Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 04:58:51.183 00:00:10.365 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-08-29 04:59:37.360 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-08-29 04:59:51.585 00:00:10.364 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:00:03.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:00:03.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:00:37.571 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43004 10 6452 1 2025-08-29 05:00:51.988 00:00:10.365 TCP 23.104.0.1:45524 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:01:37.750 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-08-29 05:01:52.391 00:00:10.325 TCP 23.104.0.1:37990 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:02:37.922 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-08-29 05:02:52.751 00:00:10.380 TCP 23.104.0.1:58020 -> 1.101.0.1:3000 11 1507 1 2025-08-29 04:58:20.196 00:06:00.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:03:38.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-08-29 05:03:53.170 00:00:10.370 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:04:38.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6452 1 2025-08-29 05:05:03.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:04:53.577 00:00:10.330 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:05:03.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:00:20.193 00:06:00.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:05:38.572 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36074 10 6452 1 2025-08-29 05:05:53.940 00:00:10.371 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:06:38.736 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-08-29 05:06:54.347 00:00:10.363 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:07:38.946 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 11 6504 1 2025-08-29 05:07:54.743 00:00:10.505 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:08:39.225 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-08-29 05:08:55.286 00:00:10.363 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:09:39.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-08-29 05:10:03.697 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:10:03.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:09:55.689 00:00:10.362 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:05:20.197 00:06:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:10:39.603 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:51810 11 6504 1 2025-08-29 05:10:56.109 00:00:10.365 TCP 23.104.0.1:46826 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:11:39.894 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-08-29 05:11:56.510 00:00:10.370 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:07:20.201 00:06:00.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:12:40.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 10 6452 1 2025-08-29 05:12:56.919 00:00:10.382 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:13:40.325 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-08-29 05:13:57.344 00:00:10.367 TCP 23.104.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:14:40.497 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60142 10 6452 1 2025-08-29 05:15:03.640 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:15:03.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:14:57.750 00:00:10.400 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:15:40.708 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56506 10 6452 1 2025-08-29 05:15:58.177 00:00:10.364 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:16:40.928 00:00:11.029 TCP 1.101.0.1:3000 -> 22.102.0.1:55068 10 6452 1 2025-08-29 05:16:58.577 00:00:10.366 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:12:20.205 00:06:00.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:17:41.993 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-08-29 05:17:58.981 00:00:10.504 TCP 23.104.0.1:46530 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:18:42.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-08-29 05:18:59.528 00:00:10.324 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:14:20.204 00:06:00.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:19:42.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45846 10 6452 1 2025-08-29 05:20:03.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:20:03.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:19:59.893 00:00:10.373 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:20:42.642 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-08-29 05:21:00.303 00:00:10.372 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:21:42.855 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 10 6452 1 2025-08-29 05:22:00.712 00:00:10.333 TCP 23.104.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:22:43.064 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-08-29 05:23:01.102 00:00:10.359 TCP 23.104.0.1:59240 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:23:43.278 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-08-29 05:24:01.500 00:00:10.368 TCP 23.104.0.1:55442 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:19:20.206 00:06:00.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:24:43.461 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:40930 10 6452 1 2025-08-29 05:25:03.804 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:25:03.561 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:25:01.905 00:00:10.369 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:25:43.936 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-08-29 05:26:02.313 00:00:10.370 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:21:20.204 00:06:00.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:26:44.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-08-29 05:27:02.716 00:00:10.330 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:27:44.908 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-08-29 05:28:03.114 00:00:10.363 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:28:45.133 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-08-29 05:29:03.510 00:00:10.371 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:29:45.356 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-08-29 05:30:03.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:30:03.660 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:30:03.916 00:00:10.970 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:30:45.575 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-29 05:31:04.926 00:00:10.399 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:26:20.207 00:06:00.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:31:45.806 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-08-29 05:32:05.357 00:00:10.369 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:32:46.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-08-29 05:33:05.760 00:00:10.386 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:28:20.207 00:06:00.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:33:46.226 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45186 10 6452 1 2025-08-29 05:34:06.182 00:00:10.363 TCP 23.104.0.1:52728 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:34:46.443 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-08-29 05:35:04.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:35:03.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:35:06.581 00:00:10.379 TCP 23.104.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:35:46.612 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-08-29 05:36:07.003 00:00:10.364 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:36:46.781 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-08-29 05:37:07.405 00:00:10.320 TCP 23.104.0.1:38424 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:37:46.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59656 10 6452 1 2025-08-29 05:33:20.209 00:06:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:38:07.766 00:00:10.375 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:38:47.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-08-29 05:39:08.189 00:00:10.362 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:39:47.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34648 10 6452 1 2025-08-29 05:40:04.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:40:04.057 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:35:20.207 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:40:08.588 00:00:10.366 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:40:47.655 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49332 10 6452 1 2025-08-29 05:41:08.996 00:00:10.361 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:41:47.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-08-29 05:42:09.399 00:00:10.365 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:42:48.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53398 10 6452 1 2025-08-29 05:43:09.801 00:00:10.367 TCP 23.104.0.1:47266 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:43:48.305 00:00:10.337 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-08-29 05:44:10.202 00:00:10.359 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:44:48.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-08-29 05:45:04.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:45:04.187 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:45:10.599 00:00:10.361 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:40:20.210 00:06:00.083 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:45:48.893 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54398 10 6452 1 2025-08-29 05:46:11.002 00:00:10.362 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:46:49.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-08-29 05:42:20.207 00:06:00.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:47:11.402 00:00:10.416 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:47:49.321 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6452 1 2025-08-29 05:48:11.857 00:00:10.370 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:48:49.531 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-08-29 05:49:12.266 00:00:10.362 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:49:49.706 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-08-29 05:50:04.459 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:50:04.353 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:50:12.670 00:00:10.387 TCP 23.104.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:50:49.878 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33810 10 6452 1 2025-08-29 05:51:13.115 00:00:10.343 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:51:50.113 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-08-29 05:47:20.214 00:06:00.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 05:52:13.496 00:00:10.325 TCP 23.104.0.1:50206 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:52:50.327 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-08-29 05:53:13.866 00:00:10.374 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:53:50.542 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-08-29 05:49:20.212 00:06:00.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 05:54:14.274 00:00:10.367 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:54:50.717 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 10 6452 1 2025-08-29 05:55:04.529 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 05:55:04.486 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 05:55:14.677 00:00:10.370 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:55:50.930 00:00:12.975 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-08-29 05:56:15.100 00:00:10.364 TCP 23.104.0.1:43822 -> 1.101.0.1:3000 11 1507 1 2025-08-29 05:56:53.954 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 12 10367 1 2025-08-29 05:57:15.497 00:00:10.444 TCP 23.104.0.1:55352 -> 1.101.0.1:3000 15 1926 1 2025-08-29 05:57:54.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-08-29 05:58:15.977 00:00:10.368 TCP 23.104.0.1:39170 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 495350, total packets: 1554, avg bps: 1098, avg pps: 0, avg bpp: 318 Time window: 2025-08-29 04:58:20 - 2025-08-29 05:58:26 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0033s User: 0.0022s Wall: 0.0021s flows/second: 75534.5 Runtime: 0.0021s