Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 17:58:56.047 00:00:10.379 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-08-09 17:59:01.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-08-09 17:59:56.454 00:00:10.367 TCP 23.104.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:00:01.533 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41332 10 6452 1 2025-08-09 17:56:08.760 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:00:41.053 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:00:40.998 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:01:01.750 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-08-09 17:57:08.763 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:00:56.858 00:00:10.371 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:01:57.269 00:00:10.376 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:02:01.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-08-09 18:02:57.683 00:00:10.370 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:03:02.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51750 10 6452 1 2025-08-09 18:03:58.102 00:00:10.367 TCP 23.104.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:04:02.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-08-09 18:04:58.508 00:00:10.368 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:05:02.613 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-08-09 18:05:41.119 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:05:40.851 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:02:08.761 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:05:58.917 00:00:10.378 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:06:02.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-08-09 18:06:59.337 00:00:10.384 TCP 23.104.0.1:33192 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:03:08.764 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:07:03.072 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-08-09 18:07:59.765 00:00:10.328 TCP 23.104.0.1:48430 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:08:03.289 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-08-09 18:09:00.133 00:00:10.325 TCP 23.104.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:09:03.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-08-09 18:10:00.499 00:00:10.365 TCP 23.104.0.1:49322 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:10:03.718 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-08-09 18:10:41.345 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:10:41.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:11:00.904 00:00:10.366 TCP 23.104.0.1:41782 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:11:03.938 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-08-09 18:12:01.307 00:00:10.366 TCP 23.104.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:08:08.762 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:12:04.171 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 10 6452 1 2025-08-09 18:09:08.765 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:13:04.383 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-08-09 18:13:01.708 00:00:10.376 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:14:02.114 00:00:10.369 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:14:04.598 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-08-09 18:15:02.518 00:00:10.363 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:15:04.817 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-08-09 18:15:41.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:15:41.573 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:16:02.919 00:00:10.386 TCP 23.104.0.1:45172 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:16:05.031 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-08-09 18:17:05.248 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-08-09 18:17:03.344 00:00:10.378 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:14:08.763 00:05:00.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:18:03.761 00:00:10.380 TCP 23.104.0.1:55040 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:18:05.457 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-08-09 18:15:08.768 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:19:05.667 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 12 10367 1 2025-08-09 18:19:04.174 00:00:10.400 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 15 1926 1 2025-08-09 18:20:04.612 00:00:10.368 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:20:05.863 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58994 10 6452 1 2025-08-09 18:20:41.330 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:20:41.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:21:05.013 00:00:10.325 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:21:06.082 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45622 10 6452 1 2025-08-09 18:22:06.260 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6452 1 2025-08-09 18:22:05.385 00:00:10.363 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:23:06.440 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 12 6556 1 2025-08-09 18:23:05.794 00:00:10.373 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:20:08.768 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:24:06.662 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33998 10 6452 1 2025-08-09 18:24:06.218 00:00:10.327 TCP 23.104.0.1:55094 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:21:08.771 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:25:06.577 00:00:10.368 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:25:06.870 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34950 10 6452 1 2025-08-09 18:25:41.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:25:41.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:26:07.090 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41034 10 6452 1 2025-08-09 18:26:06.981 00:00:10.369 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:27:07.257 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44842 10 6452 1 2025-08-09 18:27:07.384 00:00:10.358 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:28:07.786 00:00:10.345 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:28:07.439 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-08-09 18:29:07.652 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-08-09 18:29:08.170 00:00:10.363 TCP 23.104.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:26:08.771 00:05:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:30:07.824 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6452 1 2025-08-09 18:30:08.582 00:00:10.331 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:30:41.503 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:30:41.559 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:27:08.773 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:31:08.958 00:00:10.390 TCP 23.104.0.1:44372 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:31:08.057 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-08-09 18:32:09.414 00:00:10.367 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:32:08.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-08-09 18:33:09.817 00:00:10.363 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:33:08.484 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:43896 10 6452 1 2025-08-09 18:34:10.224 00:00:10.362 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:34:08.881 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-08-09 18:35:10.625 00:00:10.365 TCP 23.104.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:35:09.080 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-08-09 18:35:41.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:35:41.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:32:08.773 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:36:11.030 00:00:10.371 TCP 23.104.0.1:50696 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:36:09.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-08-09 18:33:08.776 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:37:09.503 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-08-09 18:37:11.437 00:00:10.369 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:38:09.976 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6452 1 2025-08-09 18:38:11.843 00:00:10.390 TCP 23.104.0.1:56558 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:39:10.213 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41762 10 6452 1 2025-08-09 18:39:12.269 00:00:10.370 TCP 23.104.0.1:36334 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:40:10.438 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57202 10 6452 1 2025-08-09 18:40:12.681 00:00:10.379 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:40:41.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:40:41.856 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:41:10.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-08-09 18:41:13.112 00:00:10.324 TCP 23.104.0.1:58358 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:38:08.774 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:42:10.824 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6452 1 2025-08-09 18:42:13.475 00:00:10.373 TCP 23.104.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:39:08.776 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:43:11.038 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-08-09 18:43:13.885 00:00:10.389 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:44:11.213 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-08-09 18:44:14.309 00:00:10.367 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:45:11.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-08-09 18:45:14.713 00:00:10.315 TCP 23.104.0.1:37242 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:45:41.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:45:42.081 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:46:11.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-08-09 18:46:15.094 00:00:10.321 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:47:11.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-08-09 18:47:15.453 00:00:10.365 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:44:08.775 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:48:15.852 00:00:10.372 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 12 1559 1 2025-08-09 18:48:12.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58394 10 6452 1 2025-08-09 18:45:08.778 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:49:16.261 00:00:10.366 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:49:12.252 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-08-09 18:50:12.429 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-08-09 18:50:16.666 00:00:10.667 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:50:42.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:50:42.360 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:51:12.639 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-08-09 18:51:17.374 00:00:10.365 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:52:12.859 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60308 10 6452 1 2025-08-09 18:52:17.774 00:00:10.370 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:53:13.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-08-09 18:53:18.190 00:00:10.323 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:50:08.778 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 18:54:13.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33666 10 6452 1 2025-08-09 18:54:18.554 00:00:10.365 TCP 23.104.0.1:52430 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:51:08.782 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 18:55:13.515 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-08-09 18:55:18.957 00:00:10.371 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:55:41.929 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 18:55:42.469 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 18:56:13.691 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-08-09 18:56:19.365 00:00:10.410 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:57:13.905 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:53202 10 6452 1 2025-08-09 18:57:19.836 00:00:10.345 TCP 23.104.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-08-09 18:58:14.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36820 10 6452 1 2025-08-09 18:58:20.222 00:00:10.371 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502838, total packets: 1581, avg bps: 1075, avg pps: 0, avg bpp: 318 Time window: 2025-08-09 17:56:08 - 2025-08-09 18:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0021s Wall: 0.0034s flows/second: 47868.2 Runtime: 0.0034s