Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-02 20:58:59.432 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54058 10 6452 1 2025-09-02 20:59:37.392 00:00:10.367 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-09-02 20:59:59.645 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-09-02 21:00:37.796 00:00:10.344 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:00:59.822 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-09-02 21:01:38.176 00:00:11.057 TCP 23.104.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:02:00.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6452 1 2025-09-02 21:02:18.428 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:02:18.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:02:39.275 00:00:10.324 TCP 23.104.0.1:43964 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:03:00.251 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54344 10 6452 1 2025-09-02 20:59:22.568 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:03:39.635 00:00:10.363 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:04:00.469 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-09-02 21:00:22.566 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:04:40.033 00:00:10.364 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:05:00.674 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54664 10 6452 1 2025-09-02 21:05:40.440 00:00:10.499 TCP 23.104.0.1:45984 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:06:00.890 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 2025-09-02 21:06:40.993 00:00:10.365 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:07:01.080 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-09-02 21:07:18.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:07:18.241 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:07:41.396 00:00:10.363 TCP 23.104.0.1:39610 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:08:01.311 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34264 10 6452 1 2025-09-02 21:08:41.799 00:00:10.367 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:09:01.527 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-09-02 21:05:22.569 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:09:42.205 00:00:10.323 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:10:01.748 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-09-02 21:06:22.567 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:10:42.566 00:00:10.366 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:11:01.968 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 13 6608 1 2025-09-02 21:11:42.968 00:00:10.378 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:12:02.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-09-02 21:12:18.439 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:12:18.395 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:12:43.387 00:00:10.443 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 15 1926 1 2025-09-02 21:13:02.388 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36074 12 10367 1 2025-09-02 21:13:43.868 00:00:10.327 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:14:02.593 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-09-02 21:14:44.237 00:00:10.365 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:15:02.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60946 10 6452 1 2025-09-02 21:11:22.572 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:15:44.640 00:00:10.365 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:16:03.035 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6452 1 2025-09-02 21:12:22.569 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:16:45.052 00:00:10.321 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:17:03.275 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-09-02 21:17:18.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:17:18.358 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:17:45.416 00:00:10.368 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:18:03.498 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-09-02 21:18:45.817 00:00:10.365 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:19:03.678 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-09-02 21:19:46.224 00:00:10.363 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:20:03.900 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-09-02 21:20:46.624 00:00:10.379 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:21:04.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-09-02 21:17:22.573 00:05:00.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:21:47.044 00:00:10.366 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:22:04.304 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-09-02 21:22:18.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:22:18.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:18:22.571 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:22:47.452 00:00:10.367 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:23:04.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46352 10 6452 1 2025-09-02 21:23:47.857 00:00:10.337 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:24:04.743 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-09-02 21:24:48.228 00:00:10.321 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:25:04.963 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44326 10 6452 1 2025-09-02 21:25:48.587 00:00:10.367 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:26:05.198 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-09-02 21:26:49.000 00:00:10.374 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:27:05.430 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-09-02 21:27:18.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:27:18.569 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:23:22.575 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:27:49.418 00:00:10.365 TCP 23.104.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:28:05.601 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-09-02 21:24:22.572 00:05:00.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:28:49.827 00:00:10.359 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:29:05.826 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-09-02 21:29:50.227 00:00:10.325 TCP 23.104.0.1:41154 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:30:06.076 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57312 10 6452 1 2025-09-02 21:30:50.590 00:00:10.367 TCP 23.104.0.1:53666 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:31:06.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33854 10 6452 1 2025-09-02 21:31:50.989 00:00:10.369 TCP 23.104.0.1:59942 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:32:06.461 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-09-02 21:32:18.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:32:18.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:32:51.394 00:00:10.369 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:33:06.667 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34554 10 6452 1 2025-09-02 21:29:22.575 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:33:51.801 00:00:10.362 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:34:06.885 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:38050 12 6544 1 2025-09-02 21:30:22.573 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:34:52.206 00:00:10.326 TCP 23.104.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:35:07.178 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-09-02 21:35:52.572 00:00:10.362 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:36:07.461 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-09-02 21:36:52.973 00:00:10.329 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:37:18.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:37:18.855 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:37:07.685 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-09-02 21:37:53.341 00:00:13.460 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:38:07.913 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-09-02 21:38:56.843 00:00:10.388 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:39:08.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57942 10 6452 1 2025-09-02 21:35:22.577 00:05:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:39:57.271 00:00:10.325 TCP 23.104.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:40:08.336 00:00:10.872 TCP 1.101.0.1:3000 -> 22.102.0.1:55872 10 6452 1 2025-09-02 21:36:22.573 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:40:57.637 00:00:10.362 TCP 23.104.0.1:38794 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:41:09.251 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-09-02 21:41:58.046 00:00:10.363 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:42:18.885 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:42:18.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:42:09.461 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39118 10 6452 1 2025-09-02 21:42:58.449 00:00:10.816 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:43:09.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6452 1 2025-09-02 21:43:59.308 00:00:10.362 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:44:09.886 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34374 10 6452 1 2025-09-02 21:44:59.708 00:00:10.361 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:45:10.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-09-02 21:41:22.576 00:05:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:46:00.107 00:00:10.358 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:46:10.326 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39726 10 6452 1 2025-09-02 21:42:22.575 00:05:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:47:00.506 00:00:10.365 TCP 23.104.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:47:10.546 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-09-02 21:47:19.238 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:47:18.986 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:48:00.914 00:00:10.369 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:48:10.762 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-09-02 21:49:01.324 00:00:10.361 TCP 23.104.0.1:58490 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:49:10.933 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43986 10 6452 1 2025-09-02 21:50:01.725 00:00:10.326 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:50:11.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-09-02 21:51:02.104 00:00:10.329 TCP 23.104.0.1:44268 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:51:11.383 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-09-02 21:47:22.578 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:52:02.465 00:00:10.365 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:52:19.053 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:52:11.594 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6452 1 2025-09-02 21:52:18.831 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:48:22.576 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-02 21:53:02.875 00:00:10.325 TCP 23.104.0.1:54862 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:53:11.766 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40070 10 6452 1 2025-09-02 21:54:03.236 00:00:10.332 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:54:11.940 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:57624 10 6452 1 2025-09-02 21:55:03.609 00:00:10.330 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:55:12.183 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-09-02 21:56:03.980 00:00:10.367 TCP 23.104.0.1:58660 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:56:12.356 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-09-02 21:57:04.388 00:00:10.377 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:57:19.079 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-02 21:57:12.572 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52594 10 6452 1 2025-09-02 21:57:19.232 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-02 21:53:22.582 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-02 21:58:04.805 00:00:10.364 TCP 23.104.0.1:35784 -> 1.101.0.1:3000 11 1507 1 2025-09-02 21:58:12.787 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-09-02 21:54:22.581 00:05:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 501423, total packets: 1572, avg bps: 1106, avg pps: 0, avg bpp: 318 Time window: 2025-09-02 20:58:59 - 2025-09-02 21:59:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0028s flows/second: 58825.6 Runtime: 0.0028s