Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-17 04:58:50.953 00:00:10.331 TCP 23.104.0.1:49822 -> 1.101.0.1:3000 12 1559 1 2025-08-17 04:59:16.062 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 04:59:16.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 04:59:10.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37574 10 6452 1 2025-08-17 04:59:51.325 00:00:10.327 TCP 23.104.0.1:43734 -> 1.101.0.1:3000 11 1507 1 2025-08-17 04:56:12.421 00:05:00.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:00:10.930 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-08-17 05:00:51.689 00:00:10.325 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:01:11.136 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-08-17 05:01:52.057 00:00:10.765 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:02:11.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44890 10 6452 1 2025-08-17 05:02:52.871 00:00:10.326 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-08-17 04:59:12.425 00:05:00.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:03:11.566 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-08-17 05:03:53.235 00:00:10.361 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:04:16.332 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:04:16.624 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:04:11.780 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-08-17 05:04:53.633 00:00:10.364 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:05:11.957 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 12 6556 1 2025-08-17 05:05:54.035 00:00:10.367 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:02:12.423 00:05:00.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:06:12.192 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35760 10 6452 1 2025-08-17 05:06:54.442 00:00:10.319 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:07:12.408 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-08-17 05:07:54.801 00:00:10.364 TCP 23.104.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:08:12.636 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-08-17 05:08:55.204 00:00:10.363 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:05:12.426 00:05:00.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:09:16.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:09:16.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:09:12.848 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6452 1 2025-08-17 05:09:55.604 00:00:10.332 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:10:13.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-08-17 05:10:55.971 00:00:10.327 TCP 23.104.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:11:13.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-08-17 05:11:56.340 00:00:10.360 TCP 23.104.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:08:12.426 00:05:00.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:12:13.503 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-08-17 05:12:56.741 00:00:10.363 TCP 23.104.0.1:45078 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:13:13.715 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-08-17 05:13:57.141 00:00:10.323 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:14:16.775 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:14:16.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:14:13.923 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-08-17 05:14:57.502 00:00:10.360 TCP 23.104.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:11:12.431 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:15:14.133 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56174 10 6452 1 2025-08-17 05:15:57.898 00:00:10.368 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:16:14.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-08-17 05:16:58.304 00:00:10.323 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:17:14.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-08-17 05:17:58.664 00:00:10.361 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:14:12.428 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:18:14.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-08-17 05:19:16.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:18:59.092 00:00:10.364 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:19:16.942 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:19:14.967 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-08-17 05:19:59.501 00:00:10.360 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:20:15.198 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34326 10 6452 1 2025-08-17 05:20:59.903 00:00:10.369 TCP 23.104.0.1:54764 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:17:12.432 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:21:15.413 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-08-17 05:22:00.314 00:00:10.367 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:22:15.586 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-08-17 05:23:00.718 00:00:10.378 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:23:15.798 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-08-17 05:24:01.138 00:00:10.369 TCP 23.104.0.1:49496 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:24:16.906 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:24:16.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:20:12.429 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:24:15.977 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53966 10 6452 1 2025-08-17 05:25:01.546 00:00:10.366 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:25:16.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 10 6452 1 2025-08-17 05:26:01.952 00:00:10.370 TCP 23.104.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:26:16.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34052 10 6452 1 2025-08-17 05:23:12.434 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:27:02.353 00:00:10.362 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:27:16.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6452 1 2025-08-17 05:28:02.753 00:00:10.387 TCP 23.104.0.1:52212 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:28:16.823 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-08-17 05:29:03.176 00:00:10.365 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:29:16.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:29:17.008 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:29:17.032 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47698 10 6452 1 2025-08-17 05:26:12.431 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:30:03.583 00:00:10.323 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:30:17.204 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53022 10 6452 1 2025-08-17 05:31:03.948 00:00:10.370 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:31:17.424 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51592 10 6452 1 2025-08-17 05:32:04.360 00:00:10.374 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:32:17.648 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43254 10 6452 1 2025-08-17 05:33:04.774 00:00:10.388 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:29:12.435 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:33:17.883 00:00:10.701 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-08-17 05:34:05.203 00:00:10.370 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:34:17.065 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:34:17.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:34:18.623 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-08-17 05:35:05.610 00:00:10.332 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:35:18.835 00:00:10.388 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-08-17 05:32:12.435 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:36:05.985 00:00:10.381 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:36:19.264 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57146 10 6452 1 2025-08-17 05:37:06.402 00:00:10.366 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:37:19.480 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49656 10 6452 1 2025-08-17 05:38:06.808 00:00:10.366 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:38:19.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46280 10 6452 1 2025-08-17 05:35:12.440 00:05:00.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:39:16.975 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:39:07.217 00:00:10.361 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:39:17.135 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:39:19.906 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58008 10 6452 1 2025-08-17 05:40:07.627 00:00:10.384 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:40:20.114 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 11 6492 1 2025-08-17 05:41:08.051 00:00:10.361 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:41:20.322 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-08-17 05:38:12.436 00:05:00.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:42:08.449 00:00:10.361 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:42:20.531 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-08-17 05:43:08.847 00:00:10.340 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:43:20.747 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-08-17 05:44:09.226 00:00:10.491 TCP 23.104.0.1:34906 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:44:17.174 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:44:17.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:44:20.965 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-08-17 05:41:12.439 00:05:00.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:45:09.753 00:00:10.994 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 15 1926 1 2025-08-17 05:45:21.189 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 12 10365 1 2025-08-17 05:46:10.783 00:00:10.366 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:46:21.383 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42964 10 6452 1 2025-08-17 05:47:11.187 00:00:10.324 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:47:21.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-08-17 05:44:12.441 00:05:00.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:48:11.552 00:00:10.319 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:48:21.826 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-08-17 05:49:17.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:49:17.338 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:49:11.912 00:00:10.360 TCP 23.104.0.1:53354 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:49:22.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-08-17 05:50:12.313 00:00:10.362 TCP 23.104.0.1:50872 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:50:22.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-08-17 05:47:12.443 00:05:00.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:51:12.716 00:00:10.397 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:51:22.455 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-08-17 05:52:13.158 00:00:10.372 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:52:22.622 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-08-17 05:53:13.569 00:00:10.363 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:53:22.835 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40392 10 6452 1 2025-08-17 05:50:12.443 00:05:00.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-17 05:54:17.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-17 05:54:17.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-17 05:54:13.967 00:00:10.374 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:54:23.004 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35288 10 6452 1 2025-08-17 05:55:14.383 00:00:10.365 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:55:23.217 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42928 10 6452 1 2025-08-17 05:56:14.788 00:00:10.324 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:56:23.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45446 10 6452 1 2025-08-17 05:53:12.446 00:05:00.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-17 05:57:15.145 00:00:10.376 TCP 23.104.0.1:46846 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:57:23.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-08-17 05:58:15.550 00:00:10.367 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-17 05:58:23.814 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45104 10 6452 1 Summary: total flows: 164, total bytes: 502876, total packets: 1582, avg bps: 1075, avg pps: 0, avg bpp: 317 Time window: 2025-08-17 04:56:12 - 2025-08-17 05:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0000s Wall: 0.0027s flows/second: 59741.7 Runtime: 0.0028s