Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 18:58:45.710 00:00:10.386 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-08-19 18:58:50.704 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60830 10 6452 1 2025-08-19 18:55:13.615 00:05:00.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 18:59:46.131 00:00:10.324 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-08-19 18:59:50.932 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-08-19 18:56:13.618 00:05:00.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:00:31.060 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:00:30.971 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:00:46.495 00:00:10.364 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:00:51.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6452 1 2025-08-19 19:01:51.347 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44188 10 6452 1 2025-08-19 19:01:46.900 00:00:10.367 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:02:47.308 00:00:10.362 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:02:51.566 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-08-19 19:03:47.708 00:00:10.373 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:03:51.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-08-19 19:04:48.114 00:00:10.347 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:04:51.986 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48064 10 6452 1 2025-08-19 19:01:13.622 00:05:00.953 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:05:30.855 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:05:30.903 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:05:48.501 00:00:10.363 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:05:52.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-08-19 19:02:13.626 00:05:00.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:06:48.904 00:00:10.369 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:06:52.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45412 10 6452 1 2025-08-19 19:07:49.312 00:00:10.327 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:07:52.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53514 10 6452 1 2025-08-19 19:08:49.676 00:00:10.328 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:08:52.848 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-08-19 19:09:50.053 00:00:10.325 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:09:53.078 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-08-19 19:10:31.284 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:10:31.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:10:50.413 00:00:10.366 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:10:53.254 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-08-19 19:07:13.623 00:05:00.955 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:11:50.816 00:00:10.369 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:11:53.425 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-08-19 19:08:13.626 00:05:00.949 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:12:51.217 00:00:10.359 TCP 23.104.0.1:48940 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:12:53.590 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-08-19 19:13:51.613 00:00:10.323 TCP 23.104.0.1:43876 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:13:53.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-19 19:14:53.977 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-08-19 19:14:51.983 00:00:10.367 TCP 23.104.0.1:35160 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:15:31.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:15:31.208 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:15:54.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 10 6452 1 2025-08-19 19:15:52.393 00:00:10.360 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:16:52.787 00:00:10.367 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:16:54.380 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-08-19 19:13:13.626 00:05:00.953 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:17:54.549 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45234 10 6452 1 2025-08-19 19:17:53.198 00:00:10.361 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:14:13.629 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:18:53.597 00:00:10.700 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:18:54.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-08-19 19:19:54.931 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48524 10 6452 1 2025-08-19 19:19:54.337 00:00:10.365 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:20:31.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:20:31.356 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:20:54.740 00:00:10.333 TCP 23.104.0.1:56904 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:20:55.163 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-08-19 19:21:55.352 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-08-19 19:21:55.132 00:00:10.372 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:22:55.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6452 1 2025-08-19 19:22:55.551 00:00:10.361 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:19:13.629 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:23:55.763 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37506 10 6452 1 2025-08-19 19:23:55.946 00:00:10.389 TCP 23.104.0.1:38636 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:20:13.633 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:24:56.380 00:00:10.367 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:24:55.979 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-08-19 19:25:31.592 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:25:31.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:25:56.213 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37608 10 6452 1 2025-08-19 19:25:56.784 00:00:10.365 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:26:56.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55298 10 6452 1 2025-08-19 19:26:57.191 00:00:10.361 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:27:56.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-08-19 19:27:57.589 00:00:10.330 TCP 23.104.0.1:59900 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:28:56.858 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51068 10 6452 1 2025-08-19 19:28:57.952 00:00:10.369 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:25:13.631 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:29:57.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-08-19 19:29:58.357 00:00:10.364 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:26:13.633 00:05:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:30:31.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:30:31.497 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:30:57.246 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 12 10367 1 2025-08-19 19:30:58.761 00:00:10.447 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 15 1926 1 2025-08-19 19:31:59.247 00:00:10.372 TCP 23.104.0.1:51422 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:31:57.485 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-08-19 19:32:57.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-08-19 19:32:59.658 00:00:10.370 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:33:57.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6452 1 2025-08-19 19:34:00.097 00:00:10.321 TCP 23.104.0.1:39840 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:34:58.124 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-08-19 19:35:00.455 00:00:10.364 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:31:13.632 00:05:00.953 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:35:31.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:35:31.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:35:58.383 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-08-19 19:36:00.856 00:00:10.376 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:32:13.634 00:05:00.949 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:36:58.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6452 1 2025-08-19 19:37:01.270 00:00:10.364 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:37:58.817 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-08-19 19:38:01.674 00:00:10.379 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:38:58.990 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-19 19:39:02.109 00:00:10.366 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:39:59.173 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-08-19 19:40:02.515 00:00:10.324 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:40:31.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:40:31.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:40:59.394 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-08-19 19:41:02.878 00:00:10.364 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:37:13.636 00:05:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:41:59.566 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-08-19 19:38:13.638 00:05:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:42:03.281 00:00:10.365 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:42:59.776 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44800 10 6452 1 2025-08-19 19:43:03.685 00:00:10.372 TCP 23.104.0.1:52180 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:44:00.003 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-08-19 19:44:04.108 00:00:10.322 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:45:00.190 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39884 10 6452 1 2025-08-19 19:45:04.470 00:00:10.364 TCP 23.104.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:45:31.889 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:45:31.819 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:46:00.414 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-08-19 19:46:04.868 00:00:10.364 TCP 23.104.0.1:32818 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:47:00.959 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-08-19 19:47:05.280 00:00:10.375 TCP 23.104.0.1:51948 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:43:13.637 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:48:01.188 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51532 10 6452 1 2025-08-19 19:48:05.695 00:00:10.369 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:44:13.640 00:05:00.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:49:01.429 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-08-19 19:49:06.108 00:00:10.369 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:50:01.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-08-19 19:50:06.515 00:00:10.380 TCP 23.104.0.1:54004 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:50:32.255 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:50:32.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:51:01.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54374 10 6452 1 2025-08-19 19:51:06.934 00:00:10.380 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:52:02.045 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-08-19 19:52:07.359 00:00:10.329 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:49:13.639 00:05:00.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 19:53:02.260 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-08-19 19:53:07.722 00:00:10.383 TCP 23.104.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:50:13.641 00:05:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 19:54:02.479 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-08-19 19:54:08.139 00:00:10.373 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:55:02.695 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-08-19 19:55:08.560 00:00:10.417 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:55:32.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 19:55:32.064 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 19:56:02.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-08-19 19:56:09.014 00:00:10.361 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:57:03.121 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-08-19 19:57:09.416 00:00:10.326 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 11 1507 1 2025-08-19 19:58:03.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-08-19 19:58:09.780 00:00:10.325 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1062, avg pps: 0, avg bpp: 318 Time window: 2025-08-19 18:55:13 - 2025-08-19 19:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0011s Wall: 0.0024s flows/second: 67883.7 Runtime: 0.0024s