Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-24 20:59:17.022 00:00:10.363 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-08-24 20:59:18.341 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60252 10 6452 1 2025-08-24 21:00:17.423 00:00:10.371 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:00:18.518 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-08-24 21:01:17.836 00:00:10.386 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:01:18.693 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34374 10 6452 1 2025-08-24 20:58:16.998 00:05:00.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-24 21:02:18.259 00:00:10.370 TCP 23.104.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:02:18.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-08-24 21:02:57.932 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:02:57.718 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 20:58:17.003 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:03:19.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-08-24 21:03:18.667 00:00:10.373 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:04:19.335 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-08-24 21:04:19.095 00:00:10.374 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:05:19.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60574 10 6452 1 2025-08-24 21:05:19.505 00:00:10.326 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:06:19.757 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38376 10 6452 1 2025-08-24 21:06:19.871 00:00:10.365 TCP 23.104.0.1:41306 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:07:19.974 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46886 10 6452 1 2025-08-24 21:07:20.276 00:00:10.366 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:07:57.815 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:07:57.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:08:20.200 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-08-24 21:08:20.677 00:00:10.365 TCP 23.104.0.1:45926 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:04:17.001 00:06:00.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:09:20.370 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-08-24 21:09:21.109 00:00:10.374 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:05:17.003 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:10:21.531 00:00:10.365 TCP 23.104.0.1:53782 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:10:20.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-08-24 21:11:20.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55942 10 6452 1 2025-08-24 21:11:21.929 00:00:10.374 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:12:20.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-24 21:12:22.358 00:00:10.363 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:12:58.145 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:12:57.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:13:21.189 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-08-24 21:13:22.763 00:00:10.326 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:14:21.418 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-08-24 21:14:23.131 00:00:10.322 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:15:21.635 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-08-24 21:15:23.484 00:00:10.365 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:11:17.003 00:06:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:16:21.868 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-08-24 21:16:23.901 00:00:10.373 TCP 23.104.0.1:42100 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:12:17.034 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:17:24.318 00:00:10.367 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:17:22.257 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-08-24 21:17:58.304 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:17:58.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:18:22.436 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-08-24 21:18:24.741 00:00:10.366 TCP 23.104.0.1:38790 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:19:25.140 00:00:10.732 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:19:22.648 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6452 1 2025-08-24 21:20:25.920 00:00:10.349 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:20:22.825 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59614 10 6452 1 2025-08-24 21:21:26.310 00:00:10.366 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:21:23.043 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-08-24 21:22:23.259 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-08-24 21:22:26.715 00:00:10.386 TCP 23.104.0.1:59284 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:22:58.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:22:58.329 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:18:17.034 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:23:23.474 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-08-24 21:23:27.129 00:00:10.372 TCP 23.104.0.1:60198 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:19:17.036 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:24:23.682 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-08-24 21:24:27.535 00:00:10.366 TCP 23.104.0.1:58228 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:25:23.899 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-08-24 21:25:27.937 00:00:10.480 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:26:24.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-08-24 21:26:28.455 00:00:10.357 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:27:24.327 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 2025-08-24 21:27:28.850 00:00:10.384 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:27:58.374 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:27:58.418 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:28:24.540 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-08-24 21:28:29.273 00:00:10.366 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:29:24.712 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-08-24 21:29:29.671 00:00:10.329 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:25:17.035 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:30:24.929 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2025-08-24 21:30:30.043 00:00:10.623 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:26:17.040 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:31:25.121 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 12 10365 1 2025-08-24 21:31:30.709 00:00:10.439 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 15 1926 1 2025-08-24 21:32:25.365 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-08-24 21:32:31.187 00:00:10.367 TCP 23.104.0.1:58782 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:32:58.561 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:32:58.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:33:25.571 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-08-24 21:33:31.593 00:00:10.364 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:34:25.788 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-08-24 21:34:31.992 00:00:10.366 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:35:25.965 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-08-24 21:35:32.395 00:00:10.575 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:36:26.192 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 10 6452 1 2025-08-24 21:36:33.008 00:00:10.366 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:32:17.040 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:37:26.370 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32932 10 6452 1 2025-08-24 21:37:33.412 00:00:10.381 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:37:58.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:37:58.351 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:33:17.039 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:38:26.593 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-08-24 21:38:33.831 00:00:10.349 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:39:26.809 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-08-24 21:39:34.216 00:00:10.366 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:40:26.988 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-08-24 21:40:34.623 00:00:10.365 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:41:27.235 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 12 10365 1 2025-08-24 21:41:35.030 00:00:10.447 TCP 23.104.0.1:35434 -> 1.101.0.1:3000 15 1926 1 2025-08-24 21:42:27.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43542 10 6452 1 2025-08-24 21:42:35.511 00:00:10.361 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:42:58.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:42:58.542 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:43:27.692 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 2025-08-24 21:43:35.914 00:00:10.338 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:39:17.050 00:06:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:44:27.925 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-08-24 21:44:36.289 00:00:10.326 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:40:17.052 00:06:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:45:28.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 10 6452 1 2025-08-24 21:45:36.655 00:00:10.336 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:46:28.333 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2025-08-24 21:46:37.045 00:00:10.382 TCP 23.104.0.1:36442 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:47:28.581 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-08-24 21:47:37.479 00:00:10.370 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:47:58.889 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:47:58.741 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:48:28.746 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-08-24 21:48:37.889 00:00:10.385 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:49:28.958 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51328 10 6452 1 2025-08-24 21:49:38.308 00:00:10.333 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:50:29.195 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46242 10 6452 1 2025-08-24 21:50:38.683 00:00:10.371 TCP 23.104.0.1:51202 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:46:17.069 00:06:00.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:51:29.406 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-08-24 21:51:39.103 00:00:10.362 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:47:17.071 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-24 21:52:29.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6452 1 2025-08-24 21:52:39.505 00:00:10.365 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:52:58.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:52:58.827 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:53:29.799 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48320 10 6452 1 2025-08-24 21:53:39.918 00:00:10.374 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:54:30.008 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54806 10 6452 1 2025-08-24 21:54:40.325 00:00:10.370 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:55:30.227 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-08-24 21:55:40.730 00:00:10.371 TCP 23.104.0.1:56584 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:56:30.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-08-24 21:56:41.136 00:00:10.362 TCP 23.104.0.1:43204 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:57:30.652 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59698 10 6452 1 2025-08-24 21:57:41.537 00:00:10.362 TCP 23.104.0.1:44856 -> 1.101.0.1:3000 11 1507 1 2025-08-24 21:57:58.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-24 21:57:58.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-24 21:53:17.077 00:06:00.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-24 21:58:30.861 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6452 1 Summary: total flows: 160, total bytes: 505259, total packets: 1569, avg bps: 1104, avg pps: 0, avg bpp: 322 Time window: 2025-08-24 20:58:16 - 2025-08-24 21:59:17 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0020s User: 0.0029s Wall: 0.0028s flows/second: 56915.3 Runtime: 0.0028s