Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 04:59:14.463 00:00:10.366 TCP 23.104.0.1:35774 -> 1.101.0.1:3000 11 1507 1 2025-10-22 04:59:12.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44300 10 6452 1 2025-10-22 04:55:45.737 00:05:02.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:00:14.863 00:00:10.366 TCP 23.104.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:00:12.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-10-22 04:56:45.735 00:05:02.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:01:09.996 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:01:10.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:01:15.268 00:00:10.364 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:01:13.046 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-10-22 05:02:13.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45502 10 6452 1 2025-10-22 05:02:15.669 00:00:10.371 TCP 23.104.0.1:39818 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:03:13.471 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-10-22 05:03:16.099 00:00:10.325 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:04:13.680 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-10-22 05:04:16.459 00:00:10.363 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:05:13.892 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45760 10 6452 1 2025-10-22 05:05:16.865 00:00:10.365 TCP 23.104.0.1:47612 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:01:45.741 00:05:02.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:06:10.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:06:10.518 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:06:14.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6452 1 2025-10-22 05:06:17.272 00:00:10.361 TCP 23.104.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:02:45.738 00:05:02.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:07:14.324 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-10-22 05:07:17.671 00:00:10.376 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:08:14.531 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52678 10 6452 1 2025-10-22 05:08:18.099 00:00:10.369 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:09:14.740 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-10-22 05:09:18.504 00:00:10.365 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:10:15.007 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-10-22 05:10:18.913 00:00:10.325 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:11:10.127 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:11:10.197 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:11:15.223 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-10-22 05:11:19.282 00:00:10.364 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:07:45.741 00:05:02.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:12:15.444 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52726 10 6452 1 2025-10-22 05:12:19.683 00:00:10.337 TCP 23.104.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:08:45.739 00:05:02.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:13:15.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48328 10 6452 1 2025-10-22 05:13:20.094 00:00:10.373 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:14:15.888 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44282 10 6452 1 2025-10-22 05:14:20.504 00:00:10.363 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:15:16.100 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-10-22 05:15:20.908 00:00:10.326 TCP 23.104.0.1:35248 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:16:10.711 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:16:10.549 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:16:16.274 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-10-22 05:16:21.272 00:00:10.365 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:17:16.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-10-22 05:17:21.673 00:00:10.367 TCP 23.104.0.1:57812 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:13:45.742 00:05:02.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:18:16.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-10-22 05:18:22.102 00:00:11.140 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:14:45.741 00:05:02.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:19:16.901 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-10-22 05:19:23.280 00:00:10.360 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:20:17.086 00:00:16.002 TCP 1.101.0.1:3000 -> 22.102.0.1:59732 10 6452 1 2025-10-22 05:20:23.679 00:00:10.370 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:21:10.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:21:10.739 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:21:24.098 00:00:10.369 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:21:23.130 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36008 10 6452 1 2025-10-22 05:22:24.509 00:00:10.365 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:22:23.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6452 1 2025-10-22 05:23:23.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-10-22 05:23:24.912 00:00:10.326 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:19:45.744 00:05:02.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:24:25.277 00:00:10.320 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:24:23.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-10-22 05:20:45.742 00:05:02.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:25:25.636 00:00:10.368 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:25:23.940 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-10-22 05:26:10.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:26:10.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:26:24.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-10-22 05:26:26.053 00:00:10.325 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:27:26.412 00:00:10.329 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:27:24.383 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38472 10 6452 1 2025-10-22 05:28:24.555 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-10-22 05:28:26.784 00:00:10.320 TCP 23.104.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:29:24.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-10-22 05:29:27.141 00:00:10.362 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:25:45.745 00:05:02.849 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:30:24.938 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-10-22 05:30:27.541 00:00:10.363 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:26:45.743 00:05:02.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:31:10.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:31:10.649 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:31:25.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6452 1 2025-10-22 05:31:27.942 00:00:10.370 TCP 23.104.0.1:55260 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:32:25.391 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6452 1 2025-10-22 05:32:28.349 00:00:10.375 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:33:25.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-10-22 05:33:28.764 00:00:10.369 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:34:26.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54426 10 6452 1 2025-10-22 05:34:29.175 00:00:10.369 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:35:26.222 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-22 05:35:29.581 00:00:10.485 TCP 23.104.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:31:45.752 00:05:02.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:36:10.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:36:10.840 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:36:26.448 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6452 1 2025-10-22 05:36:30.108 00:00:10.363 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:32:45.750 00:05:02.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:37:26.623 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34890 10 6452 1 2025-10-22 05:37:30.512 00:00:10.372 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:38:30.924 00:00:10.392 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:38:26.847 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-10-22 05:39:27.104 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 12 10375 1 2025-10-22 05:39:31.356 00:00:10.442 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 15 1926 1 2025-10-22 05:40:27.362 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-10-22 05:40:31.833 00:00:10.362 TCP 23.104.0.1:38334 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:41:10.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:41:10.923 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:41:27.593 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-10-22 05:41:32.237 00:00:10.368 TCP 23.104.0.1:47672 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:37:45.754 00:05:02.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:42:27.822 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-10-22 05:42:32.644 00:00:10.379 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:38:45.752 00:05:02.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:43:28.070 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-10-22 05:43:33.095 00:00:10.377 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:44:28.280 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-10-22 05:44:33.520 00:00:10.368 TCP 23.104.0.1:45230 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:45:28.455 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-10-22 05:45:33.927 00:00:10.378 TCP 23.104.0.1:53604 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:46:11.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:46:11.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:46:28.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-10-22 05:46:34.346 00:00:10.367 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:47:28.847 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-10-22 05:47:34.748 00:00:10.385 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:43:45.756 00:05:02.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:48:29.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-10-22 05:48:35.168 00:00:10.370 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:44:45.752 00:05:02.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:49:29.298 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-10-22 05:49:35.573 00:00:10.367 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:50:29.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-10-22 05:50:35.987 00:00:10.369 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:51:11.156 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:51:10.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:51:29.733 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-10-22 05:51:36.392 00:00:10.368 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:52:29.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 12 6556 1 2025-10-22 05:52:36.810 00:00:10.329 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:53:30.198 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-10-22 05:53:37.180 00:00:10.336 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:49:45.757 00:05:02.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 05:54:30.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-10-22 05:50:45.754 00:05:02.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 05:54:37.557 00:00:10.365 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:55:30.634 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-10-22 05:55:37.956 00:00:10.321 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:56:11.212 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 05:56:11.253 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 05:56:30.803 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-10-22 05:56:38.317 00:00:10.369 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:57:31.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38820 10 6452 1 2025-10-22 05:57:38.718 00:00:10.376 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-10-22 05:58:31.245 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57408 10 6452 1 2025-10-22 05:58:39.132 00:00:10.366 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-10-22 04:55:45 - 2025-10-22 05:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0021s flows/second: 79651.0 Runtime: 0.0021s