Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 07:59:29.392 00:00:10.366 TCP 23.104.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-08-03 07:59:32.560 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6452 1 2025-08-03 07:55:05.632 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 07:55:05.631 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:00:29.795 00:00:10.371 TCP 23.104.0.1:34074 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:00:32.783 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-08-03 08:01:30.215 00:00:10.366 TCP 23.104.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:01:32.997 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45246 10 6452 1 2025-08-03 08:02:35.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:02:35.623 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:02:30.617 00:00:10.326 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:02:33.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55902 10 6452 1 2025-08-03 08:03:30.979 00:00:10.327 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:03:33.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-08-03 08:04:31.344 00:00:10.368 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:04:33.654 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44732 10 6452 1 2025-08-03 08:05:31.752 00:00:10.383 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:05:33.864 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-08-03 08:06:34.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-08-03 08:06:32.173 00:00:10.365 TCP 23.104.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:02:05.636 00:06:00.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:02:05.633 00:06:00.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:07:35.766 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:07:35.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:07:32.576 00:00:10.323 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:07:34.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42928 10 6452 1 2025-08-03 08:08:34.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-08-03 08:08:32.937 00:00:10.378 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:09:34.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35288 10 6452 1 2025-08-03 08:09:33.352 00:00:10.359 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:10:33.750 00:00:10.368 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:10:34.937 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-08-03 08:11:34.153 00:00:10.372 TCP 23.104.0.1:39152 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:11:35.132 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45560 10 6452 1 2025-08-03 08:12:35.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:12:36.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:12:34.556 00:00:10.361 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:12:35.351 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35264 10 6452 1 2025-08-03 08:13:35.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58970 10 6452 1 2025-08-03 08:13:34.961 00:00:10.366 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:09:05.637 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:09:05.634 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:14:35.366 00:00:10.377 TCP 23.104.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:14:35.757 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-08-03 08:15:35.999 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-08-03 08:15:35.783 00:00:10.371 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:16:36.217 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-08-03 08:16:36.191 00:00:10.375 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:17:35.766 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:17:35.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:17:36.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55378 10 6452 1 2025-08-03 08:17:36.603 00:00:10.367 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:18:36.662 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-08-03 08:18:37.007 00:00:10.332 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:19:36.877 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-08-03 08:19:37.377 00:00:10.363 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:20:37.098 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2025-08-03 08:20:37.778 00:00:10.615 TCP 23.104.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:16:05.641 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:16:05.638 00:06:00.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:21:37.311 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-08-03 08:21:38.429 00:00:10.365 TCP 23.104.0.1:44844 -> 1.101.0.1:3000 12 1559 1 2025-08-03 08:22:36.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:22:36.508 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:22:37.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-08-03 08:22:38.833 00:00:10.438 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:23:37.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 10 6452 1 2025-08-03 08:23:39.312 00:00:10.367 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:24:39.719 00:00:10.429 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:24:37.964 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40092 12 6556 1 2025-08-03 08:25:40.188 00:00:10.366 TCP 23.104.0.1:33412 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:25:38.210 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-08-03 08:26:38.381 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-08-03 08:26:40.589 00:00:10.325 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:27:36.198 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:27:35.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:27:38.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59226 10 6452 1 2025-08-03 08:27:40.956 00:00:10.324 TCP 23.104.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:23:05.640 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:23:05.637 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:28:38.815 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44978 10 6452 1 2025-08-03 08:28:41.319 00:00:10.373 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:29:38.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37476 10 6452 1 2025-08-03 08:29:41.734 00:00:10.364 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:30:39.213 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6452 1 2025-08-03 08:30:42.140 00:00:10.364 TCP 23.104.0.1:37048 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:31:39.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-08-03 08:31:42.545 00:00:10.367 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:32:36.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:32:36.081 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:32:39.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-08-03 08:32:42.952 00:00:10.365 TCP 23.104.0.1:40322 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:33:39.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-08-03 08:33:43.358 00:00:10.318 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:34:40.037 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2025-08-03 08:34:43.713 00:00:10.382 TCP 23.104.0.1:43338 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:30:05.640 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:30:05.642 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:35:40.246 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41836 10 6452 1 2025-08-03 08:35:44.136 00:00:10.324 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:36:40.469 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34714 10 6452 1 2025-08-03 08:36:44.502 00:00:10.363 TCP 23.104.0.1:54802 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:37:36.742 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:37:36.514 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:37:40.683 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-08-03 08:37:44.903 00:00:10.328 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:38:40.895 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-08-03 08:38:45.270 00:00:10.371 TCP 23.104.0.1:43716 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:39:41.106 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-08-03 08:39:45.679 00:00:10.331 TCP 23.104.0.1:52480 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:40:41.324 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-08-03 08:40:46.048 00:00:10.369 TCP 23.104.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:41:41.551 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59350 10 6452 1 2025-08-03 08:41:46.457 00:00:10.368 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:37:05.643 00:06:00.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:37:05.640 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:42:36.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:42:36.459 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:42:41.774 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6452 1 2025-08-03 08:42:46.868 00:00:10.371 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:43:41.946 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6452 1 2025-08-03 08:43:47.276 00:00:10.366 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:44:42.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-08-03 08:44:47.683 00:00:10.363 TCP 23.104.0.1:50230 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:45:42.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-08-03 08:45:48.108 00:00:10.326 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:46:42.562 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36286 10 6452 1 2025-08-03 08:46:48.471 00:00:10.500 TCP 23.104.0.1:36918 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:47:36.731 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:47:36.704 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:47:42.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-08-03 08:47:49.011 00:00:10.365 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:48:42.983 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:53992 10 6452 1 2025-08-03 08:48:49.415 00:00:10.368 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:44:05.641 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:44:05.644 00:06:00.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:49:43.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-08-03 08:49:49.819 00:00:10.325 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:50:43.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-08-03 08:50:50.186 00:00:10.366 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:51:43.610 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-08-03 08:51:50.595 00:00:10.363 TCP 23.104.0.1:54536 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:52:37.773 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:52:37.832 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:52:43.827 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-08-03 08:52:50.998 00:00:10.362 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:53:44.068 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6452 1 2025-08-03 08:53:51.398 00:00:10.360 TCP 23.104.0.1:40644 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:54:44.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-08-03 08:54:51.792 00:00:10.373 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:55:44.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-08-03 08:51:05.643 00:06:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-03 08:51:05.645 00:06:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-03 08:55:52.203 00:00:10.366 TCP 23.104.0.1:59452 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:56:44.715 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-08-03 08:56:52.605 00:00:10.370 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-08-03 08:57:36.864 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 08:57:36.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 08:57:44.886 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34148 10 6452 1 2025-08-03 08:57:53.056 00:00:10.365 TCP 23.104.0.1:57828 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 491283, total packets: 1566, avg bps: 1040, avg pps: 0, avg bpp: 313 Time window: 2025-08-03 07:55:05 - 2025-08-03 08:58:03 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0026s User: 0.0017s Wall: 0.0026s flows/second: 61942.8 Runtime: 0.0026s