Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 20:58:47.535 00:00:10.401 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 15 1926 1 2025-08-03 20:59:24.739 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37522 10 6452 1 2025-08-03 20:59:47.978 00:00:10.327 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:00:24.955 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:50430 10 6452 1 2025-08-03 21:00:48.341 00:00:10.360 TCP 23.104.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:01:25.154 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-08-03 21:01:48.740 00:00:10.366 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-08-03 20:58:05.897 00:05:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:02:25.371 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59564 10 6452 1 2025-08-03 21:02:51.570 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:02:51.581 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:02:49.144 00:00:10.367 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-08-03 20:59:05.899 00:05:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:03:25.582 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53032 10 6452 1 2025-08-03 21:03:49.552 00:00:10.365 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:04:25.799 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-08-03 21:04:49.953 00:00:10.372 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:05:26.009 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6452 1 2025-08-03 21:05:50.365 00:00:10.318 TCP 23.104.0.1:55616 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:06:26.222 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-08-03 21:06:50.718 00:00:10.376 TCP 23.104.0.1:41722 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:07:26.430 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-08-03 21:07:51.381 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:07:51.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:07:51.130 00:00:10.364 TCP 23.104.0.1:34252 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:04:05.898 00:05:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:08:26.652 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42986 11 6504 1 2025-08-03 21:08:51.526 00:00:10.363 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:05:05.901 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:09:26.877 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-08-03 21:09:51.927 00:00:10.348 TCP 23.104.0.1:59190 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:10:27.105 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 12 6556 1 2025-08-03 21:10:52.315 00:00:10.363 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:11:27.321 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-08-03 21:11:52.715 00:00:10.379 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:12:27.490 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40324 10 6452 1 2025-08-03 21:12:51.670 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:12:51.609 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:12:53.139 00:00:10.368 TCP 23.104.0.1:53966 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:13:27.711 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-08-03 21:10:05.900 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:13:53.549 00:00:10.365 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:14:27.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-08-03 21:11:05.902 00:05:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:14:53.955 00:00:10.329 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:15:28.178 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-08-03 21:15:54.323 00:00:10.362 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:16:28.358 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6452 1 2025-08-03 21:16:54.724 00:00:10.365 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:17:28.568 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-08-03 21:17:51.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:17:51.996 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:17:55.128 00:00:10.370 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:18:28.797 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-08-03 21:18:55.537 00:00:10.362 TCP 23.104.0.1:53960 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:19:29.006 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-08-03 21:16:05.900 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:19:55.943 00:00:10.372 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:20:29.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-08-03 21:20:56.351 00:00:10.322 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:17:05.902 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:21:29.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58948 10 6452 1 2025-08-03 21:21:56.718 00:00:10.368 TCP 23.104.0.1:59830 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:22:29.616 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45858 10 6452 1 2025-08-03 21:22:51.867 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:22:51.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:22:57.129 00:00:10.325 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:23:29.832 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49290 10 6452 1 2025-08-03 21:23:57.525 00:00:10.363 TCP 23.104.0.1:44386 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:24:30.082 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-08-03 21:24:57.933 00:00:10.376 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:25:30.308 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35680 10 6452 1 2025-08-03 21:25:58.350 00:00:10.324 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:22:05.902 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:26:30.482 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-08-03 21:23:05.904 00:05:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:26:58.717 00:00:10.373 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:27:30.695 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-08-03 21:27:51.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:27:52.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:27:59.181 00:00:10.363 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:28:30.927 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33900 12 10367 1 2025-08-03 21:28:59.580 00:00:10.441 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 15 1926 1 2025-08-03 21:29:31.155 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6452 1 2025-08-03 21:30:00.093 00:00:10.368 TCP 23.104.0.1:45078 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:30:31.371 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49056 10 6452 1 2025-08-03 21:31:00.496 00:00:10.363 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:31:31.542 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47868 10 6452 1 2025-08-03 21:28:05.902 00:05:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:32:00.901 00:00:10.376 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:32:31.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 2025-08-03 21:32:51.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:32:52.064 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:29:05.904 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:33:01.322 00:00:10.368 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:33:31.932 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:60460 10 6452 1 2025-08-03 21:34:01.725 00:00:10.364 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:34:32.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-08-03 21:35:02.126 00:00:10.364 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:35:32.341 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-03 21:36:02.524 00:00:10.369 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:36:32.516 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59576 10 6452 1 2025-08-03 21:37:02.926 00:00:10.392 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:37:32.686 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53234 10 6452 1 2025-08-03 21:37:52.223 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:37:52.117 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:34:05.910 00:05:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:38:03.357 00:00:10.367 TCP 23.104.0.1:42300 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:38:32.896 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-08-03 21:35:05.913 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:39:03.757 00:00:10.384 TCP 23.104.0.1:40946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:39:33.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-08-03 21:40:04.180 00:00:10.364 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:40:33.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42606 10 6452 1 2025-08-03 21:41:04.586 00:00:10.368 TCP 23.104.0.1:34214 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:41:33.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-08-03 21:42:04.990 00:00:10.362 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:42:33.801 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-08-03 21:42:52.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:42:52.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:43:05.389 00:00:10.366 TCP 23.104.0.1:34882 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:43:34.018 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-08-03 21:40:05.911 00:05:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:44:05.791 00:00:10.360 TCP 23.104.0.1:38256 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:44:34.235 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 12 6556 1 2025-08-03 21:41:05.912 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:45:06.190 00:00:10.328 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:45:34.447 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55216 10 6452 1 2025-08-03 21:46:06.557 00:00:10.365 TCP 23.104.0.1:48278 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:46:34.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-08-03 21:47:06.959 00:00:10.366 TCP 23.104.0.1:55350 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:47:34.869 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-08-03 21:47:52.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:47:52.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:48:07.366 00:00:10.407 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:48:35.093 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48912 10 6452 1 2025-08-03 21:49:07.824 00:00:10.368 TCP 23.104.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:49:35.311 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 12 6556 1 2025-08-03 21:46:05.912 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:50:08.232 00:00:10.364 TCP 23.104.0.1:40684 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:50:35.523 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-08-03 21:47:05.914 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:51:08.638 00:00:10.372 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:51:35.755 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-08-03 21:52:09.060 00:00:10.366 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:52:35.944 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43750 10 6452 1 2025-08-03 21:52:52.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:52:52.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:53:09.462 00:00:10.372 TCP 23.104.0.1:42920 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:53:36.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-08-03 21:54:09.865 00:00:10.382 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:54:36.394 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39836 10 6452 1 2025-08-03 21:55:10.294 00:00:10.372 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:55:36.570 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6452 1 2025-08-03 21:52:05.914 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 21:56:10.707 00:00:10.403 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:56:36.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6452 1 2025-08-03 21:53:05.918 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 21:57:11.146 00:00:10.370 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:57:37.011 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59536 10 6452 1 2025-08-03 21:57:52.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:57:52.411 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 21:58:11.548 00:00:10.322 TCP 23.104.0.1:43206 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:58:37.225 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 Summary: total flows: 164, total bytes: 503465, total packets: 1589, avg bps: 1106, avg pps: 0, avg bpp: 316 Time window: 2025-08-03 20:58:05 - 2025-08-03 21:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0012s Wall: 0.0015s flows/second: 106480.8 Runtime: 0.0016s