Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 10:59:17.378 00:00:10.363 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-08-10 10:59:40.337 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50130 10 6452 1 2025-08-10 11:00:17.778 00:00:10.373 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:00:40.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55360 10 6452 1 2025-08-10 11:01:01.611 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:01:01.549 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:01:18.189 00:00:10.380 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:01:40.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45212 10 6452 1 2025-08-10 11:02:18.599 00:00:10.368 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:02:40.973 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-08-10 10:58:09.106 00:06:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:03:19.008 00:00:10.322 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:03:41.222 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39638 10 6452 1 2025-08-10 11:04:19.371 00:00:10.373 TCP 23.104.0.1:45546 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:04:41.446 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60186 10 6452 1 2025-08-10 11:00:09.108 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:05:19.784 00:00:10.379 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:05:41.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40380 10 6452 1 2025-08-10 11:06:01.498 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:06:01.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:06:20.198 00:00:10.380 TCP 23.104.0.1:41826 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:06:41.877 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-08-10 11:07:20.612 00:00:10.326 TCP 23.104.0.1:54856 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:07:42.096 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47326 10 6452 1 2025-08-10 11:08:20.973 00:00:10.365 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:08:42.311 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44606 10 6452 1 2025-08-10 11:09:21.379 00:00:10.368 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:09:42.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-08-10 11:05:09.107 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:10:21.783 00:00:10.372 TCP 23.104.0.1:53380 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:11:01.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:10:42.733 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 2025-08-10 11:11:01.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:11:22.192 00:00:10.365 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:11:42.946 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 11 7373 1 2025-08-10 11:07:09.121 00:06:00.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:12:22.594 00:00:10.325 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:12:43.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33798 10 6452 1 2025-08-10 11:13:22.962 00:00:10.371 TCP 23.104.0.1:59920 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:13:43.396 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52462 10 6452 1 2025-08-10 11:14:23.374 00:00:10.322 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:14:43.609 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6452 1 2025-08-10 11:15:23.733 00:00:10.368 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:15:43.782 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-08-10 11:16:01.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:16:01.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:16:24.148 00:00:10.366 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:16:43.994 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34522 10 6452 1 2025-08-10 11:12:09.119 00:06:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:17:24.551 00:00:10.378 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:17:44.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56006 10 6452 1 2025-08-10 11:18:24.973 00:00:10.367 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:18:44.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-08-10 11:14:09.122 00:06:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:19:25.381 00:00:10.362 TCP 23.104.0.1:46526 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:19:44.640 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42630 10 6452 1 2025-08-10 11:20:25.779 00:00:10.322 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:20:44.858 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-08-10 11:21:01.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:21:01.999 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:21:26.136 00:00:10.370 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:21:45.094 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-08-10 11:22:26.543 00:00:10.366 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:22:45.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-08-10 11:23:26.952 00:00:10.365 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:23:45.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-08-10 11:19:09.119 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:24:27.354 00:00:10.363 TCP 23.104.0.1:33196 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:24:45.734 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-08-10 11:25:27.755 00:00:10.358 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:25:45.907 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-08-10 11:26:01.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:26:02.101 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:21:09.122 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:26:28.152 00:00:10.325 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:26:46.114 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-08-10 11:27:28.515 00:00:10.325 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:27:46.348 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-08-10 11:28:28.878 00:00:10.379 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:28:46.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-08-10 11:29:29.297 00:00:10.319 TCP 23.104.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:29:46.748 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6452 1 2025-08-10 11:30:29.655 00:00:10.366 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:30:46.955 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36930 10 6452 1 2025-08-10 11:31:02.195 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:31:02.115 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:26:09.120 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:31:30.070 00:00:10.370 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:31:47.185 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-08-10 11:32:30.477 00:00:10.360 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:32:47.395 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 10 6452 1 2025-08-10 11:28:09.124 00:06:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:33:30.874 00:00:10.616 TCP 23.104.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:33:47.592 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-08-10 11:34:31.551 00:00:10.363 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:34:47.823 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-08-10 11:35:31.951 00:00:10.364 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:36:02.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:35:48.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56508 10 6452 1 2025-08-10 11:36:02.253 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:36:32.355 00:00:10.365 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:36:48.283 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-08-10 11:37:32.759 00:00:10.392 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:37:48.452 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58056 10 6452 1 2025-08-10 11:33:09.123 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:38:33.181 00:00:10.369 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:38:48.629 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39482 10 6452 1 2025-08-10 11:39:33.588 00:00:10.365 TCP 23.104.0.1:33748 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:39:48.842 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 11 6492 1 2025-08-10 11:35:09.125 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:40:33.995 00:00:10.365 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:41:02.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:40:49.013 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-08-10 11:41:02.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:41:34.392 00:00:10.368 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:41:49.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-08-10 11:42:34.799 00:00:10.344 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:42:49.434 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-08-10 11:43:35.181 00:00:10.362 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:43:49.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2025-08-10 11:44:35.584 00:00:10.370 TCP 23.104.0.1:49976 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:44:49.862 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-08-10 11:40:09.123 00:06:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:45:35.997 00:00:10.364 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:45:50.083 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-08-10 11:46:02.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:46:02.538 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:46:36.403 00:00:10.329 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:46:50.251 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-08-10 11:42:09.128 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:47:36.783 00:00:10.367 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:47:50.478 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-08-10 11:48:37.187 00:00:10.372 TCP 23.104.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:48:50.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-08-10 11:49:37.599 00:00:10.367 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:49:50.901 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 2025-08-10 11:50:38.001 00:00:10.328 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:50:51.115 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34554 10 6452 1 2025-08-10 11:51:02.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:51:02.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:51:38.367 00:00:10.322 TCP 23.104.0.1:35716 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:51:51.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-08-10 11:47:09.125 00:06:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 11:52:38.728 00:00:10.363 TCP 23.104.0.1:49356 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:52:51.515 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2025-08-10 11:53:39.139 00:00:10.361 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:53:51.719 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-08-10 11:49:09.129 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 11:54:39.540 00:00:10.322 TCP 23.104.0.1:54772 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:54:51.930 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-08-10 11:55:39.899 00:00:10.752 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:56:02.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 11:55:52.163 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-08-10 11:56:02.646 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 11:56:40.689 00:00:10.367 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:56:52.380 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-08-10 11:57:41.102 00:00:10.369 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-08-10 11:57:52.589 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48114 10 6452 1 2025-08-10 11:58:41.508 00:00:10.363 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 159, total bytes: 491873, total packets: 1548, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-08-10 10:58:09 - 2025-08-10 11:58:51 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0030s User: 0.0020s Wall: 0.0028s flows/second: 57774.8 Runtime: 0.0028s