Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 17:59:14.477 00:00:10.370 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-09-21 17:59:34.687 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-09-21 18:00:14.878 00:00:10.395 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-09-21 17:56:31.621 00:05:01.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:00:34.895 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52600 10 6452 1 2025-09-21 18:01:15.314 00:00:10.324 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:01:30.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:01:30.412 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 17:57:31.625 00:05:01.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:01:35.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-21 18:02:15.676 00:00:10.358 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:02:35.320 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-09-21 18:03:16.098 00:00:10.363 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:03:35.496 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-09-21 18:04:16.506 00:00:10.364 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:04:35.707 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35874 10 6452 1 2025-09-21 18:05:16.909 00:00:10.325 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:05:35.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-09-21 18:06:17.273 00:00:10.441 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 15 1926 1 2025-09-21 18:06:30.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:06:30.754 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:02:31.621 00:05:01.374 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:06:36.130 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59530 12 10367 1 2025-09-21 18:07:17.746 00:00:10.376 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:03:31.624 00:05:01.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:07:36.376 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6452 1 2025-09-21 18:08:18.159 00:00:10.373 TCP 23.104.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:08:36.590 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55010 10 6452 1 2025-09-21 18:09:18.566 00:00:11.066 TCP 23.104.0.1:41454 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:09:36.757 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-09-21 18:10:19.666 00:00:10.377 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:10:36.973 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-09-21 18:11:20.104 00:00:10.365 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:11:30.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:11:30.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:11:37.201 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 10 6452 1 2025-09-21 18:12:20.503 00:00:10.366 TCP 23.104.0.1:48366 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:08:31.622 00:05:01.375 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:12:37.427 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-21 18:13:20.904 00:00:10.362 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:09:31.625 00:05:01.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:13:37.594 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-09-21 18:14:21.306 00:00:10.368 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:14:37.812 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40496 10 6452 1 2025-09-21 18:15:21.708 00:00:10.377 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:15:37.991 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36988 10 6452 1 2025-09-21 18:16:30.839 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:16:30.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:16:22.122 00:00:10.360 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:16:38.177 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-09-21 18:17:22.520 00:00:10.374 TCP 23.104.0.1:59774 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:17:38.358 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-09-21 18:18:22.932 00:00:10.380 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:14:31.624 00:05:01.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:18:38.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52528 10 6452 1 2025-09-21 18:15:31.627 00:05:01.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:19:23.348 00:00:10.323 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:19:38.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60602 10 6452 1 2025-09-21 18:20:23.708 00:00:10.362 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:20:38.950 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-09-21 18:21:30.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:21:31.035 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:21:24.110 00:00:10.375 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:21:39.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53750 10 6452 1 2025-09-21 18:22:24.530 00:00:10.364 TCP 23.104.0.1:46108 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:22:39.389 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-09-21 18:23:24.933 00:00:10.376 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:23:39.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-09-21 18:24:25.351 00:00:10.371 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:20:31.627 00:05:01.376 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:24:39.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51580 10 6452 1 2025-09-21 18:21:31.628 00:05:01.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:25:25.758 00:00:10.817 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:25:40.054 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44196 10 6452 1 2025-09-21 18:26:30.883 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:26:30.941 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:26:26.625 00:00:10.364 TCP 23.104.0.1:55440 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:26:40.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-09-21 18:27:27.024 00:00:10.363 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:27:40.438 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56150 10 6452 1 2025-09-21 18:28:27.426 00:00:10.371 TCP 23.104.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:28:40.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60152 10 6452 1 2025-09-21 18:29:27.839 00:00:10.345 TCP 23.104.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:29:40.860 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-09-21 18:26:31.627 00:05:01.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:30:28.228 00:00:10.328 TCP 23.104.0.1:52264 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:30:41.239 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-09-21 18:31:31.241 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:31:30.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:27:31.629 00:05:01.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:31:28.595 00:00:10.364 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:31:41.451 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 10 6452 1 2025-09-21 18:32:29.001 00:00:10.318 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:32:42.234 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-09-21 18:33:29.365 00:00:10.365 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:33:42.451 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 10 6452 1 2025-09-21 18:34:29.772 00:00:10.372 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:34:42.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6452 1 2025-09-21 18:35:30.179 00:00:10.367 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:35:42.884 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-09-21 18:36:31.227 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:36:31.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:32:31.627 00:05:01.390 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:36:30.581 00:00:10.368 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:36:43.102 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-09-21 18:33:31.629 00:05:01.387 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:37:30.986 00:00:10.327 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:37:43.280 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-09-21 18:38:31.355 00:00:10.368 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:38:43.495 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-09-21 18:39:31.764 00:00:10.379 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:39:43.706 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-09-21 18:40:32.182 00:00:10.369 TCP 23.104.0.1:36078 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:40:43.917 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-09-21 18:41:31.271 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:41:31.436 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:41:32.587 00:00:10.331 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:41:44.118 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59858 10 6452 1 2025-09-21 18:38:31.629 00:05:01.405 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:42:32.955 00:00:10.365 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:42:44.330 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34976 10 6452 1 2025-09-21 18:39:31.631 00:05:01.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:43:33.361 00:00:10.898 TCP 23.104.0.1:52838 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:43:44.549 00:00:10.387 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-09-21 18:44:34.299 00:00:10.365 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:44:44.971 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-09-21 18:45:34.718 00:00:10.373 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:45:45.202 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6452 1 2025-09-21 18:46:31.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:46:31.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:46:35.127 00:00:10.365 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:46:45.435 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-09-21 18:47:35.533 00:00:10.363 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:47:45.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41412 10 6452 1 2025-09-21 18:44:31.628 00:05:01.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:48:35.932 00:00:10.380 TCP 23.104.0.1:34086 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:48:45.818 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-09-21 18:45:31.631 00:05:01.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:49:36.358 00:00:10.325 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:49:46.005 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41174 10 6452 1 2025-09-21 18:50:36.716 00:00:10.371 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:50:46.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43482 10 6452 1 2025-09-21 18:51:31.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:51:31.636 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:51:37.126 00:00:10.364 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:51:46.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33072 10 6452 1 2025-09-21 18:52:37.528 00:00:10.375 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:52:46.664 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-09-21 18:53:37.941 00:00:10.338 TCP 23.104.0.1:49356 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:53:46.882 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-09-21 18:50:31.628 00:05:01.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 18:54:38.313 00:00:10.364 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:54:47.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-09-21 18:51:31.633 00:05:01.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 18:55:38.723 00:00:10.374 TCP 23.104.0.1:51366 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:55:47.289 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-09-21 18:56:31.569 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 18:56:31.556 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 18:56:39.132 00:00:10.328 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:56:47.503 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6452 1 2025-09-21 18:57:39.498 00:00:10.361 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-09-21 18:57:47.718 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-09-21 18:58:39.901 00:00:10.330 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496230, total packets: 1568, avg bps: 1061, avg pps: 0, avg bpp: 316 Time window: 2025-09-21 17:56:31 - 2025-09-21 18:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0015s Wall: 0.0030s flows/second: 53760.4 Runtime: 0.0031s