Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-29 16:58:59.000 00:00:10.363 TCP 23.104.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-08-29 16:54:20.577 00:06:00.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 16:59:34.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-08-29 16:59:59.404 00:00:10.366 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:00:17.734 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:00:17.736 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:00:34.520 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42024 10 6452 1 2025-08-29 17:00:59.806 00:00:10.329 TCP 23.104.0.1:44386 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:01:34.730 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41176 10 6452 1 2025-08-29 17:02:00.172 00:00:10.363 TCP 23.104.0.1:54802 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:02:34.936 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 10 6452 1 2025-08-29 17:03:00.573 00:00:10.363 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:03:35.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-08-29 17:04:00.974 00:00:10.325 TCP 23.104.0.1:38158 -> 1.101.0.1:3000 11 1507 1 2025-08-29 16:59:20.580 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:04:35.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42020 10 6452 1 2025-08-29 17:05:01.345 00:00:10.363 TCP 23.104.0.1:57324 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:05:17.575 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:05:17.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:05:35.600 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 2025-08-29 17:06:01.755 00:00:10.374 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:01:20.578 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:06:35.816 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35986 11 6504 1 2025-08-29 17:07:02.166 00:00:10.327 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:07:36.077 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37500 10 6452 1 2025-08-29 17:08:02.535 00:00:10.361 TCP 23.104.0.1:50396 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:08:36.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-08-29 17:09:02.942 00:00:10.370 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:09:36.501 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 6452 1 2025-08-29 17:10:03.353 00:00:10.359 TCP 23.104.0.1:35034 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:10:17.854 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:10:17.856 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:10:36.720 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-29 17:11:03.752 00:00:10.337 TCP 23.104.0.1:36418 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:06:20.582 00:06:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:11:36.943 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-08-29 17:12:04.118 00:00:10.363 TCP 23.104.0.1:37906 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:12:37.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-08-29 17:13:04.520 00:00:10.424 TCP 23.104.0.1:51422 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:08:20.581 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:13:37.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 10 6452 1 2025-08-29 17:14:04.983 00:00:10.327 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:14:37.611 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-08-29 17:15:05.340 00:00:10.364 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:15:17.880 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:15:17.898 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:15:37.822 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50394 10 6452 1 2025-08-29 17:16:05.739 00:00:10.327 TCP 23.104.0.1:38338 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:16:38.034 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-08-29 17:17:06.104 00:00:12.335 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:17:38.201 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6452 1 2025-08-29 17:13:20.582 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:18:08.501 00:00:10.362 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:18:38.414 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-08-29 17:19:08.897 00:00:10.375 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:19:38.583 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-08-29 17:20:18.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:20:09.307 00:00:10.371 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:20:18.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:15:20.580 00:06:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:20:38.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-08-29 17:21:09.712 00:00:10.364 TCP 23.104.0.1:46700 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:21:39.016 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53454 10 6452 1 2025-08-29 17:22:10.112 00:00:10.370 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:22:39.192 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45986 10 6452 1 2025-08-29 17:23:10.518 00:00:10.363 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:23:39.410 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-08-29 17:24:10.921 00:00:10.387 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:24:39.588 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-08-29 17:25:18.093 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:25:18.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:25:11.352 00:00:10.363 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:20:20.586 00:06:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:25:39.828 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-08-29 17:26:11.758 00:00:10.329 TCP 23.104.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:26:40.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-08-29 17:22:20.582 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:27:12.126 00:00:10.825 TCP 23.104.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:27:40.285 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-08-29 17:28:12.991 00:00:10.361 TCP 23.104.0.1:39298 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:28:40.502 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58824 10 6452 1 2025-08-29 17:29:13.394 00:00:10.362 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:29:40.707 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-08-29 17:30:18.113 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:30:18.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:30:13.795 00:00:10.367 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:30:40.924 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44304 10 6452 1 2025-08-29 17:31:14.199 00:00:10.368 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:31:41.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-08-29 17:27:20.586 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:32:14.601 00:00:10.420 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:32:41.337 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6452 1 2025-08-29 17:33:15.089 00:00:10.364 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:33:41.544 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-08-29 17:29:20.583 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:34:15.490 00:00:10.362 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:34:41.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-08-29 17:35:18.511 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:35:18.397 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:35:15.888 00:00:10.364 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:35:41.986 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42662 10 6452 1 2025-08-29 17:36:16.290 00:00:10.368 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:36:42.219 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-08-29 17:37:16.697 00:00:10.369 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:37:42.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-08-29 17:38:17.105 00:00:10.362 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:38:42.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-08-29 17:34:20.597 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:39:17.504 00:00:10.372 TCP 23.104.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:39:42.862 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-08-29 17:40:18.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:40:18.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:40:17.913 00:00:10.365 TCP 23.104.0.1:52518 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:40:43.113 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-08-29 17:36:20.594 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:41:18.316 00:00:10.366 TCP 23.104.0.1:54540 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:41:43.338 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-08-29 17:42:18.727 00:00:10.332 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:42:43.508 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-08-29 17:43:19.112 00:00:10.323 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:43:43.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-08-29 17:44:19.473 00:00:10.365 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:44:43.936 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-08-29 17:45:18.585 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:45:19.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:45:19.880 00:00:10.392 TCP 23.104.0.1:59402 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:45:44.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-08-29 17:41:20.603 00:06:00.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:46:20.316 00:00:10.326 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:46:44.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-08-29 17:47:20.688 00:00:10.372 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:47:44.597 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-08-29 17:43:20.599 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:48:21.119 00:00:10.364 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:48:44.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-08-29 17:49:21.534 00:00:10.514 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:49:44.983 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-08-29 17:50:18.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:50:18.643 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:50:22.100 00:00:10.363 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:50:45.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6452 1 2025-08-29 17:51:22.495 00:00:10.368 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:51:45.433 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6452 1 2025-08-29 17:52:22.896 00:00:10.526 TCP 23.104.0.1:56430 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:52:45.597 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6452 1 2025-08-29 17:48:20.603 00:06:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-29 17:53:23.460 00:00:10.328 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:53:45.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-08-29 17:54:23.821 00:00:10.369 TCP 23.104.0.1:49714 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:54:45.978 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-08-29 17:55:18.712 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-29 17:50:20.600 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-29 17:55:18.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-29 17:55:24.225 00:00:10.322 TCP 23.104.0.1:37216 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:55:46.164 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-08-29 17:56:24.583 00:00:10.325 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:56:46.380 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-08-29 17:57:24.945 00:00:10.381 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-08-29 17:57:46.598 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45848 10 6452 1 2025-08-29 17:58:25.355 00:00:10.363 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 491825, total packets: 1561, avg bps: 1020, avg pps: 0, avg bpp: 315 Time window: 2025-08-29 16:54:20 - 2025-08-29 17:58:35 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0011s User: 0.0033s Wall: 0.0024s flows/second: 65677.1 Runtime: 0.0024s