Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-31 22:58:49.452 00:00:10.364 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-08-31 22:59:13.570 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-08-31 22:59:49.851 00:00:10.377 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:00:13.746 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-08-31 23:00:50.268 00:00:10.365 TCP 23.104.0.1:37468 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:01:22.730 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 22:57:21.733 00:05:00.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:01:22.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:01:13.976 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-08-31 23:01:50.674 00:00:10.365 TCP 23.104.0.1:33210 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:02:14.199 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41640 10 6452 1 2025-08-31 23:02:51.100 00:00:10.369 TCP 23.104.0.1:46510 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:03:14.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50500 10 6452 1 2025-08-31 23:03:51.509 00:00:10.368 TCP 23.104.0.1:40702 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:00:21.734 00:05:00.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:04:14.636 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-08-31 23:04:51.915 00:00:10.331 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:05:14.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59234 10 6452 1 2025-08-31 23:05:52.285 00:00:10.322 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:06:15.075 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35430 10 6452 1 2025-08-31 23:06:23.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:06:22.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:06:52.645 00:00:10.366 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:07:15.290 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-08-31 23:03:21.735 00:05:00.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:07:53.048 00:00:10.379 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:08:15.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43968 10 6452 1 2025-08-31 23:08:53.480 00:00:10.320 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:09:15.701 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-08-31 23:09:53.832 00:00:10.386 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:10:15.893 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-08-31 23:06:21.733 00:05:00.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:10:54.254 00:00:10.364 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:11:22.867 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:11:16.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34114 10 6452 1 2025-08-31 23:11:22.914 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:11:54.656 00:00:10.375 TCP 23.104.0.1:59868 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:12:16.311 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-08-31 23:12:55.095 00:00:10.367 TCP 23.104.0.1:45114 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:13:16.537 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59760 10 6452 1 2025-08-31 23:09:21.737 00:05:00.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:13:55.500 00:00:10.362 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:14:16.758 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53574 10 6452 1 2025-08-31 23:14:55.898 00:00:10.368 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:15:16.976 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-08-31 23:15:56.308 00:00:10.366 TCP 23.104.0.1:38554 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:16:23.031 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:16:23.152 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:12:21.736 00:05:00.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:16:17.237 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46280 10 6452 1 2025-08-31 23:16:56.719 00:00:10.383 TCP 23.104.0.1:55398 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:17:17.459 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-08-31 23:17:57.140 00:00:10.367 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:18:17.679 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 2025-08-31 23:18:57.544 00:00:10.381 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:15:21.738 00:05:00.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:19:18.100 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 10 6452 1 2025-08-31 23:19:57.960 00:00:10.371 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:20:18.327 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-08-31 23:20:58.369 00:00:10.367 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:21:23.310 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:21:23.059 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:21:18.549 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-08-31 23:21:58.771 00:00:10.326 TCP 23.104.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:18:21.737 00:05:00.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:22:18.728 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-08-31 23:22:59.138 00:00:10.368 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:23:18.957 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 12 6556 1 2025-08-31 23:23:59.547 00:00:10.364 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:24:19.196 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6452 1 2025-08-31 23:24:59.947 00:00:10.371 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:21:21.740 00:05:00.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:25:19.419 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44944 10 6452 1 2025-08-31 23:26:00.357 00:00:10.365 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:26:23.182 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:26:23.326 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:26:19.651 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-08-31 23:27:00.780 00:00:10.366 TCP 23.104.0.1:56614 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:27:20.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-08-31 23:28:01.183 00:00:10.326 TCP 23.104.0.1:50128 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:24:21.738 00:05:00.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:28:20.302 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38840 10 6452 1 2025-08-31 23:29:01.550 00:00:10.362 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:29:20.473 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-08-31 23:30:01.950 00:00:10.369 TCP 23.104.0.1:44818 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:30:20.684 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:48612 10 6452 1 2025-08-31 23:31:02.359 00:00:10.364 TCP 23.104.0.1:51138 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:31:23.247 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:31:23.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:27:21.741 00:05:00.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:31:20.889 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-08-31 23:32:02.758 00:00:10.373 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:32:21.107 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-08-31 23:33:03.170 00:00:10.328 TCP 23.104.0.1:49062 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:33:21.331 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:42220 10 6452 1 2025-08-31 23:34:03.544 00:00:10.367 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:30:21.739 00:05:00.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:34:21.619 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39656 10 6452 1 2025-08-31 23:35:03.953 00:00:12.829 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:35:21.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-08-31 23:36:23.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:36:06.826 00:00:10.364 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:36:23.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:36:22.074 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-08-31 23:37:07.233 00:00:10.625 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:33:21.741 00:05:00.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:37:22.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38916 10 6452 1 2025-08-31 23:38:07.895 00:00:10.375 TCP 23.104.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:38:22.523 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33950 10 6452 1 2025-08-31 23:39:08.308 00:00:10.386 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:39:22.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-08-31 23:40:08.731 00:00:10.369 TCP 23.104.0.1:57472 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:36:21.740 00:05:00.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:40:22.902 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-08-31 23:41:09.135 00:00:10.324 TCP 23.104.0.1:38970 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:41:23.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:41:23.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:41:23.124 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-08-31 23:42:09.498 00:00:10.363 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:42:23.351 00:00:11.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-31 23:43:09.902 00:00:10.326 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:39:21.744 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:43:24.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59926 10 6452 1 2025-08-31 23:44:10.266 00:00:10.370 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:44:24.813 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42696 10 6452 1 2025-08-31 23:45:10.672 00:00:10.370 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:45:25.042 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-08-31 23:46:11.103 00:00:10.362 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:46:23.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:46:23.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:42:21.742 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:46:25.261 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6452 1 2025-08-31 23:47:11.502 00:00:10.368 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:47:25.472 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-08-31 23:48:11.912 00:00:10.365 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:48:25.687 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44904 10 6452 1 2025-08-31 23:45:21.745 00:05:00.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:49:12.311 00:00:10.376 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:49:25.858 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33388 10 6452 1 2025-08-31 23:50:12.727 00:00:10.371 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:50:26.098 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 2025-08-31 23:51:13.131 00:00:10.365 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:51:23.788 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:51:23.799 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:51:26.310 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-08-31 23:48:21.743 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:52:13.531 00:00:10.364 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:52:26.528 00:00:10.410 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6452 1 2025-08-31 23:53:13.932 00:00:10.385 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:53:26.979 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 13 6608 1 2025-08-31 23:54:14.358 00:00:10.378 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:54:27.196 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-08-31 23:51:21.747 00:05:00.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-31 23:55:14.776 00:00:10.373 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:55:27.414 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-08-31 23:56:23.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-31 23:56:15.196 00:00:10.332 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:56:23.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-31 23:56:27.586 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-08-31 23:57:15.571 00:00:10.369 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:57:27.821 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54928 10 6452 1 2025-08-31 23:54:21.746 00:05:00.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-31 23:58:15.982 00:00:10.367 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-08-31 23:58:28.068 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-08-31 22:57:21 - 2025-08-31 23:59:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 74613.9 Runtime: 0.0022s