Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-30 03:58:44.560 00:00:10.369 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-08-30 03:55:20.875 00:05:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 03:59:13.987 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46772 10 6452 1 2025-08-30 03:59:44.963 00:00:10.368 TCP 23.104.0.1:50560 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:00:14.228 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-08-30 04:00:31.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:00:30.955 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:00:45.365 00:00:10.322 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:01:14.443 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-08-30 03:57:20.874 00:05:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:01:45.727 00:00:10.366 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:02:14.662 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2025-08-30 04:02:46.130 00:00:10.883 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:03:14.834 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-08-30 04:03:47.064 00:00:10.365 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:04:15.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6452 1 2025-08-30 04:04:47.463 00:00:10.362 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:01:20.874 00:05:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:05:15.290 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34496 10 6452 1 2025-08-30 04:05:31.114 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:05:31.281 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:05:47.866 00:00:10.369 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:06:15.520 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-08-30 04:06:48.276 00:00:10.381 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:03:20.873 00:05:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:07:15.745 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-08-30 04:07:48.700 00:00:10.359 TCP 23.104.0.1:41148 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:08:15.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-08-30 04:08:49.107 00:00:10.366 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:09:16.138 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-08-30 04:09:49.508 00:00:10.323 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:10:16.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60516 10 6452 1 2025-08-30 04:10:31.018 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:10:31.198 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:10:49.869 00:00:10.330 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:07:20.877 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:11:16.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47432 10 6452 1 2025-08-30 04:11:50.237 00:00:10.440 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 15 1926 1 2025-08-30 04:12:16.784 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 12 10367 1 2025-08-30 04:12:50.715 00:00:10.383 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:09:20.875 00:05:00.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:13:17.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49968 10 6452 1 2025-08-30 04:13:51.139 00:00:10.365 TCP 23.104.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:14:17.256 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-08-30 04:14:51.541 00:00:10.364 TCP 23.104.0.1:57688 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:15:31.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:15:17.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36024 10 6452 1 2025-08-30 04:15:31.216 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:15:51.941 00:00:10.377 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:16:17.646 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42294 10 6452 1 2025-08-30 04:16:52.346 00:00:10.369 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:13:20.878 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:17:17.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46760 10 6452 1 2025-08-30 04:17:52.752 00:00:10.385 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:18:18.085 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-08-30 04:18:53.186 00:00:10.365 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:15:20.876 00:05:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:19:18.252 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-08-30 04:19:53.588 00:00:10.369 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:20:18.475 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6452 1 2025-08-30 04:20:31.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:20:31.490 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:20:53.994 00:00:10.364 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:21:18.672 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-08-30 04:21:54.398 00:00:10.368 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:22:18.895 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-30 04:22:54.799 00:00:10.363 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:19:20.882 00:05:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:23:19.107 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33690 10 6452 1 2025-08-30 04:23:55.205 00:00:10.321 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:24:19.325 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-08-30 04:24:55.568 00:00:10.364 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:21:20.880 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:25:31.330 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:25:19.548 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-08-30 04:25:31.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:25:55.971 00:00:10.324 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:26:19.762 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-08-30 04:26:56.335 00:00:10.370 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:27:19.976 00:00:10.920 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-08-30 04:27:56.754 00:00:10.384 TCP 23.104.0.1:56006 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:28:20.930 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-08-30 04:28:57.174 00:00:10.363 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:25:20.883 00:05:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:29:21.173 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-08-30 04:29:57.579 00:00:10.362 TCP 23.104.0.1:34846 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:30:21.402 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-08-30 04:30:31.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:30:31.386 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:30:57.978 00:00:10.366 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:27:20.881 00:05:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:31:21.611 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-08-30 04:31:58.411 00:00:10.367 TCP 23.104.0.1:47784 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:32:21.834 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-08-30 04:32:58.814 00:00:10.379 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:33:22.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-08-30 04:33:59.224 00:00:10.371 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:34:22.293 00:00:27.433 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-08-30 04:34:59.638 00:00:10.328 TCP 23.104.0.1:36358 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:31:20.884 00:05:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:35:31.639 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:35:31.514 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:35:39.783 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38496 10 6452 1 2025-08-30 04:36:00.002 00:00:10.321 TCP 23.104.0.1:41816 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:36:39.991 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 12 10367 1 2025-08-30 04:37:00.362 00:00:10.439 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 15 1926 1 2025-08-30 04:33:20.883 00:05:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:37:40.257 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-08-30 04:38:00.839 00:00:10.350 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:38:40.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-08-30 04:39:01.225 00:00:10.413 TCP 23.104.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:39:40.684 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-08-30 04:40:01.679 00:00:10.802 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:40:31.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:40:31.591 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:40:40.906 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42340 10 6452 1 2025-08-30 04:41:02.520 00:00:10.361 TCP 23.104.0.1:60582 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:37:20.885 00:05:00.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:41:41.125 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-08-30 04:42:02.927 00:00:10.386 TCP 23.104.0.1:33108 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:42:41.348 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-08-30 04:43:03.349 00:00:10.358 TCP 23.104.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:39:20.881 00:05:00.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:43:41.575 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36166 10 6452 1 2025-08-30 04:44:03.752 00:00:10.379 TCP 23.104.0.1:51656 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:44:41.794 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-08-30 04:45:04.166 00:00:10.360 TCP 23.104.0.1:44828 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:45:32.405 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:45:32.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:45:41.971 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-08-30 04:46:04.564 00:00:10.370 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:46:42.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49626 10 6452 1 2025-08-30 04:47:04.968 00:00:10.374 TCP 23.104.0.1:33502 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:43:20.887 00:05:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:47:42.427 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-08-30 04:48:05.389 00:00:10.334 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:48:42.604 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42316 12 6556 1 2025-08-30 04:49:05.773 00:00:10.330 TCP 23.104.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:45:20.884 00:05:00.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:49:42.830 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-08-30 04:50:06.142 00:00:10.378 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:50:31.956 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:50:31.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:50:43.181 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-08-30 04:51:06.559 00:00:10.373 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:51:43.363 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-08-30 04:52:06.978 00:00:10.375 TCP 23.104.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:52:43.581 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-08-30 04:49:20.890 00:05:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-30 04:53:07.402 00:00:10.360 TCP 23.104.0.1:58358 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:53:43.801 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-08-30 04:54:07.803 00:00:10.335 TCP 23.104.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:54:43.972 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-08-30 04:51:20.886 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-30 04:55:08.174 00:00:10.322 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:55:31.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-30 04:55:31.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-30 04:55:44.205 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-08-30 04:56:08.533 00:00:10.322 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:56:44.381 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-08-30 04:57:08.895 00:00:10.377 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-08-30 04:57:44.593 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-08-30 04:58:09.310 00:00:10.328 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500668, total packets: 1576, avg bps: 1059, avg pps: 0, avg bpp: 317 Time window: 2025-08-30 03:55:20 - 2025-08-30 04:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0029s Wall: 0.0038s flows/second: 42941.5 Runtime: 0.0038s