Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-14 20:58:59.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-08-14 20:59:03.354 00:00:10.361 TCP 23.104.0.1:44986 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:59:59.546 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-08-14 21:00:03.751 00:00:10.335 TCP 23.104.0.1:59000 -> 1.101.0.1:3000 11 1507 1 2025-08-14 20:56:11.343 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:00:59.792 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45856 10 6452 1 2025-08-14 21:01:04.126 00:00:10.371 TCP 23.104.0.1:54510 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:02:00.012 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39764 10 6452 1 2025-08-14 21:02:04.539 00:00:10.361 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:03:00.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44760 10 6452 1 2025-08-14 21:03:08.761 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:03:09.103 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:03:04.941 00:00:10.375 TCP 23.104.0.1:43154 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:04:00.443 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60868 10 6452 1 2025-08-14 21:00:11.340 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:04:05.361 00:00:10.365 TCP 23.104.0.1:54284 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:05:00.654 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51326 10 6452 1 2025-08-14 21:05:05.764 00:00:10.343 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:06:00.875 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-08-14 21:06:06.151 00:00:10.330 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:02:11.343 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:07:01.104 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-08-14 21:07:06.521 00:00:10.374 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:08:09.271 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:08:01.283 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-08-14 21:08:09.215 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:08:06.932 00:00:10.373 TCP 23.104.0.1:48802 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:09:01.511 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 10 6452 1 2025-08-14 21:09:07.349 00:00:10.406 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:10:01.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59114 10 6452 1 2025-08-14 21:06:11.341 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:10:07.803 00:00:10.360 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:11:01.953 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-08-14 21:11:08.205 00:00:10.371 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:12:02.141 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6452 1 2025-08-14 21:08:11.343 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:12:08.608 00:00:10.366 TCP 23.104.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:13:09.206 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:13:09.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:13:02.356 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-08-14 21:13:09.011 00:00:10.319 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:14:02.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-08-14 21:14:09.370 00:00:10.319 TCP 23.104.0.1:54024 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:15:02.786 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 10 6452 1 2025-08-14 21:15:09.729 00:00:10.373 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:16:02.994 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-08-14 21:12:11.348 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:16:10.138 00:00:10.365 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:17:03.228 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41424 10 6452 1 2025-08-14 21:17:10.540 00:00:10.360 TCP 23.104.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:18:09.390 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:18:03.449 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-08-14 21:18:09.361 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:14:11.351 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:18:10.942 00:00:10.372 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:19:03.625 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-08-14 21:19:11.355 00:00:10.364 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:20:03.795 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-08-14 21:20:11.760 00:00:10.375 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:21:04.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53476 10 6452 1 2025-08-14 21:21:12.170 00:00:10.326 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:22:04.223 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-08-14 21:18:11.349 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:22:12.534 00:00:10.364 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:23:09.452 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:23:09.396 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:23:04.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-08-14 21:23:12.936 00:00:10.385 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:24:04.615 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-08-14 21:20:11.352 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:24:13.356 00:00:10.365 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:25:04.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-08-14 21:25:13.760 00:00:10.335 TCP 23.104.0.1:48420 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:26:05.012 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58466 10 6452 1 2025-08-14 21:26:14.132 00:00:10.320 TCP 23.104.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:27:05.197 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-08-14 21:27:14.496 00:00:10.366 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:28:09.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:28:09.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:24:11.349 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:28:05.415 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:32948 10 6452 1 2025-08-14 21:28:14.897 00:00:10.325 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:29:05.649 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-08-14 21:29:15.255 00:00:10.322 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:26:11.353 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:30:05.889 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-08-14 21:30:15.617 00:00:10.366 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:31:06.114 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 10 6452 1 2025-08-14 21:31:16.024 00:00:10.367 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:32:06.337 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-08-14 21:32:16.430 00:00:10.325 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:33:09.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:33:09.765 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:33:06.558 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-08-14 21:33:16.792 00:00:10.351 TCP 23.104.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:34:06.775 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-08-14 21:30:11.350 00:05:00.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:34:17.181 00:00:10.326 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:35:06.949 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-08-14 21:35:17.550 00:00:10.374 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:32:11.354 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:36:07.186 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-08-14 21:36:17.973 00:00:10.364 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:37:07.403 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-08-14 21:37:18.374 00:00:10.366 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:38:09.596 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:38:09.521 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:38:07.635 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55764 10 6452 1 2025-08-14 21:38:18.776 00:00:10.383 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:39:07.846 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-08-14 21:39:19.209 00:00:10.366 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:36:11.355 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:40:08.102 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-08-14 21:40:19.610 00:00:10.330 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:41:08.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47110 10 6452 1 2025-08-14 21:41:19.980 00:00:10.374 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:38:11.357 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:42:08.541 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-08-14 21:42:20.405 00:00:10.367 TCP 23.104.0.1:53300 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:43:09.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:43:09.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:43:08.761 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-08-14 21:43:20.811 00:00:10.335 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:44:08.936 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43410 10 6452 1 2025-08-14 21:44:21.190 00:00:10.362 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:45:09.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-08-14 21:45:21.587 00:00:10.363 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:42:11.356 00:05:00.862 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:46:09.400 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-08-14 21:46:21.989 00:00:10.368 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:47:09.627 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-08-14 21:47:22.389 00:00:10.320 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:48:10.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:48:10.027 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:44:11.360 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:48:09.841 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-08-14 21:48:22.750 00:00:10.380 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:49:10.068 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55764 10 6452 1 2025-08-14 21:49:23.170 00:00:10.374 TCP 23.104.0.1:34798 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:50:10.242 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-08-14 21:50:23.574 00:00:10.364 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:51:10.473 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-08-14 21:51:23.976 00:00:10.382 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:48:11.357 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:52:10.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-08-14 21:52:24.399 00:00:10.370 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:53:10.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:53:09.941 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:53:10.916 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44480 10 6452 1 2025-08-14 21:53:24.805 00:00:10.371 TCP 23.104.0.1:44622 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:50:11.359 00:05:00.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-14 21:54:11.153 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56268 10 6452 1 2025-08-14 21:54:25.213 00:00:10.367 TCP 23.104.0.1:53854 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:55:11.330 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49300 10 6452 1 2025-08-14 21:55:25.614 00:00:10.367 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:56:11.501 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:55266 10 6452 1 2025-08-14 21:56:26.016 00:00:10.359 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:57:11.910 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-08-14 21:57:26.412 00:00:10.372 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-08-14 21:58:10.024 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-14 21:58:10.146 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-14 21:54:11.357 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-14 21:58:12.102 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-08-14 21:58:26.814 00:00:10.360 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1054, avg pps: 0, avg bpp: 317 Time window: 2025-08-14 20:56:11 - 2025-08-14 21:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 74179.4 Runtime: 0.0022s