Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-04 06:58:58.806 00:00:10.458 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-08-04 06:59:31.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-08-04 06:59:59.303 00:00:10.362 TCP 23.104.0.1:34062 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:00:32.082 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52052 10 6452 1 2025-08-04 07:00:59.706 00:00:10.364 TCP 23.104.0.1:40490 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:01:32.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-08-04 06:58:06.117 00:04:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 06:58:06.115 00:04:00.277 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:02:00.115 00:00:10.365 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:02:32.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42116 10 6452 1 2025-08-04 07:03:03.603 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:03:03.563 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:03:00.521 00:00:10.321 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:03:32.721 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-08-04 07:04:00.882 00:00:10.384 TCP 23.104.0.1:53456 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:04:32.941 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-08-04 07:05:01.306 00:00:10.365 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:05:33.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-08-04 07:06:01.711 00:00:10.372 TCP 23.104.0.1:37400 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:06:33.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-08-04 07:03:06.118 00:04:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:03:06.116 00:04:00.279 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:07:02.135 00:00:10.365 TCP 23.104.0.1:46550 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:07:33.600 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-08-04 07:08:03.859 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:08:03.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:08:02.539 00:00:10.372 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:08:33.777 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-08-04 07:09:02.972 00:00:10.371 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:09:34.006 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2025-08-04 07:10:03.398 00:00:10.360 TCP 23.104.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:10:34.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-08-04 07:11:03.799 00:00:10.360 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:11:34.472 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55364 10 6452 1 2025-08-04 07:08:06.117 00:04:00.279 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:08:06.120 00:04:00.273 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:12:04.199 00:00:10.363 TCP 23.104.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:12:34.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-08-04 07:13:03.696 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:13:03.578 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:13:04.602 00:00:10.369 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:13:34.907 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-08-04 07:14:05.011 00:00:10.362 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:14:35.114 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6452 1 2025-08-04 07:15:05.414 00:00:10.329 TCP 23.104.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:15:35.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-08-04 07:16:05.785 00:00:10.373 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:16:35.539 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-08-04 07:17:06.195 00:00:10.365 TCP 23.104.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:17:35.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-08-04 07:18:03.711 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:13:06.127 00:06:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 07:18:03.895 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:13:06.125 00:06:00.281 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 07:18:06.592 00:00:10.363 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:18:35.955 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 10 6452 1 2025-08-04 07:19:06.994 00:00:10.360 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:19:36.193 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 10 6452 1 2025-08-04 07:20:07.392 00:00:10.322 TCP 23.104.0.1:39136 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:20:36.408 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42370 10 6452 1 2025-08-04 07:21:07.754 00:00:10.378 TCP 23.104.0.1:59886 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:21:36.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-08-04 07:22:08.174 00:00:10.328 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:22:36.804 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6452 1 2025-08-04 07:23:03.873 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:23:03.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:23:08.542 00:00:10.364 TCP 23.104.0.1:36554 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:23:37.036 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47952 10 6452 1 2025-08-04 07:20:06.126 00:04:00.280 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:20:06.128 00:04:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:24:08.943 00:00:10.333 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:24:37.254 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-08-04 07:25:09.312 00:00:10.326 TCP 23.104.0.1:45162 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:25:37.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-08-04 07:26:09.682 00:00:10.371 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:26:37.674 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2025-08-04 07:27:10.095 00:00:10.320 TCP 23.104.0.1:34100 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:27:37.850 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35820 10 6452 1 2025-08-04 07:28:03.768 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:28:03.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:28:10.453 00:00:10.322 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:28:38.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-08-04 07:25:06.130 00:04:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:25:06.126 00:04:00.280 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:29:10.819 00:00:10.365 TCP 23.104.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:29:38.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-08-04 07:30:11.225 00:00:10.321 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:30:38.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6452 1 2025-08-04 07:31:11.585 00:00:10.364 TCP 23.104.0.1:34338 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:31:38.727 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43968 10 6452 1 2025-08-04 07:32:11.994 00:00:10.365 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:32:38.955 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:40276 13 6608 1 2025-08-04 07:33:05.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:33:05.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:33:12.399 00:00:10.324 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:33:39.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33952 10 6452 1 2025-08-04 07:30:06.128 00:04:00.281 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:30:06.130 00:04:00.276 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:34:12.763 00:00:10.376 TCP 23.104.0.1:51980 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:34:39.453 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-08-04 07:35:13.184 00:00:10.369 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:35:39.633 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-08-04 07:36:13.592 00:00:10.365 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:36:39.843 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50032 10 6452 1 2025-08-04 07:37:13.998 00:00:10.380 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:37:40.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-08-04 07:38:04.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:38:04.094 00:00:00.062 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:38:14.417 00:00:10.364 TCP 23.104.0.1:42826 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:38:40.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44040 10 6452 1 2025-08-04 07:35:06.131 00:04:00.280 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:35:06.134 00:04:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:39:14.820 00:00:10.369 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:39:40.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35286 10 6452 1 2025-08-04 07:40:15.226 00:00:10.362 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:40:40.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48624 10 6452 1 2025-08-04 07:41:15.626 00:00:10.321 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:41:40.929 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57880 10 6452 1 2025-08-04 07:42:15.990 00:00:10.358 TCP 23.104.0.1:51068 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:42:41.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-08-04 07:43:03.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:43:04.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:43:16.387 00:00:10.363 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:43:41.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-08-04 07:40:06.135 00:04:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:40:06.133 00:04:00.279 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:44:16.790 00:00:10.362 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:44:41.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-08-04 07:45:17.199 00:00:10.361 TCP 23.104.0.1:59270 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:45:41.758 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-04 07:46:17.601 00:00:10.360 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:46:41.927 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-08-04 07:47:18.006 00:00:10.361 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:47:42.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-08-04 07:48:04.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:48:04.169 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:48:18.407 00:00:10.323 TCP 23.104.0.1:33378 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:48:42.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 10 6452 1 2025-08-04 07:49:18.765 00:00:10.425 TCP 23.104.0.1:51576 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:49:42.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-08-04 07:45:06.138 00:06:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-04 07:45:06.137 00:06:00.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-04 07:50:19.229 00:00:10.362 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:50:42.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42164 10 6452 1 2025-08-04 07:51:19.629 00:00:10.362 TCP 23.104.0.1:33522 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:51:42.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-08-04 07:52:20.029 00:00:10.361 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:52:43.217 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-08-04 07:53:04.737 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:53:04.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:53:20.434 00:00:10.383 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:53:43.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58836 10 6452 1 2025-08-04 07:54:20.851 00:00:10.341 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:54:43.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33558 12 6556 1 2025-08-04 07:55:21.229 00:00:10.322 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:55:43.855 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 12 6556 1 2025-08-04 07:52:06.138 00:04:00.273 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-08-04 07:52:06.136 00:04:00.278 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-08-04 07:56:21.587 00:00:10.376 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:56:44.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43088 10 6452 1 2025-08-04 07:57:22.005 00:00:10.366 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-08-04 07:57:44.254 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-08-04 07:58:04.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-04 07:58:04.553 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-04 07:58:22.406 00:00:10.361 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 165, total bytes: 492014, total packets: 1565, avg bps: 1085, avg pps: 0, avg bpp: 314 Time window: 2025-08-04 06:58:06 - 2025-08-04 07:58:32 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0031s User: 0.0010s Wall: 0.0026s flows/second: 64127.1 Runtime: 0.0026s