Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-15 10:58:44.586 00:00:10.364 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-08-15 10:59:03.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:54896 10 6452 1 2025-08-15 10:59:44.992 00:00:10.365 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-08-15 10:56:11.617 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:00:04.227 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-08-15 11:00:45.395 00:00:10.368 TCP 23.104.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:01:04.441 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55254 10 6452 1 2025-08-15 11:01:45.802 00:00:10.367 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:02:04.656 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-08-15 11:02:46.210 00:00:10.366 TCP 23.104.0.1:60450 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:03:04.867 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6452 1 2025-08-15 11:03:25.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:03:25.857 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:03:46.615 00:00:10.318 TCP 23.104.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:04:05.086 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45618 10 6452 1 2025-08-15 11:00:11.615 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:04:46.973 00:00:10.505 TCP 23.104.0.1:49464 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:05:05.264 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-08-15 11:05:47.514 00:00:10.325 TCP 23.104.0.1:43884 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:06:05.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-08-15 11:02:11.617 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:06:47.877 00:00:10.322 TCP 23.104.0.1:39088 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:07:05.643 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40772 10 6452 1 2025-08-15 11:07:48.242 00:00:10.378 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:08:05.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39944 10 6452 1 2025-08-15 11:08:25.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:08:25.806 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:08:48.685 00:00:10.324 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:09:06.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2025-08-15 11:09:49.064 00:00:10.325 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:06:11.619 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:10:06.321 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-08-15 11:10:49.429 00:00:10.318 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:11:06.485 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 10 6452 1 2025-08-15 11:11:49.792 00:00:10.364 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:08:11.621 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:12:06.696 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-08-15 11:12:50.197 00:00:10.365 TCP 23.104.0.1:52508 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:13:06.867 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-08-15 11:13:26.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:13:26.223 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:13:50.604 00:00:10.366 TCP 23.104.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:14:07.087 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-08-15 11:14:51.007 00:00:10.422 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:15:07.256 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-08-15 11:15:51.467 00:00:10.326 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:12:11.618 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:16:07.427 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6452 1 2025-08-15 11:16:51.831 00:00:10.395 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:17:07.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-08-15 11:17:52.263 00:00:10.369 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:14:11.621 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:18:07.816 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-08-15 11:18:26.281 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:18:26.233 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:18:52.669 00:00:10.363 TCP 23.104.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:19:08.212 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-08-15 11:19:53.109 00:00:10.335 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:20:08.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-08-15 11:20:53.485 00:00:10.325 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:21:08.639 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50610 10 6452 1 2025-08-15 11:21:53.851 00:00:10.341 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:18:11.619 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:22:08.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 12 6556 1 2025-08-15 11:22:54.234 00:00:10.322 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:23:09.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38692 10 6452 1 2025-08-15 11:23:26.239 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:23:26.331 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:23:54.593 00:00:10.367 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:20:11.622 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:24:09.306 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-08-15 11:24:55.001 00:00:10.364 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:25:09.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36068 10 6452 1 2025-08-15 11:25:55.399 00:00:10.369 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:26:09.742 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-08-15 11:26:55.807 00:00:10.371 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:27:09.917 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36968 10 6452 1 2025-08-15 11:27:56.214 00:00:10.320 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:24:11.619 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:28:10.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35668 10 6452 1 2025-08-15 11:28:26.441 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:28:26.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:28:56.568 00:00:10.369 TCP 23.104.0.1:58630 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:29:10.317 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2025-08-15 11:29:56.975 00:00:10.374 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:26:11.624 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:30:10.523 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-08-15 11:30:57.383 00:00:10.370 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:31:10.747 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50642 10 6452 1 2025-08-15 11:31:57.792 00:00:10.365 TCP 23.104.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:32:10.922 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-08-15 11:32:58.195 00:00:10.367 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:33:11.130 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-08-15 11:33:26.451 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:33:26.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:33:58.597 00:00:10.367 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:30:11.621 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:34:11.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53042 10 6452 1 2025-08-15 11:34:58.999 00:00:10.577 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:35:11.525 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-08-15 11:35:59.616 00:00:10.366 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:32:11.624 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:36:11.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53654 10 6452 1 2025-08-15 11:37:00.020 00:00:10.371 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:37:11.951 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45856 10 6452 1 2025-08-15 11:38:00.428 00:00:10.366 TCP 23.104.0.1:35970 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:38:12.128 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-08-15 11:38:26.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:38:26.740 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:39:00.832 00:00:10.392 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:39:12.347 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-08-15 11:40:01.264 00:00:10.367 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:36:11.623 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:40:12.571 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-08-15 11:41:01.685 00:00:10.374 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:41:12.777 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34754 10 6452 1 2025-08-15 11:38:11.627 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:42:02.114 00:00:10.365 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:42:12.992 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38586 10 6452 1 2025-08-15 11:43:02.519 00:00:10.362 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:43:26.489 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:43:13.216 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-08-15 11:43:26.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:44:02.919 00:00:10.392 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:44:13.391 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-08-15 11:45:03.348 00:00:10.362 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:45:13.611 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-08-15 11:46:03.752 00:00:10.395 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:42:11.628 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:46:13.785 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-08-15 11:47:04.193 00:00:10.362 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:47:13.993 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6452 1 2025-08-15 11:48:04.594 00:00:10.327 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:44:11.629 00:05:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:48:14.187 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47016 10 6452 1 2025-08-15 11:48:26.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:48:26.935 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:49:04.963 00:00:10.344 TCP 23.104.0.1:41824 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:49:14.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55470 10 6452 1 2025-08-15 11:50:05.340 00:00:10.429 TCP 23.104.0.1:60642 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:50:14.616 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55642 10 6452 1 2025-08-15 11:51:05.807 00:00:10.368 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:51:14.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-08-15 11:48:11.628 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:52:06.213 00:00:10.388 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:52:15.005 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-08-15 11:53:06.628 00:00:10.367 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:53:26.621 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-15 11:53:15.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-08-15 11:53:26.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:50:11.631 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-15 11:54:07.040 00:00:10.372 TCP 23.104.0.1:38968 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:54:15.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-08-15 11:55:07.450 00:00:10.365 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:55:15.664 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-08-15 11:56:07.854 00:00:10.339 TCP 23.104.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:56:15.926 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6452 1 2025-08-15 11:57:08.229 00:00:10.368 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:57:16.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-08-15 11:54:11.628 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-15 11:58:08.641 00:00:10.363 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-08-15 11:58:16.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60528 10 6452 1 2025-08-15 11:58:27.264 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-15 11:58:27.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1054, avg pps: 0, avg bpp: 316 Time window: 2025-08-15 10:56:11 - 2025-08-15 11:59:12 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0008s Wall: 0.0021s flows/second: 76916.7 Runtime: 0.0022s