Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 14:59:06.359 00:00:10.361 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-08-28 14:54:19.704 00:06:00.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 14:59:10.836 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53472 10 6452 1 2025-08-28 14:59:46.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 14:59:46.382 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:00:06.759 00:00:10.734 TCP 23.104.0.1:58958 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:00:11.010 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-08-28 15:01:11.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-08-28 15:01:07.532 00:00:10.365 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:02:11.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-08-28 15:02:07.933 00:00:10.374 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:03:08.342 00:00:10.371 TCP 23.104.0.1:58582 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:03:11.652 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40762 10 6452 1 2025-08-28 15:04:08.753 00:00:10.374 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:04:11.867 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2025-08-28 15:04:46.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:04:46.527 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:00:19.703 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:05:09.166 00:00:10.364 TCP 23.104.0.1:60294 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:05:12.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-08-28 15:01:19.704 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:06:09.570 00:00:10.364 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:06:12.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-08-28 15:07:09.972 00:00:10.375 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:07:12.531 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59228 10 6452 1 2025-08-28 15:08:10.389 00:00:10.363 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:08:12.760 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-08-28 15:09:10.789 00:00:10.372 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:09:12.932 00:00:10.583 TCP 1.101.0.1:3000 -> 22.102.0.1:50544 10 6452 1 2025-08-28 15:09:46.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:09:46.830 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:10:11.198 00:00:10.364 TCP 23.104.0.1:60264 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:10:13.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-08-28 15:11:11.599 00:00:10.366 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:11:13.774 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-08-28 15:07:19.708 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:12:13.946 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-08-28 15:12:12.011 00:00:10.366 TCP 23.104.0.1:33420 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:13:14.129 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-08-28 15:08:19.711 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:13:12.418 00:00:10.370 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:14:14.313 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-08-28 15:14:12.828 00:00:10.389 TCP 23.104.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:14:46.855 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:14:46.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:15:14.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-08-28 15:15:13.253 00:00:10.363 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:16:14.746 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48614 10 6452 1 2025-08-28 15:16:13.663 00:00:10.366 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:17:14.094 00:00:10.364 TCP 23.104.0.1:48470 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:17:14.919 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6452 1 2025-08-28 15:18:14.495 00:00:10.364 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:18:15.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-08-28 15:14:19.709 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:19:15.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-08-28 15:19:14.896 00:00:10.372 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:19:46.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:19:46.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:15:19.712 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:20:15.307 00:00:10.366 TCP 23.104.0.1:43080 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:20:15.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-08-28 15:21:15.706 00:00:10.373 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:21:15.772 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-08-28 15:22:16.131 00:00:10.363 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:22:15.954 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 12 6556 1 2025-08-28 15:23:16.187 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39634 10 6452 1 2025-08-28 15:23:16.531 00:00:10.326 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:24:16.400 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-08-28 15:24:16.895 00:00:10.392 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:24:47.065 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:24:47.099 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:25:16.615 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39586 10 6452 1 2025-08-28 15:25:17.328 00:00:10.326 TCP 23.104.0.1:47726 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:21:19.710 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:26:16.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-08-28 15:26:17.694 00:00:10.363 TCP 23.104.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:22:19.713 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:27:16.993 00:00:10.686 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-08-28 15:27:18.102 00:00:10.359 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:28:18.501 00:00:10.367 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:28:17.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37260 10 6452 1 2025-08-28 15:29:18.903 00:00:10.371 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:29:17.933 00:00:10.500 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-08-28 15:29:46.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:29:47.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:30:19.319 00:00:10.362 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:30:18.470 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-08-28 15:31:19.720 00:00:10.367 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:31:18.691 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-08-28 15:32:18.918 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 12 10367 1 2025-08-28 15:32:20.122 00:00:10.440 TCP 23.104.0.1:40780 -> 1.101.0.1:3000 15 1926 1 2025-08-28 15:28:19.710 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:33:19.180 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47696 10 6452 1 2025-08-28 15:33:20.603 00:00:10.395 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:29:19.713 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:34:19.416 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-08-28 15:34:21.035 00:00:10.365 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:34:47.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:34:47.111 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:35:19.644 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-08-28 15:35:21.443 00:00:10.367 TCP 23.104.0.1:42300 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:36:19.864 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-08-28 15:36:21.845 00:00:10.389 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:37:20.086 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-08-28 15:37:22.271 00:00:10.322 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:38:20.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-08-28 15:38:22.630 00:00:10.366 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:39:20.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6452 1 2025-08-28 15:39:23.033 00:00:10.369 TCP 23.104.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:39:47.021 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:39:47.437 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:35:19.713 00:06:00.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:40:20.729 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-08-28 15:40:23.435 00:00:10.326 TCP 23.104.0.1:48544 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:36:19.716 00:06:00.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:41:20.948 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-08-28 15:41:23.796 00:00:10.360 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:42:21.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-08-28 15:42:24.201 00:00:10.327 TCP 23.104.0.1:47912 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:43:21.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-08-28 15:43:24.563 00:00:10.368 TCP 23.104.0.1:40680 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:44:21.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47052 10 6452 1 2025-08-28 15:44:24.971 00:00:10.367 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:44:47.267 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:44:47.415 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:45:25.371 00:00:10.339 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:45:21.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 10 6452 1 2025-08-28 15:46:25.757 00:00:10.338 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:46:22.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-08-28 15:42:19.717 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:47:22.281 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36104 10 6452 1 2025-08-28 15:47:26.132 00:00:10.326 TCP 23.104.0.1:43824 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:43:19.720 00:06:00.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:48:26.502 00:00:10.369 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:48:22.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56098 10 6452 1 2025-08-28 15:49:22.700 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 10 6452 1 2025-08-28 15:49:26.909 00:00:10.324 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:49:47.326 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:49:47.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:50:22.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-08-28 15:50:27.277 00:00:10.364 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:51:23.129 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40496 10 6452 1 2025-08-28 15:51:27.681 00:00:10.365 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:52:23.347 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 12 10365 1 2025-08-28 15:52:28.101 00:00:10.446 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 15 1926 1 2025-08-28 15:53:23.588 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-08-28 15:53:28.586 00:00:10.325 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:49:19.719 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 15:54:23.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-08-28 15:54:28.948 00:00:10.370 TCP 23.104.0.1:54738 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:54:47.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 15:54:47.460 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 15:50:19.723 00:06:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 15:55:23.969 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34270 10 6452 1 2025-08-28 15:55:29.358 00:00:10.367 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:56:24.195 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-08-28 15:56:29.769 00:00:10.329 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:57:24.367 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-08-28 15:57:30.135 00:00:10.327 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-08-28 15:58:24.542 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33334 10 6452 1 2025-08-28 15:58:30.506 00:00:10.329 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 506995, total packets: 1584, avg bps: 1050, avg pps: 0, avg bpp: 320 Time window: 2025-08-28 14:54:19 - 2025-08-28 15:58:40 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0047s User: 0.0000s Wall: 0.0022s flows/second: 74534.5 Runtime: 0.0022s