025-09-29 16:27:27.310 00:00:10.438 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 15 1926 1 2025-09-29 16:28:19.162 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-09-29 16:28:27.789 00:00:10.372 TCP 23.104.0.1:48434 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:29:19.378 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-09-29 16:29:28.208 00:00:10.372 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:30:19.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:30:19.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:30:19.599 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55734 10 6452 1 2025-09-29 16:30:28.616 00:00:10.366 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:26:35.327 00:05:01.628 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:31:19.825 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49016 10 6452 1 2025-09-29 16:27:35.330 00:05:01.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:31:29.020 00:00:10.369 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:32:20.079 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-09-29 16:32:29.426 00:00:10.368 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:33:20.438 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42222 10 6452 1 2025-09-29 16:33:29.838 00:00:10.386 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:34:20.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55548 10 6452 1 2025-09-29 16:34:30.264 00:00:10.364 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:35:19.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:35:19.731 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:35:20.830 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-09-29 16:35:30.672 00:00:10.367 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:36:21.073 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-09-29 16:36:31.095 00:00:10.363 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:32:35.327 00:05:01.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:37:21.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42740 10 6452 1 2025-09-29 16:33:35.330 00:05:01.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:37:31.498 00:00:10.553 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:38:21.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-09-29 16:38:32.106 00:00:10.364 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:39:21.731 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-09-29 16:39:32.507 00:00:10.339 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:40:21.019 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:40:20.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:40:21.944 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-09-29 16:40:32.883 00:00:10.342 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:41:22.173 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-09-29 16:41:33.266 00:00:10.374 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:42:22.410 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-09-29 16:38:35.328 00:05:01.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:42:33.670 00:00:10.366 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:43:23.106 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-09-29 16:39:35.332 00:05:01.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:43:34.099 00:00:10.320 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:44:23.328 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6452 1 2025-09-29 16:44:34.456 00:00:10.368 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:45:19.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:45:19.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:45:23.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57172 10 6452 1 2025-09-29 16:45:34.860 00:00:10.372 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:46:23.787 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42538 10 6452 1 2025-09-29 16:46:35.278 00:00:10.319 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:47:24.001 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-09-29 16:47:35.639 00:00:10.370 TCP 23.104.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:48:24.250 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40782 10 6452 1 2025-09-29 16:44:35.329 00:05:01.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:48:36.047 00:00:10.370 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:49:24.433 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58960 10 6452 1 2025-09-29 16:45:35.332 00:05:01.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:49:36.452 00:00:10.365 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:50:20.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:50:19.853 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:50:24.655 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6452 1 2025-09-29 16:50:36.855 00:00:10.378 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:51:24.877 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-09-29 16:51:37.282 00:00:10.364 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:52:25.106 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52838 10 6452 1 2025-09-29 16:52:37.685 00:00:10.324 TCP 23.104.0.1:41736 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:53:25.317 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-09-29 16:53:38.064 00:00:10.364 TCP 23.104.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:50:35.333 00:05:01.628 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 16:54:25.487 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-09-29 16:54:38.470 00:00:10.375 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:55:20.084 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 16:55:20.117 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 16:55:25.699 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35178 10 6452 1 2025-09-29 16:51:35.335 00:05:01.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 16:55:38.884 00:00:10.341 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:56:25.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-09-29 16:56:39.260 00:00:10.362 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:57:26.123 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-09-29 16:57:39.668 00:00:10.362 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-09-29 16:58:26.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-09-29 16:58:40.092 00:00:10.357 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-29 15:56:35 - 2025-09-29 16:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 70994.5 Runtime: 0.0023s