Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 20:59:26.365 00:00:10.365 TCP 23.104.0.1:47072 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:59:24.083 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-09-12 21:00:24.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-09-12 21:00:26.771 00:00:10.374 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-09-12 20:57:27.518 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 20:57:27.516 00:05:00.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:01:24.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-09-12 21:01:27.184 00:00:10.365 TCP 23.104.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:02:14.182 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:02:14.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:02:24.728 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-09-12 21:02:27.586 00:00:10.365 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:03:24.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-09-12 21:03:27.986 00:00:10.365 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:04:25.177 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57592 10 6452 1 2025-09-12 21:04:28.387 00:00:10.367 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:05:25.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-09-12 21:05:28.792 00:00:10.368 TCP 23.104.0.1:44962 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:06:25.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57414 10 6452 1 2025-09-12 21:06:29.199 00:00:10.366 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:07:14.413 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:07:14.267 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:03:27.517 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:03:27.520 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:07:25.842 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6452 1 2025-09-12 21:07:29.605 00:00:10.364 TCP 23.104.0.1:43564 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:08:26.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59978 10 6452 1 2025-09-12 21:08:30.011 00:00:10.362 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:09:26.249 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57054 10 6452 1 2025-09-12 21:09:30.408 00:00:10.371 TCP 23.104.0.1:40428 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:10:26.459 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-09-12 21:10:30.821 00:00:10.367 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:11:26.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-09-12 21:11:31.225 00:00:10.376 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:12:14.311 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:12:14.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:12:26.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49050 10 6452 1 2025-09-12 21:12:31.639 00:00:10.395 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:09:27.525 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:09:27.522 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:13:27.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55584 10 6452 1 2025-09-12 21:13:32.096 00:00:10.366 TCP 23.104.0.1:47826 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:14:27.335 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49300 10 6452 1 2025-09-12 21:14:32.508 00:00:10.374 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:15:27.546 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-09-12 21:15:32.924 00:00:10.337 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:16:27.751 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-09-12 21:16:33.301 00:00:10.368 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:17:14.421 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:17:14.595 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:17:27.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37608 12 6556 1 2025-09-12 21:17:33.713 00:00:10.374 TCP 23.104.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:18:28.187 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49968 10 6452 1 2025-09-12 21:18:34.120 00:00:10.360 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:15:27.524 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:15:27.526 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:19:28.398 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-09-12 21:19:34.515 00:00:10.366 TCP 23.104.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:20:28.612 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-09-12 21:20:34.921 00:00:10.386 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:21:28.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-09-12 21:21:35.345 00:00:10.320 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:22:14.721 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:22:14.631 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:22:29.044 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-09-12 21:22:35.705 00:00:10.364 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:23:29.255 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-09-12 21:23:36.109 00:00:10.363 TCP 23.104.0.1:39926 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:24:29.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-09-12 21:24:36.513 00:00:10.362 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:21:27.526 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:21:27.529 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:25:29.684 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-09-12 21:25:36.918 00:00:10.387 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:26:30.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54854 10 6452 1 2025-09-12 21:26:37.345 00:00:10.366 TCP 23.104.0.1:55622 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:27:14.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:27:14.783 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:27:30.645 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46110 10 6452 1 2025-09-12 21:27:37.748 00:00:10.373 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:28:30.863 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44172 10 6452 1 2025-09-12 21:28:38.159 00:00:10.360 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:29:31.120 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2025-09-12 21:29:38.560 00:00:10.363 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:30:31.339 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 10 6452 1 2025-09-12 21:30:38.962 00:00:10.366 TCP 23.104.0.1:34466 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:27:27.529 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:27:27.532 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:31:31.553 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:38380 10 6452 1 2025-09-12 21:31:39.367 00:00:10.325 TCP 23.104.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:32:15.680 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:32:15.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:32:31.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-09-12 21:32:39.732 00:00:10.326 TCP 23.104.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:33:31.965 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6452 1 2025-09-12 21:33:40.099 00:00:10.365 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:34:32.189 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-09-12 21:34:40.506 00:00:10.365 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:35:32.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-09-12 21:35:40.908 00:00:10.367 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:36:32.623 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-09-12 21:36:41.312 00:00:10.364 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:37:14.955 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:37:14.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:33:27.533 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:33:27.530 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:37:32.852 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57638 10 6452 1 2025-09-12 21:37:41.711 00:00:10.375 TCP 23.104.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:38:33.086 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-09-12 21:38:42.125 00:00:10.979 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:39:33.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-09-12 21:39:43.160 00:00:10.363 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:40:33.517 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47324 10 6452 1 2025-09-12 21:40:43.565 00:00:10.368 TCP 23.104.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:41:33.739 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-09-12 21:41:43.969 00:00:10.371 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:42:15.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:42:15.056 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:42:33.962 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 2025-09-12 21:42:44.384 00:00:10.366 TCP 23.104.0.1:52604 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:39:27.532 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:39:27.534 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:43:34.185 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-09-12 21:43:44.789 00:00:10.365 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:44:34.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-09-12 21:44:45.193 00:00:10.362 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:45:34.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-09-12 21:45:45.591 00:00:10.856 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:46:34.831 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59702 10 6452 1 2025-09-12 21:46:46.485 00:00:10.372 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:47:15.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:47:15.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:47:35.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48086 10 6452 1 2025-09-12 21:47:46.887 00:00:10.377 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:48:35.299 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52746 10 6452 1 2025-09-12 21:48:47.300 00:00:10.373 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:45:27.535 00:05:00.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:45:27.534 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:49:35.523 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51778 10 6452 1 2025-09-12 21:49:47.710 00:00:10.370 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:50:35.744 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-09-12 21:50:48.123 00:00:10.366 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:51:35.964 00:00:10.877 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 12 6556 1 2025-09-12 21:51:48.522 00:00:10.387 TCP 23.104.0.1:44722 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:52:15.258 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:52:15.045 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:52:36.878 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-09-12 21:52:48.950 00:00:10.377 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:53:37.101 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6452 1 2025-09-12 21:53:49.360 00:00:10.372 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:54:37.269 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-09-12 21:54:49.767 00:00:10.377 TCP 23.104.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:51:27.534 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 21:51:27.536 00:05:00.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:55:37.488 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-09-12 21:55:50.182 00:00:10.365 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:56:37.709 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-09-12 21:56:50.583 00:00:10.363 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:57:15.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 21:57:15.158 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 21:57:37.928 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-09-12 21:57:50.984 00:00:10.378 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:58:38.172 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51664 10 6452 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-09-12 20:57:27 - 2025-09-12 21:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0027s flows/second: 61091.2 Runtime: 0.0027s