Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 06:58:59.870 00:00:10.328 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:55:09.996 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:59:17.084 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-08-12 07:00:00.238 00:00:10.364 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:00:17.293 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-08-12 06:57:09.998 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 07:01:00.643 00:00:10.325 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:01:17.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-08-12 07:01:54.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:01:54.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:02:01.003 00:00:10.364 TCP 23.104.0.1:59562 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:02:17.732 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-08-12 07:03:01.405 00:00:10.365 TCP 23.104.0.1:33772 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:03:17.949 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-08-12 07:04:01.805 00:00:10.329 TCP 23.104.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:04:18.140 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40196 10 6452 1 2025-08-12 07:01:09.996 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 07:05:02.167 00:00:10.368 TCP 23.104.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:05:18.353 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34756 10 6452 1 2025-08-12 07:06:02.578 00:00:10.362 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:06:18.574 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-08-12 07:06:54.742 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:06:54.814 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:07:02.978 00:00:10.369 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:07:18.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-08-12 07:03:10.000 00:06:00.856 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:08:03.389 00:00:10.368 TCP 23.104.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:08:19.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52492 10 6452 1 2025-08-12 07:09:03.794 00:00:10.359 TCP 23.104.0.1:44050 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:09:19.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43684 10 6452 1 2025-08-12 07:10:04.184 00:00:10.439 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 15 1926 1 2025-08-12 07:10:19.426 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 12 10365 1 2025-08-12 07:07:09.998 00:05:00.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 07:11:04.665 00:00:10.333 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:11:19.626 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36686 10 6452 1 2025-08-12 07:11:54.552 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:11:54.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:12:05.030 00:00:10.364 TCP 23.104.0.1:55712 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:12:19.847 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-08-12 07:13:05.430 00:00:10.366 TCP 23.104.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:13:20.081 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60106 10 6452 1 2025-08-12 07:14:05.833 00:00:10.379 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:14:20.293 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54418 10 6452 1 2025-08-12 07:10:10.001 00:06:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:15:06.248 00:00:10.374 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:15:20.496 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2025-08-12 07:16:06.663 00:00:10.376 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:16:20.701 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-08-12 07:16:54.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:16:54.875 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:13:09.999 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 07:17:07.101 00:00:10.375 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:17:20.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54962 10 6452 1 2025-08-12 07:18:07.517 00:00:10.378 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:18:21.130 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-08-12 07:19:07.944 00:00:10.371 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:19:21.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-08-12 07:20:08.359 00:00:10.363 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:20:21.554 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-08-12 07:21:08.765 00:00:10.370 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:21:21.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-08-12 07:21:54.726 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:21:54.684 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:17:10.019 00:06:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:22:09.183 00:00:10.373 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:22:21.975 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 2025-08-12 07:23:09.601 00:00:10.366 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:23:22.172 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-08-12 07:19:10.033 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 07:24:10.008 00:00:10.362 TCP 23.104.0.1:42934 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:24:22.383 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-08-12 07:25:10.410 00:00:10.325 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:25:22.592 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39428 10 6452 1 2025-08-12 07:26:10.775 00:00:10.361 TCP 23.104.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:26:22.805 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-08-12 07:26:54.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:26:54.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:27:11.175 00:00:10.366 TCP 23.104.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:27:23.032 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-08-12 07:28:11.576 00:00:10.363 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:28:23.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-08-12 07:24:10.047 00:06:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:29:11.977 00:00:10.379 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:29:23.457 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54252 10 6452 1 2025-08-12 07:30:12.398 00:00:10.360 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:30:23.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48912 10 6452 1 2025-08-12 07:26:10.045 00:06:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 07:31:12.795 00:00:10.350 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:31:23.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-08-12 07:31:55.213 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:31:54.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:32:13.184 00:00:10.374 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:32:24.113 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-08-12 07:33:13.595 00:00:10.361 TCP 23.104.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:33:24.304 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47330 10 6452 1 2025-08-12 07:34:13.991 00:00:10.365 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:34:24.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-08-12 07:35:14.401 00:00:10.362 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:35:24.739 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-08-12 07:31:10.051 00:06:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:36:14.801 00:00:10.334 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:36:24.956 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6452 1 2025-08-12 07:36:55.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:36:54.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:37:15.171 00:00:10.336 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:37:25.148 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-08-12 07:33:10.047 00:06:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 07:38:15.540 00:00:10.369 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:38:25.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-08-12 07:39:15.959 00:00:10.364 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:39:25.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-08-12 07:40:16.367 00:00:10.369 TCP 23.104.0.1:43322 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:40:25.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-08-12 07:41:16.785 00:00:10.324 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:41:25.994 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-12 07:41:54.949 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:41:55.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:42:17.149 00:00:10.471 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:42:26.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-08-12 07:38:10.050 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:43:17.662 00:00:10.369 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:43:26.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39976 10 6452 1 2025-08-12 07:44:18.096 00:00:10.323 TCP 23.104.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:44:26.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6452 1 2025-08-12 07:40:10.049 00:06:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 07:45:18.464 00:00:10.448 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 15 1926 1 2025-08-12 07:45:26.817 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 12 10367 1 2025-08-12 07:46:18.944 00:00:10.334 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:46:27.030 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-08-12 07:46:55.065 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:46:55.285 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:47:19.316 00:00:10.368 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:47:27.220 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52030 10 6452 1 2025-08-12 07:48:19.720 00:00:10.377 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:48:27.455 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-08-12 07:49:20.137 00:00:10.382 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:49:27.662 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-08-12 07:45:10.063 00:06:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:50:20.560 00:00:10.361 TCP 23.104.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:50:27.876 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-08-12 07:51:20.960 00:00:10.327 TCP 23.104.0.1:42208 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:51:28.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-08-12 07:51:55.538 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:51:55.452 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:47:10.060 00:06:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-12 07:52:21.330 00:00:10.364 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:52:28.284 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-08-12 07:53:21.732 00:00:10.373 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:53:28.459 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-08-12 07:54:22.142 00:00:10.362 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:54:28.668 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-08-12 07:55:22.541 00:00:10.324 TCP 23.104.0.1:38980 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:55:28.881 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40504 10 6452 1 2025-08-12 07:56:22.903 00:00:10.419 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:56:29.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-08-12 07:56:55.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 07:56:55.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 07:52:10.065 00:06:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-12 07:57:23.364 00:00:10.365 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:57:29.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-08-12 07:58:23.765 00:00:10.375 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-08-12 07:58:29.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6452 1 Summary: total flows: 162, total bytes: 507137, total packets: 1586, avg bps: 1064, avg pps: 0, avg bpp: 319 Time window: 2025-08-12 06:55:09 - 2025-08-12 07:58:39 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0023s User: 0.0012s Wall: 0.0016s flows/second: 99382.4 Runtime: 0.0017s