Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-07 16:58:57.753 00:00:10.372 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-08-07 16:59:27.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57320 10 6452 1 2025-08-07 16:59:43.241 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 16:59:42.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 16:59:58.163 00:00:10.369 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:00:27.345 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-08-07 17:00:58.570 00:00:10.370 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:01:27.556 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49160 10 6452 1 2025-08-07 17:01:58.975 00:00:10.377 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:02:27.765 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-08-07 17:02:59.389 00:00:10.365 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-08-07 16:59:07.706 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:03:27.944 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-08-07 17:03:59.792 00:00:10.372 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:00:07.704 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:04:28.178 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-08-07 17:04:42.251 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:04:41.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:05:00.207 00:00:10.368 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:05:28.349 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60734 10 6452 1 2025-08-07 17:06:00.612 00:00:10.367 TCP 23.104.0.1:46768 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:06:28.562 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55546 10 6452 1 2025-08-07 17:07:01.018 00:00:10.369 TCP 23.104.0.1:33592 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:07:28.731 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-08-07 17:08:01.426 00:00:10.370 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:08:28.954 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-08-07 17:05:07.708 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:09:01.837 00:00:10.383 TCP 23.104.0.1:41432 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:09:29.153 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-08-07 17:09:42.217 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:09:42.270 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:06:07.705 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:10:02.264 00:00:10.365 TCP 23.104.0.1:52310 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:10:29.368 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-08-07 17:11:02.664 00:00:10.322 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:11:29.552 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-08-07 17:12:03.031 00:00:10.363 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:12:29.770 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-08-07 17:13:03.439 00:00:10.515 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:13:30.012 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 14 10471 1 2025-08-07 17:14:04.008 00:00:10.436 TCP 23.104.0.1:49648 -> 1.101.0.1:3000 15 1926 1 2025-08-07 17:14:30.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-08-07 17:14:42.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:14:42.270 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:11:07.710 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:15:04.483 00:00:10.367 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:15:30.502 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43672 10 6452 1 2025-08-07 17:12:07.707 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:16:04.887 00:00:10.381 TCP 23.104.0.1:49438 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:16:30.736 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-08-07 17:17:05.308 00:00:10.366 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:17:30.971 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-08-07 17:18:05.717 00:00:10.383 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:18:31.199 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42772 10 6452 1 2025-08-07 17:19:06.142 00:00:10.419 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:19:31.411 00:00:10.305 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-08-07 17:19:42.392 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:19:42.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:20:06.598 00:00:10.587 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:20:31.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-08-07 17:17:07.712 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:21:07.231 00:00:10.371 TCP 23.104.0.1:37066 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:21:31.973 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-08-07 17:18:07.709 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:22:07.645 00:00:10.327 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:22:32.213 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-08-07 17:23:08.013 00:00:10.365 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:23:32.430 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-08-07 17:24:08.421 00:00:10.367 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:24:32.608 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:32982 10 6452 1 2025-08-07 17:24:42.719 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:24:42.739 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:25:08.827 00:00:10.352 TCP 23.104.0.1:43884 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:25:32.779 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-08-07 17:26:09.212 00:00:10.366 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:26:32.995 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48836 10 6452 1 2025-08-07 17:23:07.722 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:27:09.616 00:00:10.373 TCP 23.104.0.1:45414 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:27:33.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-08-07 17:24:07.719 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:28:10.024 00:00:10.367 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:28:33.418 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41478 10 6452 1 2025-08-07 17:29:10.429 00:00:10.366 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:29:42.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:29:33.635 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-08-07 17:29:42.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:30:10.834 00:00:10.389 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:30:33.813 00:00:10.639 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-08-07 17:31:11.256 00:00:10.364 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:31:34.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38444 10 6452 1 2025-08-07 17:32:11.658 00:00:10.362 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:32:34.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-08-07 17:29:07.723 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:33:12.060 00:00:10.366 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:33:34.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-08-07 17:30:07.721 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:34:12.464 00:00:10.359 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:34:42.958 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:34:35.140 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-08-07 17:34:42.754 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:35:12.866 00:00:10.367 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:35:35.348 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-08-07 17:36:13.274 00:00:10.364 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:36:35.516 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-08-07 17:37:13.683 00:00:10.366 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:37:35.730 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-08-07 17:38:14.099 00:00:10.375 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:38:35.950 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-08-07 17:35:07.725 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:39:14.514 00:00:10.321 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:39:36.176 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36194 10 6452 1 2025-08-07 17:39:44.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:39:44.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:36:07.721 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:40:14.871 00:00:10.369 TCP 23.104.0.1:42212 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:40:36.392 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47858 10 6452 1 2025-08-07 17:41:15.281 00:00:10.372 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:41:36.567 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45708 10 6452 1 2025-08-07 17:42:15.691 00:00:10.366 TCP 23.104.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:42:36.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-08-07 17:43:16.105 00:00:10.374 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:43:36.967 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51792 12 6556 1 2025-08-07 17:44:16.512 00:00:10.368 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:44:42.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:44:42.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:44:37.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-08-07 17:41:07.728 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:45:16.916 00:00:10.385 TCP 23.104.0.1:43720 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:45:37.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-08-07 17:42:07.725 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:46:17.340 00:00:10.367 TCP 23.104.0.1:36970 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:46:37.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-08-07 17:47:17.744 00:00:10.367 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:47:37.827 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-08-07 17:48:18.152 00:00:10.407 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:48:38.041 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 12 10367 1 2025-08-07 17:49:18.593 00:00:10.441 TCP 23.104.0.1:55320 -> 1.101.0.1:3000 15 1926 1 2025-08-07 17:49:43.025 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:49:43.100 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:49:38.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-08-07 17:50:19.103 00:00:10.355 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:50:38.502 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59614 10 6452 1 2025-08-07 17:47:07.728 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:51:19.507 00:00:10.321 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:51:38.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59710 10 6452 1 2025-08-07 17:48:07.725 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:52:19.868 00:00:10.367 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:52:38.928 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-08-07 17:53:20.276 00:00:10.375 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:53:39.161 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-08-07 17:54:20.686 00:00:10.371 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:54:43.229 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-07 17:54:43.309 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-07 17:54:39.384 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-08-07 17:55:21.106 00:00:10.365 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:55:39.595 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 10 6452 1 2025-08-07 17:56:21.506 00:00:10.365 TCP 23.104.0.1:48292 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:56:39.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34498 10 6452 1 2025-08-07 17:53:07.732 00:05:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-07 17:57:21.911 00:00:10.323 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:57:40.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41900 10 6452 1 2025-08-07 17:54:07.730 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-07 17:58:22.274 00:00:10.368 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-08-07 17:58:40.241 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 12 10367 1 Summary: total flows: 164, total bytes: 511139, total packets: 1590, avg bps: 1132, avg pps: 0, avg bpp: 321 Time window: 2025-08-07 16:58:57 - 2025-08-07 17:59:08 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0011s Wall: 0.0033s flows/second: 49472.5 Runtime: 0.0033s