Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 02:59:16.275 00:00:10.365 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-08-04 02:59:40.980 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37678 10 6452 1 2025-08-04 03:00:16.678 00:00:10.367 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:00:41.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-08-04 02:56:06.044 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 03:01:17.102 00:00:10.364 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:01:41.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-08-04 02:57:06.279 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-04 03:02:17.504 00:00:10.321 TCP 23.104.0.1:46638 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:02:41.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-08-04 03:02:58.769 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:02:58.707 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:03:17.864 00:00:10.365 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:03:41.886 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42932 10 6452 1 2025-08-04 03:04:18.269 00:00:10.366 TCP 23.104.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:04:42.121 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-08-04 03:05:18.676 00:00:10.367 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:05:42.337 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33690 10 6452 1 2025-08-04 03:06:19.112 00:00:10.359 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:06:42.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-08-04 03:02:06.277 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-04 03:07:19.507 00:00:10.332 TCP 23.104.0.1:47630 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:07:42.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-08-04 03:07:58.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:07:58.487 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:04:06.044 00:04:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 03:08:19.878 00:00:10.370 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:08:42.934 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 12 10367 1 2025-08-04 03:09:20.287 00:00:10.416 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 15 1926 1 2025-08-04 03:09:43.191 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-08-04 03:10:20.744 00:00:10.365 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:10:43.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47034 10 6452 1 2025-08-04 03:11:21.148 00:00:10.365 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:11:43.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-08-04 03:12:21.549 00:00:10.368 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:12:43.826 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 6452 1 2025-08-04 03:12:58.656 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:12:58.921 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:09:06.045 00:04:00.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 03:09:06.047 00:04:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 03:13:21.952 00:00:10.366 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:13:43.994 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32882 10 6452 1 2025-08-04 03:14:22.353 00:00:10.367 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:14:44.213 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-08-04 03:15:22.749 00:00:10.365 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:15:44.429 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-08-04 03:16:23.151 00:00:10.362 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:16:44.641 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-08-04 03:17:23.549 00:00:10.370 TCP 23.104.0.1:57818 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:17:44.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-08-04 03:17:58.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:17:58.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:18:23.955 00:00:10.367 TCP 23.104.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:18:45.104 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-08-04 03:14:06.046 00:06:00.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 03:14:06.050 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 03:19:24.360 00:00:10.328 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:19:45.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-08-04 03:20:24.724 00:00:10.373 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:20:45.531 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53778 10 6452 1 2025-08-04 03:21:25.135 00:00:10.326 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:21:45.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6452 1 2025-08-04 03:22:25.499 00:00:10.371 TCP 23.104.0.1:48844 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:22:59.108 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:22:45.926 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55158 10 6452 1 2025-08-04 03:22:59.037 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:23:25.908 00:00:10.363 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:23:46.167 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6452 1 2025-08-04 03:24:26.317 00:00:10.323 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:24:46.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-08-04 03:25:26.676 00:00:10.334 TCP 23.104.0.1:39252 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:25:46.591 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-08-04 03:21:06.051 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 03:21:06.049 00:06:00.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 03:26:27.061 00:00:10.371 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:26:46.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46300 10 6452 1 2025-08-04 03:27:27.486 00:00:10.370 TCP 23.104.0.1:44182 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:27:47.037 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-08-04 03:27:58.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:27:59.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:28:27.895 00:00:10.374 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:28:47.223 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 10 6452 1 2025-08-04 03:29:28.309 00:00:10.368 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:29:47.418 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6452 1 2025-08-04 03:30:28.717 00:00:10.374 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:30:47.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54580 10 6452 1 2025-08-04 03:31:29.130 00:00:10.363 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:31:47.849 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-08-04 03:32:29.532 00:00:10.367 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:32:59.258 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:32:48.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6452 1 2025-08-04 03:32:59.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:28:06.052 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-08-04 03:28:06.050 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-08-04 03:33:29.939 00:00:10.328 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:33:48.294 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35524 10 6452 1 2025-08-04 03:34:30.306 00:00:10.379 TCP 23.104.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:34:48.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-08-04 03:35:30.711 00:00:10.364 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:35:48.717 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-08-04 03:36:31.108 00:00:10.321 TCP 23.104.0.1:55468 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:36:48.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42798 10 6452 1 2025-08-04 03:37:31.476 00:00:10.368 TCP 23.104.0.1:48404 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:38:00.552 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:37:49.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42944 10 6452 1 2025-08-04 03:38:00.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:38:31.881 00:00:10.394 TCP 23.104.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:38:49.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-08-04 03:34:06.295 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-08-04 03:34:06.293 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-08-04 03:39:32.323 00:00:10.368 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:39:49.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-08-04 03:40:32.732 00:00:10.366 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:40:49.753 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-08-04 03:41:33.141 00:00:10.333 TCP 23.104.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:41:49.964 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37672 12 6556 1 2025-08-04 03:42:33.514 00:00:10.366 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:42:59.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:42:59.407 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:42:50.184 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-08-04 03:43:33.923 00:00:10.345 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:43:50.410 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 10 6452 1 2025-08-04 03:44:34.306 00:00:10.366 TCP 23.104.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:44:50.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32776 10 6452 1 2025-08-04 03:41:06.053 00:04:00.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 03:41:06.055 00:04:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 03:45:34.711 00:00:10.380 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:45:50.837 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6452 1 2025-08-04 03:46:35.126 00:00:10.368 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:46:51.079 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33424 10 6452 1 2025-08-04 03:47:35.536 00:00:10.361 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:47:51.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-08-04 03:47:59.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:47:59.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:48:35.935 00:00:10.334 TCP 23.104.0.1:57770 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:48:51.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-08-04 03:49:36.304 00:00:10.365 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:49:51.731 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-08-04 03:46:06.058 00:04:00.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 03:46:06.055 00:04:00.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 03:50:36.705 00:00:10.364 TCP 23.104.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:50:51.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-08-04 03:51:37.114 00:00:10.364 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:51:52.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56888 10 6452 1 2025-08-04 03:52:37.522 00:00:10.364 TCP 23.104.0.1:34566 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:52:59.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:52:59.541 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:52:52.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-08-04 03:53:37.931 00:00:10.387 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:53:52.605 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-08-04 03:54:38.357 00:00:10.364 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:54:52.829 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52986 10 6452 1 2025-08-04 03:55:38.765 00:00:10.326 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:55:53.071 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58446 10 6452 1 2025-08-04 03:51:06.057 00:06:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 03:51:06.059 00:06:00.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 03:56:39.130 00:00:10.325 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:56:53.284 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33338 10 6452 1 2025-08-04 03:57:39.497 00:00:10.361 TCP 23.104.0.1:52496 -> 1.101.0.1:3000 11 1507 1 2025-08-04 03:57:59.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 03:57:59.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 03:57:53.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58852 10 6452 1 2025-08-04 03:58:39.898 00:00:10.372 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496632, total packets: 1575, avg bps: 1055, avg pps: 0, avg bpp: 315 Time window: 2025-08-04 02:56:06 - 2025-08-04 03:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0025s flows/second: 64479.1 Runtime: 0.0025s