Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 20:59:09.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:59:09.638 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:59:14.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-09-16 20:59:41.882 00:00:10.329 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:00:15.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-09-16 20:56:29.354 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:00:42.246 00:00:10.368 TCP 23.104.0.1:56748 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:01:15.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-09-16 20:57:29.357 00:05:01.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:01:42.654 00:00:10.366 TCP 23.104.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:02:15.505 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:41580 10 6452 1 2025-09-16 21:02:43.061 00:00:10.370 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:03:16.262 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46618 10 6452 1 2025-09-16 21:03:43.469 00:00:10.369 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:04:09.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:04:09.554 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:04:16.485 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6452 1 2025-09-16 21:04:43.870 00:00:10.364 TCP 23.104.0.1:44852 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:05:16.661 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-09-16 21:05:44.277 00:00:10.365 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:06:16.875 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53514 10 6452 1 2025-09-16 21:02:29.354 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:06:44.680 00:00:10.322 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:07:17.102 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-09-16 21:03:29.359 00:05:01.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:07:45.065 00:00:10.328 TCP 23.104.0.1:37022 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:08:17.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56504 10 6452 1 2025-09-16 21:08:45.428 00:00:10.334 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:09:09.700 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:09:10.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:09:17.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2025-09-16 21:09:45.809 00:00:10.478 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:10:17.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57936 10 6452 1 2025-09-16 21:10:46.325 00:00:10.323 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:11:17.969 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-09-16 21:11:46.683 00:00:10.342 TCP 23.104.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:08:29.355 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:12:18.199 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:35880 10 6452 1 2025-09-16 21:12:47.156 00:00:10.362 TCP 23.104.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:13:18.398 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-09-16 21:09:29.358 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:13:47.559 00:00:10.360 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:14:09.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:14:10.048 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:14:18.617 00:00:10.718 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-09-16 21:14:47.958 00:00:10.366 TCP 23.104.0.1:52760 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:15:19.375 00:00:15.484 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-09-16 21:15:48.366 00:00:10.364 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:16:24.939 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-09-16 21:16:48.766 00:00:10.329 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:17:25.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-09-16 21:17:49.135 00:00:10.324 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:14:29.358 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:18:25.407 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37974 10 6452 1 2025-09-16 21:18:49.498 00:00:10.940 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:19:10.064 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:19:10.002 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:15:29.359 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:19:25.630 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-09-16 21:19:50.480 00:00:10.323 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:20:25.840 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51450 10 6452 1 2025-09-16 21:20:50.843 00:00:10.342 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:21:26.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51810 10 6452 1 2025-09-16 21:21:51.227 00:00:10.367 TCP 23.104.0.1:38096 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:22:26.242 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-09-16 21:22:51.630 00:00:10.366 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:23:26.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-09-16 21:23:52.031 00:00:10.366 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:24:10.340 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:24:10.411 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:20:29.360 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:24:26.676 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48064 10 6452 1 2025-09-16 21:24:52.435 00:00:10.320 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:21:29.363 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:25:26.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-09-16 21:25:52.798 00:00:10.364 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:26:27.106 00:00:10.248 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-09-16 21:26:53.199 00:00:10.362 TCP 23.104.0.1:49496 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:27:27.395 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-09-16 21:27:53.602 00:00:10.363 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:28:27.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-09-16 21:28:54.006 00:00:10.360 TCP 23.104.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:29:10.374 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:29:10.295 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:29:27.835 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-09-16 21:29:54.408 00:00:10.362 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:26:29.361 00:05:01.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:30:28.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-09-16 21:30:54.811 00:00:10.370 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:27:29.364 00:05:01.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:31:28.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6452 1 2025-09-16 21:31:55.218 00:00:10.321 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:32:28.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-09-16 21:32:55.577 00:00:10.365 TCP 23.104.0.1:35378 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:33:28.743 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40876 10 6452 1 2025-09-16 21:33:55.985 00:00:10.364 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:34:10.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:34:10.523 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:34:28.968 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55266 11 6504 1 2025-09-16 21:34:56.388 00:00:10.434 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 15 1926 1 2025-09-16 21:35:29.206 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36804 12 10367 1 2025-09-16 21:35:56.860 00:00:10.370 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:32:29.362 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:36:29.448 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60754 10 6452 1 2025-09-16 21:36:57.282 00:00:10.361 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:33:29.364 00:05:01.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:37:29.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55716 10 6452 1 2025-09-16 21:37:57.683 00:00:10.330 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:38:29.873 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57334 10 6452 1 2025-09-16 21:39:10.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:38:58.079 00:00:10.366 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:39:10.516 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:39:30.094 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-09-16 21:39:58.483 00:00:10.366 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:40:30.306 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-09-16 21:40:58.901 00:00:10.367 TCP 23.104.0.1:44022 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:41:30.519 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-09-16 21:41:59.310 00:00:10.671 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:38:29.364 00:05:01.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:42:30.740 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34740 10 6452 1 2025-09-16 21:43:00.025 00:00:10.360 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:39:29.365 00:05:01.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:43:30.912 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-09-16 21:44:10.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:44:10.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:44:00.425 00:00:10.667 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:44:31.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-09-16 21:45:01.131 00:00:10.362 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:45:31.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-09-16 21:46:01.533 00:00:10.368 TCP 23.104.0.1:54398 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:46:31.517 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-09-16 21:47:01.938 00:00:10.375 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:47:31.694 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45744 10 6452 1 2025-09-16 21:48:02.357 00:00:10.680 TCP 23.104.0.1:40114 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:44:29.364 00:05:01.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:48:31.871 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57450 10 6452 1 2025-09-16 21:49:10.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:49:10.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:49:03.094 00:00:10.359 TCP 23.104.0.1:50500 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:45:29.366 00:05:01.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:49:32.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-09-16 21:50:03.490 00:00:10.360 TCP 23.104.0.1:43946 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:50:32.303 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-09-16 21:51:03.893 00:00:10.333 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:51:32.476 00:00:10.598 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-09-16 21:52:04.260 00:00:10.362 TCP 23.104.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:52:33.113 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49232 10 6452 1 2025-09-16 21:53:04.667 00:00:10.327 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:53:33.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-09-16 21:54:10.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 21:54:10.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 21:54:05.032 00:00:10.367 TCP 23.104.0.1:45068 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:50:29.399 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 21:54:33.541 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-09-16 21:55:05.435 00:00:10.363 TCP 23.104.0.1:38478 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:51:29.402 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 21:55:33.761 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-09-16 21:56:05.833 00:00:10.347 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:56:33.984 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-09-16 21:57:06.216 00:00:10.369 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:57:34.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-09-16 21:58:06.624 00:00:10.319 TCP 23.104.0.1:48608 -> 1.101.0.1:3000 11 1507 1 2025-09-16 21:58:34.443 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41000 10 6452 1 Summary: total flows: 163, total bytes: 501227, total packets: 1568, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-09-16 20:56:29 - 2025-09-16 21:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0009s Wall: 0.0021s flows/second: 78818.5 Runtime: 0.0021s