Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 16:59:04.189 00:00:10.364 TCP 23.104.0.1:53756 -> 1.101.0.1:3000 11 1507 1 2025-08-13 16:59:03.200 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36716 10 6452 1 2025-08-13 17:00:04.591 00:00:10.324 TCP 23.104.0.1:44680 -> 1.101.0.1:3000 11 1507 1 2025-08-13 16:56:10.775 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:00:03.408 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-08-13 16:57:10.777 00:05:00.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:01:04.955 00:00:10.363 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:01:03.619 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-08-13 17:02:03.831 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46940 10 6452 1 2025-08-13 17:02:05.356 00:00:10.357 TCP 23.104.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:02:35.102 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:02:35.359 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:03:04.065 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-08-13 17:03:05.755 00:00:10.336 TCP 23.104.0.1:58566 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:04:06.130 00:00:10.363 TCP 23.104.0.1:41810 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:04:04.285 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-08-13 17:05:04.503 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 12 10367 1 2025-08-13 17:05:06.529 00:00:10.402 TCP 23.104.0.1:55104 -> 1.101.0.1:3000 15 1926 1 2025-08-13 17:02:10.778 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:06:04.742 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6452 1 2025-08-13 17:06:06.974 00:00:10.368 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:03:10.781 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:07:07.378 00:00:11.532 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:07:04.961 00:00:13.825 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-08-13 17:07:35.430 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:07:35.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:08:08.949 00:00:10.327 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:08:08.828 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 10 6452 1 2025-08-13 17:09:09.003 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-08-13 17:09:09.318 00:00:10.364 TCP 23.104.0.1:35594 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:10:09.727 00:00:10.412 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 15 1926 1 2025-08-13 17:10:09.222 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47566 12 10365 1 2025-08-13 17:11:10.182 00:00:10.363 TCP 23.104.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:11:09.467 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 10 6452 1 2025-08-13 17:08:10.779 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:12:09.682 00:00:21.728 TCP 1.101.0.1:3000 -> 22.102.0.1:59162 10 6452 1 2025-08-13 17:12:10.592 00:00:20.912 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:12:35.511 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:12:35.394 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:09:10.781 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:13:21.451 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-08-13 17:13:21.548 00:00:10.321 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:14:21.682 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39638 10 6452 1 2025-08-13 17:14:21.907 00:00:10.331 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:15:21.862 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48592 10 6452 1 2025-08-13 17:15:22.270 00:00:10.598 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:16:22.910 00:00:10.365 TCP 23.104.0.1:48206 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:16:22.087 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51976 10 6452 1 2025-08-13 17:17:36.045 00:00:00.054 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:17:22.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6452 1 2025-08-13 17:17:36.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:17:23.315 00:00:10.331 TCP 23.104.0.1:46540 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:14:10.780 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:18:23.687 00:00:10.322 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:18:22.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-08-13 17:15:10.782 00:05:00.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:19:22.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50324 10 6452 1 2025-08-13 17:19:24.053 00:00:10.416 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:20:22.936 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44448 10 6452 1 2025-08-13 17:20:24.513 00:00:10.364 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:21:24.913 00:00:10.375 TCP 23.104.0.1:33248 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:21:23.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53522 10 6452 1 2025-08-13 17:22:23.385 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39286 10 6452 1 2025-08-13 17:22:35.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:22:35.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:22:25.317 00:00:10.369 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:23:25.725 00:00:10.326 TCP 23.104.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:23:23.606 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-08-13 17:20:10.781 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:24:26.104 00:00:10.365 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:24:23.787 00:00:10.392 TCP 1.101.0.1:3000 -> 22.102.0.1:42206 10 6452 1 2025-08-13 17:21:10.784 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:25:26.507 00:00:10.364 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:25:24.214 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-08-13 17:26:24.420 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-08-13 17:26:26.913 00:00:10.369 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:27:24.594 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48232 10 6452 1 2025-08-13 17:27:35.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:27:35.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:27:27.319 00:00:10.361 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:28:24.759 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-08-13 17:28:27.718 00:00:10.378 TCP 23.104.0.1:60262 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:29:24.972 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-08-13 17:29:28.127 00:00:10.369 TCP 23.104.0.1:40862 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:26:10.782 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:30:25.203 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-08-13 17:30:28.537 00:00:10.364 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:27:10.784 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:31:25.433 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50232 10 6452 1 2025-08-13 17:31:28.941 00:00:10.369 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:32:35.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:32:25.641 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-08-13 17:32:35.826 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:32:29.348 00:00:10.326 TCP 23.104.0.1:58680 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:33:25.822 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-13 17:33:29.711 00:00:10.324 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:34:26.077 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-08-13 17:34:30.094 00:00:10.370 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:35:26.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34214 10 6452 1 2025-08-13 17:35:30.509 00:00:10.367 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:32:10.784 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:36:26.525 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-08-13 17:36:30.914 00:00:10.366 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:33:10.786 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:37:35.911 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:37:36.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:37:26.696 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-08-13 17:37:31.319 00:00:10.328 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:38:26.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-08-13 17:38:31.686 00:00:10.366 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:39:27.135 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55918 10 6452 1 2025-08-13 17:39:32.111 00:00:10.325 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:40:27.357 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34240 10 6452 1 2025-08-13 17:40:32.480 00:00:10.332 TCP 23.104.0.1:47560 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:41:27.571 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41084 11 6492 1 2025-08-13 17:41:32.853 00:00:10.379 TCP 23.104.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:38:10.785 00:05:00.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:42:36.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:42:36.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:42:27.798 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45710 10 6452 1 2025-08-13 17:42:33.270 00:00:10.322 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:39:10.787 00:05:00.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:43:28.024 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48614 10 6452 1 2025-08-13 17:43:33.631 00:00:10.319 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:44:28.197 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-08-13 17:44:34.004 00:00:10.363 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:45:28.373 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32968 10 6452 1 2025-08-13 17:45:34.408 00:00:10.368 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:46:28.584 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-08-13 17:46:34.822 00:00:10.369 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:47:35.887 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:47:36.211 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:47:28.792 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-08-13 17:47:35.226 00:00:10.364 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:44:10.786 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:48:28.967 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-08-13 17:48:35.628 00:00:10.417 TCP 23.104.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:45:10.789 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:49:29.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-08-13 17:49:36.105 00:00:10.362 TCP 23.104.0.1:33070 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:50:29.414 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-08-13 17:50:36.506 00:00:10.369 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:51:29.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-08-13 17:51:36.914 00:00:10.367 TCP 23.104.0.1:59834 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:52:36.040 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:52:36.056 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:52:29.839 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-08-13 17:52:37.316 00:00:10.366 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:53:30.077 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48002 10 6452 1 2025-08-13 17:53:37.725 00:00:10.373 TCP 23.104.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:50:10.790 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 17:54:30.300 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-08-13 17:54:38.138 00:00:10.367 TCP 23.104.0.1:46208 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:51:10.792 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 17:55:30.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-08-13 17:55:38.547 00:00:10.361 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:56:30.738 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52548 10 6452 1 2025-08-13 17:56:38.950 00:00:10.368 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:57:36.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 17:57:36.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 17:57:30.959 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-08-13 17:57:39.353 00:00:10.325 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-08-13 17:58:31.202 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-08-13 17:58:39.717 00:00:10.374 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507054, total packets: 1585, avg bps: 1079, avg pps: 0, avg bpp: 319 Time window: 2025-08-13 16:56:10 - 2025-08-13 17:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 78694.2 Runtime: 0.0021s