Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 22:55:13.240 00:05:00.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:59:07.661 00:00:10.326 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:59:19.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-08-18 23:00:06.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:00:06.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:56:13.243 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:00:08.025 00:00:10.365 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:00:20.039 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51788 10 6452 1 2025-08-18 23:01:08.428 00:00:10.363 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:01:20.211 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 11 6504 1 2025-08-18 23:02:08.826 00:00:10.362 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:02:20.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38682 10 6452 1 2025-08-18 23:03:09.225 00:00:10.371 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:03:20.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56784 10 6452 1 2025-08-18 23:04:09.640 00:00:10.366 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:04:20.872 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54832 10 6452 1 2025-08-18 23:05:06.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:05:07.074 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:01:13.242 00:05:00.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:05:10.060 00:00:10.365 TCP 23.104.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:05:21.105 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-08-18 23:02:13.245 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:06:10.465 00:00:10.361 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:06:21.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-08-18 23:07:10.863 00:00:10.336 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:07:21.540 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-08-18 23:08:11.233 00:00:10.367 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:08:21.719 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-08-18 23:09:11.642 00:00:10.368 TCP 23.104.0.1:37842 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:09:21.932 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48676 10 6452 1 2025-08-18 23:10:07.216 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:10:07.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:10:12.054 00:00:10.363 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:10:22.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-08-18 23:07:13.243 00:05:00.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:11:12.465 00:00:10.360 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:11:22.390 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-08-18 23:08:13.247 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:12:12.864 00:00:10.370 TCP 23.104.0.1:53926 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:12:22.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-08-18 23:13:13.283 00:00:16.067 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:13:22.773 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-08-18 23:14:19.397 00:00:10.326 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:14:22.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-08-18 23:15:07.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:15:07.215 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:15:19.763 00:00:10.377 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:15:23.182 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-08-18 23:16:20.181 00:00:10.365 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:16:23.359 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-08-18 23:13:13.244 00:05:00.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:17:20.583 00:00:10.368 TCP 23.104.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:17:23.569 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-08-18 23:14:13.247 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:18:20.994 00:00:10.365 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:18:23.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58626 10 6452 1 2025-08-18 23:19:21.406 00:00:10.362 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:19:23.951 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50810 10 6452 1 2025-08-18 23:20:07.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:20:06.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:20:24.181 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37170 10 6452 1 2025-08-18 23:20:21.811 00:00:10.365 TCP 23.104.0.1:46362 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:21:24.407 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-08-18 23:21:22.216 00:00:10.365 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:22:24.579 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-08-18 23:22:22.621 00:00:10.372 TCP 23.104.0.1:48120 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:19:13.247 00:05:00.957 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:23:24.753 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41724 10 6452 1 2025-08-18 23:23:23.028 00:00:10.366 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:20:13.252 00:05:00.951 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:24:23.435 00:00:10.365 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:24:24.974 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-08-18 23:25:07.274 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:25:07.422 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:25:25.205 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36880 12 6556 1 2025-08-18 23:25:23.841 00:00:10.389 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:26:25.428 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40400 10 6452 1 2025-08-18 23:26:24.267 00:00:10.369 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:27:25.652 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60098 10 6452 1 2025-08-18 23:27:24.682 00:00:10.368 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:28:25.869 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-08-18 23:28:25.104 00:00:10.367 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:25:13.251 00:05:00.954 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:29:26.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45348 10 6452 1 2025-08-18 23:29:25.507 00:00:10.370 TCP 23.104.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:30:07.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:30:07.182 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:26:13.252 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:30:25.913 00:00:10.323 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:30:26.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-08-18 23:31:26.507 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44808 10 6452 1 2025-08-18 23:31:26.276 00:00:10.360 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:32:26.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-08-18 23:32:26.677 00:00:10.319 TCP 23.104.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:33:27.034 00:00:10.369 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:33:26.938 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42456 10 6452 1 2025-08-18 23:34:27.183 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55926 10 6452 1 2025-08-18 23:34:27.442 00:00:10.325 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:35:07.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:35:07.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:31:13.250 00:05:00.955 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:35:27.395 00:00:10.265 TCP 1.101.0.1:3000 -> 22.102.0.1:59456 10 6452 1 2025-08-18 23:35:27.803 00:00:10.370 TCP 23.104.0.1:42678 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:32:13.253 00:05:00.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:36:28.210 00:00:10.369 TCP 23.104.0.1:40850 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:36:27.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-08-18 23:37:27.912 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-08-18 23:37:28.618 00:00:10.370 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:38:28.120 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6452 1 2025-08-18 23:38:29.032 00:00:10.361 TCP 23.104.0.1:54664 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:39:29.429 00:00:10.368 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:39:28.346 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-08-18 23:40:07.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:40:07.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:40:28.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-08-18 23:40:29.835 00:00:10.349 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:37:13.251 00:05:00.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:41:30.219 00:00:10.364 TCP 23.104.0.1:41566 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:41:28.727 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-08-18 23:38:13.254 00:05:00.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:42:30.623 00:00:10.368 TCP 23.104.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:42:28.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 10 6452 1 2025-08-18 23:43:29.117 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-08-18 23:43:31.032 00:00:10.364 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:44:29.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49942 10 6452 1 2025-08-18 23:44:31.434 00:00:10.363 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:45:07.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:45:07.869 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:45:29.552 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-08-18 23:45:31.835 00:00:10.401 TCP 23.104.0.1:36664 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:46:29.765 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-08-18 23:46:32.277 00:00:10.368 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:43:13.252 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:47:29.942 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-08-18 23:47:32.692 00:00:10.365 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:44:13.254 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:48:30.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44530 10 6452 1 2025-08-18 23:48:33.103 00:00:10.372 TCP 23.104.0.1:42432 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:49:30.402 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-08-18 23:49:33.516 00:00:10.362 TCP 23.104.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:50:08.147 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:50:07.708 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:50:30.613 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-08-18 23:50:33.913 00:00:10.335 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:51:30.829 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 10 6452 1 2025-08-18 23:51:34.288 00:00:10.322 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:52:31.088 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 12 6556 1 2025-08-18 23:52:34.650 00:00:10.363 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:49:13.252 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 23:53:31.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-08-18 23:53:35.060 00:00:10.367 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:50:13.254 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 23:54:31.525 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 2025-08-18 23:54:35.462 00:00:10.377 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:55:08.119 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 23:55:08.040 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 23:55:31.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57560 10 6452 1 2025-08-18 23:55:35.888 00:00:10.905 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:56:31.955 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-08-18 23:56:36.837 00:00:10.392 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:57:32.152 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59028 10 6452 1 2025-08-18 23:57:37.263 00:00:10.368 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-08-18 23:58:32.363 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-08-18 23:58:37.663 00:00:10.367 TCP 23.104.0.1:48040 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1045, avg pps: 0, avg bpp: 316 Time window: 2025-08-18 22:55:13 - 2025-08-18 23:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0022s Wall: 0.0022s flows/second: 74139.5 Runtime: 0.0022s