Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 02:58:43.333 00:00:10.363 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:59:09.625 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57296 10 6452 1 2025-08-13 02:59:43.742 00:00:10.371 TCP 23.104.0.1:59948 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:56:10.475 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:00:09.855 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-08-13 03:00:44.162 00:00:10.360 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-08-13 02:57:10.477 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:01:10.089 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-08-13 03:01:44.560 00:00:10.362 TCP 23.104.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:02:18.590 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:02:18.776 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:02:10.313 00:00:11.153 TCP 1.101.0.1:3000 -> 22.102.0.1:57202 10 6452 1 2025-08-13 03:02:44.964 00:00:10.375 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:03:11.509 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-08-13 03:03:45.379 00:00:10.363 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:04:11.688 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6452 1 2025-08-13 03:04:45.783 00:00:10.330 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:05:11.908 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38386 10 6452 1 2025-08-13 03:05:46.162 00:00:10.365 TCP 23.104.0.1:57508 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:02:10.476 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:06:12.120 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-08-13 03:06:46.572 00:00:10.362 TCP 23.104.0.1:54814 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:03:10.479 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:07:18.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:07:18.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:07:12.290 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-08-13 03:07:46.973 00:00:10.372 TCP 23.104.0.1:54394 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:08:12.464 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-08-13 03:08:47.377 00:00:10.363 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:09:12.675 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-08-13 03:09:47.778 00:00:10.367 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:10:12.850 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-08-13 03:10:48.184 00:00:10.365 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:11:13.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-08-13 03:11:48.588 00:00:10.323 TCP 23.104.0.1:58810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:08:10.477 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:12:18.552 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:12:18.636 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:12:13.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-08-13 03:12:48.959 00:00:10.338 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:09:10.479 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:13:13.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-08-13 03:13:49.339 00:00:10.363 TCP 23.104.0.1:38338 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:14:13.721 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-08-13 03:14:49.742 00:00:10.365 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:15:13.928 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50742 10 6452 1 2025-08-13 03:15:50.149 00:00:10.362 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:16:14.145 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39838 10 6452 1 2025-08-13 03:16:50.545 00:00:10.365 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:17:18.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:17:18.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:17:14.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43394 10 6452 1 2025-08-13 03:17:50.952 00:00:10.365 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:14:10.478 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:18:14.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-08-13 03:18:51.355 00:00:10.359 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:15:10.482 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:19:14.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 10 6452 1 2025-08-13 03:19:51.755 00:00:10.387 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:20:14.964 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-08-13 03:20:52.184 00:00:10.367 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:21:15.144 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-08-13 03:21:52.594 00:00:10.359 TCP 23.104.0.1:34450 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:22:18.978 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:22:19.039 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:22:15.359 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34852 10 6452 1 2025-08-13 03:22:52.991 00:00:10.369 TCP 23.104.0.1:58940 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:23:15.577 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43114 10 6452 1 2025-08-13 03:23:53.400 00:00:10.327 TCP 23.104.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:20:10.481 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:24:15.746 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38788 10 6452 1 2025-08-13 03:24:53.762 00:00:10.330 TCP 23.104.0.1:40428 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:21:10.483 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:25:15.920 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-08-13 03:25:54.130 00:00:10.326 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:26:16.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-13 03:26:54.495 00:00:10.363 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:27:18.749 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:27:18.825 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:27:16.356 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-08-13 03:27:54.897 00:00:10.329 TCP 23.104.0.1:58170 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:28:16.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-08-13 03:28:55.265 00:00:10.369 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:29:16.791 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-08-13 03:29:55.674 00:00:10.370 TCP 23.104.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:26:10.483 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:30:16.965 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-08-13 03:30:56.106 00:00:10.366 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:27:10.484 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:31:17.146 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48148 10 6452 1 2025-08-13 03:31:56.511 00:00:10.330 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:32:19.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:32:19.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:32:17.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41890 10 6452 1 2025-08-13 03:32:56.875 00:00:10.331 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:33:17.571 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-08-13 03:33:57.239 00:00:10.378 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:34:17.781 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-08-13 03:34:57.657 00:00:10.419 TCP 23.104.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:35:17.954 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-08-13 03:35:58.130 00:00:10.335 TCP 23.104.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:32:10.483 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:36:18.190 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42372 10 6452 1 2025-08-13 03:33:10.486 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:36:58.519 00:00:10.321 TCP 23.104.0.1:37058 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:37:19.212 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:37:19.018 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:37:18.402 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42554 10 6452 1 2025-08-13 03:37:58.875 00:00:10.367 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:38:18.620 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58132 10 6452 1 2025-08-13 03:38:59.285 00:00:10.322 TCP 23.104.0.1:48586 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:39:18.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51244 10 6452 1 2025-08-13 03:39:59.647 00:00:10.366 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:40:19.073 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-08-13 03:41:00.056 00:00:10.365 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:41:19.246 00:00:16.552 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-08-13 03:42:00.461 00:00:10.324 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:38:10.487 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:42:19.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:42:19.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:42:25.847 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55634 10 6452 1 2025-08-13 03:39:10.490 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:43:00.821 00:00:10.365 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:43:26.079 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-08-13 03:44:01.223 00:00:10.366 TCP 23.104.0.1:52780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:44:26.306 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-08-13 03:45:01.626 00:00:10.368 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:45:26.481 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-08-13 03:46:02.033 00:00:10.365 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:46:27.009 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35102 10 6452 1 2025-08-13 03:47:02.436 00:00:10.365 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:47:19.331 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:47:19.213 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:47:27.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-08-13 03:44:10.489 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:48:02.841 00:00:10.389 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:48:27.400 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-08-13 03:45:10.492 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:49:03.270 00:00:10.368 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:49:27.587 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2025-08-13 03:50:03.680 00:00:10.376 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:50:27.769 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:40482 10 6452 1 2025-08-13 03:51:04.104 00:00:10.369 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:51:28.074 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-08-13 03:52:04.510 00:00:10.367 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:52:19.680 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:52:19.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:52:28.251 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44730 10 6452 1 2025-08-13 03:53:04.911 00:00:10.363 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:53:28.468 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-08-13 03:54:05.316 00:00:10.362 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:50:10.506 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 03:54:28.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34056 10 6452 1 2025-08-13 03:51:10.510 00:05:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 03:55:05.718 00:00:10.383 TCP 23.104.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:55:28.864 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59864 10 6452 1 2025-08-13 03:56:06.137 00:00:10.328 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:56:29.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58084 10 6452 1 2025-08-13 03:57:06.504 00:00:10.331 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:57:19.689 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 03:57:19.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 03:57:29.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-08-13 03:58:06.871 00:00:10.365 TCP 23.104.0.1:58028 -> 1.101.0.1:3000 11 1507 1 2025-08-13 03:58:29.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47674 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1063, avg pps: 0, avg bpp: 317 Time window: 2025-08-13 02:56:10 - 2025-08-13 03:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0015s Wall: 0.0028s flows/second: 58013.5 Runtime: 0.0028s