Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-20 01:53:58.275 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 01:58:58.398 00:00:10.319 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-07-20 01:59:16.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6438 1 2025-07-20 01:59:58.755 00:00:10.368 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:00:17.090 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6438 1 2025-07-20 02:00:44.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:00:44.428 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 01:55:58.273 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:00:59.164 00:00:10.323 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:01:17.268 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34544 10 6438 1 2025-07-20 02:01:59.530 00:00:10.318 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:02:17.482 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6438 1 2025-07-20 02:02:59.889 00:00:10.377 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:03:17.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6438 1 2025-07-20 02:04:00.304 00:00:10.364 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:04:17.898 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6438 1 2025-07-20 02:05:00.706 00:00:10.362 TCP 23.104.0.1:44382 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:05:18.111 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50186 10 6438 1 2025-07-20 02:05:44.084 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:05:44.051 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:00:58.277 00:06:00.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:06:01.111 00:00:10.322 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:06:18.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44754 10 6438 1 2025-07-20 02:07:01.476 00:00:10.363 TCP 23.104.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:07:18.541 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6438 1 2025-07-20 02:02:58.274 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:08:01.880 00:00:10.328 TCP 23.104.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:08:18.754 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6438 1 2025-07-20 02:09:02.245 00:00:10.375 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:09:18.972 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6438 1 2025-07-20 02:10:02.664 00:00:10.367 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:10:19.209 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58524 10 6438 1 2025-07-20 02:10:44.392 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:10:44.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:11:03.093 00:00:10.332 TCP 23.104.0.1:40092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:11:19.424 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6438 1 2025-07-20 02:12:03.478 00:00:10.362 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:12:19.592 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6438 1 2025-07-20 02:07:58.279 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:13:03.880 00:00:10.436 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 17 2029 1 2025-07-20 02:13:19.806 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 12 10352 1 2025-07-20 02:14:04.356 00:00:10.328 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:14:20.001 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6438 1 2025-07-20 02:09:58.275 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:15:04.734 00:00:10.371 TCP 23.104.0.1:33304 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:15:20.223 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6438 1 2025-07-20 02:15:44.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:15:44.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:16:05.144 00:00:10.371 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:16:20.440 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51534 10 6438 1 2025-07-20 02:17:05.565 00:00:10.362 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:17:20.667 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6438 1 2025-07-20 02:18:05.970 00:00:10.366 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:18:20.844 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6438 1 2025-07-20 02:19:06.376 00:00:10.372 TCP 23.104.0.1:42488 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:19:21.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6438 1 2025-07-20 02:14:58.279 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:20:06.786 00:00:10.363 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:20:21.289 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 10 6438 1 2025-07-20 02:20:44.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:20:44.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:21:07.186 00:00:10.360 TCP 23.104.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:21:21.464 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59766 10 6438 1 2025-07-20 02:16:58.278 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:22:07.587 00:00:10.372 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:22:21.637 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6438 1 2025-07-20 02:23:07.996 00:00:10.364 TCP 23.104.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:23:21.856 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6438 1 2025-07-20 02:24:08.399 00:00:10.361 TCP 23.104.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:24:22.102 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49084 10 6438 1 2025-07-20 02:25:08.809 00:00:10.365 TCP 23.104.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:25:22.286 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6438 1 2025-07-20 02:25:44.737 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:25:44.576 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:26:09.217 00:00:10.367 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:26:22.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50482 10 6438 1 2025-07-20 02:21:58.281 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:27:09.626 00:00:10.375 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:27:22.727 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 10 6438 1 2025-07-20 02:28:10.029 00:00:10.361 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:28:22.940 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6438 1 2025-07-20 02:23:58.279 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:29:10.432 00:00:10.361 TCP 23.104.0.1:44010 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:29:23.168 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47862 10 6438 1 2025-07-20 02:30:10.844 00:00:10.382 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:30:23.338 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6438 1 2025-07-20 02:30:44.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:30:44.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:31:11.264 00:00:10.367 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:31:23.547 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6438 1 2025-07-20 02:32:11.671 00:00:10.372 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:32:23.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6438 1 2025-07-20 02:33:12.107 00:00:10.362 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:33:23.978 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59576 10 6438 1 2025-07-20 02:28:58.283 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:34:12.510 00:00:10.365 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:34:24.224 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6438 1 2025-07-20 02:35:12.918 00:00:10.329 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:35:24.401 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6438 1 2025-07-20 02:35:44.801 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:35:44.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:30:58.281 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:36:13.289 00:00:10.366 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:36:24.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6438 1 2025-07-20 02:37:13.694 00:00:10.360 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:37:24.781 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42962 10 6438 1 2025-07-20 02:38:14.104 00:00:10.366 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:38:24.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6438 1 2025-07-20 02:39:14.507 00:00:10.369 TCP 23.104.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:39:25.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6438 1 2025-07-20 02:40:14.914 00:00:10.366 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:40:25.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6438 1 2025-07-20 02:40:44.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:40:44.839 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:35:58.288 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:41:15.324 00:00:10.331 TCP 23.104.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:41:25.632 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6438 1 2025-07-20 02:42:15.705 00:00:10.368 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:42:25.806 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6438 1 2025-07-20 02:37:58.286 00:06:00.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:43:16.110 00:00:10.363 TCP 23.104.0.1:35838 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:43:26.020 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6438 1 2025-07-20 02:44:16.512 00:00:10.362 TCP 23.104.0.1:35352 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:44:26.234 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6438 1 2025-07-20 02:45:16.910 00:00:10.364 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:45:26.449 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6438 1 2025-07-20 02:45:44.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:45:44.851 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:46:17.315 00:00:10.363 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:46:26.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6438 1 2025-07-20 02:47:17.721 00:00:10.373 TCP 23.104.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:47:26.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6438 1 2025-07-20 02:42:58.289 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:48:18.134 00:00:10.361 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:48:27.107 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46714 10 6438 1 2025-07-20 02:49:18.532 00:00:10.369 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:49:27.295 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6438 1 2025-07-20 02:44:58.287 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:50:18.944 00:00:10.327 TCP 23.104.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:50:27.474 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49086 10 6438 1 2025-07-20 02:50:45.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:50:45.018 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:51:19.310 00:00:10.367 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:51:27.688 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53660 10 6438 1 2025-07-20 02:52:19.723 00:00:10.376 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:52:27.898 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6438 1 2025-07-20 02:53:20.133 00:00:10.363 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:53:28.094 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6438 1 2025-07-20 02:54:20.541 00:00:10.362 TCP 23.104.0.1:58916 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:54:28.308 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6438 1 2025-07-20 02:49:58.292 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 02:55:20.940 00:00:10.374 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:55:28.508 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6438 1 2025-07-20 02:55:45.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 02:55:45.108 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 02:56:21.353 00:00:10.356 TCP 23.104.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:56:28.711 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59156 10 6438 1 2025-07-20 02:51:58.288 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 02:57:21.748 00:00:10.378 TCP 23.104.0.1:38042 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:57:28.885 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6438 1 2025-07-20 02:58:22.164 00:00:10.358 TCP 23.104.0.1:40890 -> 1.101.0.1:3000 11 1507 1 2025-07-20 02:58:29.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6438 1 Summary: total flows: 162, total bytes: 502682, total packets: 1592, avg bps: 1036, avg pps: 0, avg bpp: 315 Time window: 2025-07-20 01:53:58 - 2025-07-20 02:58:39 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0028s flows/second: 58000.6 Runtime: 0.0028s