Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 08:58:52.224 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 08:58:42.517 00:00:10.365 TCP 23.104.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-16 08:58:52.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 08:58:51.610 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-08-16 08:59:42.931 00:00:10.344 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-08-16 08:59:51.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-08-16 09:00:43.319 00:00:10.333 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:00:52.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-08-16 08:56:12.056 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:01:43.695 00:00:10.324 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:01:52.277 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40756 10 6452 1 2025-08-16 09:02:44.067 00:00:10.362 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:02:52.488 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-08-16 09:03:44.476 00:00:10.368 TCP 23.104.0.1:47776 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:03:52.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:03:52.452 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:03:52.706 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-08-16 08:59:12.055 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:04:44.875 00:00:10.347 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:04:52.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-08-16 09:05:45.262 00:00:10.371 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:05:53.125 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-08-16 09:06:45.669 00:00:10.365 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:06:53.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-08-16 09:07:46.108 00:00:10.365 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:07:53.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58918 10 6452 1 2025-08-16 09:03:12.057 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:08:46.508 00:00:10.367 TCP 23.104.0.1:48552 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:08:52.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:08:52.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:08:53.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6452 1 2025-08-16 09:09:46.912 00:00:10.365 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:09:53.946 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-08-16 09:10:47.316 00:00:10.324 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:10:54.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-08-16 09:06:12.056 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:11:47.676 00:00:10.381 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:11:54.389 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40822 10 6452 1 2025-08-16 09:12:48.109 00:00:10.364 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:12:54.563 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-08-16 09:13:52.489 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:13:52.577 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:13:48.511 00:00:10.326 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:13:54.738 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-08-16 09:14:48.876 00:00:10.362 TCP 23.104.0.1:38020 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:14:54.943 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6452 1 2025-08-16 09:10:12.061 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:15:49.278 00:00:10.363 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:15:55.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 10 6452 1 2025-08-16 09:16:49.680 00:00:10.369 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:16:55.393 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-08-16 09:17:50.105 00:00:10.366 TCP 23.104.0.1:41288 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:17:55.562 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-08-16 09:13:12.056 00:06:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:18:52.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:18:52.684 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:18:50.512 00:00:10.366 TCP 23.104.0.1:41512 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:18:55.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49022 10 6452 1 2025-08-16 09:19:50.916 00:00:10.375 TCP 23.104.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:19:55.997 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6452 1 2025-08-16 09:20:51.333 00:00:10.404 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 15 1926 1 2025-08-16 09:20:56.175 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 12 10365 1 2025-08-16 09:21:51.776 00:00:10.370 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:21:56.418 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-08-16 09:17:12.060 00:06:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:22:56.642 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33346 10 6452 1 2025-08-16 09:22:52.186 00:00:10.364 TCP 23.104.0.1:56844 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:23:52.736 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:23:52.623 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:23:56.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38078 10 6452 1 2025-08-16 09:23:52.590 00:00:10.361 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:24:52.988 00:00:10.369 TCP 23.104.0.1:48366 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:24:57.033 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-08-16 09:20:12.059 00:06:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:25:53.395 00:00:10.368 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:25:57.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-08-16 09:26:53.802 00:00:10.338 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:26:57.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45814 10 6452 1 2025-08-16 09:27:54.174 00:00:10.361 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:27:57.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-08-16 09:28:53.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:28:52.837 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:28:54.575 00:00:10.366 TCP 23.104.0.1:56058 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:28:57.835 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-08-16 09:24:12.062 00:06:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:29:54.982 00:00:10.362 TCP 23.104.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:29:58.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6452 1 2025-08-16 09:30:55.383 00:00:10.365 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:30:58.286 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-08-16 09:31:55.795 00:00:10.537 TCP 23.104.0.1:40194 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:31:58.459 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2025-08-16 09:27:12.061 00:06:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:32:56.375 00:00:10.332 TCP 23.104.0.1:49948 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:32:58.632 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-08-16 09:33:52.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:33:53.146 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:33:58.844 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55858 10 6452 1 2025-08-16 09:33:56.743 00:00:10.366 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:34:57.145 00:00:10.369 TCP 23.104.0.1:51646 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:34:59.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-08-16 09:35:59.302 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 12 10365 1 2025-08-16 09:35:57.551 00:00:10.412 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 15 1926 1 2025-08-16 09:31:12.066 00:06:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:36:59.499 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-08-16 09:36:58.000 00:00:10.358 TCP 23.104.0.1:33828 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:37:58.402 00:00:10.376 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:37:59.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-08-16 09:38:53.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:38:53.364 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:38:58.817 00:00:10.364 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:38:59.931 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6452 1 2025-08-16 09:34:12.063 00:06:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:39:59.224 00:00:10.368 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:40:00.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6452 1 2025-08-16 09:40:59.629 00:00:10.362 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:41:00.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33776 10 6452 1 2025-08-16 09:42:00.031 00:00:10.365 TCP 23.104.0.1:36018 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:42:00.556 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44748 10 6452 1 2025-08-16 09:43:00.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-08-16 09:43:00.434 00:00:10.323 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:38:12.067 00:06:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:43:53.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:43:53.199 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:44:00.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-08-16 09:44:00.797 00:00:10.363 TCP 23.104.0.1:49018 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:45:01.183 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 13 6608 1 2025-08-16 09:45:01.206 00:00:10.334 TCP 23.104.0.1:54508 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:46:01.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-08-16 09:46:01.582 00:00:10.365 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:41:12.066 00:06:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:47:01.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-08-16 09:47:01.980 00:00:10.332 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:48:01.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51990 10 6452 1 2025-08-16 09:48:02.349 00:00:10.365 TCP 23.104.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:48:53.414 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:48:53.125 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:49:02.111 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-08-16 09:49:02.760 00:00:10.386 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:50:03.188 00:00:10.368 TCP 23.104.0.1:40248 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:45:12.069 00:06:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:50:02.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54236 10 6452 1 2025-08-16 09:51:03.593 00:00:10.369 TCP 23.104.0.1:55258 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:51:02.535 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33600 10 6452 1 2025-08-16 09:52:03.996 00:00:10.367 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:52:02.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-08-16 09:53:04.402 00:00:10.362 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:53:02.963 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:38210 10 6452 1 2025-08-16 09:48:12.072 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 09:53:53.630 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:53:53.755 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:54:04.800 00:00:10.365 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:54:03.148 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-08-16 09:55:05.208 00:00:10.366 TCP 23.104.0.1:60066 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:55:03.357 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6452 1 2025-08-16 09:56:03.572 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39814 10 6452 1 2025-08-16 09:56:05.607 00:00:10.360 TCP 23.104.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:52:12.076 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 09:57:06.008 00:00:10.372 TCP 23.104.0.1:33916 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:57:03.784 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-08-16 09:58:06.419 00:00:10.330 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-08-16 09:58:03.961 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 12 6556 1 Summary: total flows: 161, total bytes: 507149, total packets: 1587, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-08-16 08:56:12 - 2025-08-16 09:58:16 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0036s User: 0.0009s Wall: 0.0023s flows/second: 71082.4 Runtime: 0.0023s