Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 13:55:13.084 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 13:59:15.811 00:00:10.704 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-08-18 13:59:20.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-08-18 13:59:55.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 13:59:56.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 13:56:13.088 00:05:00.952 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:00:16.551 00:00:10.362 TCP 23.104.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:00:20.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32950 10 6452 1 2025-08-18 14:01:16.953 00:00:10.328 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:01:20.652 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-08-18 14:02:17.319 00:00:10.362 TCP 23.104.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:02:20.864 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:47318 10 6452 1 2025-08-18 14:03:21.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 10 6452 1 2025-08-18 14:03:17.717 00:00:10.370 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:04:18.126 00:00:10.364 TCP 23.104.0.1:48436 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:04:21.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38122 10 6452 1 2025-08-18 14:04:56.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:04:55.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:01:13.085 00:05:00.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:05:18.528 00:00:10.367 TCP 23.104.0.1:36262 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:05:21.678 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39366 10 6452 1 2025-08-18 14:02:13.088 00:05:00.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:06:18.934 00:00:10.387 TCP 23.104.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:06:21.886 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33256 10 6452 1 2025-08-18 14:07:19.358 00:00:10.371 TCP 23.104.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:07:22.105 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-08-18 14:08:19.771 00:00:10.372 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:08:22.280 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-08-18 14:09:20.179 00:00:10.368 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:09:22.494 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-08-18 14:09:56.349 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:09:56.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:10:20.577 00:00:10.371 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:10:22.665 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-08-18 14:07:13.086 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:11:20.988 00:00:10.367 TCP 23.104.0.1:52956 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:11:22.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-08-18 14:08:13.090 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:12:21.394 00:00:10.438 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:12:23.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-08-18 14:13:23.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-08-18 14:13:21.875 00:00:10.369 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:14:22.282 00:00:10.370 TCP 23.104.0.1:55932 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:14:23.530 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-08-18 14:14:56.559 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:14:56.245 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:15:22.688 00:00:10.373 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:15:23.702 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-08-18 14:16:23.934 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-08-18 14:16:23.103 00:00:10.382 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:13:13.088 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:17:24.144 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 10 6452 1 2025-08-18 14:17:23.510 00:00:10.367 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:14:13.090 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:18:24.357 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38530 10 6452 1 2025-08-18 14:18:23.912 00:00:10.374 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:19:24.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6452 1 2025-08-18 14:19:24.321 00:00:10.362 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:19:56.442 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:19:56.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:20:24.724 00:00:10.440 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 15 1926 1 2025-08-18 14:20:24.783 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 12 10367 1 2025-08-18 14:21:25.207 00:00:10.359 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:21:25.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41036 10 6452 1 2025-08-18 14:22:25.247 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-08-18 14:22:25.604 00:00:10.376 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:19:13.089 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:23:26.020 00:00:10.363 TCP 23.104.0.1:50386 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:23:25.459 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-08-18 14:20:13.093 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:24:26.419 00:00:10.329 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:24:25.681 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-08-18 14:24:56.609 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:24:56.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:25:26.250 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43348 10 6452 1 2025-08-18 14:25:26.787 00:00:10.321 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:26:26.471 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-08-18 14:26:27.146 00:00:10.364 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:27:26.828 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 11 6504 1 2025-08-18 14:27:27.550 00:00:10.368 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:28:27.959 00:00:10.368 TCP 23.104.0.1:39222 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:28:27.096 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34918 10 6452 1 2025-08-18 14:25:13.091 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:29:28.364 00:00:10.366 TCP 23.104.0.1:52496 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:29:27.270 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-08-18 14:29:56.834 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:29:56.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:26:13.093 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:30:27.441 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-08-18 14:30:28.766 00:00:10.424 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:31:27.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-08-18 14:31:29.233 00:00:10.364 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:32:29.633 00:00:10.367 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:32:27.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-08-18 14:33:28.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-08-18 14:33:30.035 00:00:10.367 TCP 23.104.0.1:37144 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:34:28.314 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-08-18 14:34:30.437 00:00:10.366 TCP 23.104.0.1:49962 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:34:56.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:34:56.873 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:31:13.092 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:35:28.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-18 14:35:30.843 00:00:10.390 TCP 23.104.0.1:37928 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:32:13.094 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:36:31.284 00:00:10.371 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:36:28.747 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40870 10 6452 1 2025-08-18 14:37:28.961 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-08-18 14:37:31.690 00:00:10.368 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:38:29.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-08-18 14:38:32.106 00:00:10.365 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:39:29.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40594 10 6452 1 2025-08-18 14:39:32.509 00:00:10.367 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:39:57.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:39:57.050 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:40:29.621 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-08-18 14:40:32.918 00:00:10.342 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:37:13.092 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:41:29.946 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45208 10 6452 1 2025-08-18 14:41:33.287 00:00:11.079 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:38:13.095 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:42:30.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-08-18 14:42:34.411 00:00:10.370 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:43:30.399 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-08-18 14:43:34.808 00:00:10.339 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:44:30.628 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56642 10 6452 1 2025-08-18 14:44:35.187 00:00:10.325 TCP 23.104.0.1:48748 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:44:56.807 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:44:57.241 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:45:30.853 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-08-18 14:45:35.556 00:00:10.323 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:46:31.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36766 10 6452 1 2025-08-18 14:46:35.918 00:00:10.386 TCP 23.104.0.1:35824 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:43:13.093 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:47:31.292 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-08-18 14:47:36.342 00:00:10.363 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:44:13.096 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:48:31.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2025-08-18 14:48:36.745 00:00:10.364 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:49:31.730 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-08-18 14:49:37.149 00:00:10.336 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:49:57.122 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:49:57.038 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:50:31.943 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46790 10 6452 1 2025-08-18 14:50:37.537 00:00:10.364 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:51:32.172 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6452 1 2025-08-18 14:51:37.952 00:00:10.367 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:52:32.345 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-08-18 14:52:38.355 00:00:10.363 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:49:13.094 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:53:32.564 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52280 10 6452 1 2025-08-18 14:53:38.757 00:00:10.384 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:50:13.096 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 14:54:32.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-08-18 14:54:39.183 00:00:10.365 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:54:56.887 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:54:57.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:55:32.996 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37710 10 6452 1 2025-08-18 14:55:39.583 00:00:10.381 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:56:33.175 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 10 6452 1 2025-08-18 14:56:40.003 00:00:10.370 TCP 23.104.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:57:33.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41084 10 6452 1 2025-08-18 14:57:40.417 00:00:10.370 TCP 23.104.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:58:33.561 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60120 10 6452 1 2025-08-18 14:58:40.824 00:00:10.382 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502734, total packets: 1579, avg bps: 1053, avg pps: 0, avg bpp: 318 Time window: 2025-08-18 13:55:13 - 2025-08-18 14:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0032s Wall: 0.0027s flows/second: 59788.4 Runtime: 0.0028s