Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 20:59:02.437 00:00:10.380 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-10-05 20:59:20.941 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-10-05 21:00:02.857 00:00:10.328 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:00:21.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-10-05 20:56:38.207 00:05:01.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:01:03.227 00:00:10.328 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:01:21.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-10-05 20:57:38.210 00:05:01.962 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:02:03.591 00:00:10.368 TCP 23.104.0.1:59376 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:02:21.617 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-10-05 21:03:04.000 00:00:10.374 TCP 23.104.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:03:18.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:03:18.564 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:03:21.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59550 10 6452 1 2025-10-05 21:04:04.405 00:00:10.385 TCP 23.104.0.1:56806 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:04:22.065 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59730 10 6452 1 2025-10-05 21:05:04.828 00:00:10.393 TCP 23.104.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:05:22.288 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-10-05 21:06:05.258 00:00:10.361 TCP 23.104.0.1:45458 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:06:22.508 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-10-05 21:02:38.209 00:05:01.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:07:05.658 00:00:10.363 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:07:22.731 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59268 10 6452 1 2025-10-05 21:03:38.210 00:05:01.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:08:06.068 00:00:10.363 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:08:18.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:08:18.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:08:22.904 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 10 6452 1 2025-10-05 21:09:06.469 00:00:10.327 TCP 23.104.0.1:60870 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:09:23.125 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43406 10 6452 1 2025-10-05 21:10:06.833 00:00:10.394 TCP 23.104.0.1:42086 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:10:23.291 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-10-05 21:11:07.260 00:00:10.367 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:11:23.466 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-10-05 21:12:07.664 00:00:10.326 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:12:23.673 00:00:10.497 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-10-05 21:08:38.210 00:05:01.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:13:08.033 00:00:10.362 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:13:18.469 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:13:18.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:13:24.209 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58438 10 6452 1 2025-10-05 21:09:38.213 00:05:01.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:14:08.433 00:00:10.363 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:14:24.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40064 10 6452 1 2025-10-05 21:15:08.840 00:00:10.371 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:15:24.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-10-05 21:16:09.249 00:00:10.363 TCP 23.104.0.1:42870 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:16:24.811 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-10-05 21:17:09.652 00:00:10.325 TCP 23.104.0.1:48282 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:17:25.028 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-10-05 21:18:18.504 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:18:10.011 00:00:10.364 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:18:18.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:18:25.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33514 10 6452 1 2025-10-05 21:14:38.211 00:05:01.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:19:10.414 00:00:10.325 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:19:25.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-10-05 21:15:38.214 00:05:01.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:20:10.774 00:00:10.834 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:20:25.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-10-05 21:21:11.647 00:00:10.366 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:21:25.864 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-10-05 21:22:12.058 00:00:10.362 TCP 23.104.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:22:26.100 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-10-05 21:23:18.723 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:23:18.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:23:12.460 00:00:10.366 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:23:26.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-10-05 21:24:12.862 00:00:10.446 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 15 1926 1 2025-10-05 21:20:38.212 00:05:01.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:24:26.528 00:00:10.681 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 12 10375 1 2025-10-05 21:25:13.350 00:00:10.360 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:21:38.214 00:05:01.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:25:27.245 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-10-05 21:26:13.751 00:00:10.388 TCP 23.104.0.1:60552 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:26:27.417 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-10-05 21:27:14.176 00:00:10.321 TCP 23.104.0.1:55986 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:27:27.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39186 10 6452 1 2025-10-05 21:28:18.658 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:28:18.872 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:28:14.536 00:00:10.330 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:28:27.824 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-10-05 21:29:14.909 00:00:10.371 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:29:28.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56728 10 6452 1 2025-10-05 21:30:15.323 00:00:10.362 TCP 23.104.0.1:55290 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:26:38.214 00:05:01.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:30:28.218 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-10-05 21:31:15.727 00:00:10.325 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:31:28.429 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54282 10 6452 1 2025-10-05 21:27:38.217 00:05:01.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:32:16.101 00:00:10.361 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:32:28.645 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-10-05 21:33:19.012 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:33:18.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:33:16.504 00:00:10.327 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:33:28.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60832 10 6452 1 2025-10-05 21:34:16.870 00:00:10.731 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:34:29.033 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:41926 10 6452 1 2025-10-05 21:35:17.640 00:00:10.365 TCP 23.104.0.1:43130 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:35:29.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-10-05 21:36:18.045 00:00:10.364 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:36:29.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59006 10 6452 1 2025-10-05 21:32:38.216 00:05:01.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:37:18.447 00:00:11.115 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:33:38.218 00:05:01.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:37:29.924 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-10-05 21:38:18.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:38:19.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:38:19.603 00:00:10.368 TCP 23.104.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:38:30.164 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-10-05 21:39:20.009 00:00:10.436 TCP 23.104.0.1:53732 -> 1.101.0.1:3000 15 1926 1 2025-10-05 21:39:30.550 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 12 10375 1 2025-10-05 21:40:20.486 00:00:10.327 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:40:30.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-10-05 21:41:20.854 00:00:10.328 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:41:30.974 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-10-05 21:42:21.224 00:00:10.325 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:42:31.216 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40038 10 6452 1 2025-10-05 21:38:38.218 00:05:01.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:43:19.238 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:43:19.287 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:43:21.586 00:00:10.368 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:43:31.441 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-10-05 21:39:38.220 00:05:01.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:44:21.992 00:00:10.363 TCP 23.104.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:44:31.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-10-05 21:45:22.395 00:00:10.362 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:45:31.881 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49164 10 6452 1 2025-10-05 21:46:22.796 00:00:10.370 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:46:32.101 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47110 10 6452 1 2025-10-05 21:47:23.206 00:00:10.360 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:47:32.349 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49402 10 6452 1 2025-10-05 21:48:19.229 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:48:19.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:48:23.605 00:00:10.361 TCP 23.104.0.1:52610 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:44:38.219 00:05:01.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:48:32.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-10-05 21:49:24.009 00:00:10.366 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:45:38.222 00:05:01.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:49:32.734 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-10-05 21:50:24.415 00:00:10.365 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:50:32.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-10-05 21:51:24.823 00:00:10.361 TCP 23.104.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:51:33.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-10-05 21:52:25.226 00:00:10.323 TCP 23.104.0.1:57210 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:52:33.394 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38842 10 6452 1 2025-10-05 21:53:19.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:53:19.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:53:25.585 00:00:10.323 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:53:33.575 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-10-05 21:54:25.950 00:00:10.368 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:50:38.222 00:05:01.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 21:54:33.752 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-10-05 21:55:26.364 00:00:10.367 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:51:38.226 00:05:01.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 21:55:33.925 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-10-05 21:56:26.772 00:00:10.333 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:56:34.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45836 10 6452 1 2025-10-05 21:57:27.142 00:00:10.329 TCP 23.104.0.1:57740 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:57:34.334 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-10-05 21:58:19.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 21:58:19.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 21:58:27.511 00:00:10.367 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-10-05 21:58:34.505 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1088, avg pps: 0, avg bpp: 320 Time window: 2025-10-05 20:56:38 - 2025-10-05 21:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0038s Wall: 0.0028s flows/second: 58239.4 Runtime: 0.0028s