Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 02:59:17.351 00:00:10.364 TCP 23.104.0.1:56922 -> 1.101.0.1:3000 11 1507 1 2025-08-16 02:59:33.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6452 1 2025-08-16 02:56:11.914 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:00:17.758 00:00:10.370 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:00:33.655 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-08-16 03:01:18.165 00:00:10.366 TCP 23.104.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:01:33.879 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-08-16 03:02:18.566 00:00:10.367 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:02:34.082 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 10 6452 1 2025-08-16 03:03:18.972 00:00:10.366 TCP 23.104.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:03:44.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:03:34.276 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 10 6452 1 2025-08-16 03:03:45.202 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:00:11.913 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:04:19.379 00:00:10.326 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:04:34.490 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-08-16 03:05:19.740 00:00:10.368 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:05:34.700 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37408 10 6452 1 2025-08-16 03:02:11.916 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:06:20.145 00:00:10.363 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:06:34.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-08-16 03:07:20.552 00:00:10.369 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:07:35.125 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-08-16 03:08:20.960 00:00:10.366 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:08:45.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:08:45.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:08:35.306 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-08-16 03:09:21.364 00:00:10.362 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:09:35.520 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-08-16 03:06:11.915 00:05:00.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:10:21.770 00:00:10.328 TCP 23.104.0.1:38130 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:10:35.692 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-08-16 03:11:22.137 00:00:10.366 TCP 23.104.0.1:60368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:11:35.902 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-08-16 03:08:11.917 00:05:00.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:12:22.536 00:00:10.361 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:12:36.116 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-08-16 03:13:22.932 00:00:10.384 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:13:45.294 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:13:36.285 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33086 10 6452 1 2025-08-16 03:13:45.369 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:14:23.355 00:00:10.365 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:14:36.492 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-08-16 03:15:23.757 00:00:10.337 TCP 23.104.0.1:59644 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:15:36.702 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-08-16 03:12:11.916 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:16:24.130 00:00:10.368 TCP 23.104.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:16:36.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-08-16 03:17:24.539 00:00:10.325 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:17:37.126 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-08-16 03:14:11.919 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:18:24.911 00:00:10.330 TCP 23.104.0.1:54790 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:18:45.475 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:18:45.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:18:37.335 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-08-16 03:19:25.284 00:00:10.363 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:19:37.505 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-08-16 03:20:25.683 00:00:10.379 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:20:37.681 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-08-16 03:21:26.106 00:00:10.328 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:21:37.849 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53162 10 6452 1 2025-08-16 03:18:11.918 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:22:26.469 00:00:10.367 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:22:38.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-08-16 03:23:26.876 00:00:10.365 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:23:45.630 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:23:45.528 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:23:38.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-08-16 03:20:11.920 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:24:27.280 00:00:10.367 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:24:38.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-08-16 03:25:27.682 00:00:10.330 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:25:38.722 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-08-16 03:26:28.055 00:00:10.330 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:26:38.937 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54694 10 6452 1 2025-08-16 03:27:28.424 00:00:10.362 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:27:39.184 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-08-16 03:24:11.919 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:28:29.165 00:00:10.364 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:28:45.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:28:45.647 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:28:39.367 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-08-16 03:29:29.567 00:00:10.362 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:29:39.587 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37946 10 6452 1 2025-08-16 03:26:11.922 00:05:00.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:30:29.968 00:00:10.607 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 15 1926 1 2025-08-16 03:30:39.772 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 12 10367 1 2025-08-16 03:31:30.614 00:00:10.366 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:31:40.038 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35846 10 6452 1 2025-08-16 03:32:31.022 00:00:10.360 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:32:40.263 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 10 6452 1 2025-08-16 03:33:31.419 00:00:10.372 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:33:45.826 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:33:45.541 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:33:40.479 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-08-16 03:30:11.920 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:34:31.831 00:00:10.388 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:34:40.692 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-08-16 03:35:32.255 00:00:10.365 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:35:40.905 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-08-16 03:32:11.923 00:05:00.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:36:32.659 00:00:10.333 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:36:41.127 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-08-16 03:37:33.031 00:00:10.363 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:37:41.294 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-08-16 03:38:45.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:38:33.434 00:00:10.366 TCP 23.104.0.1:55272 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:38:45.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:38:41.522 00:00:10.704 TCP 1.101.0.1:3000 -> 22.102.0.1:40496 10 6452 1 2025-08-16 03:39:33.840 00:00:10.401 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:39:42.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6452 1 2025-08-16 03:36:11.922 00:05:00.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:40:34.276 00:00:10.366 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:40:42.476 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-08-16 03:41:34.688 00:00:10.365 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:41:42.686 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-08-16 03:38:11.927 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:42:35.111 00:00:10.365 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:42:42.853 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-08-16 03:43:46.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:43:45.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:43:35.516 00:00:10.364 TCP 23.104.0.1:45172 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:43:43.044 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-08-16 03:44:35.917 00:00:10.337 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:44:43.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-08-16 03:45:36.290 00:00:10.364 TCP 23.104.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:45:43.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-08-16 03:42:11.925 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:46:36.689 00:00:10.365 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:46:43.636 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-08-16 03:47:37.108 00:00:10.374 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:47:43.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-08-16 03:44:11.929 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:48:46.149 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:48:46.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:48:37.526 00:00:10.374 TCP 23.104.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:48:44.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59150 10 6452 1 2025-08-16 03:49:37.936 00:00:10.395 TCP 23.104.0.1:59200 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:49:44.253 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-08-16 03:50:38.373 00:00:10.366 TCP 23.104.0.1:50668 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:50:44.424 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-08-16 03:51:38.779 00:00:10.326 TCP 23.104.0.1:49200 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:51:44.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 10 6452 1 2025-08-16 03:48:11.925 00:05:00.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:52:39.154 00:00:10.365 TCP 23.104.0.1:58660 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:52:44.854 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-08-16 03:53:46.186 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:53:46.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:53:39.559 00:00:10.363 TCP 23.104.0.1:33368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:53:45.090 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-08-16 03:50:11.929 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 03:54:39.966 00:00:10.372 TCP 23.104.0.1:34008 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:54:45.322 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-08-16 03:55:40.392 00:00:10.394 TCP 23.104.0.1:36472 -> 1.101.0.1:3000 15 1926 1 2025-08-16 03:55:45.538 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 12 10365 1 2025-08-16 03:56:40.828 00:00:10.379 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:56:45.782 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 12 6556 1 2025-08-16 03:57:41.245 00:00:10.364 TCP 23.104.0.1:36674 -> 1.101.0.1:3000 11 1507 1 2025-08-16 03:57:46.001 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-08-16 03:54:11.931 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 03:58:46.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 03:58:46.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 03:58:41.647 00:00:10.326 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500666, total packets: 1576, avg bps: 1059, avg pps: 0, avg bpp: 317 Time window: 2025-08-16 02:56:11 - 2025-08-16 03:59:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0023s flows/second: 71431.6 Runtime: 0.0023s