Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 20:59:06.525 00:00:10.365 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:59:37.777 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-09-25 21:00:06.931 00:00:10.384 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:56:33.544 00:05:01.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:00:37.993 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-09-25 21:01:07.354 00:00:10.363 TCP 23.104.0.1:34646 -> 1.101.0.1:3000 11 1507 1 2025-09-25 20:57:33.546 00:05:01.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:01:38.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-09-25 21:02:07.755 00:00:10.370 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:02:38.394 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-09-25 21:03:08.164 00:00:10.325 TCP 23.104.0.1:42638 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:03:29.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:03:29.383 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:03:38.618 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-09-25 21:04:08.526 00:00:10.366 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:04:38.840 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48742 10 6452 1 2025-09-25 21:05:08.930 00:00:10.344 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:05:39.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34328 10 6452 1 2025-09-25 21:06:09.311 00:00:10.366 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:02:33.545 00:05:01.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:06:39.297 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-09-25 21:07:09.715 00:00:10.377 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:03:33.549 00:05:01.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:07:39.512 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:47556 10 6452 1 2025-09-25 21:08:10.131 00:00:10.365 TCP 23.104.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:08:29.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:08:29.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:08:39.700 00:00:10.766 TCP 1.101.0.1:3000 -> 22.102.0.1:55632 10 6452 1 2025-09-25 21:09:10.532 00:00:10.319 TCP 23.104.0.1:34404 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:09:40.505 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-09-25 21:10:10.891 00:00:10.368 TCP 23.104.0.1:36526 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:10:40.678 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38864 10 6452 1 2025-09-25 21:11:11.299 00:00:10.375 TCP 23.104.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:11:40.850 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-09-25 21:12:11.710 00:00:10.365 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:08:33.548 00:05:01.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:12:41.079 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-09-25 21:13:12.114 00:00:10.512 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:13:29.958 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:13:29.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:09:33.550 00:05:01.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:13:41.251 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-09-25 21:14:12.664 00:00:10.329 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:14:41.464 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46072 10 6452 1 2025-09-25 21:15:13.027 00:00:10.321 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:15:41.637 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-09-25 21:16:13.388 00:00:10.367 TCP 23.104.0.1:44426 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:16:41.810 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45358 10 6452 1 2025-09-25 21:17:13.788 00:00:10.348 TCP 23.104.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:17:41.982 00:00:10.504 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-09-25 21:18:14.169 00:00:10.361 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:18:29.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:18:29.792 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:14:33.547 00:05:01.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:18:42.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-09-25 21:19:14.566 00:00:10.324 TCP 23.104.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:15:33.551 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:19:42.738 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-09-25 21:20:14.927 00:00:10.387 TCP 23.104.0.1:48168 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:20:42.985 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 13 6608 1 2025-09-25 21:21:15.352 00:00:10.443 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 15 1926 1 2025-09-25 21:21:43.258 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 12 10367 1 2025-09-25 21:22:15.842 00:00:10.387 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:22:43.498 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-09-25 21:23:16.275 00:00:10.365 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:23:29.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:23:30.193 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:23:43.718 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-09-25 21:24:16.682 00:00:10.373 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:20:33.551 00:05:01.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:24:43.928 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6452 1 2025-09-25 21:25:17.097 00:00:10.363 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:21:33.554 00:05:01.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:25:44.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-09-25 21:26:17.501 00:00:10.370 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:26:44.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-09-25 21:27:17.907 00:00:10.390 TCP 23.104.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:27:44.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-09-25 21:28:18.332 00:00:10.366 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:28:29.906 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:28:29.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:28:44.985 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-09-25 21:29:18.737 00:00:10.366 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:29:45.213 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58160 10 6452 1 2025-09-25 21:30:19.139 00:00:10.372 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:26:33.553 00:05:01.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:30:45.416 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58714 10 6452 1 2025-09-25 21:31:19.552 00:00:10.368 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:27:33.554 00:05:01.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:31:45.627 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-09-25 21:32:19.958 00:00:10.364 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:32:45.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-09-25 21:33:30.394 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:33:20.368 00:00:10.364 TCP 23.104.0.1:53462 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:33:30.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:33:46.006 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-09-25 21:34:20.769 00:00:10.368 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:34:46.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-09-25 21:35:21.179 00:00:10.322 TCP 23.104.0.1:35722 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:35:46.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36318 10 6452 1 2025-09-25 21:36:21.541 00:00:10.366 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:32:33.554 00:05:01.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:36:46.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-09-25 21:37:21.952 00:00:10.713 TCP 23.104.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:33:33.557 00:05:01.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:37:46.850 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54734 10 6452 1 2025-09-25 21:38:30.444 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:38:30.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:38:22.699 00:00:10.368 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:38:47.035 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-09-25 21:39:23.111 00:00:10.365 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:39:47.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33608 10 6452 1 2025-09-25 21:40:23.513 00:00:10.370 TCP 23.104.0.1:55318 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:40:47.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55782 10 6452 1 2025-09-25 21:41:23.923 00:00:10.376 TCP 23.104.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:41:47.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-09-25 21:38:33.555 00:05:01.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:42:24.338 00:00:10.361 TCP 23.104.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:42:47.852 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-09-25 21:43:30.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:43:30.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:43:24.738 00:00:10.366 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:39:33.558 00:05:01.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:43:48.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-09-25 21:44:25.142 00:00:10.363 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:44:48.297 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-09-25 21:45:25.541 00:00:10.366 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:45:48.638 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33086 10 6452 1 2025-09-25 21:46:25.944 00:00:10.406 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 15 1926 1 2025-09-25 21:46:48.867 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 12 10365 1 2025-09-25 21:47:26.393 00:00:10.327 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:47:49.128 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-09-25 21:48:30.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:48:30.404 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:44:33.555 00:05:01.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:48:26.764 00:00:10.375 TCP 23.104.0.1:46938 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:48:49.374 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55156 10 6452 1 2025-09-25 21:45:33.558 00:05:01.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:49:27.178 00:00:10.371 TCP 23.104.0.1:43172 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:49:49.590 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42834 10 6452 1 2025-09-25 21:50:27.589 00:00:10.365 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:50:49.808 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32988 10 6452 1 2025-09-25 21:51:27.989 00:00:10.366 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:51:50.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6452 1 2025-09-25 21:52:28.395 00:00:10.357 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:52:50.239 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-09-25 21:53:30.660 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:53:30.677 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:53:28.790 00:00:10.367 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:53:50.454 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-09-25 21:50:33.559 00:05:01.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 21:54:29.192 00:00:10.326 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:54:50.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-09-25 21:51:33.561 00:05:01.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 21:55:29.572 00:00:10.377 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:55:50.852 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-09-25 21:56:29.988 00:00:10.363 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:56:51.029 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 12 6556 1 2025-09-25 21:57:30.392 00:00:10.358 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-09-25 21:57:51.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39894 10 6452 1 2025-09-25 21:58:30.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 21:58:30.875 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 21:58:30.784 00:00:10.324 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500822, total packets: 1579, avg bps: 1074, avg pps: 0, avg bpp: 317 Time window: 2025-09-25 20:56:33 - 2025-09-25 21:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0035s Wall: 0.0023s flows/second: 70656.4 Runtime: 0.0023s