Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 20:59:02.223 00:00:10.327 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 20:59:07.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-08-02 21:00:02.592 00:00:10.367 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:00:07.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-08-02 21:01:02.996 00:00:10.365 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:01:07.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-08-02 20:57:05.408 00:06:00.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 20:57:05.407 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:02:03.397 00:00:10.366 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:02:07.827 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-08-02 21:02:22.498 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:02:22.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:03:03.803 00:00:10.367 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:03:08.057 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53914 10 6452 1 2025-08-02 21:04:04.210 00:00:10.440 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 15 1926 1 2025-08-02 21:04:08.276 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37362 12 10367 1 2025-08-02 21:05:04.690 00:00:10.371 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:05:08.516 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-08-02 21:06:05.108 00:00:10.327 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:06:08.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-08-02 21:07:05.481 00:00:10.364 TCP 23.104.0.1:53864 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:07:08.965 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 12 6556 1 2025-08-02 21:07:22.510 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:07:22.593 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:08:05.890 00:00:10.363 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:08:09.193 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52590 10 6452 1 2025-08-02 21:04:05.415 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:04:05.412 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:09:06.288 00:00:10.363 TCP 23.104.0.1:51660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:09:09.406 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-08-02 21:10:09.588 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-08-02 21:10:06.691 00:00:10.368 TCP 23.104.0.1:46696 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:11:09.800 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-08-02 21:11:07.111 00:00:10.364 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:12:07.513 00:00:10.371 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:12:09.973 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:35346 10 6452 1 2025-08-02 21:12:23.556 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:12:23.380 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:13:10.214 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-08-02 21:13:07.937 00:00:10.387 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:14:08.358 00:00:10.378 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:14:10.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55198 10 6452 1 2025-08-02 21:15:08.782 00:00:10.367 TCP 23.104.0.1:43194 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:15:10.650 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-08-02 21:11:05.416 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:11:05.413 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:16:09.195 00:00:10.320 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:16:10.860 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53942 10 6452 1 2025-08-02 21:17:09.555 00:00:10.320 TCP 23.104.0.1:46660 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:17:11.091 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-08-02 21:17:22.973 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:17:22.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:18:11.311 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-08-02 21:18:09.916 00:00:10.361 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:19:10.311 00:00:10.322 TCP 23.104.0.1:47698 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:19:11.490 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 2025-08-02 21:20:11.721 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-08-02 21:20:10.678 00:00:10.536 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:21:11.253 00:00:10.366 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:21:11.943 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-08-02 21:22:11.659 00:00:10.363 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:22:22.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:22:12.188 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-08-02 21:22:22.766 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:18:05.419 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:18:05.417 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:23:12.078 00:00:10.364 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:23:12.362 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50958 10 6452 1 2025-08-02 21:24:12.569 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-02 21:24:12.479 00:00:10.365 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:25:12.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-08-02 21:25:12.885 00:00:10.388 TCP 23.104.0.1:43158 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:26:13.004 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2025-08-02 21:26:13.310 00:00:10.375 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:27:22.818 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:27:13.733 00:00:10.368 TCP 23.104.0.1:50516 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:27:13.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-08-02 21:27:23.044 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:28:14.142 00:00:10.361 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:28:13.430 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36890 10 6452 1 2025-08-02 21:29:13.645 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-08-02 21:29:14.543 00:00:10.327 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:25:05.425 00:06:00.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:25:05.422 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:30:14.909 00:00:10.370 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:30:13.857 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-08-02 21:31:15.315 00:00:10.366 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:31:14.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53134 10 6452 1 2025-08-02 21:32:14.300 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33190 10 6452 1 2025-08-02 21:32:22.993 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:32:23.198 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:32:15.723 00:00:10.372 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:33:16.125 00:00:10.370 TCP 23.104.0.1:35444 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:33:14.522 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-08-02 21:34:14.744 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-08-02 21:34:16.536 00:00:10.366 TCP 23.104.0.1:34654 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:35:14.973 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-08-02 21:35:16.946 00:00:10.375 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:36:15.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60078 10 6452 1 2025-08-02 21:36:17.358 00:00:10.362 TCP 23.104.0.1:48688 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:32:05.423 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:32:05.426 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:37:15.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48294 10 6452 1 2025-08-02 21:37:23.095 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:37:23.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:37:17.758 00:00:10.374 TCP 23.104.0.1:38500 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:38:15.638 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 10 6452 1 2025-08-02 21:38:18.171 00:00:10.366 TCP 23.104.0.1:43946 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:39:15.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-08-02 21:39:18.575 00:00:10.359 TCP 23.104.0.1:57014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:40:16.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-08-02 21:40:18.972 00:00:10.368 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:41:16.295 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-08-02 21:41:19.380 00:00:10.364 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:42:23.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:42:16.519 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-08-02 21:42:23.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:42:19.788 00:00:10.363 TCP 23.104.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:43:16.752 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-08-02 21:43:20.195 00:00:10.359 TCP 23.104.0.1:52090 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:39:05.430 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:39:05.428 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:44:20.595 00:00:10.368 TCP 23.104.0.1:43866 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:44:16.961 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 12 6556 1 2025-08-02 21:45:17.202 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-08-02 21:45:21.001 00:00:10.366 TCP 23.104.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:46:17.377 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44428 10 6452 1 2025-08-02 21:46:21.409 00:00:10.366 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:47:23.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:47:23.556 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:47:17.587 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-08-02 21:47:21.813 00:00:10.370 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:48:17.759 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-08-02 21:48:22.218 00:00:10.366 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:49:17.976 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-08-02 21:49:22.622 00:00:10.371 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:50:18.214 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-08-02 21:50:23.032 00:00:10.366 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:46:05.442 00:06:00.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:46:05.443 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:51:18.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-08-02 21:51:23.441 00:00:10.364 TCP 23.104.0.1:57204 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:52:23.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:52:23.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:52:18.667 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6452 1 2025-08-02 21:52:23.842 00:00:10.389 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:53:18.872 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-08-02 21:53:24.268 00:00:10.369 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:54:19.097 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6452 1 2025-08-02 21:54:24.682 00:00:10.364 TCP 23.104.0.1:43470 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:55:19.260 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-08-02 21:55:25.117 00:00:10.385 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:56:19.484 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-08-02 21:56:25.537 00:00:10.366 TCP 23.104.0.1:49462 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:57:23.660 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 21:57:23.500 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 21:57:19.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-08-02 21:57:25.941 00:00:10.392 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-08-02 21:53:05.442 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 21:53:05.444 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 21:58:19.874 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48006 10 6452 1 2025-08-02 21:58:26.374 00:00:10.363 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503628, total packets: 1594, avg bps: 1083, avg pps: 0, avg bpp: 315 Time window: 2025-08-02 20:57:05 - 2025-08-02 21:59:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0016s User: 0.0032s Wall: 0.0026s flows/second: 62166.3 Runtime: 0.0026s