Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 02:58:43.919 00:00:10.378 TCP 23.104.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:58:54.993 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-08-18 02:59:42.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:59:43.010 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:59:44.332 00:00:10.366 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:59:55.176 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-08-18 02:56:12.806 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:00:44.737 00:00:10.366 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:00:55.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44960 10 6452 1 2025-08-18 03:01:45.146 00:00:10.328 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:01:55.608 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-08-18 03:02:45.516 00:00:10.360 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:02:55.831 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-08-18 02:59:12.809 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:03:45.919 00:00:10.373 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:03:56.072 00:00:10.683 TCP 1.101.0.1:3000 -> 22.102.0.1:50286 10 6452 1 2025-08-18 03:04:42.997 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:04:42.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:04:46.325 00:00:10.363 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:04:56.800 00:00:10.575 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-08-18 03:05:46.726 00:00:10.366 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:05:57.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32956 10 6452 1 2025-08-18 03:02:12.807 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:06:47.128 00:00:10.369 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:06:57.633 00:00:10.793 TCP 1.101.0.1:3000 -> 22.102.0.1:53792 10 6452 1 2025-08-18 03:07:47.533 00:00:10.334 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:07:58.458 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-08-18 03:08:47.908 00:00:10.369 TCP 23.104.0.1:55620 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:08:58.672 00:00:10.457 TCP 1.101.0.1:3000 -> 22.102.0.1:33174 10 6452 1 2025-08-18 03:05:12.809 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:09:43.124 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:09:42.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:09:48.319 00:00:10.371 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:09:59.165 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-08-18 03:10:48.728 00:00:10.415 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 15 1926 1 2025-08-18 03:10:59.381 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:60032 12 10365 1 2025-08-18 03:11:49.188 00:00:10.370 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:11:59.588 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-08-18 03:08:12.811 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:12:49.597 00:00:10.364 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:12:59.761 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-08-18 03:13:50.001 00:00:10.322 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:13:59.932 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6452 1 2025-08-18 03:14:43.141 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:14:43.093 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:14:50.364 00:00:10.368 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:15:00.166 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49918 10 6452 1 2025-08-18 03:11:12.815 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:15:50.774 00:00:10.382 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:16:00.339 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-08-18 03:16:51.198 00:00:10.361 TCP 23.104.0.1:37458 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:17:00.512 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-08-18 03:17:51.593 00:00:10.363 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:18:00.688 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51478 10 6452 1 2025-08-18 03:14:12.812 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:18:52.002 00:00:10.368 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:19:00.860 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-08-18 03:19:43.407 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:19:43.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:19:52.408 00:00:10.849 TCP 23.104.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:20:01.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-08-18 03:20:53.291 00:00:10.361 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:21:01.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-08-18 03:17:12.820 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:21:53.686 00:00:10.374 TCP 23.104.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:22:01.534 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45190 10 6452 1 2025-08-18 03:22:54.120 00:00:10.365 TCP 23.104.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:23:01.748 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-08-18 03:23:54.518 00:00:10.322 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:24:01.954 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-08-18 03:20:12.818 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:24:43.492 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:24:43.439 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:24:54.878 00:00:10.359 TCP 23.104.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:25:02.183 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47254 10 6452 1 2025-08-18 03:25:55.274 00:00:10.369 TCP 23.104.0.1:38442 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:26:02.402 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6452 1 2025-08-18 03:26:55.679 00:00:10.317 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:27:02.623 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44790 10 6452 1 2025-08-18 03:23:12.822 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:27:56.035 00:00:10.368 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:28:02.835 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38028 10 6452 1 2025-08-18 03:28:56.434 00:00:10.369 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:29:03.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-08-18 03:29:43.551 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:29:43.382 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:29:56.837 00:00:10.342 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:30:03.283 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50244 10 6452 1 2025-08-18 03:26:12.822 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:30:57.216 00:00:10.434 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 15 1926 1 2025-08-18 03:31:03.508 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 12 10365 1 2025-08-18 03:31:57.693 00:00:10.368 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:32:03.712 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-08-18 03:32:58.105 00:00:10.330 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:33:03.922 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-08-18 03:29:12.824 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:33:58.470 00:00:10.368 TCP 23.104.0.1:51296 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:34:04.138 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-08-18 03:34:43.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:34:43.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:34:58.875 00:00:10.362 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:35:04.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-08-18 03:35:59.281 00:00:10.368 TCP 23.104.0.1:44978 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:36:04.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-08-18 03:32:12.823 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:36:59.686 00:00:10.364 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:37:04.737 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34762 10 6452 1 2025-08-18 03:38:00.107 00:00:10.359 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:38:04.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46976 10 6452 1 2025-08-18 03:39:00.504 00:00:10.364 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:35:12.826 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:39:05.122 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-08-18 03:39:43.914 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:39:43.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:40:00.906 00:00:10.364 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:40:05.298 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-08-18 03:41:01.309 00:00:10.441 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 15 1926 1 2025-08-18 03:41:05.479 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 12 10367 1 2025-08-18 03:42:01.799 00:00:10.366 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:38:12.824 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:42:05.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-08-18 03:43:02.212 00:00:10.362 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:43:05.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45034 10 6452 1 2025-08-18 03:44:02.617 00:00:10.365 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:44:06.183 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35920 10 6452 1 2025-08-18 03:44:43.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:44:43.708 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:45:03.023 00:00:10.364 TCP 23.104.0.1:37200 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:41:12.828 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:45:06.358 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-08-18 03:46:06.571 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-08-18 03:46:03.424 00:00:10.367 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:47:03.844 00:00:10.381 TCP 23.104.0.1:33822 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:47:06.789 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 6452 1 2025-08-18 03:48:04.262 00:00:10.332 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:44:12.826 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:48:07.000 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-08-18 03:49:04.632 00:00:10.380 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:49:07.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6452 1 2025-08-18 03:49:43.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:49:43.903 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:50:05.061 00:00:10.370 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:50:07.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-08-18 03:47:12.829 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:51:05.469 00:00:10.366 TCP 23.104.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:51:07.645 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43864 10 6452 1 2025-08-18 03:52:05.872 00:00:10.327 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:52:07.824 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55792 12 6556 1 2025-08-18 03:53:06.237 00:00:10.368 TCP 23.104.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:53:08.079 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-08-18 03:50:12.826 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 03:54:06.649 00:00:10.328 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:54:08.252 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-08-18 03:54:43.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:54:43.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:55:07.015 00:00:10.364 TCP 23.104.0.1:50216 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:55:08.468 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39696 10 6452 1 2025-08-18 03:56:07.417 00:00:10.370 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:56:08.687 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-08-18 03:53:12.829 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 03:57:08.859 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57320 10 6452 1 2025-08-18 03:57:07.822 00:00:10.331 TCP 23.104.0.1:52238 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:58:09.091 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-08-18 03:58:08.192 00:00:10.367 TCP 23.104.0.1:58418 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511450, total packets: 1592, avg bps: 1097, avg pps: 0, avg bpp: 321 Time window: 2025-08-18 02:56:12 - 2025-08-18 03:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0011s User: 0.0033s Wall: 0.0024s flows/second: 68560.3 Runtime: 0.0024s