Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 15:58:50.345 00:00:10.323 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-07-22 15:59:25.368 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6438 1 2025-07-22 15:59:50.715 00:00:10.369 TCP 23.104.0.1:40080 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:00:25.584 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57550 10 6438 1 2025-07-22 16:00:51.132 00:00:10.368 TCP 23.104.0.1:49146 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:01:25.801 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58078 10 6438 1 2025-07-22 16:01:58.949 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:01:58.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:01:51.543 00:00:10.372 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:02:26.014 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 10 6438 1 2025-07-22 15:57:59.496 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 15:57:59.494 00:06:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:02:51.962 00:00:10.381 TCP 23.104.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:03:26.243 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41964 10 6438 1 2025-07-22 16:03:52.388 00:00:10.323 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:04:26.465 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6438 1 2025-07-22 16:04:52.753 00:00:10.333 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:05:26.684 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6438 1 2025-07-22 16:05:53.125 00:00:10.371 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:06:26.909 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6438 1 2025-07-22 16:06:59.462 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:06:58.894 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:06:53.537 00:00:10.364 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:07:27.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42040 10 6438 1 2025-07-22 16:07:53.939 00:00:10.334 TCP 23.104.0.1:45054 -> 1.101.0.1:3000 12 1559 1 2025-07-22 16:08:27.298 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6438 1 2025-07-22 16:08:54.310 00:00:10.364 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:09:27.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6438 1 2025-07-22 16:04:59.499 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:04:59.497 00:06:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:09:54.719 00:00:10.371 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:10:27.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52490 10 6438 1 2025-07-22 16:10:55.136 00:00:10.369 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:11:27.945 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6438 1 2025-07-22 16:11:59.106 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:11:58.751 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:11:55.537 00:00:10.364 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:12:28.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6438 1 2025-07-22 16:12:55.941 00:00:10.386 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:13:28.392 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6438 1 2025-07-22 16:13:56.358 00:00:10.364 TCP 23.104.0.1:42970 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:14:28.601 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38380 10 6438 1 2025-07-22 16:14:56.757 00:00:10.369 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:15:28.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6438 1 2025-07-22 16:15:57.164 00:00:10.363 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:16:29.025 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6438 1 2025-07-22 16:16:59.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:11:59.498 00:06:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:16:59.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:11:59.501 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:16:57.563 00:00:10.373 TCP 23.104.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:17:29.198 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6438 1 2025-07-22 16:17:57.978 00:00:10.366 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:18:29.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6438 1 2025-07-22 16:18:58.384 00:00:10.369 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:19:29.625 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49294 10 6438 1 2025-07-22 16:19:58.785 00:00:10.374 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:20:29.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44586 10 6438 1 2025-07-22 16:20:59.201 00:00:10.366 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:21:30.069 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6438 1 2025-07-22 16:21:59.246 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:21:59.303 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:21:59.604 00:00:10.374 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:22:30.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6438 1 2025-07-22 16:23:00.014 00:00:10.370 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:23:30.491 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6438 1 2025-07-22 16:18:59.501 00:06:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:18:59.499 00:06:00.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:24:00.425 00:00:10.367 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:24:30.714 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6438 1 2025-07-22 16:25:00.830 00:00:10.374 TCP 23.104.0.1:43824 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:25:30.929 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51812 10 6438 1 2025-07-22 16:26:01.236 00:00:10.364 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:26:31.163 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6438 1 2025-07-22 16:26:59.401 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:26:59.224 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:27:01.636 00:00:10.367 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:27:31.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6438 1 2025-07-22 16:28:02.036 00:00:10.366 TCP 23.104.0.1:36122 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:28:31.586 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6438 1 2025-07-22 16:29:02.440 00:00:10.319 TCP 23.104.0.1:41486 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:29:31.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46700 10 6438 1 2025-07-22 16:30:02.795 00:00:10.333 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:30:32.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32950 10 6438 1 2025-07-22 16:25:59.500 00:06:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:25:59.502 00:06:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:31:03.161 00:00:10.361 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:31:32.238 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48038 10 6438 1 2025-07-22 16:31:59.004 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:31:59.424 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:32:03.567 00:00:10.379 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:32:32.450 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6438 1 2025-07-22 16:33:03.985 00:00:10.367 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:33:32.628 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52006 10 6438 1 2025-07-22 16:34:04.388 00:00:10.376 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:34:32.843 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6438 1 2025-07-22 16:35:04.819 00:00:10.371 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:35:33.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6438 1 2025-07-22 16:36:05.223 00:00:10.331 TCP 23.104.0.1:44840 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:36:33.237 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 10 6438 1 2025-07-22 16:36:59.552 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:36:59.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:37:05.582 00:00:10.321 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:37:33.443 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38434 10 6438 1 2025-07-22 16:32:59.502 00:06:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:32:59.505 00:06:00.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:38:05.942 00:00:10.388 TCP 23.104.0.1:33486 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:38:33.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6438 1 2025-07-22 16:39:06.368 00:00:10.361 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:39:33.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48524 10 6438 1 2025-07-22 16:40:06.771 00:00:10.370 TCP 23.104.0.1:46266 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:40:34.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6438 1 2025-07-22 16:41:07.176 00:00:10.360 TCP 23.104.0.1:38922 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:41:34.309 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6438 1 2025-07-22 16:41:59.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:41:59.719 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:42:07.578 00:00:10.327 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:42:34.481 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6438 1 2025-07-22 16:43:07.942 00:00:10.371 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:43:34.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6438 1 2025-07-22 16:44:08.358 00:00:10.374 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:44:34.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6438 1 2025-07-22 16:39:59.504 00:06:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:39:59.506 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:45:08.762 00:00:10.325 TCP 23.104.0.1:37850 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:45:35.113 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6438 1 2025-07-22 16:46:09.129 00:00:10.328 TCP 23.104.0.1:51848 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:46:35.322 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52278 10 6438 1 2025-07-22 16:46:59.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:46:59.856 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:47:09.496 00:00:10.368 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:47:35.545 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6438 1 2025-07-22 16:48:09.904 00:00:10.449 TCP 23.104.0.1:46654 -> 1.101.0.1:3000 15 1925 1 2025-07-22 16:48:35.715 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:36890 12 10352 1 2025-07-22 16:49:10.392 00:00:10.366 TCP 23.104.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:49:35.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 10 6438 1 2025-07-22 16:50:10.795 00:00:10.342 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:50:36.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6438 1 2025-07-22 16:51:11.167 00:00:10.393 TCP 23.104.0.1:43750 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:51:36.391 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6438 1 2025-07-22 16:51:59.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:46:59.508 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:51:59.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:46:59.506 00:06:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:52:11.599 00:00:10.364 TCP 23.104.0.1:56688 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:52:36.612 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6438 1 2025-07-22 16:53:12.002 00:00:10.363 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:53:36.784 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6438 1 2025-07-22 16:54:12.405 00:00:10.321 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:54:36.995 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50550 10 6438 1 2025-07-22 16:55:12.764 00:00:10.369 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:55:37.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6438 1 2025-07-22 16:56:13.172 00:00:10.326 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:56:37.389 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45068 10 6438 1 2025-07-22 16:56:59.636 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 16:56:59.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 16:57:13.540 00:00:10.369 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:57:37.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6438 1 2025-07-22 16:58:13.950 00:00:10.370 TCP 23.104.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:58:37.813 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6438 1 Summary: total flows: 160, total bytes: 500908, total packets: 1563, avg bps: 1098, avg pps: 0, avg bpp: 320 Time window: 2025-07-22 15:57:59 - 2025-07-22 16:58:47 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0030s User: 0.0010s Wall: 0.0020s flows/second: 80158.7 Runtime: 0.0020s