Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-20 20:59:08.919 00:00:10.376 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-09-20 20:59:15.011 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-09-20 21:00:09.332 00:00:10.369 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:00:15.225 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-09-20 20:56:31.265 00:05:01.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:01:05.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:01:05.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:01:09.745 00:00:10.329 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:01:15.445 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34216 10 6452 1 2025-09-20 20:57:31.267 00:05:01.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:02:10.116 00:00:10.368 TCP 23.104.0.1:51688 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:02:15.667 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-09-20 21:03:10.520 00:00:10.369 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:03:15.892 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40908 10 6452 1 2025-09-20 21:04:10.930 00:00:10.374 TCP 23.104.0.1:52840 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:04:16.127 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-09-20 21:05:11.346 00:00:10.364 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:05:16.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53890 10 6452 1 2025-09-20 21:06:05.452 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:06:05.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:06:16.566 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51678 10 6452 1 2025-09-20 21:06:11.751 00:00:10.361 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:02:31.268 00:05:01.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:07:12.151 00:00:10.364 TCP 23.104.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:07:16.787 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-09-20 21:03:31.272 00:05:01.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:08:12.554 00:00:10.361 TCP 23.104.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:08:17.020 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-09-20 21:09:12.960 00:00:10.329 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:09:17.234 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-09-20 21:10:13.324 00:00:10.325 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:10:17.451 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-09-20 21:11:05.340 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:11:05.384 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:11:13.686 00:00:10.326 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:11:17.679 00:00:24.098 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-09-20 21:12:14.050 00:00:10.361 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:08:31.269 00:05:01.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:12:31.818 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-09-20 21:13:14.454 00:00:10.362 TCP 23.104.0.1:51964 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:09:31.273 00:05:01.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:13:32.045 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-09-20 21:14:14.851 00:00:10.382 TCP 23.104.0.1:60838 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:14:32.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6452 1 2025-09-20 21:15:15.272 00:00:10.361 TCP 23.104.0.1:44028 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:15:32.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-09-20 21:16:05.558 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:16:05.477 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:16:15.669 00:00:10.373 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:16:32.641 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-09-20 21:17:16.112 00:00:10.366 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:17:32.862 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-09-20 21:18:16.534 00:00:10.320 TCP 23.104.0.1:59294 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:14:31.270 00:05:01.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:18:33.108 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-09-20 21:19:16.889 00:00:10.378 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:15:31.273 00:05:01.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:19:33.331 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-09-20 21:20:17.310 00:00:10.369 TCP 23.104.0.1:39834 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:20:33.548 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-09-20 21:21:05.489 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:21:05.521 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:21:17.720 00:00:10.898 TCP 23.104.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:21:33.768 00:00:10.617 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-09-20 21:22:18.659 00:00:10.367 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:22:34.421 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-09-20 21:23:19.083 00:00:10.370 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:23:34.592 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34212 12 6556 1 2025-09-20 21:24:19.491 00:00:10.364 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:20:31.273 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:24:34.809 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-09-20 21:25:19.892 00:00:10.368 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:21:31.277 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:25:35.045 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-09-20 21:26:05.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:26:05.772 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:26:20.300 00:00:10.365 TCP 23.104.0.1:35954 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:26:35.213 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-09-20 21:27:20.704 00:00:10.372 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:27:35.431 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56804 10 6452 1 2025-09-20 21:28:21.114 00:00:10.364 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:28:35.650 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35000 10 6452 1 2025-09-20 21:29:21.515 00:00:10.327 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:29:35.864 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36394 10 6452 1 2025-09-20 21:26:31.275 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:30:21.883 00:00:10.385 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:30:36.097 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-09-20 21:31:06.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:31:05.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:31:22.302 00:00:10.366 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:27:31.277 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:31:36.272 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-09-20 21:32:22.705 00:00:10.372 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 12 1559 1 2025-09-20 21:32:36.488 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58246 10 6452 1 2025-09-20 21:33:23.111 00:00:10.380 TCP 23.104.0.1:60854 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:33:36.726 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35828 10 6452 1 2025-09-20 21:34:23.528 00:00:10.368 TCP 23.104.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:34:36.949 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-09-20 21:35:23.933 00:00:10.385 TCP 23.104.0.1:41722 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:35:37.189 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-09-20 21:36:05.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:36:06.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:36:24.356 00:00:10.438 TCP 23.104.0.1:57002 -> 1.101.0.1:3000 15 1926 1 2025-09-20 21:32:31.276 00:05:01.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:36:37.419 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 12 10367 1 2025-09-20 21:33:31.278 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:37:24.837 00:00:10.388 TCP 23.104.0.1:49224 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:37:37.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53084 10 6452 1 2025-09-20 21:38:25.265 00:00:10.322 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:38:37.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-09-20 21:39:25.627 00:00:10.322 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:39:38.098 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40704 10 6452 1 2025-09-20 21:40:25.985 00:00:10.367 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:40:38.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-09-20 21:41:05.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:41:05.850 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:41:26.390 00:00:10.325 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:41:38.538 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-09-20 21:38:31.278 00:05:01.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:42:26.755 00:00:10.356 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:42:38.751 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6452 1 2025-09-20 21:39:31.279 00:05:01.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:43:27.143 00:00:10.365 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:43:38.963 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 12 6556 1 2025-09-20 21:44:27.548 00:00:10.639 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 13 1611 1 2025-09-20 21:44:39.190 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-09-20 21:45:28.225 00:00:10.367 TCP 23.104.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:45:39.351 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6452 1 2025-09-20 21:46:06.198 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:46:06.318 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:46:28.626 00:00:10.327 TCP 23.104.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:46:39.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-09-20 21:47:28.986 00:00:10.365 TCP 23.104.0.1:37990 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:47:39.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47320 10 6452 1 2025-09-20 21:44:31.277 00:05:01.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:48:29.387 00:00:10.371 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:48:40.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58554 10 6452 1 2025-09-20 21:45:31.284 00:05:01.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:49:29.796 00:00:10.372 TCP 23.104.0.1:59668 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:49:40.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37926 10 6452 1 2025-09-20 21:50:30.206 00:00:10.365 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:50:40.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 2025-09-20 21:51:06.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:51:06.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:51:30.611 00:00:10.366 TCP 23.104.0.1:33554 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:51:40.655 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-09-20 21:52:31.016 00:00:10.325 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:52:40.869 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-09-20 21:53:31.380 00:00:10.361 TCP 23.104.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:53:41.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-09-20 21:50:31.282 00:05:01.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-20 21:54:31.780 00:00:10.367 TCP 23.104.0.1:57200 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:54:41.305 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-09-20 21:51:31.285 00:05:01.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-20 21:55:32.183 00:00:10.370 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:55:41.525 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-09-20 21:56:06.396 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-20 21:56:06.372 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-20 21:56:32.589 00:00:10.324 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:56:41.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-09-20 21:57:32.950 00:00:10.365 TCP 23.104.0.1:38074 -> 1.101.0.1:3000 11 1507 1 2025-09-20 21:57:41.961 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58274 10 6452 1 2025-09-20 21:58:33.352 00:00:10.360 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496594, total packets: 1575, avg bps: 1064, avg pps: 0, avg bpp: 315 Time window: 2025-09-20 20:56:31 - 2025-09-20 21:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0017s Wall: 0.0023s flows/second: 69926.5 Runtime: 0.0024s