Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 20:58:54.780 00:00:10.368 TCP 23.104.0.1:47214 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:59:13.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 20:59:13.567 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 20:59:24.307 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37550 10 6452 1 2025-09-06 20:59:55.190 00:00:10.325 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:56:24.609 00:05:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:00:24.527 00:00:10.724 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-09-06 21:00:55.551 00:00:10.360 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:01:25.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-09-06 21:01:55.949 00:00:10.376 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-09-06 20:58:24.614 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:02:25.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38048 10 6452 1 2025-09-06 21:02:56.362 00:00:10.370 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:03:25.730 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-09-06 21:03:56.783 00:00:10.367 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:04:13.630 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:04:13.627 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:04:25.898 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-09-06 21:04:57.189 00:00:10.329 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:05:26.113 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-09-06 21:05:57.554 00:00:10.364 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:02:24.615 00:05:00.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:06:26.324 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-09-06 21:06:57.953 00:00:10.366 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:07:26.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 10 6452 1 2025-09-06 21:07:58.361 00:00:10.318 TCP 23.104.0.1:35908 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:04:24.619 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:08:26.712 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-09-06 21:08:58.716 00:00:10.324 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:09:13.627 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:09:13.740 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:09:26.927 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-09-06 21:09:59.104 00:00:10.327 TCP 23.104.0.1:52930 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:10:27.180 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-09-06 21:10:59.470 00:00:10.324 TCP 23.104.0.1:35516 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:11:27.523 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36388 10 6452 1 2025-09-06 21:11:59.833 00:00:10.395 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:08:24.619 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:12:27.743 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45710 10 6452 1 2025-09-06 21:13:00.268 00:00:10.362 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:13:27.952 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35376 10 6452 1 2025-09-06 21:14:00.672 00:00:10.362 TCP 23.104.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:14:13.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:14:13.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:10:24.622 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:14:28.161 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-09-06 21:15:01.096 00:00:10.371 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:15:28.395 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6452 1 2025-09-06 21:16:01.504 00:00:10.362 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:16:28.610 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-09-06 21:17:01.900 00:00:10.330 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:17:28.821 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60368 12 6556 1 2025-09-06 21:18:02.268 00:00:10.364 TCP 23.104.0.1:51532 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:14:24.621 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:18:29.070 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:50322 11 6504 1 2025-09-06 21:19:13.860 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:19:02.669 00:00:10.366 TCP 23.104.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:19:13.921 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:19:29.337 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-09-06 21:20:03.102 00:00:10.366 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:16:24.624 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:20:29.562 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-09-06 21:21:03.505 00:00:10.337 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:21:29.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-09-06 21:22:03.887 00:00:10.367 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:22:29.951 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-09-06 21:23:04.291 00:00:10.320 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:23:30.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-09-06 21:24:14.203 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:24:13.962 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:24:04.650 00:00:10.323 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:20:24.621 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:24:30.389 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6452 1 2025-09-06 21:25:05.013 00:00:10.362 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:25:30.609 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-09-06 21:26:05.410 00:00:10.370 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:22:24.625 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:26:30.821 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45322 10 6452 1 2025-09-06 21:27:05.817 00:00:10.731 TCP 23.104.0.1:32868 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:27:31.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6452 1 2025-09-06 21:28:06.579 00:00:10.366 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:28:31.260 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57690 10 6452 1 2025-09-06 21:29:14.228 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:29:14.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:29:06.986 00:00:10.370 TCP 23.104.0.1:58526 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:29:31.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-09-06 21:30:07.395 00:00:10.387 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:26:24.629 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:30:31.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-09-06 21:31:07.824 00:00:10.364 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:31:31.878 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41754 10 6452 1 2025-09-06 21:32:08.223 00:00:10.370 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:28:24.632 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:32:32.073 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-09-06 21:33:08.627 00:00:10.367 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:33:32.250 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-09-06 21:34:14.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:34:14.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:34:09.030 00:00:10.368 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:34:32.491 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-09-06 21:35:09.446 00:00:10.326 TCP 23.104.0.1:37226 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:35:32.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50606 10 6452 1 2025-09-06 21:36:09.809 00:00:10.366 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:32:24.631 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:36:32.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-09-06 21:37:10.212 00:00:10.326 TCP 23.104.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:37:33.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38428 10 6452 1 2025-09-06 21:38:10.572 00:00:10.442 TCP 23.104.0.1:55108 -> 1.101.0.1:3000 15 1926 1 2025-09-06 21:34:24.635 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:38:33.352 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:46034 12 10367 1 2025-09-06 21:39:14.054 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:39:14.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:39:11.058 00:00:10.335 TCP 23.104.0.1:52042 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:39:33.605 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-09-06 21:40:11.440 00:00:10.411 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:40:33.780 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-09-06 21:41:11.892 00:00:10.332 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:41:33.995 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-09-06 21:42:12.264 00:00:10.365 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:38:24.636 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:42:34.176 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-09-06 21:43:12.675 00:00:10.989 TCP 23.104.0.1:38052 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:43:34.394 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43426 10 6452 1 2025-09-06 21:44:14.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:44:14.152 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:40:24.638 00:05:00.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:44:13.706 00:00:10.367 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:44:34.572 00:00:10.736 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-09-06 21:45:14.119 00:00:10.359 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:45:35.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-09-06 21:46:14.517 00:00:10.363 TCP 23.104.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:46:35.552 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-09-06 21:47:14.918 00:00:10.380 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:47:35.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6452 1 2025-09-06 21:44:24.640 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:48:15.336 00:00:10.367 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:48:36.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48818 10 6452 1 2025-09-06 21:49:14.421 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:49:14.397 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:49:15.740 00:00:10.367 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:49:36.250 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56342 10 6452 1 2025-09-06 21:50:16.149 00:00:10.324 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:46:24.643 00:05:00.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:50:36.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41678 10 6452 1 2025-09-06 21:51:16.515 00:00:10.363 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:51:36.677 00:00:10.446 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 9 6412 1 2025-09-06 21:52:16.918 00:00:10.442 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:52:37.162 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-09-06 21:53:17.404 00:00:10.374 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:53:37.373 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54036 10 6452 1 2025-09-06 21:54:14.718 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 21:54:14.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 21:50:24.641 00:05:00.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 21:54:17.819 00:00:10.369 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:54:37.587 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-09-06 21:55:18.221 00:00:10.366 TCP 23.104.0.1:54716 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:55:37.805 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-09-06 21:52:24.644 00:05:00.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 21:56:18.628 00:00:10.366 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:56:38.027 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57608 10 6452 1 2025-09-06 21:57:19.036 00:00:10.329 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-09-06 21:57:38.202 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6452 1 2025-09-06 21:58:19.403 00:00:10.400 TCP 23.104.0.1:57078 -> 1.101.0.1:3000 15 1926 1 2025-09-06 21:58:38.465 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 12 10367 1 Summary: total flows: 164, total bytes: 507132, total packets: 1586, avg bps: 1083, avg pps: 0, avg bpp: 319 Time window: 2025-09-06 20:56:24 - 2025-09-06 21:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0027s flows/second: 61100.2 Runtime: 0.0027s