Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 16:58:52.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6452 1 2025-08-22 16:59:04.976 00:00:10.323 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-08-22 16:59:52.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44384 10 6452 1 2025-08-22 17:00:05.337 00:00:10.372 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:00:52.529 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-08-22 17:01:05.745 00:00:10.368 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:01:55.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:01:55.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:01:52.699 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53272 10 6452 1 2025-08-22 17:02:06.148 00:00:10.363 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:02:52.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-08-22 17:03:06.549 00:00:10.374 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-08-22 16:59:15.432 00:05:00.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:03:53.128 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-08-22 17:00:15.429 00:05:00.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:04:06.958 00:00:10.366 TCP 23.104.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:04:53.350 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:34248 10 6452 1 2025-08-22 17:05:07.359 00:00:10.325 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:05:53.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48502 10 6452 1 2025-08-22 17:06:07.726 00:00:10.368 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:06:55.601 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:06:55.523 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:06:53.947 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-08-22 17:07:08.134 00:00:10.325 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:07:54.162 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 10 6452 1 2025-08-22 17:08:08.499 00:00:10.372 TCP 23.104.0.1:48084 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:08:54.374 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-08-22 17:05:15.433 00:05:00.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:09:08.906 00:00:10.327 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:09:54.580 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55878 10 6452 1 2025-08-22 17:06:15.431 00:05:00.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:10:09.291 00:00:10.423 TCP 23.104.0.1:54272 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:10:54.748 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 12 10367 1 2025-08-22 17:11:09.804 00:00:10.455 TCP 23.104.0.1:51832 -> 1.101.0.1:3000 15 1926 1 2025-08-22 17:11:55.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:11:55.445 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:11:54.950 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-08-22 17:12:10.294 00:00:10.377 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:12:55.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-08-22 17:13:10.709 00:00:10.381 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:13:55.346 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-08-22 17:14:11.130 00:00:10.363 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:14:55.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45574 10 6452 1 2025-08-22 17:11:15.435 00:05:00.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:15:11.530 00:00:10.371 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:15:55.766 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-08-22 17:12:15.433 00:05:00.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:16:11.935 00:00:10.540 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:16:55.777 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:16:55.678 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:16:55.936 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6452 1 2025-08-22 17:17:12.510 00:00:10.364 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:17:56.174 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39788 10 6452 1 2025-08-22 17:18:12.925 00:00:10.390 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:18:56.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-08-22 17:19:13.356 00:00:10.329 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:19:56.554 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50822 10 6452 1 2025-08-22 17:20:13.724 00:00:10.370 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:20:56.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-08-22 17:17:15.436 00:05:00.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:21:14.132 00:00:10.362 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:21:55.570 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:21:55.658 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:21:56.944 00:00:10.760 TCP 1.101.0.1:3000 -> 22.102.0.1:50532 10 6452 1 2025-08-22 17:18:15.436 00:05:00.660 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:22:14.537 00:00:10.325 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:22:57.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2025-08-22 17:23:14.902 00:00:10.368 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:23:57.955 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-08-22 17:24:15.306 00:00:10.374 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:24:58.188 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-08-22 17:25:15.720 00:00:10.381 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:25:58.402 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-08-22 17:26:16.129 00:00:10.327 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:26:55.694 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:26:55.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:26:58.571 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-08-22 17:23:15.436 00:05:00.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:27:16.492 00:00:10.367 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:27:58.784 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 12 6556 1 2025-08-22 17:24:15.436 00:05:00.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:28:16.897 00:00:10.378 TCP 23.104.0.1:48634 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:28:58.994 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-08-22 17:29:17.309 00:00:10.370 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:29:59.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-08-22 17:30:17.717 00:00:10.381 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:30:59.441 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-08-22 17:31:18.136 00:00:10.362 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:31:56.025 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:31:55.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:31:59.655 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-08-22 17:32:18.532 00:00:12.938 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:32:59.879 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-08-22 17:29:15.441 00:05:00.656 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:33:21.535 00:00:10.364 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:34:00.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-08-22 17:30:15.439 00:05:00.661 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:34:21.934 00:00:10.375 TCP 23.104.0.1:49176 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:35:00.331 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38646 10 6452 1 2025-08-22 17:35:22.345 00:00:10.322 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:36:00.553 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-08-22 17:36:22.702 00:00:10.323 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:36:55.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:36:55.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:37:00.775 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-08-22 17:37:23.092 00:00:10.362 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:38:01.002 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-08-22 17:38:23.496 00:00:10.359 TCP 23.104.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:39:01.199 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-08-22 17:35:15.442 00:05:00.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:39:23.890 00:00:10.348 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:40:01.410 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57596 10 6452 1 2025-08-22 17:36:15.440 00:05:00.661 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:40:24.275 00:00:10.368 TCP 23.104.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:41:01.620 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6452 1 2025-08-22 17:41:24.679 00:00:10.363 TCP 23.104.0.1:42888 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:41:56.060 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:41:55.841 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:42:01.824 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52324 10 6452 1 2025-08-22 17:42:25.109 00:00:10.370 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:43:02.041 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53070 10 6452 1 2025-08-22 17:43:25.543 00:00:10.371 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:44:02.261 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-08-22 17:44:25.952 00:00:10.369 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:45:02.485 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-08-22 17:41:15.444 00:05:00.655 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:45:26.361 00:00:10.366 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:42:15.442 00:05:00.660 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:46:02.704 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-08-22 17:46:26.766 00:00:10.371 TCP 23.104.0.1:36650 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:46:55.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:46:56.149 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:47:02.922 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-08-22 17:47:27.174 00:00:10.326 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:48:03.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-08-22 17:48:27.536 00:00:10.324 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:49:03.353 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6452 1 2025-08-22 17:49:27.901 00:00:10.366 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:50:03.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-08-22 17:50:28.306 00:00:10.323 TCP 23.104.0.1:46018 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:47:15.446 00:05:00.654 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:51:03.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-08-22 17:51:28.664 00:00:10.323 TCP 23.104.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:51:56.233 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:51:56.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:48:15.443 00:05:00.660 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:52:03.999 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-08-22 17:52:29.024 00:00:10.365 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:53:04.216 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52260 10 6452 1 2025-08-22 17:53:29.427 00:00:10.373 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:54:04.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51826 10 6452 1 2025-08-22 17:54:29.835 00:00:10.387 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:55:04.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34246 10 6452 1 2025-08-22 17:55:30.257 00:00:10.891 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:56:04.815 00:00:10.958 TCP 1.101.0.1:3000 -> 22.102.0.1:45808 10 6452 1 2025-08-22 17:56:31.183 00:00:10.379 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:56:56.693 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 17:56:56.450 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 17:57:05.806 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35408 10 6452 1 2025-08-22 17:53:15.446 00:05:00.656 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 17:57:31.588 00:00:10.334 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-08-22 17:58:06.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-08-22 17:54:15.444 00:05:00.660 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 17:58:31.962 00:00:10.366 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-08-22 16:58:52 - 2025-08-22 17:59:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0020s Wall: 0.0020s flows/second: 80631.3 Runtime: 0.0020s