Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 01:58:50.576 00:00:10.362 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-08-22 01:54:15.002 00:06:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 01:59:15.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-08-22 01:59:50.979 00:00:10.370 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:00:15.760 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32948 10 6452 1 2025-08-22 02:00:51.386 00:00:10.366 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:01:15.974 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33288 10 6452 1 2025-08-22 02:01:37.366 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:01:37.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:01:51.790 00:00:10.362 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:02:16.207 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40580 10 6452 1 2025-08-22 02:02:52.194 00:00:10.377 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:03:16.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-08-22 02:03:52.608 00:00:10.361 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-08-22 01:59:15.004 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:04:16.636 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-08-22 02:04:53.010 00:00:10.323 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:05:16.842 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46566 10 6452 1 2025-08-22 02:05:53.374 00:00:10.367 TCP 23.104.0.1:41922 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:01:15.003 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:06:17.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-08-22 02:06:37.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:06:37.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:06:53.774 00:00:10.334 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:07:17.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-08-22 02:07:54.142 00:00:10.378 TCP 23.104.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:08:17.500 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-08-22 02:08:54.555 00:00:10.325 TCP 23.104.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:09:17.664 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-08-22 02:09:54.918 00:00:10.387 TCP 23.104.0.1:45696 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:10:17.880 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 10 6452 1 2025-08-22 02:10:55.350 00:00:10.365 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:06:15.011 00:06:00.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:11:18.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49386 10 6452 1 2025-08-22 02:11:38.899 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:11:38.784 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:11:55.754 00:00:10.331 TCP 23.104.0.1:52460 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:12:18.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49420 10 6452 1 2025-08-22 02:12:56.125 00:00:10.569 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:08:15.014 00:06:00.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:13:18.524 00:00:10.447 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-08-22 02:13:56.738 00:00:10.329 TCP 23.104.0.1:39864 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:14:19.016 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-08-22 02:14:57.108 00:00:10.368 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:15:19.227 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-08-22 02:15:57.524 00:00:10.373 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:16:19.400 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-08-22 02:16:37.600 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:16:37.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:16:57.930 00:00:10.390 TCP 23.104.0.1:59770 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:17:19.614 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-08-22 02:17:58.351 00:00:10.363 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:13:15.035 00:06:00.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:18:19.831 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-08-22 02:18:58.748 00:00:10.337 TCP 23.104.0.1:41568 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:19:20.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-08-22 02:19:59.126 00:00:10.362 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:15:15.035 00:06:00.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:20:20.255 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-08-22 02:20:59.528 00:00:10.365 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:21:20.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-08-22 02:21:37.821 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:21:37.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:21:59.933 00:00:10.376 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:22:20.681 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-08-22 02:23:00.348 00:00:10.371 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:23:20.894 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50866 10 6452 1 2025-08-22 02:24:00.755 00:00:10.391 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:24:21.116 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43464 10 6452 1 2025-08-22 02:25:01.185 00:00:10.369 TCP 23.104.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:20:15.047 00:06:00.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:25:21.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 10 6452 1 2025-08-22 02:26:01.588 00:00:10.366 TCP 23.104.0.1:52962 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:26:21.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6452 1 2025-08-22 02:26:37.704 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:26:37.937 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:22:15.045 00:06:00.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:27:01.991 00:00:10.365 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:27:21.753 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36174 10 6452 1 2025-08-22 02:28:02.392 00:00:10.457 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:28:21.920 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 10 6452 1 2025-08-22 02:29:02.885 00:00:10.391 TCP 23.104.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:29:22.106 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-08-22 02:30:03.314 00:00:10.380 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:30:22.325 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 12 10367 1 2025-08-22 02:31:03.734 00:00:10.402 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 15 1926 1 2025-08-22 02:31:22.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6452 1 2025-08-22 02:31:38.065 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:31:37.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:32:04.170 00:00:10.327 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:27:15.048 00:06:00.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:32:22.776 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-08-22 02:33:04.530 00:00:10.361 TCP 23.104.0.1:46280 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:33:22.994 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-08-22 02:29:15.046 00:06:00.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:34:04.925 00:00:10.377 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:34:23.215 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-08-22 02:35:05.334 00:00:10.371 TCP 23.104.0.1:58256 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:35:23.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56390 10 6452 1 2025-08-22 02:36:05.741 00:00:10.327 TCP 23.104.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:36:23.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-08-22 02:36:37.823 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:36:37.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:37:06.110 00:00:10.370 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:37:23.858 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-08-22 02:38:06.519 00:00:10.368 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:38:24.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-08-22 02:34:15.053 00:06:00.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:39:06.923 00:00:10.387 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:39:24.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41662 10 6452 1 2025-08-22 02:40:07.348 00:00:10.360 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:40:24.515 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-08-22 02:36:15.051 00:06:00.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:41:07.749 00:00:10.365 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:41:24.925 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6452 1 2025-08-22 02:41:37.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:41:38.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:42:08.149 00:00:10.323 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:42:25.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-08-22 02:43:08.512 00:00:10.365 TCP 23.104.0.1:40268 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:43:25.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-08-22 02:44:08.912 00:00:10.365 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:44:25.560 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-08-22 02:45:09.319 00:00:10.361 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:45:25.779 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 12 10365 1 2025-08-22 02:41:15.056 00:06:00.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:46:09.725 00:00:10.454 TCP 23.104.0.1:58204 -> 1.101.0.1:3000 15 1926 1 2025-08-22 02:46:25.981 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-08-22 02:46:38.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:46:38.225 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:47:10.241 00:00:10.362 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:47:26.230 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-08-22 02:43:15.053 00:06:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:48:10.642 00:00:10.364 TCP 23.104.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:48:26.443 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-08-22 02:49:11.050 00:00:10.367 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:49:26.654 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-08-22 02:50:11.453 00:00:10.364 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:50:26.862 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-08-22 02:51:11.852 00:00:10.376 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:51:27.084 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:54142 10 6452 1 2025-08-22 02:51:38.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:51:38.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:52:12.266 00:00:10.363 TCP 23.104.0.1:51826 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:52:27.593 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-08-22 02:48:15.057 00:06:00.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-22 02:53:12.675 00:00:10.359 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:53:27.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-08-22 02:54:13.102 00:00:10.363 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:54:28.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-08-22 02:50:15.054 00:06:00.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-22 02:55:13.503 00:00:10.368 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:55:28.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 2025-08-22 02:56:13.911 00:00:10.369 TCP 23.104.0.1:59936 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:56:28.467 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-08-22 02:56:38.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 02:56:38.089 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 02:57:14.323 00:00:10.366 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:57:28.636 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-08-22 02:58:14.728 00:00:10.372 TCP 23.104.0.1:44390 -> 1.101.0.1:3000 11 1507 1 2025-08-22 02:58:28.814 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 Summary: total flows: 161, total bytes: 506891, total packets: 1582, avg bps: 1049, avg pps: 0, avg bpp: 320 Time window: 2025-08-22 01:54:15 - 2025-08-22 02:58:39 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0031s User: 0.0008s Wall: 0.0015s flows/second: 104890.2 Runtime: 0.0015s