Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-08 20:59:17.030 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6452 1 2025-10-08 20:59:44.978 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 20:59:44.823 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 20:59:39.706 00:00:10.403 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 15 1926 1 2025-10-08 21:00:17.246 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 12 10369 1 2025-10-08 20:56:39.546 00:05:02.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:00:40.147 00:00:10.366 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:01:17.489 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60756 10 6452 1 2025-10-08 20:57:39.549 00:05:02.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:01:40.552 00:00:10.368 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:02:17.702 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56200 10 6452 1 2025-10-08 21:02:40.955 00:00:10.368 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:03:17.916 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36776 10 6452 1 2025-10-08 21:03:41.357 00:00:10.365 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:04:18.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-10-08 21:04:45.240 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:04:45.013 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:04:41.764 00:00:10.333 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:05:18.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-10-08 21:05:42.132 00:00:10.371 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:06:18.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42900 10 6452 1 2025-10-08 21:02:39.546 00:05:02.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:06:42.540 00:00:10.364 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:07:18.761 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48018 10 6452 1 2025-10-08 21:03:39.549 00:05:02.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:07:42.940 00:00:10.381 TCP 23.104.0.1:48382 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:08:18.973 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-10-08 21:08:43.365 00:00:10.367 TCP 23.104.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:09:19.202 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54224 10 6452 1 2025-10-08 21:09:45.242 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:09:45.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:09:43.770 00:00:10.373 TCP 23.104.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:10:19.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42536 10 6452 1 2025-10-08 21:10:44.181 00:00:10.366 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:11:19.621 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-10-08 21:11:44.579 00:00:10.361 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:12:19.834 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6452 1 2025-10-08 21:08:39.548 00:05:02.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:12:44.981 00:00:10.369 TCP 23.104.0.1:52126 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:13:20.080 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-10-08 21:09:39.551 00:05:02.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:13:45.384 00:00:10.367 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:14:20.304 00:00:10.509 TCP 1.101.0.1:3000 -> 22.102.0.1:35008 10 6452 1 2025-10-08 21:14:45.496 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:14:45.408 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:14:45.791 00:00:10.371 TCP 23.104.0.1:40746 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:15:20.850 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-08 21:15:46.202 00:00:10.366 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:16:21.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6452 1 2025-10-08 21:16:46.607 00:00:10.376 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:17:21.303 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40880 10 6452 1 2025-10-08 21:17:47.027 00:00:10.367 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:18:21.526 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42096 10 6452 1 2025-10-08 21:14:39.551 00:05:02.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:18:47.431 00:00:10.782 TCP 23.104.0.1:57028 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:19:21.749 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57850 10 6452 1 2025-10-08 21:19:45.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:15:39.554 00:05:02.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:19:45.480 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:19:48.264 00:00:10.557 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:20:21.965 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:58790 10 6452 1 2025-10-08 21:20:48.859 00:00:10.377 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:21:22.227 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-10-08 21:21:49.275 00:00:10.365 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:22:22.422 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43934 10 6452 1 2025-10-08 21:22:49.676 00:00:10.364 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:23:22.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56024 10 6452 1 2025-10-08 21:23:50.109 00:00:10.364 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:24:22.854 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-10-08 21:24:45.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:24:45.235 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:20:39.554 00:05:02.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:24:50.504 00:00:10.362 TCP 23.104.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:25:23.085 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-10-08 21:21:39.557 00:05:02.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:25:50.908 00:00:10.365 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:26:23.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-10-08 21:26:51.310 00:00:10.383 TCP 23.104.0.1:43314 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:27:23.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43970 10 6452 1 2025-10-08 21:27:51.730 00:00:10.323 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:28:23.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-10-08 21:28:52.105 00:00:10.368 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:29:23.968 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44962 10 6452 1 2025-10-08 21:29:45.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:29:45.620 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:29:52.514 00:00:10.363 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:30:24.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-10-08 21:26:39.556 00:05:02.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:30:52.912 00:00:10.364 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:31:24.415 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59678 10 6452 1 2025-10-08 21:27:39.557 00:05:02.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:31:53.315 00:00:10.367 TCP 23.104.0.1:36494 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:32:24.633 00:00:10.869 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-10-08 21:32:53.730 00:00:10.324 TCP 23.104.0.1:40940 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:33:25.543 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-10-08 21:33:54.107 00:00:10.333 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:34:25.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-10-08 21:34:45.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:34:45.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:34:54.476 00:00:10.366 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:35:25.968 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-10-08 21:35:54.879 00:00:10.387 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:36:26.150 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-10-08 21:32:39.556 00:05:02.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:36:55.302 00:00:10.372 TCP 23.104.0.1:54066 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:37:26.362 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59226 10 6452 1 2025-10-08 21:33:39.558 00:05:02.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:37:55.710 00:00:10.373 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:38:26.578 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40062 10 6452 1 2025-10-08 21:38:56.120 00:00:10.324 TCP 23.104.0.1:36692 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:39:26.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-10-08 21:39:45.932 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:39:45.647 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:39:56.483 00:00:10.329 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:40:27.001 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6452 1 2025-10-08 21:40:56.843 00:00:10.389 TCP 23.104.0.1:39262 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:41:27.188 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-10-08 21:41:57.265 00:00:10.324 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:42:27.413 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-10-08 21:38:39.557 00:05:02.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:42:57.627 00:00:10.364 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:43:27.672 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-10-08 21:39:39.561 00:05:02.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:43:58.092 00:00:10.335 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:44:46.133 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:44:27.904 00:00:10.804 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-10-08 21:44:46.334 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:44:58.465 00:00:10.457 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:45:28.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-10-08 21:45:58.965 00:00:10.372 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:46:28.960 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51308 10 6452 1 2025-10-08 21:46:59.371 00:00:10.368 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:47:29.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60816 10 6452 1 2025-10-08 21:47:59.777 00:00:10.365 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:48:29.395 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-10-08 21:44:39.557 00:05:02.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:49:00.182 00:00:10.374 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:49:46.236 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:45:39.561 00:05:02.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:49:29.610 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6452 1 2025-10-08 21:49:45.738 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:50:00.594 00:00:10.365 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:50:29.828 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-10-08 21:51:00.993 00:00:10.364 TCP 23.104.0.1:44104 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:51:30.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-10-08 21:52:01.398 00:00:10.374 TCP 23.104.0.1:45478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:52:30.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-10-08 21:53:01.811 00:00:10.365 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:53:30.512 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-10-08 21:54:02.208 00:00:10.368 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:54:30.727 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-10-08 21:54:46.468 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-08 21:54:46.495 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-08 21:50:39.559 00:05:02.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-08 21:55:02.610 00:00:10.376 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:55:30.944 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46570 10 6452 1 2025-10-08 21:51:39.563 00:05:02.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-08 21:56:03.021 00:00:10.359 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:56:31.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37598 10 6452 1 2025-10-08 21:57:03.416 00:00:10.365 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:57:31.341 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42354 10 6452 1 2025-10-08 21:58:03.821 00:00:10.364 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-10-08 21:58:31.557 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 Summary: total flows: 163, total bytes: 501177, total packets: 1567, avg bps: 1077, avg pps: 0, avg bpp: 319 Time window: 2025-10-08 20:56:39 - 2025-10-08 21:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0009s User: 0.0037s Wall: 0.0020s flows/second: 80139.7 Runtime: 0.0021s