Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 08:58:51.171 00:00:10.366 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-08-21 08:59:24.174 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-08-21 08:59:51.569 00:00:10.367 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:00:24.386 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 12 10367 1 2025-08-21 09:00:51.972 00:00:10.405 TCP 23.104.0.1:56260 -> 1.101.0.1:3000 15 1926 1 2025-08-21 09:01:16.835 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 08:57:14.506 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:01:16.770 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:01:24.630 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-08-21 09:01:52.417 00:00:10.364 TCP 23.104.0.1:59674 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:02:24.853 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-08-21 09:02:52.816 00:00:10.376 TCP 23.104.0.1:60794 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:03:25.091 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-08-21 09:03:53.237 00:00:10.367 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:00:14.505 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:04:25.265 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-08-21 09:04:53.641 00:00:10.376 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:05:25.489 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60050 10 6452 1 2025-08-21 09:05:54.056 00:00:10.372 TCP 23.104.0.1:60312 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:06:16.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:06:16.799 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:06:25.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52462 10 6452 1 2025-08-21 09:06:54.466 00:00:10.364 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:03:14.508 00:05:00.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:07:25.878 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-08-21 09:07:54.863 00:00:10.373 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:08:26.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56438 10 6452 1 2025-08-21 09:08:55.272 00:00:10.369 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:09:26.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-08-21 09:09:55.679 00:00:10.382 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:06:14.506 00:05:00.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:10:26.510 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 12 10365 1 2025-08-21 09:10:56.103 00:00:11.059 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 15 1926 1 2025-08-21 09:11:17.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:11:17.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:11:26.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-08-21 09:11:57.199 00:00:10.363 TCP 23.104.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:12:26.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-08-21 09:12:57.601 00:00:10.362 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:09:14.509 00:05:00.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:13:27.194 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46124 10 6452 1 2025-08-21 09:13:58.002 00:00:10.369 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:14:27.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59088 10 6452 1 2025-08-21 09:14:58.415 00:00:10.363 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:15:27.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-08-21 09:15:58.818 00:00:10.324 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:16:17.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:12:14.508 00:05:00.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:16:17.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:16:27.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-08-21 09:16:59.183 00:00:10.374 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:17:28.081 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-08-21 09:17:59.592 00:00:10.368 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:18:28.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-08-21 09:18:59.996 00:00:10.324 TCP 23.104.0.1:36896 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:15:14.510 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:19:28.503 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:60900 10 6452 1 2025-08-21 09:20:00.359 00:00:10.365 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:20:28.793 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-08-21 09:21:00.763 00:00:10.335 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:21:17.042 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:21:17.148 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:21:29.021 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-08-21 09:22:01.148 00:00:10.374 TCP 23.104.0.1:54006 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:18:14.517 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:22:29.244 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-08-21 09:23:01.551 00:00:10.358 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:23:29.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-08-21 09:24:01.946 00:00:10.333 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:24:29.626 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43348 10 6452 1 2025-08-21 09:25:02.317 00:00:10.365 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:21:14.519 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:25:29.833 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-08-21 09:26:17.313 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:26:02.720 00:00:10.680 TCP 23.104.0.1:42586 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:26:17.296 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:26:30.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 2025-08-21 09:27:03.433 00:00:10.362 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:27:30.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-08-21 09:28:03.835 00:00:10.386 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:24:14.517 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:28:30.501 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60086 10 6452 1 2025-08-21 09:29:04.257 00:00:10.369 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:29:30.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58840 10 6452 1 2025-08-21 09:30:04.660 00:00:10.366 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:30:30.880 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6452 1 2025-08-21 09:31:17.521 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:27:14.520 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:31:05.090 00:00:10.359 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:31:17.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:31:31.104 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44132 10 6452 1 2025-08-21 09:32:05.487 00:00:10.367 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:32:31.318 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 10 6452 1 2025-08-21 09:33:05.891 00:00:10.375 TCP 23.104.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:33:31.536 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41766 10 6452 1 2025-08-21 09:30:14.522 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:34:06.302 00:00:10.360 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:34:31.750 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-08-21 09:35:06.703 00:00:10.369 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:35:31.951 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-08-21 09:36:17.370 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:36:07.114 00:00:10.364 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:36:17.399 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:36:32.145 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39690 10 6452 1 2025-08-21 09:33:14.535 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:37:07.511 00:00:10.362 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:37:32.366 00:00:10.728 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-08-21 09:38:07.913 00:00:10.370 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:38:33.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-08-21 09:39:08.331 00:00:10.322 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:39:33.348 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57678 10 6452 1 2025-08-21 09:36:14.534 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:40:08.692 00:00:10.382 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:40:33.566 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-08-21 09:41:17.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:41:17.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:41:09.124 00:00:10.367 TCP 23.104.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:41:33.743 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-21 09:42:09.536 00:00:10.366 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:42:33.915 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-08-21 09:39:14.537 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:43:09.938 00:00:10.377 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:43:34.094 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 10 6452 1 2025-08-21 09:44:10.356 00:00:10.323 TCP 23.104.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:44:34.278 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-08-21 09:45:10.722 00:00:10.380 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:45:34.496 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-08-21 09:42:14.535 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:46:11.139 00:00:10.366 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:46:17.751 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:46:17.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:46:34.713 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-08-21 09:47:11.541 00:00:10.362 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:47:34.937 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53118 10 6452 1 2025-08-21 09:48:11.941 00:00:10.378 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:48:35.136 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-08-21 09:45:14.541 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:49:12.352 00:00:10.371 TCP 23.104.0.1:36494 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:49:35.306 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-08-21 09:50:12.761 00:00:10.383 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:50:35.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-08-21 09:51:17.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:51:17.902 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:51:13.182 00:00:10.373 TCP 23.104.0.1:44812 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:51:35.725 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-08-21 09:48:14.538 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:52:13.594 00:00:10.370 TCP 23.104.0.1:43358 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:52:36.193 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36300 10 6452 1 2025-08-21 09:53:14.009 00:00:10.370 TCP 23.104.0.1:55542 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:53:36.398 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-08-21 09:54:14.416 00:00:10.325 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:54:36.576 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 6452 1 2025-08-21 09:51:14.543 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 09:55:14.781 00:00:10.365 TCP 23.104.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:55:36.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6452 1 2025-08-21 09:56:18.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 09:56:18.017 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 09:56:15.184 00:00:10.366 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:56:37.009 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58160 10 6452 1 2025-08-21 09:57:15.587 00:00:10.323 TCP 23.104.0.1:34716 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:57:37.225 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-08-21 09:54:14.540 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 09:58:15.949 00:00:10.373 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-08-21 09:58:37.402 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1090, avg pps: 0, avg bpp: 320 Time window: 2025-08-21 08:57:14 - 2025-08-21 09:59:15 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0015s Wall: 0.0032s flows/second: 50776.2 Runtime: 0.0033s