Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-31 13:59:06.976 00:00:10.366 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-08-31 13:59:09.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48866 10 6452 1 2025-08-31 14:00:09.499 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-08-31 14:00:07.379 00:00:10.370 TCP 23.104.0.1:52964 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:01:11.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:01:12.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:01:09.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56140 10 6452 1 2025-08-31 14:01:07.793 00:00:10.368 TCP 23.104.0.1:59644 -> 1.101.0.1:3000 11 1507 1 2025-08-31 13:57:21.554 00:05:00.498 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:02:09.936 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-08-31 14:02:08.205 00:00:10.329 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:03:10.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-08-31 14:03:08.573 00:00:10.371 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:04:08.985 00:00:10.343 TCP 23.104.0.1:52356 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:04:10.384 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-08-31 14:00:21.555 00:05:00.501 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:05:10.609 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-08-31 14:05:09.370 00:00:10.371 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 12 1559 1 2025-08-31 14:06:12.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:06:12.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:06:10.844 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-08-31 14:06:09.771 00:00:10.363 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:07:11.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52256 10 6452 1 2025-08-31 14:07:10.174 00:00:10.364 TCP 23.104.0.1:44942 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:03:21.558 00:05:00.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:08:10.576 00:00:10.327 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:08:11.288 00:00:10.442 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-08-31 14:09:10.955 00:00:10.327 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:09:11.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-08-31 14:10:11.318 00:00:10.369 TCP 23.104.0.1:33146 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:10:11.980 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-08-31 14:06:21.557 00:05:00.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:11:12.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:11:12.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:11:12.233 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39500 10 6452 1 2025-08-31 14:11:11.727 00:00:10.374 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:12:12.410 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-08-31 14:12:12.137 00:00:10.464 TCP 23.104.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:13:12.633 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-08-31 14:09:21.560 00:05:00.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:13:12.635 00:00:10.378 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:14:12.852 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 10 6452 1 2025-08-31 14:14:13.056 00:00:10.366 TCP 23.104.0.1:48764 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:15:13.085 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-08-31 14:15:13.465 00:00:10.327 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:16:11.855 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:16:12.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:16:13.827 00:00:10.597 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:16:13.264 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-08-31 14:12:21.563 00:05:00.496 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:17:14.458 00:00:10.377 TCP 23.104.0.1:43608 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:17:13.475 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47244 10 6452 1 2025-08-31 14:18:13.695 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-08-31 14:18:14.873 00:00:10.362 TCP 23.104.0.1:56890 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:19:15.276 00:00:10.368 TCP 23.104.0.1:38434 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:15:21.563 00:05:00.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:19:13.910 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-08-31 14:20:14.127 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-08-31 14:20:15.682 00:00:10.363 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:21:12.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:21:12.361 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:21:16.113 00:00:10.372 TCP 23.104.0.1:58446 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:21:14.346 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-08-31 14:22:16.527 00:00:10.364 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:22:14.516 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-08-31 14:18:21.561 00:05:00.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:23:14.734 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-08-31 14:23:16.929 00:00:10.390 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:24:14.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6452 1 2025-08-31 14:24:17.353 00:00:10.364 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:25:15.187 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-08-31 14:21:21.563 00:05:00.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:25:17.760 00:00:10.336 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:26:12.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:26:12.333 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:26:15.368 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-08-31 14:26:18.134 00:00:10.371 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:27:15.539 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-08-31 14:27:18.544 00:00:10.362 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:24:21.561 00:05:00.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:28:15.760 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:37998 12 10365 1 2025-08-31 14:28:18.943 00:00:10.408 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 15 1926 1 2025-08-31 14:29:16.015 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-08-31 14:29:19.387 00:00:10.325 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:30:16.186 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-08-31 14:30:19.753 00:00:10.378 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:31:12.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:31:12.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:27:21.564 00:05:00.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:31:16.358 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-08-31 14:31:20.169 00:00:10.419 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:32:16.537 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-08-31 14:32:20.633 00:00:10.457 TCP 23.104.0.1:54996 -> 1.101.0.1:3000 15 1926 1 2025-08-31 14:33:16.707 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 12 10367 1 2025-08-31 14:33:21.131 00:00:10.369 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:30:21.563 00:05:00.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:34:16.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39824 10 6452 1 2025-08-31 14:34:21.527 00:00:10.366 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:35:17.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-08-31 14:35:21.924 00:00:10.382 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:36:12.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:36:12.584 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:36:17.393 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-08-31 14:36:22.350 00:00:10.366 TCP 23.104.0.1:52212 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:33:21.566 00:05:00.498 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:37:17.612 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-08-31 14:37:22.755 00:00:10.377 TCP 23.104.0.1:51836 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:38:17.782 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41404 10 6452 1 2025-08-31 14:38:23.170 00:00:10.365 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:39:18.004 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48344 10 6452 1 2025-08-31 14:39:23.575 00:00:10.361 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:36:21.563 00:05:00.503 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:40:18.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45664 10 6452 1 2025-08-31 14:40:23.986 00:00:10.365 TCP 23.104.0.1:50528 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:41:12.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:41:12.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:41:18.402 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42522 10 6452 1 2025-08-31 14:41:24.386 00:00:10.329 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:42:18.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6452 1 2025-08-31 14:42:24.758 00:00:10.324 TCP 23.104.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:39:21.566 00:05:00.498 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:43:18.786 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-08-31 14:43:25.123 00:00:10.367 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:44:18.994 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-08-31 14:44:25.531 00:00:10.368 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:45:19.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-08-31 14:45:25.943 00:00:10.371 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:46:12.821 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:46:12.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:42:21.564 00:05:00.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:46:19.431 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-08-31 14:46:26.358 00:00:10.365 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:47:19.600 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46140 10 6452 1 2025-08-31 14:47:26.756 00:00:10.380 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:48:19.773 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-08-31 14:48:27.173 00:00:10.367 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:45:21.566 00:05:00.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:49:19.950 00:00:10.754 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-08-31 14:49:27.579 00:00:10.324 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:50:20.739 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37448 10 6452 1 2025-08-31 14:50:27.945 00:00:10.399 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:51:12.948 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:51:13.011 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:51:20.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-08-31 14:51:28.391 00:00:10.368 TCP 23.104.0.1:39940 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:48:21.565 00:05:00.509 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:52:21.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-08-31 14:52:28.797 00:00:10.369 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:53:21.395 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-08-31 14:53:29.205 00:00:10.330 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:54:21.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-08-31 14:54:29.571 00:00:10.849 TCP 23.104.0.1:38614 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:51:21.567 00:05:00.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 14:55:21.770 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33734 10 6452 1 2025-08-31 14:55:30.460 00:00:10.331 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:56:12.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 14:56:12.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 14:56:21.988 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-08-31 14:56:30.826 00:00:10.350 TCP 23.104.0.1:38162 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:57:22.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 10 6452 1 2025-08-31 14:57:31.213 00:00:10.368 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-08-31 14:54:21.565 00:05:00.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 14:58:22.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45836 10 6452 1 2025-08-31 14:58:31.617 00:00:10.360 TCP 23.104.0.1:51340 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507066, total packets: 1585, avg bps: 1090, avg pps: 0, avg bpp: 319 Time window: 2025-08-31 13:57:21 - 2025-08-31 14:59:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0026s Wall: 0.0029s flows/second: 56281.0 Runtime: 0.0029s