Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 04:58:53.769 00:00:10.408 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 15 1926 1 2025-07-31 04:59:01.867 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 12 10367 1 2025-07-31 04:59:54.215 00:00:10.363 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:00:02.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-07-31 05:01:05.565 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:00:54.620 00:00:10.323 TCP 23.104.0.1:41174 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:01:05.565 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:01:02.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47420 10 6452 1 2025-07-31 04:57:03.755 00:06:00.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:01:54.981 00:00:10.363 TCP 23.104.0.1:33306 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:02:02.562 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-07-31 05:02:55.401 00:00:10.370 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:03:02.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-07-31 05:03:55.805 00:00:10.365 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:04:02.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40324 10 6452 1 2025-07-31 05:00:03.753 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:04:56.212 00:00:10.366 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:05:03.208 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-07-31 05:06:05.381 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:05:56.620 00:00:10.364 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:06:05.468 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:06:03.415 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-07-31 05:06:57.020 00:00:10.364 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:07:03.629 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-07-31 05:07:57.421 00:00:10.361 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:08:03.844 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-07-31 05:04:03.757 00:06:00.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:08:57.821 00:00:10.391 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:09:04.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-07-31 05:09:58.254 00:00:10.364 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:10:04.289 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 10 6452 1 2025-07-31 05:11:05.681 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:11:05.663 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:10:58.658 00:00:10.365 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:11:04.497 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-07-31 05:07:03.755 00:06:00.079 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:11:59.075 00:00:10.361 TCP 23.104.0.1:33248 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:12:04.667 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-07-31 05:12:59.481 00:00:10.365 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:13:04.881 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-07-31 05:13:59.884 00:00:10.387 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:14:05.103 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-07-31 05:15:00.311 00:00:10.370 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:15:05.312 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-07-31 05:16:05.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:16:05.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:11:03.759 00:06:00.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:16:00.720 00:00:10.394 TCP 23.104.0.1:57338 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:16:05.535 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40806 10 6452 1 2025-07-31 05:17:01.128 00:00:10.361 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:17:05.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-07-31 05:18:01.535 00:00:10.363 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:18:05.963 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 12 6556 1 2025-07-31 05:14:03.758 00:06:00.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:19:01.935 00:00:10.376 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:19:06.191 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-07-31 05:20:02.347 00:00:10.379 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:20:06.403 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49488 10 6452 1 2025-07-31 05:21:06.001 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:21:06.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:21:02.774 00:00:10.372 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:21:06.615 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-07-31 05:22:03.187 00:00:10.358 TCP 23.104.0.1:47408 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:22:06.790 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-07-31 05:18:03.762 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:23:03.561 00:00:10.374 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:23:07.004 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-07-31 05:24:03.982 00:00:10.440 TCP 23.104.0.1:47254 -> 1.101.0.1:3000 15 1926 1 2025-07-31 05:24:07.225 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 12 10365 1 2025-07-31 05:25:04.465 00:00:10.362 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:25:07.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-07-31 05:26:06.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:26:05.935 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:21:03.762 00:06:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:26:04.866 00:00:10.364 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:26:07.633 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-07-31 05:27:05.272 00:00:10.378 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:27:07.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43916 10 6452 1 2025-07-31 05:28:05.677 00:00:10.367 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:28:08.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55780 10 6452 1 2025-07-31 05:29:06.108 00:00:10.415 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:29:08.301 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46368 10 6452 1 2025-07-31 05:25:03.764 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:30:06.564 00:00:10.364 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:30:08.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 10 6452 1 2025-07-31 05:31:06.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:31:06.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:31:06.972 00:00:10.383 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:31:08.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-07-31 05:32:08.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6452 1 2025-07-31 05:32:07.396 00:00:10.362 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:28:03.763 00:06:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:33:07.800 00:00:10.369 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:33:09.167 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-07-31 05:34:09.382 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-07-31 05:34:08.205 00:00:10.374 TCP 23.104.0.1:54768 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:35:09.556 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-07-31 05:35:08.615 00:00:10.369 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:36:06.236 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:36:06.378 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:36:09.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-07-31 05:36:09.026 00:00:10.364 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:32:03.766 00:06:00.070 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:37:09.983 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34210 10 6452 1 2025-07-31 05:37:09.437 00:00:10.362 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:38:09.833 00:00:10.389 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:38:10.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-07-31 05:39:10.263 00:00:10.364 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:39:10.381 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-07-31 05:35:03.763 00:06:00.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:40:10.670 00:00:10.367 TCP 23.104.0.1:46058 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:40:10.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-07-31 05:41:06.337 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:41:06.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:41:11.101 00:00:10.322 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:41:10.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-07-31 05:42:11.459 00:00:10.364 TCP 23.104.0.1:34724 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:42:11.038 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53762 10 6452 1 2025-07-31 05:43:11.247 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57418 10 6452 1 2025-07-31 05:43:11.862 00:00:10.376 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:39:03.768 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:44:11.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43914 10 6452 1 2025-07-31 05:44:12.274 00:00:10.337 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:45:11.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40800 10 6452 1 2025-07-31 05:45:12.651 00:00:10.366 TCP 23.104.0.1:57816 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:46:06.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:46:06.304 00:00:00.055 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:46:13.072 00:00:10.363 TCP 23.104.0.1:43016 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:46:11.886 00:00:11.339 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6452 1 2025-07-31 05:42:03.766 00:06:00.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:47:13.471 00:00:10.373 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:47:13.267 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-07-31 05:48:13.881 00:00:10.380 TCP 23.104.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:48:13.485 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-07-31 05:49:14.298 00:00:10.364 TCP 23.104.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:49:13.695 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-07-31 05:50:14.718 00:00:10.377 TCP 23.104.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:50:13.872 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-07-31 05:51:06.494 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:51:06.606 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:46:03.768 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:51:14.113 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-07-31 05:51:15.134 00:00:10.367 TCP 23.104.0.1:53000 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:52:14.320 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-07-31 05:52:15.534 00:00:10.330 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:53:14.529 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46382 10 6452 1 2025-07-31 05:53:15.900 00:00:10.332 TCP 23.104.0.1:45186 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:49:03.777 00:06:00.063 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 05:54:14.744 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56860 10 6452 1 2025-07-31 05:54:16.285 00:00:10.365 TCP 23.104.0.1:33642 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:55:14.959 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48232 10 6452 1 2025-07-31 05:55:16.695 00:00:10.365 TCP 23.104.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:56:06.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 05:56:06.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 05:56:15.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43808 10 6452 1 2025-07-31 05:56:17.108 00:00:10.325 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:57:15.391 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35668 10 6452 1 2025-07-31 05:57:17.469 00:00:10.371 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-07-31 05:53:03.773 00:06:00.066 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 05:58:15.605 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-07-31 05:58:17.875 00:00:10.326 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 506995, total packets: 1584, avg bps: 1090, avg pps: 0, avg bpp: 320 Time window: 2025-07-31 04:57:03 - 2025-07-31 05:59:03 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0019s User: 0.0019s Wall: 0.0020s flows/second: 80621.2 Runtime: 0.0020s