Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 20:58:46.297 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 10 6452 1 2025-09-04 20:55:23.693 00:05:00.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 20:59:39.930 00:00:10.376 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-09-04 20:59:46.521 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-09-04 21:00:40.344 00:00:10.324 TCP 23.104.0.1:48158 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:00:46.693 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-09-04 21:01:40.708 00:00:10.367 TCP 23.104.0.1:49366 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:01:46.862 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-09-04 21:02:41.115 00:00:10.364 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:02:47.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-09-04 21:03:15.847 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:03:15.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:03:41.514 00:00:10.366 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:03:47.322 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6452 1 2025-09-04 21:00:23.690 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:04:41.928 00:00:10.344 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:04:47.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-09-04 21:01:23.692 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:05:42.309 00:00:10.322 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:05:47.753 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56238 10 6452 1 2025-09-04 21:06:42.669 00:00:10.984 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:06:47.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 12 6556 1 2025-09-04 21:07:43.692 00:00:10.369 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:07:48.188 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-09-04 21:08:16.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:08:16.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:08:44.108 00:00:10.322 TCP 23.104.0.1:35940 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:08:48.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 10 6452 1 2025-09-04 21:09:44.474 00:00:10.362 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:09:48.632 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45384 10 6452 1 2025-09-04 21:06:23.692 00:05:00.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:10:44.874 00:00:10.365 TCP 23.104.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:10:48.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39386 10 6452 1 2025-09-04 21:07:23.694 00:05:00.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:11:45.289 00:00:10.377 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:11:49.009 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-09-04 21:12:45.711 00:00:10.380 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:12:49.187 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52678 10 6452 1 2025-09-04 21:13:16.111 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:13:16.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:13:46.128 00:00:10.370 TCP 23.104.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:13:49.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46988 10 6452 1 2025-09-04 21:14:46.538 00:00:10.373 TCP 23.104.0.1:50764 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:14:49.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-09-04 21:15:46.945 00:00:10.369 TCP 23.104.0.1:59044 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:15:49.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-09-04 21:12:23.698 00:05:00.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:16:47.351 00:00:10.364 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:16:50.074 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-09-04 21:13:23.694 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:17:47.758 00:00:10.381 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:17:50.389 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6452 1 2025-09-04 21:18:16.365 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:18:16.393 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:18:50.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48292 10 6452 1 2025-09-04 21:18:48.179 00:00:10.362 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:19:48.577 00:00:10.366 TCP 23.104.0.1:34406 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:19:50.766 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-09-04 21:20:50.976 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 11 6504 1 2025-09-04 21:20:48.979 00:00:10.366 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:21:51.276 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-09-04 21:21:49.380 00:00:10.377 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:18:23.693 00:05:00.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:22:51.488 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-09-04 21:22:49.809 00:00:10.361 TCP 23.104.0.1:46698 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:23:16.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:23:16.152 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:19:23.696 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:23:50.210 00:00:10.706 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:23:51.718 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37926 10 6452 1 2025-09-04 21:24:50.951 00:00:10.325 TCP 23.104.0.1:58584 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:24:51.891 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-09-04 21:25:51.316 00:00:10.788 TCP 23.104.0.1:47140 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:25:52.105 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-09-04 21:26:52.310 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38318 10 6452 1 2025-09-04 21:26:52.145 00:00:10.359 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:27:52.549 00:00:10.367 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:27:52.521 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-09-04 21:28:16.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:28:16.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:24:23.695 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:28:52.951 00:00:10.364 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:28:52.742 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48788 10 6452 1 2025-09-04 21:25:23.698 00:05:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:29:53.353 00:00:10.326 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:29:52.918 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45248 10 6452 1 2025-09-04 21:30:53.718 00:00:10.368 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:30:53.129 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-09-04 21:31:54.124 00:00:10.326 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:31:53.355 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-09-04 21:32:53.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-09-04 21:32:54.498 00:00:10.372 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:33:16.444 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:33:16.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:33:53.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-09-04 21:33:54.910 00:00:10.368 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:30:23.697 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:34:53.995 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42270 10 6452 1 2025-09-04 21:34:55.315 00:00:10.368 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:31:23.699 00:05:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:35:54.180 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49148 10 6452 1 2025-09-04 21:35:55.723 00:00:10.386 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:36:56.141 00:00:10.319 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:36:54.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-09-04 21:37:54.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-09-04 21:37:56.496 00:00:10.365 TCP 23.104.0.1:47966 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:38:16.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:38:16.625 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:38:54.790 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-09-04 21:38:56.898 00:00:10.328 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:39:55.005 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-09-04 21:39:57.284 00:00:10.376 TCP 23.104.0.1:36502 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:36:23.698 00:05:00.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:40:55.180 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-09-04 21:40:57.699 00:00:10.372 TCP 23.104.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:37:23.700 00:05:00.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:41:55.407 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-09-04 21:41:58.113 00:00:10.322 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:42:55.580 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-09-04 21:42:58.470 00:00:10.370 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:43:16.624 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:43:16.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:43:55.795 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59798 10 6452 1 2025-09-04 21:43:58.883 00:00:10.388 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:44:56.005 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60920 10 6452 1 2025-09-04 21:44:59.310 00:00:10.320 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:45:56.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40650 10 6452 1 2025-09-04 21:45:59.674 00:00:10.371 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:42:23.697 00:05:00.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:46:56.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43838 10 6452 1 2025-09-04 21:47:00.099 00:00:10.362 TCP 23.104.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:43:23.700 00:05:00.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:47:56.644 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-09-04 21:48:00.502 00:00:10.329 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:48:16.814 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:48:17.041 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:48:56.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-04 21:49:00.870 00:00:10.365 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:49:57.054 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-09-04 21:50:01.271 00:00:10.667 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:50:57.270 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-09-04 21:51:01.980 00:00:10.322 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:51:57.445 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46926 10 6452 1 2025-09-04 21:52:02.341 00:00:10.373 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:48:23.699 00:05:00.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 21:52:57.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 10 6452 1 2025-09-04 21:53:02.753 00:00:10.335 TCP 23.104.0.1:54990 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:53:17.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:53:17.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:49:23.702 00:05:00.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 21:53:57.862 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6452 1 2025-09-04 21:54:03.123 00:00:10.365 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:54:58.097 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-09-04 21:55:03.527 00:00:10.364 TCP 23.104.0.1:56288 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:55:58.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-09-04 21:56:03.937 00:00:10.416 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:56:58.531 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37264 10 6452 1 2025-09-04 21:57:04.390 00:00:10.372 TCP 23.104.0.1:33058 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:57:58.720 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-09-04 21:58:16.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 21:58:04.799 00:00:10.364 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-09-04 21:58:16.991 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 21:54:23.702 00:05:00.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1035, avg pps: 0, avg bpp: 317 Time window: 2025-09-04 20:55:23 - 2025-09-04 21:59:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0033s flows/second: 48903.5 Runtime: 0.0034s