Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 14:54:59.900 00:05:00.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 14:59:05.377 00:00:10.373 TCP 23.104.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-07-23 14:59:15.666 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6438 1 2025-07-23 15:00:05.793 00:00:10.369 TCP 23.104.0.1:59944 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:00:15.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37070 10 6438 1 2025-07-23 15:01:06.200 00:00:10.328 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:01:16.109 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45244 10 6438 1 2025-07-23 15:02:06.564 00:00:10.362 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:02:16.328 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38834 10 6438 1 2025-07-23 15:02:26.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:02:26.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 14:58:59.899 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:03:06.964 00:00:10.330 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:03:16.541 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6438 1 2025-07-23 15:04:07.335 00:00:10.327 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:04:16.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6438 1 2025-07-23 15:00:59.903 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:05:07.698 00:00:10.369 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:05:16.966 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6438 1 2025-07-23 15:06:08.109 00:00:10.363 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:06:17.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6438 1 2025-07-23 15:07:08.513 00:00:10.363 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:07:26.388 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:07:26.516 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:07:17.403 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54072 10 6438 1 2025-07-23 15:08:08.917 00:00:10.323 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:08:17.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57080 10 6438 1 2025-07-23 15:04:59.902 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:09:09.278 00:00:10.366 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:09:17.824 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41366 10 6438 1 2025-07-23 15:10:09.688 00:00:10.370 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:10:18.064 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 11 6490 1 2025-07-23 15:06:59.903 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:11:10.106 00:00:10.365 TCP 23.104.0.1:34152 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:11:18.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6438 1 2025-07-23 15:12:10.513 00:00:10.324 TCP 23.104.0.1:46386 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:12:26.763 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:12:26.661 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:12:18.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40942 10 6438 1 2025-07-23 15:13:10.875 00:00:10.374 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:13:19.099 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34916 10 6438 1 2025-07-23 15:14:11.295 00:00:10.321 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:14:19.306 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6438 1 2025-07-23 15:10:59.901 00:05:00.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:15:11.653 00:00:10.322 TCP 23.104.0.1:55132 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:15:19.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51736 10 6438 1 2025-07-23 15:16:12.013 00:00:10.369 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:16:19.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56058 10 6438 1 2025-07-23 15:12:59.904 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:17:12.422 00:00:10.366 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:17:26.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:17:19.949 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6438 1 2025-07-23 15:17:27.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:18:12.826 00:00:10.453 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 15 1925 1 2025-07-23 15:18:20.178 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51448 14 10456 1 2025-07-23 15:19:13.316 00:00:10.367 TCP 23.104.0.1:58904 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:19:20.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55788 10 6438 1 2025-07-23 15:20:13.728 00:00:10.363 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:20:20.642 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6438 1 2025-07-23 15:16:59.903 00:05:00.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:21:14.129 00:00:10.367 TCP 23.104.0.1:46690 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:21:20.822 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6438 1 2025-07-23 15:22:26.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:22:21.060 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6438 1 2025-07-23 15:22:14.536 00:00:10.363 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:22:26.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:18:59.905 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:23:14.938 00:00:10.452 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 15 1925 1 2025-07-23 15:23:21.278 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 12 10352 1 2025-07-23 15:24:15.428 00:00:10.365 TCP 23.104.0.1:52628 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:24:21.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6438 1 2025-07-23 15:25:15.831 00:00:10.351 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:25:21.736 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6438 1 2025-07-23 15:26:16.218 00:00:10.370 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:26:21.961 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6438 1 2025-07-23 15:22:59.903 00:05:00.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:27:26.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:27:16.624 00:00:10.325 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:27:26.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:27:22.148 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6438 1 2025-07-23 15:28:16.987 00:00:10.438 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 15 1925 1 2025-07-23 15:28:22.361 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 12 10352 1 2025-07-23 15:24:59.906 00:05:00.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:29:17.469 00:00:10.367 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:29:22.555 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6438 1 2025-07-23 15:30:17.873 00:00:10.372 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:30:22.775 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6438 1 2025-07-23 15:31:18.291 00:00:10.330 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:31:22.985 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49282 10 6438 1 2025-07-23 15:32:26.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:32:18.662 00:00:10.362 TCP 23.104.0.1:56940 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:32:27.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:32:23.208 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6438 1 2025-07-23 15:28:59.904 00:05:00.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:33:19.093 00:00:10.321 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:33:23.424 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 10 6438 1 2025-07-23 15:34:19.449 00:00:10.367 TCP 23.104.0.1:54708 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:34:23.639 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53482 10 6438 1 2025-07-23 15:30:59.907 00:05:00.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:35:19.851 00:00:10.377 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:35:23.866 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59212 10 6438 1 2025-07-23 15:36:20.268 00:00:10.366 TCP 23.104.0.1:44964 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:36:24.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6438 1 2025-07-23 15:37:27.103 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:37:20.676 00:00:10.371 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:37:27.310 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:37:24.303 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6438 1 2025-07-23 15:38:21.109 00:00:10.367 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:38:24.523 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6438 1 2025-07-23 15:34:59.906 00:05:00.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:39:21.521 00:00:10.363 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:39:24.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6438 1 2025-07-23 15:40:21.917 00:00:10.381 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:40:24.951 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45672 12 6542 1 2025-07-23 15:36:59.908 00:05:00.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:41:25.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56106 10 6438 1 2025-07-23 15:41:22.337 00:00:10.368 TCP 23.104.0.1:60756 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:42:27.414 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:42:27.470 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:42:25.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 10 6438 1 2025-07-23 15:42:22.743 00:00:10.363 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:43:23.143 00:00:10.364 TCP 23.104.0.1:48184 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:43:25.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56572 10 6438 1 2025-07-23 15:44:23.547 00:00:10.327 TCP 23.104.0.1:58918 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:44:25.821 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49842 10 6438 1 2025-07-23 15:40:59.906 00:05:00.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:45:23.910 00:00:10.365 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:45:26.042 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6438 1 2025-07-23 15:46:24.315 00:00:10.325 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:46:26.252 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6438 1 2025-07-23 15:42:59.916 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:47:27.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:47:27.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:47:26.422 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6438 1 2025-07-23 15:47:24.687 00:00:10.368 TCP 23.104.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:48:26.635 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36776 10 6438 1 2025-07-23 15:48:25.106 00:00:10.367 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:49:25.513 00:00:10.368 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:49:26.852 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6438 1 2025-07-23 15:50:25.914 00:00:10.358 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:50:27.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42118 10 6438 1 2025-07-23 15:46:59.914 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:51:26.312 00:00:10.322 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:51:27.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6438 1 2025-07-23 15:52:27.623 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:52:27.522 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:52:26.673 00:00:10.373 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:52:27.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6438 1 2025-07-23 15:48:59.918 00:05:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 15:53:27.115 00:00:10.383 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:53:27.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6438 1 2025-07-23 15:54:27.949 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6438 1 2025-07-23 15:54:27.532 00:00:10.376 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:55:27.945 00:00:10.354 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:55:28.139 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6438 1 2025-07-23 15:56:28.340 00:00:10.367 TCP 23.104.0.1:39218 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:56:28.316 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35392 10 6438 1 2025-07-23 15:52:59.916 00:05:00.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 15:57:27.714 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 15:57:27.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 15:57:28.742 00:00:10.367 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-07-23 15:57:28.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 10 6438 1 2025-07-23 15:58:28.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6438 1 2025-07-23 15:58:29.146 00:00:10.367 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 510764, total packets: 1595, avg bps: 1069, avg pps: 0, avg bpp: 320 Time window: 2025-07-23 14:54:59 - 2025-07-23 15:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0022s Wall: 0.0022s flows/second: 75333.0 Runtime: 0.0022s