Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 14:58:58.825 00:00:10.327 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:59:38.432 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33132 10 6452 1 2025-08-10 14:59:59.185 00:00:10.327 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:00:38.666 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 10 6452 1 2025-08-10 15:01:06.209 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:01:06.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:00:59.551 00:00:10.320 TCP 23.104.0.1:48328 -> 1.101.0.1:3000 11 1507 1 2025-08-10 14:56:09.175 00:06:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:01:38.877 00:00:10.571 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 10 6452 1 2025-08-10 15:01:59.907 00:00:10.362 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:02:39.488 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6452 1 2025-08-10 14:58:09.178 00:06:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:03:00.308 00:00:10.328 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:03:39.707 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40382 10 6452 1 2025-08-10 15:04:00.675 00:00:10.399 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 15 1926 1 2025-08-10 15:04:39.930 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:52770 12 10367 1 2025-08-10 15:05:01.113 00:00:10.363 TCP 23.104.0.1:39072 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:05:40.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-08-10 15:06:06.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:06:06.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:06:01.514 00:00:10.364 TCP 23.104.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:06:40.405 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60404 10 6452 1 2025-08-10 15:07:01.918 00:00:10.380 TCP 23.104.0.1:41894 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:07:40.625 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-08-10 15:03:09.179 00:06:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:08:02.336 00:00:10.325 TCP 23.104.0.1:36584 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:08:40.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-08-10 15:09:02.695 00:00:10.367 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:09:41.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-08-10 15:05:09.180 00:06:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:10:03.102 00:00:10.364 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:10:41.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36308 10 6452 1 2025-08-10 15:11:06.547 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:11:06.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:11:03.505 00:00:10.365 TCP 23.104.0.1:53300 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:11:41.499 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48140 10 6452 1 2025-08-10 15:12:03.907 00:00:10.331 TCP 23.104.0.1:49482 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:12:41.676 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6452 1 2025-08-10 15:13:04.278 00:00:10.366 TCP 23.104.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:13:41.885 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36780 10 6452 1 2025-08-10 15:14:04.685 00:00:10.375 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:14:42.108 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44386 10 6452 1 2025-08-10 15:10:09.178 00:06:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:15:05.112 00:00:10.371 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:15:42.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-08-10 15:16:06.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:16:06.719 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:16:05.519 00:00:10.370 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:16:42.533 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-08-10 15:12:09.180 00:06:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:17:05.929 00:00:10.346 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:17:42.750 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-08-10 15:18:06.312 00:00:10.364 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:18:42.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-08-10 15:19:06.719 00:00:10.371 TCP 23.104.0.1:33680 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:19:43.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-08-10 15:20:07.127 00:00:10.334 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:20:43.403 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6452 1 2025-08-10 15:21:07.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:21:06.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:21:07.497 00:00:10.361 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:21:43.614 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6452 1 2025-08-10 15:17:09.180 00:06:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:22:07.900 00:00:10.327 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:22:43.784 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60548 10 6452 1 2025-08-10 15:23:08.269 00:00:10.377 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:23:44.002 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-08-10 15:19:09.182 00:06:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:24:08.686 00:00:10.381 TCP 23.104.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:24:44.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-08-10 15:25:09.119 00:00:10.365 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:25:44.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-08-10 15:26:06.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:26:07.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:26:09.523 00:00:10.366 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:26:44.656 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43956 10 6452 1 2025-08-10 15:27:09.925 00:00:10.383 TCP 23.104.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:27:44.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36268 10 6452 1 2025-08-10 15:28:10.349 00:00:10.361 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:28:45.104 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-08-10 15:24:09.187 00:06:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:29:10.747 00:00:10.394 TCP 23.104.0.1:34096 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:29:45.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-08-10 15:30:11.184 00:00:10.366 TCP 23.104.0.1:60552 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:30:45.548 00:00:10.526 TCP 1.101.0.1:3000 -> 22.102.0.1:60164 10 6452 1 2025-08-10 15:31:06.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:31:06.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:26:09.183 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:31:11.587 00:00:10.324 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:31:46.111 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-08-10 15:32:11.951 00:00:10.373 TCP 23.104.0.1:43028 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:32:46.280 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59842 10 6452 1 2025-08-10 15:33:12.367 00:00:10.389 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:33:46.455 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54070 10 6452 1 2025-08-10 15:34:12.801 00:00:10.440 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 15 1926 1 2025-08-10 15:34:46.665 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 12 10367 1 2025-08-10 15:35:13.284 00:00:10.371 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:35:46.911 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-08-10 15:36:06.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:36:06.954 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:31:09.181 00:06:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:36:13.692 00:00:10.334 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:36:47.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-08-10 15:37:14.090 00:00:10.329 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:37:47.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-08-10 15:33:09.186 00:06:00.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:38:14.463 00:00:10.324 TCP 23.104.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:38:47.507 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50966 10 6452 1 2025-08-10 15:39:14.829 00:00:10.383 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:39:47.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6452 1 2025-08-10 15:40:15.249 00:00:10.372 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:40:47.943 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44818 10 6452 1 2025-08-10 15:41:06.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:41:07.045 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:41:15.663 00:00:10.327 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:41:48.181 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-08-10 15:42:16.027 00:00:10.369 TCP 23.104.0.1:54114 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:42:48.351 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-08-10 15:38:09.184 00:06:00.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:43:16.433 00:00:10.366 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:43:48.567 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-08-10 15:44:16.835 00:00:10.387 TCP 23.104.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:44:48.778 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6452 1 2025-08-10 15:40:09.187 00:06:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:45:17.264 00:00:10.367 TCP 23.104.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:45:48.954 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-08-10 15:46:07.263 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:46:07.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:46:17.674 00:00:10.387 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:46:49.170 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-08-10 15:47:18.104 00:00:10.362 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:47:49.353 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-08-10 15:48:18.510 00:00:10.324 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:48:49.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-08-10 15:49:18.871 00:00:10.366 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:49:49.739 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6452 1 2025-08-10 15:45:09.188 00:06:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:50:19.274 00:00:10.379 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:50:49.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52194 10 6452 1 2025-08-10 15:51:07.592 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:51:07.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:51:19.698 00:00:10.370 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:51:50.199 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36750 10 6452 1 2025-08-10 15:47:09.191 00:06:00.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-10 15:52:20.111 00:00:10.334 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:52:50.422 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-08-10 15:53:20.483 00:00:10.366 TCP 23.104.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:53:50.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-08-10 15:54:20.896 00:00:10.378 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:54:50.817 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-08-10 15:55:21.323 00:00:10.331 TCP 23.104.0.1:53546 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:55:51.079 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-08-10 15:56:07.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 15:56:07.109 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 15:56:21.693 00:00:10.336 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:56:51.255 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-08-10 15:52:09.189 00:06:00.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-10 15:57:22.095 00:00:10.365 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-08-10 15:57:51.471 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37644 10 6452 1 2025-08-10 15:58:22.499 00:00:10.332 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 500441, total packets: 1572, avg bps: 1069, avg pps: 0, avg bpp: 318 Time window: 2025-08-10 14:56:09 - 2025-08-10 15:58:32 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0034s User: 0.0009s Wall: 0.0017s flows/second: 91904.8 Runtime: 0.0018s