Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 20:58:44.852 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-08-01 20:59:21.852 00:00:10.381 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-08-01 20:59:45.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60524 10 6452 1 2025-08-01 21:00:22.272 00:00:10.363 TCP 23.104.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:00:45.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-08-01 20:56:04.774 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 20:56:04.775 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:01:22.679 00:00:10.367 TCP 23.104.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:01:53.256 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:01:53.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:01:45.520 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-08-01 21:02:23.110 00:00:10.362 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:02:45.748 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-08-01 21:03:23.509 00:00:10.364 TCP 23.104.0.1:40164 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:03:45.957 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 12 6556 1 2025-08-01 21:04:23.908 00:00:10.372 TCP 23.104.0.1:34370 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:04:46.190 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-08-01 21:05:24.320 00:00:10.372 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:05:46.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-08-01 21:06:24.726 00:00:10.365 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:06:46.608 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-08-01 21:06:53.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:06:53.768 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:07:25.133 00:00:10.332 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:07:46.825 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-08-01 21:03:04.774 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 21:03:04.775 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:08:25.511 00:00:10.369 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:08:47.000 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-08-01 21:09:25.918 00:00:10.374 TCP 23.104.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:09:47.216 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-08-01 21:10:26.327 00:00:10.418 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:10:47.385 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-08-01 21:11:26.784 00:00:10.322 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:11:53.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:11:53.911 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:11:47.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-08-01 21:12:27.142 00:00:10.368 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:12:47.820 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-08-01 21:13:27.548 00:00:10.363 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:13:48.043 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 2025-08-01 21:14:27.951 00:00:10.370 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:14:48.255 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46172 10 6452 1 2025-08-01 21:10:04.777 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:10:04.776 00:06:00.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-01 21:15:28.360 00:00:10.361 TCP 23.104.0.1:60890 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:15:48.466 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-08-01 21:16:28.760 00:00:10.379 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:16:53.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:16:53.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:16:48.640 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-08-01 21:17:29.177 00:00:10.363 TCP 23.104.0.1:51768 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:17:48.812 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49418 10 6452 1 2025-08-01 21:18:29.577 00:00:10.364 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:18:49.031 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48434 10 6452 1 2025-08-01 21:19:29.979 00:00:10.364 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:19:49.249 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57454 10 6452 1 2025-08-01 21:20:30.378 00:00:10.359 TCP 23.104.0.1:48602 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:20:49.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-08-01 21:21:30.786 00:00:10.363 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:21:53.971 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:21:54.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:21:49.643 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-08-01 21:17:04.780 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:17:04.782 00:06:00.011 TCP 179.1.22.22:39396 -> 179.1.22.1:179 8 549 1 2025-08-01 21:22:31.207 00:00:10.361 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:22:49.854 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45102 10 6452 1 2025-08-01 21:23:31.616 00:00:10.325 TCP 23.104.0.1:33500 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:23:50.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-08-01 21:24:31.980 00:00:10.374 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:24:50.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36948 10 6452 1 2025-08-01 21:25:32.392 00:00:10.365 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:25:50.518 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58514 10 6452 1 2025-08-01 21:26:32.809 00:00:10.325 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 12 1559 1 2025-08-01 21:26:54.550 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:26:54.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:26:50.745 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6452 1 2025-08-01 21:27:33.176 00:00:10.364 TCP 23.104.0.1:56412 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:27:50.954 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-08-01 21:28:33.581 00:00:10.365 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:28:51.189 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-08-01 21:24:04.794 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 21:24:04.779 00:06:00.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:29:33.986 00:00:10.374 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:29:51.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43856 10 6452 1 2025-08-01 21:30:34.400 00:00:10.371 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:30:51.615 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-08-01 21:31:34.823 00:00:10.363 TCP 23.104.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:31:54.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:31:54.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:31:51.831 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-08-01 21:32:35.223 00:00:10.365 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:32:52.072 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42068 10 6452 1 2025-08-01 21:33:35.623 00:00:10.364 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:33:52.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-08-01 21:34:36.027 00:00:10.365 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:34:52.455 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-08-01 21:35:36.428 00:00:10.364 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:35:52.626 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-08-01 21:31:04.781 00:06:00.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:31:04.795 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 21:36:36.827 00:00:10.348 TCP 23.104.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:36:54.453 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:36:54.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:36:52.839 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40792 10 6452 1 2025-08-01 21:37:37.220 00:00:10.321 TCP 23.104.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:37:53.024 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-08-01 21:38:37.587 00:00:10.370 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:38:53.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35564 10 6452 1 2025-08-01 21:39:37.996 00:00:10.363 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:39:53.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-08-01 21:40:38.399 00:00:10.365 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:40:53.702 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6452 1 2025-08-01 21:41:54.309 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:41:38.801 00:00:10.370 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:41:54.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:41:53.923 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50230 10 6452 1 2025-08-01 21:42:39.205 00:00:10.370 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:38:04.798 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 21:42:54.109 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-08-01 21:38:04.785 00:06:00.020 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:43:39.608 00:00:10.364 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:43:54.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-08-01 21:44:40.014 00:00:10.361 TCP 23.104.0.1:34714 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:44:54.489 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-08-01 21:45:40.416 00:00:10.368 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:45:54.701 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-08-01 21:46:40.828 00:00:10.379 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:46:54.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:46:54.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:46:54.918 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-08-01 21:47:41.246 00:00:10.326 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:47:55.100 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-08-01 21:48:41.614 00:00:10.360 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:48:55.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-08-01 21:49:42.017 00:00:10.327 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:49:55.519 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-08-01 21:45:04.788 00:06:00.021 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:45:04.800 00:06:00.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 21:50:42.379 00:00:10.365 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:50:55.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40988 10 6452 1 2025-08-01 21:51:42.786 00:00:10.366 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:51:54.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:51:54.723 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:51:55.948 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 12 6556 1 2025-08-01 21:52:43.193 00:00:10.365 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:52:56.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-08-01 21:53:43.597 00:00:10.366 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:53:56.392 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43868 10 6452 1 2025-08-01 21:54:44.009 00:00:10.362 TCP 23.104.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:54:56.611 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-08-01 21:55:44.412 00:00:10.374 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:55:56.782 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58148 12 6556 1 2025-08-01 21:56:54.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 21:56:54.859 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 21:56:44.825 00:00:10.373 TCP 23.104.0.1:57844 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:52:04.792 00:06:00.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 21:52:04.807 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 21:56:56.993 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 11 6504 1 2025-08-01 21:57:45.244 00:00:10.372 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-08-01 21:57:57.274 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:40390 10 6452 1 Summary: total flows: 161, total bytes: 495811, total packets: 1539, avg bps: 1065, avg pps: 0, avg bpp: 322 Time window: 2025-08-01 20:56:04 - 2025-08-01 21:58:07 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0007s Wall: 0.0020s flows/second: 78539.5 Runtime: 0.0021s