Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-22 19:59:25.205 00:00:10.364 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-08-22 19:59:32.831 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-08-22 20:00:25.606 00:00:10.371 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:00:33.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-08-22 20:01:26.017 00:00:10.362 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:01:33.215 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57080 10 6452 1 2025-08-22 20:01:58.830 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:01:58.767 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:02:26.420 00:00:10.323 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:02:33.398 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34386 10 6452 1 2025-08-22 19:59:15.509 00:05:00.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:03:26.786 00:00:10.401 TCP 23.104.0.1:36380 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:03:33.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-08-22 20:00:15.505 00:05:00.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:04:27.257 00:00:10.367 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:04:33.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-08-22 20:05:27.668 00:00:10.362 TCP 23.104.0.1:45916 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:05:34.041 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53680 10 6452 1 2025-08-22 20:06:28.105 00:00:10.329 TCP 23.104.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:06:34.259 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47354 10 6452 1 2025-08-22 20:06:58.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:06:59.149 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:07:28.485 00:00:10.367 TCP 23.104.0.1:35650 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:07:34.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-08-22 20:08:28.893 00:00:10.379 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:08:34.683 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-08-22 20:05:15.521 00:05:00.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:09:29.325 00:00:10.365 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:09:34.917 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-08-22 20:06:15.520 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:10:29.733 00:00:10.323 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:10:35.136 00:00:10.300 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-08-22 20:11:30.106 00:00:10.362 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:11:35.478 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55470 10 6452 1 2025-08-22 20:11:59.295 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:11:59.126 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:12:30.510 00:00:10.365 TCP 23.104.0.1:40052 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:12:35.650 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-08-22 20:13:30.912 00:00:10.369 TCP 23.104.0.1:55744 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:13:35.880 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-08-22 20:14:31.325 00:00:10.327 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:14:36.080 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53172 10 6452 1 2025-08-22 20:11:15.521 00:05:00.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:15:31.690 00:00:10.372 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:15:36.249 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6452 1 2025-08-22 20:12:15.519 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:16:36.464 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55448 10 6452 1 2025-08-22 20:16:32.104 00:00:10.370 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:16:59.307 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:16:59.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:17:32.505 00:00:10.368 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:17:36.637 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44326 10 6452 1 2025-08-22 20:18:32.914 00:00:10.361 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:18:36.864 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-08-22 20:19:33.314 00:00:10.366 TCP 23.104.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:19:37.064 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-08-22 20:20:33.716 00:00:10.375 TCP 23.104.0.1:46000 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:20:37.279 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-08-22 20:17:15.526 00:05:00.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:21:34.129 00:00:10.367 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:21:37.500 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-08-22 20:21:59.249 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:21:59.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:18:15.524 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:22:34.531 00:00:10.372 TCP 23.104.0.1:58360 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:22:37.665 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43570 10 6452 1 2025-08-22 20:23:34.941 00:00:10.386 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:23:37.879 00:00:10.540 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-08-22 20:24:35.353 00:00:10.373 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:24:38.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50620 10 6452 1 2025-08-22 20:25:35.765 00:00:10.376 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:25:38.676 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46464 10 6452 1 2025-08-22 20:26:36.178 00:00:10.365 TCP 23.104.0.1:48242 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:26:38.867 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40972 10 6452 1 2025-08-22 20:26:59.823 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:26:59.704 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:23:15.528 00:05:00.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:27:36.578 00:00:10.325 TCP 23.104.0.1:35660 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:27:39.092 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2025-08-22 20:24:15.526 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:28:39.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-08-22 20:28:36.941 00:00:10.377 TCP 23.104.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:29:39.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44342 10 6452 1 2025-08-22 20:29:37.357 00:00:10.367 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:30:39.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-08-22 20:30:37.760 00:00:10.379 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:31:39.930 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-08-22 20:31:38.177 00:00:10.368 TCP 23.104.0.1:60676 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:31:59.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:31:59.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:32:40.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55520 10 6452 1 2025-08-22 20:32:38.582 00:00:10.362 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:29:15.530 00:05:00.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:33:40.338 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-08-22 20:33:38.984 00:00:10.370 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:30:15.528 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:34:40.511 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39572 10 6452 1 2025-08-22 20:34:39.393 00:00:10.319 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:35:39.750 00:00:10.336 TCP 23.104.0.1:48586 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:35:40.735 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36880 10 6452 1 2025-08-22 20:36:40.960 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 12 6556 1 2025-08-22 20:36:40.130 00:00:10.324 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:36:59.604 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:36:59.678 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:37:41.205 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-08-22 20:37:40.487 00:00:10.334 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:38:41.428 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-08-22 20:38:40.874 00:00:10.376 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:35:15.531 00:05:00.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:39:41.283 00:00:10.369 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:39:41.653 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 11 6492 1 2025-08-22 20:36:15.529 00:05:00.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:40:41.887 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-08-22 20:40:41.693 00:00:10.367 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:41:42.105 00:00:10.380 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:41:59.779 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:41:42.103 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-08-22 20:41:59.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:42:42.529 00:00:10.366 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:42:42.324 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6452 1 2025-08-22 20:43:42.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-08-22 20:43:42.931 00:00:10.383 TCP 23.104.0.1:60152 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:44:42.751 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-08-22 20:44:43.346 00:00:10.323 TCP 23.104.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:41:15.533 00:05:00.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:45:43.705 00:00:10.438 TCP 23.104.0.1:38780 -> 1.101.0.1:3000 15 1926 1 2025-08-22 20:45:42.976 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 12 10367 1 2025-08-22 20:42:15.531 00:05:00.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:46:44.186 00:00:10.363 TCP 23.104.0.1:46002 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:46:43.233 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-08-22 20:46:59.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:46:59.789 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:47:44.581 00:00:10.369 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:47:43.444 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46280 10 6452 1 2025-08-22 20:48:44.988 00:00:10.368 TCP 23.104.0.1:38718 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:48:43.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49680 10 6452 1 2025-08-22 20:49:45.414 00:00:10.324 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:49:43.872 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-08-22 20:50:45.778 00:00:10.365 TCP 23.104.0.1:35392 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:50:44.101 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-08-22 20:47:15.536 00:05:00.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:51:46.182 00:00:10.337 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:52:00.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:51:44.313 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-08-22 20:51:59.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:48:15.533 00:05:00.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-22 20:52:44.527 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45948 10 6452 1 2025-08-22 20:52:46.557 00:00:10.363 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:53:44.705 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60296 10 6452 1 2025-08-22 20:53:46.957 00:00:10.363 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:54:44.920 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47500 10 6452 1 2025-08-22 20:54:47.368 00:00:10.366 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:55:45.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53726 10 6452 1 2025-08-22 20:55:47.770 00:00:10.370 TCP 23.104.0.1:52490 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:56:45.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-08-22 20:56:59.991 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-22 20:56:59.863 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-22 20:56:48.183 00:00:10.327 TCP 23.104.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:53:15.536 00:05:00.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-22 20:57:45.525 00:00:10.627 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-08-22 20:57:48.547 00:00:10.365 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-08-22 20:54:15.534 00:05:00.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 494867, total packets: 1560, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-08-22 19:59:15 - 2025-08-22 20:59:16 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0017s Wall: 0.0020s flows/second: 80193.2 Runtime: 0.0020s