Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 20:58:50.572 00:00:10.370 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:59:18.276 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 20:59:07.121 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-08-06 20:59:18.148 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 20:59:50.978 00:00:10.330 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:00:07.297 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36046 10 6452 1 2025-08-06 21:00:51.347 00:00:10.369 TCP 23.104.0.1:55570 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:01:07.514 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40362 10 6452 1 2025-08-06 21:01:51.754 00:00:10.340 TCP 23.104.0.1:51276 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:02:07.725 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-08-06 21:02:52.133 00:00:10.325 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-08-06 20:59:07.313 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:03:07.898 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-08-06 21:03:52.495 00:00:10.367 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:00:07.310 00:05:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:04:18.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:04:08.118 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53662 10 6452 1 2025-08-06 21:04:17.941 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:04:52.897 00:00:10.370 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:05:08.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-08-06 21:05:53.310 00:00:10.322 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:06:08.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-08-06 21:06:53.672 00:00:10.364 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:07:08.747 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:55102 11 6504 1 2025-08-06 21:07:54.103 00:00:10.324 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:08:09.030 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-08-06 21:08:54.463 00:00:10.363 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:05:07.313 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:09:18.001 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:09:18.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:09:09.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-08-06 21:09:54.868 00:00:10.365 TCP 23.104.0.1:54066 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:06:07.310 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:10:09.456 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36480 10 6452 1 2025-08-06 21:10:55.277 00:00:10.336 TCP 23.104.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:11:09.626 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57346 10 6452 1 2025-08-06 21:11:55.667 00:00:10.366 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:12:09.857 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-08-06 21:12:56.098 00:00:10.363 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:13:10.066 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-08-06 21:13:56.504 00:00:10.325 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:14:18.423 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:14:18.432 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:14:10.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 10 6452 1 2025-08-06 21:11:07.315 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:14:56.864 00:00:10.369 TCP 23.104.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:15:10.441 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-08-06 21:15:57.274 00:00:10.366 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:12:07.313 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:16:10.655 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-08-06 21:16:57.680 00:00:10.371 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:17:10.871 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-08-06 21:17:58.100 00:00:10.364 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:18:11.090 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-08-06 21:18:58.508 00:00:10.373 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:19:11.263 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-08-06 21:19:18.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:19:18.339 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:19:58.918 00:00:10.394 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:20:11.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-08-06 21:17:07.318 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:20:59.349 00:00:10.367 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:21:11.687 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36474 10 6452 1 2025-08-06 21:18:07.315 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:21:59.756 00:00:10.388 TCP 23.104.0.1:57518 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:22:11.907 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-08-06 21:23:00.191 00:00:10.362 TCP 23.104.0.1:53508 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:23:12.116 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41602 10 6452 1 2025-08-06 21:24:00.590 00:00:10.366 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:24:18.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:24:18.490 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:24:12.328 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-08-06 21:25:00.997 00:00:10.326 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:25:12.537 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-08-06 21:26:01.363 00:00:10.373 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:26:12.750 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42866 10 6452 1 2025-08-06 21:23:07.318 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:27:01.766 00:00:10.374 TCP 23.104.0.1:53208 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:27:12.924 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-08-06 21:24:07.316 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:28:02.181 00:00:10.329 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:28:13.143 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6452 1 2025-08-06 21:29:02.545 00:00:10.547 TCP 23.104.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:29:18.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:29:18.660 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:29:13.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-08-06 21:30:03.131 00:00:10.317 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:30:13.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46188 10 6452 1 2025-08-06 21:31:03.490 00:00:10.362 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:31:13.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-08-06 21:32:03.894 00:00:10.370 TCP 23.104.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:32:13.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-08-06 21:29:07.320 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:33:04.309 00:00:10.362 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:33:14.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-08-06 21:30:07.318 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:34:04.713 00:00:10.455 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 15 1926 1 2025-08-06 21:34:18.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:34:18.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:34:14.435 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 12 10367 1 2025-08-06 21:35:05.210 00:00:10.367 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:35:14.640 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36408 10 6452 1 2025-08-06 21:36:05.615 00:00:10.329 TCP 23.104.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:36:14.857 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44016 10 6452 1 2025-08-06 21:37:05.978 00:00:10.373 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:37:15.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-08-06 21:38:06.392 00:00:10.361 TCP 23.104.0.1:32808 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:38:15.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46100 10 6452 1 2025-08-06 21:35:07.323 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:39:18.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:39:06.799 00:00:10.369 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:39:19.012 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:39:15.511 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60160 10 6452 1 2025-08-06 21:36:07.321 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:40:07.208 00:00:10.366 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:40:15.721 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-08-06 21:41:07.614 00:00:10.366 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:41:15.931 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-08-06 21:42:08.024 00:00:10.364 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:42:16.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-06 21:43:08.428 00:00:10.364 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:43:16.396 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-08-06 21:44:18.651 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:44:18.742 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:44:08.831 00:00:10.375 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:44:16.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-08-06 21:41:07.326 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:45:09.252 00:00:10.362 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:45:16.791 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39050 10 6452 1 2025-08-06 21:42:07.324 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:46:09.651 00:00:10.335 TCP 23.104.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:46:16.968 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46372 10 6452 1 2025-08-06 21:47:10.026 00:00:10.365 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:47:17.165 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-08-06 21:48:10.424 00:00:10.365 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:48:17.369 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-08-06 21:49:18.946 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:49:19.079 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:49:10.829 00:00:10.394 TCP 23.104.0.1:50618 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:49:17.588 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-08-06 21:50:11.262 00:00:10.324 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:50:17.763 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-08-06 21:47:07.328 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:51:11.622 00:00:10.365 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:51:17.982 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-08-06 21:48:07.325 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:52:12.024 00:00:10.365 TCP 23.104.0.1:43400 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:52:18.212 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-08-06 21:53:12.427 00:00:10.370 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:53:18.384 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-08-06 21:54:19.188 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 21:54:19.189 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 21:54:12.838 00:00:10.399 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:54:18.600 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-08-06 21:55:13.284 00:00:10.387 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:55:18.813 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-08-06 21:56:13.698 00:00:10.365 TCP 23.104.0.1:59852 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:56:19.003 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-08-06 21:53:07.327 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 21:57:14.107 00:00:10.370 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:57:19.219 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49046 10 6452 1 2025-08-06 21:54:07.325 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 21:58:14.516 00:00:10.371 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-08-06 21:58:19.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1111, avg pps: 0, avg bpp: 318 Time window: 2025-08-06 20:58:50 - 2025-08-06 21:59:08 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0012s User: 0.0024s Wall: 0.0014s flows/second: 117563.8 Runtime: 0.0014s