Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 18:58:56.614 00:00:10.472 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-08-22 18:59:19.514 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-08-22 18:59:57.133 00:00:10.363 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:00:19.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-08-22 19:00:57.544 00:00:10.374 TCP 23.104.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:01:19.960 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 12 6556 1 2025-08-22 19:01:57.688 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:01:57.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:01:57.974 00:00:10.378 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:02:20.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-08-22 19:02:58.388 00:00:10.364 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-08-22 18:59:15.472 00:05:00.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:03:20.396 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-08-22 19:03:58.790 00:00:10.378 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:00:15.469 00:05:00.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:04:20.565 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-08-22 19:04:59.215 00:00:10.368 TCP 23.104.0.1:47670 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:05:20.786 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-08-22 19:05:59.623 00:00:10.366 TCP 23.104.0.1:39952 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:06:20.967 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46300 10 6452 1 2025-08-22 19:06:57.736 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:06:57.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:07:00.029 00:00:10.367 TCP 23.104.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:07:21.194 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-08-22 19:08:00.442 00:00:10.360 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:08:21.407 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38958 10 6452 1 2025-08-22 19:09:00.840 00:00:10.392 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:05:15.472 00:05:00.652 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:09:21.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6452 1 2025-08-22 19:10:01.268 00:00:10.369 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:06:15.471 00:05:00.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:10:21.792 00:00:10.565 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-08-22 19:11:01.678 00:00:10.333 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:11:22.386 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-08-22 19:11:57.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:11:57.684 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:12:02.058 00:00:10.367 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:12:22.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37358 10 6452 1 2025-08-22 19:13:02.464 00:00:10.364 TCP 23.104.0.1:59040 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:13:22.824 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-08-22 19:14:02.869 00:00:10.368 TCP 23.104.0.1:34328 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:14:23.000 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58620 10 6452 1 2025-08-22 19:15:03.279 00:00:10.360 TCP 23.104.0.1:45106 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:11:15.475 00:05:00.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:15:23.218 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6452 1 2025-08-22 19:16:03.683 00:00:10.368 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:12:15.473 00:05:00.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:16:23.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33908 10 6452 1 2025-08-22 19:16:58.138 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:16:57.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:17:04.107 00:00:10.363 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:17:23.647 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-08-22 19:18:04.517 00:00:10.366 TCP 23.104.0.1:40614 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:18:23.824 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33952 10 6452 1 2025-08-22 19:19:04.924 00:00:10.354 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:19:24.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42786 10 6452 1 2025-08-22 19:20:05.321 00:00:10.366 TCP 23.104.0.1:55138 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:20:24.296 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-08-22 19:21:05.740 00:00:10.370 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:17:15.487 00:05:00.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:21:24.512 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56642 10 6452 1 2025-08-22 19:21:58.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:21:58.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:22:06.153 00:00:10.328 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:18:15.485 00:05:00.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:22:24.739 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56760 10 6452 1 2025-08-22 19:23:06.531 00:00:10.367 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:23:24.953 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46780 10 6452 1 2025-08-22 19:24:06.938 00:00:10.373 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:24:25.193 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-08-22 19:25:07.359 00:00:10.363 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:25:25.369 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 10 6452 1 2025-08-22 19:26:07.763 00:00:10.368 TCP 23.104.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:26:25.580 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48496 10 6452 1 2025-08-22 19:26:58.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:26:58.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:23:15.486 00:05:00.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:27:08.172 00:00:10.376 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:27:25.793 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-08-22 19:24:15.484 00:05:00.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:28:08.587 00:00:10.371 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:28:26.010 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-08-22 19:29:08.993 00:00:10.366 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:29:26.228 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-08-22 19:30:09.394 00:00:10.364 TCP 23.104.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:30:26.401 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-08-22 19:31:09.796 00:00:10.364 TCP 23.104.0.1:45098 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:31:26.616 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57172 10 6452 1 2025-08-22 19:31:58.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:31:58.437 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:32:10.202 00:00:11.307 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:32:26.827 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-08-22 19:29:15.489 00:05:00.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:33:11.550 00:00:10.367 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:33:27.060 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-08-22 19:30:15.486 00:05:00.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:34:11.953 00:00:10.368 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:34:27.497 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-08-22 19:35:12.358 00:00:10.667 TCP 23.104.0.1:34728 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:35:27.718 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6452 1 2025-08-22 19:36:13.090 00:00:10.365 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:36:27.943 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46742 10 6452 1 2025-08-22 19:36:58.920 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:36:58.770 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:37:13.494 00:00:10.366 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:37:28.145 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-08-22 19:38:13.892 00:00:10.377 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:38:28.392 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-08-22 19:35:15.493 00:05:00.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:39:14.303 00:00:10.324 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:39:28.608 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-08-22 19:36:15.490 00:05:00.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:40:14.670 00:00:10.362 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:40:28.824 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-08-22 19:41:15.098 00:00:10.330 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:41:29.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47622 10 6452 1 2025-08-22 19:41:58.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:41:58.466 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:42:15.470 00:00:10.324 TCP 23.104.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:42:29.277 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-08-22 19:43:15.829 00:00:10.387 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:43:29.454 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-08-22 19:44:16.257 00:00:10.363 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:44:29.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-08-22 19:41:15.495 00:05:00.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:45:16.656 00:00:10.324 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:45:29.876 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-08-22 19:42:15.494 00:05:00.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:46:17.015 00:00:13.245 TCP 23.104.0.1:35254 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:46:30.070 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 6452 1 2025-08-22 19:46:58.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:46:58.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:47:20.332 00:00:10.372 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:47:30.287 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-08-22 19:48:20.748 00:00:10.396 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:48:30.509 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-08-22 19:49:21.184 00:00:10.361 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:49:30.723 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-08-22 19:50:21.584 00:00:10.364 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:50:30.945 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-08-22 19:47:15.506 00:05:00.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:51:21.987 00:00:10.376 TCP 23.104.0.1:33658 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:51:31.232 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 10 6452 1 2025-08-22 19:51:58.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:51:58.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:48:15.504 00:05:00.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:52:22.403 00:00:10.327 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:52:31.432 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-08-22 19:53:22.771 00:00:10.369 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:53:31.616 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-08-22 19:54:23.177 00:00:10.367 TCP 23.104.0.1:33210 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:54:31.785 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41544 10 6452 1 2025-08-22 19:55:23.583 00:00:10.369 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:55:32.004 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57274 10 6452 1 2025-08-22 19:56:23.986 00:00:10.366 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:56:32.219 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40176 10 6452 1 2025-08-22 19:56:59.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 19:56:58.860 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 19:53:15.507 00:05:00.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 19:57:24.391 00:00:10.363 TCP 23.104.0.1:50794 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:57:32.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35192 10 6452 1 2025-08-22 19:54:15.505 00:05:00.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 19:58:24.798 00:00:10.367 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:58:32.613 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1101, avg pps: 0, avg bpp: 316 Time window: 2025-08-22 18:58:56 - 2025-08-22 19:59:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0000s Wall: 0.0025s flows/second: 65629.8 Runtime: 0.0025s