Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-05 08:58:51.943 00:00:10.373 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-08-05 08:55:06.640 00:05:00.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 08:59:13.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-08-05 08:59:52.356 00:00:10.364 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:00:13.991 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-08-05 09:00:52.760 00:00:10.378 TCP 23.104.0.1:49332 -> 1.101.0.1:3000 11 1507 1 2025-08-05 08:57:06.642 00:05:00.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:01:14.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-08-05 09:01:53.175 00:00:10.366 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:02:14.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-05 09:02:53.576 00:00:10.368 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:03:14.598 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-08-05 09:03:34.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:03:34.626 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:03:53.984 00:00:10.370 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:04:14.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-08-05 09:04:54.393 00:00:10.366 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:01:06.641 00:05:00.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:05:14.985 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54160 10 6452 1 2025-08-05 09:05:54.798 00:00:10.364 TCP 23.104.0.1:44714 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:06:15.206 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-08-05 09:06:55.200 00:00:10.382 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:03:06.643 00:05:00.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:07:15.420 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-08-05 09:07:55.618 00:00:10.370 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:08:15.631 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43036 10 6452 1 2025-08-05 09:08:34.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:08:34.795 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:08:56.027 00:00:10.323 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:09:15.854 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-08-05 09:09:56.391 00:00:10.378 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:10:16.086 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-08-05 09:07:06.640 00:05:00.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:10:56.805 00:00:10.365 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:11:16.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43980 10 6452 1 2025-08-05 09:11:57.210 00:00:10.362 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:12:16.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-08-05 09:12:57.612 00:00:10.322 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:09:06.646 00:05:00.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:13:16.681 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-08-05 09:13:34.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:13:35.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:13:57.975 00:00:10.369 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:14:16.898 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-08-05 09:14:58.389 00:00:10.382 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:15:17.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 10 6452 1 2025-08-05 09:15:58.817 00:00:10.362 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:16:17.327 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 6452 1 2025-08-05 09:16:59.223 00:00:10.366 TCP 23.104.0.1:51108 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:13:06.643 00:05:00.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:17:17.535 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-08-05 09:17:59.629 00:00:10.360 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:18:17.707 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6452 1 2025-08-05 09:18:35.272 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:18:35.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:19:00.034 00:00:10.359 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:15:06.646 00:05:00.533 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:19:17.919 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-08-05 09:20:00.444 00:00:10.365 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:20:18.104 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6452 1 2025-08-05 09:21:00.847 00:00:10.370 TCP 23.104.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:21:18.314 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-08-05 09:22:01.258 00:00:10.324 TCP 23.104.0.1:51254 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:22:18.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45380 10 6452 1 2025-08-05 09:19:06.645 00:05:00.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:23:01.619 00:00:10.364 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:23:18.737 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53730 10 6452 1 2025-08-05 09:23:34.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:23:34.899 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:24:02.024 00:00:10.443 TCP 23.104.0.1:56088 -> 1.101.0.1:3000 15 1926 1 2025-08-05 09:24:18.922 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:52020 12 10367 1 2025-08-05 09:21:06.648 00:05:00.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:25:02.512 00:00:10.370 TCP 23.104.0.1:54182 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:25:19.389 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57498 10 6452 1 2025-08-05 09:26:02.924 00:00:10.381 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:26:19.560 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6452 1 2025-08-05 09:27:03.342 00:00:10.361 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:27:19.775 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-08-05 09:28:03.741 00:00:10.365 TCP 23.104.0.1:35478 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:28:19.987 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-08-05 09:28:35.248 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:28:35.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:25:06.646 00:05:00.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:29:04.144 00:00:10.361 TCP 23.104.0.1:36538 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:29:20.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-08-05 09:30:04.546 00:00:10.365 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:30:20.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-08-05 09:27:06.649 00:05:00.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:31:04.944 00:00:10.371 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:31:20.556 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37140 10 6452 1 2025-08-05 09:32:05.358 00:00:10.365 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:32:20.769 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-08-05 09:33:05.763 00:00:10.374 TCP 23.104.0.1:55106 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:33:35.524 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:33:20.985 00:00:12.009 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-08-05 09:33:35.555 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:34:06.181 00:00:10.363 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:34:23.054 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46584 10 6452 1 2025-08-05 09:31:06.648 00:05:00.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:35:06.584 00:00:10.368 TCP 23.104.0.1:40300 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:35:23.268 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42688 10 6452 1 2025-08-05 09:36:06.988 00:00:10.368 TCP 23.104.0.1:45144 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:36:23.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-08-05 09:33:06.650 00:05:00.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:37:07.413 00:00:10.382 TCP 23.104.0.1:34008 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:37:23.686 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 10 6452 1 2025-08-05 09:38:07.820 00:00:10.366 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:38:35.453 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:38:23.895 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-08-05 09:38:35.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:39:08.218 00:00:10.383 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:39:24.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-08-05 09:40:08.622 00:00:10.379 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:40:24.324 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-08-05 09:37:06.647 00:05:00.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:41:09.062 00:00:10.328 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:41:24.503 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41496 10 6452 1 2025-08-05 09:42:09.424 00:00:10.334 TCP 23.104.0.1:48122 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:42:24.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-08-05 09:39:06.650 00:05:00.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:43:09.792 00:00:10.375 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:43:35.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:43:24.942 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60732 10 6452 1 2025-08-05 09:43:35.594 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:44:10.209 00:00:10.371 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:44:25.188 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-08-05 09:45:10.619 00:00:10.370 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:45:25.366 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-08-05 09:46:11.025 00:00:10.370 TCP 23.104.0.1:49714 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:46:25.602 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-08-05 09:43:06.648 00:05:00.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:47:11.436 00:00:10.364 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:47:25.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-08-05 09:48:11.843 00:00:10.374 TCP 23.104.0.1:42470 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:48:35.576 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:48:26.042 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-08-05 09:48:35.598 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:45:06.651 00:05:00.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:49:12.255 00:00:10.327 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:49:26.260 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6452 1 2025-08-05 09:50:12.624 00:00:10.361 TCP 23.104.0.1:55822 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:50:26.480 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 10 6452 1 2025-08-05 09:51:13.025 00:00:10.361 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:51:26.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 11 6492 1 2025-08-05 09:52:13.426 00:00:10.319 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:52:26.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-08-05 09:49:06.650 00:05:00.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-05 09:53:13.791 00:00:10.364 TCP 23.104.0.1:37372 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:53:35.914 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:53:35.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:53:27.120 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-08-05 09:54:14.192 00:00:10.375 TCP 23.104.0.1:45084 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:54:27.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39514 10 6452 1 2025-08-05 09:51:06.653 00:05:00.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-05 09:55:14.620 00:00:10.364 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:55:27.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47228 10 6452 1 2025-08-05 09:56:15.025 00:00:10.363 TCP 23.104.0.1:50124 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:56:27.739 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-08-05 09:57:15.424 00:00:10.363 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:57:27.920 00:00:10.381 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-08-05 09:58:15.823 00:00:10.352 TCP 23.104.0.1:43540 -> 1.101.0.1:3000 11 1507 1 2025-08-05 09:58:35.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-05 09:58:35.929 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-05 09:58:28.342 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54826 10 6452 1 Summary: total flows: 164, total bytes: 502722, total packets: 1579, avg bps: 1055, avg pps: 0, avg bpp: 318 Time window: 2025-08-05 08:55:06 - 2025-08-05 09:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0011s User: 0.0032s Wall: 0.0028s flows/second: 58968.4 Runtime: 0.0028s