Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-20 20:59:29.597 00:00:10.367 TCP 23.104.0.1:39062 -> 1.101.0.1:3000 11 1507 1 2025-08-20 20:59:38.371 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-08-20 21:00:30.010 00:00:10.320 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:00:38.581 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-08-20 21:01:02.249 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:01:02.175 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 20:57:14.150 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:01:30.371 00:00:10.364 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:01:38.802 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-08-20 21:02:30.775 00:00:10.330 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:02:39.041 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51758 10 6452 1 2025-08-20 21:03:31.144 00:00:10.362 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:03:39.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-08-20 21:00:14.147 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:04:31.545 00:00:10.324 TCP 23.104.0.1:54942 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:04:39.763 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36276 10 6452 1 2025-08-20 21:05:31.904 00:00:10.325 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:05:39.971 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:50048 10 6452 1 2025-08-20 21:06:02.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:06:02.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:06:32.273 00:00:10.972 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:06:40.170 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-08-20 21:03:14.151 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:07:33.286 00:00:10.418 TCP 23.104.0.1:53620 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:07:40.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-08-20 21:08:33.717 00:00:10.318 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:08:40.599 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-08-20 21:09:34.105 00:00:10.322 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:09:40.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53172 10 6452 1 2025-08-20 21:06:14.148 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:10:34.464 00:00:10.360 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:10:41.038 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-08-20 21:11:02.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:11:02.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:11:34.861 00:00:10.375 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:11:41.213 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60142 10 6452 1 2025-08-20 21:12:35.274 00:00:10.361 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:12:41.390 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-08-20 21:09:14.151 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:13:35.676 00:00:10.371 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:13:41.601 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 10 6452 1 2025-08-20 21:14:36.104 00:00:10.368 TCP 23.104.0.1:38122 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:14:41.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45686 10 6452 1 2025-08-20 21:15:36.508 00:00:10.371 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:15:42.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46718 10 6452 1 2025-08-20 21:16:02.499 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:16:02.643 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:12:14.150 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:16:36.922 00:00:10.397 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:16:42.255 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-08-20 21:17:37.362 00:00:10.319 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:17:42.465 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6452 1 2025-08-20 21:18:37.716 00:00:10.372 TCP 23.104.0.1:56414 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:18:42.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-08-20 21:15:14.153 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:19:38.134 00:00:10.338 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:19:42.894 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-08-20 21:20:38.537 00:00:10.324 TCP 23.104.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:20:43.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-08-20 21:21:02.354 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:21:02.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:21:38.900 00:00:10.371 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:21:43.344 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51466 10 6452 1 2025-08-20 21:18:14.149 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:22:43.564 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:48852 10 6452 1 2025-08-20 21:22:39.307 00:00:13.462 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:23:42.860 00:00:10.734 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:23:43.831 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58936 10 6452 1 2025-08-20 21:24:43.631 00:00:10.366 TCP 23.104.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:24:44.003 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-08-20 21:21:14.152 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:25:44.050 00:00:10.765 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:25:44.234 00:00:10.537 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-08-20 21:26:02.496 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:26:02.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:26:44.814 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43326 10 6452 1 2025-08-20 21:26:44.864 00:00:10.367 TCP 23.104.0.1:38880 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:27:45.272 00:00:10.365 TCP 23.104.0.1:46084 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:27:44.986 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-08-20 21:24:14.151 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:28:45.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-08-20 21:28:45.677 00:00:10.383 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:29:45.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-08-20 21:29:46.118 00:00:10.333 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:30:45.643 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48952 10 6452 1 2025-08-20 21:30:46.488 00:00:10.364 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:31:02.764 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:31:02.895 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:27:14.154 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:31:45.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-08-20 21:31:46.890 00:00:10.382 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:32:46.052 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6452 1 2025-08-20 21:32:47.308 00:00:10.365 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:33:46.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-08-20 21:33:47.713 00:00:10.369 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:30:14.151 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:34:46.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59356 10 6452 1 2025-08-20 21:34:48.112 00:00:10.364 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:35:46.692 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-08-20 21:35:48.514 00:00:10.376 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:36:02.811 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:36:03.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:36:48.925 00:00:10.345 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:36:46.864 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-08-20 21:33:14.154 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:37:49.306 00:00:10.368 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:37:47.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-08-20 21:38:47.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6452 1 2025-08-20 21:38:49.711 00:00:10.376 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:39:47.532 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-08-20 21:39:50.123 00:00:10.328 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:36:14.152 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:40:50.487 00:00:10.366 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:40:47.752 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-08-20 21:41:03.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:41:03.198 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:41:50.884 00:00:10.343 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:41:48.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-08-20 21:42:51.265 00:00:10.365 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:42:48.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48772 10 6452 1 2025-08-20 21:39:14.155 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:43:48.560 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44184 10 6452 1 2025-08-20 21:43:51.680 00:00:10.367 TCP 23.104.0.1:43108 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:44:48.730 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-08-20 21:44:52.097 00:00:10.363 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:46:02.989 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:45:52.494 00:00:10.369 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:45:48.966 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-08-20 21:46:03.319 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:42:14.154 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:46:49.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44210 10 6452 1 2025-08-20 21:46:52.895 00:00:10.371 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:47:49.385 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2025-08-20 21:47:53.303 00:00:10.367 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:48:49.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-08-20 21:48:53.702 00:00:10.327 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:45:14.156 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:49:49.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39116 10 6452 1 2025-08-20 21:49:54.107 00:00:10.371 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:50:50.070 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60192 10 6452 1 2025-08-20 21:51:03.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:51:03.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:50:54.528 00:00:10.362 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:51:50.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-08-20 21:51:54.931 00:00:10.343 TCP 23.104.0.1:59620 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:48:14.154 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-20 21:52:50.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60758 10 6452 1 2025-08-20 21:52:55.335 00:00:10.328 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:53:50.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-08-20 21:53:55.698 00:00:10.365 TCP 23.104.0.1:42046 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:54:50.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-08-20 21:54:56.107 00:00:10.365 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:51:14.157 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-20 21:55:51.111 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6452 1 2025-08-20 21:56:03.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-20 21:55:56.509 00:00:10.367 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:56:03.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-20 21:56:51.315 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56786 10 6452 1 2025-08-20 21:56:56.914 00:00:10.367 TCP 23.104.0.1:37774 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:57:51.485 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34490 10 6452 1 2025-08-20 21:57:57.318 00:00:10.361 TCP 23.104.0.1:47312 -> 1.101.0.1:3000 11 1507 1 2025-08-20 21:54:14.158 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-08-20 20:57:14 - 2025-08-20 21:59:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0012s Wall: 0.0023s flows/second: 70317.4 Runtime: 0.0023s