Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 07:58:42.682 00:00:10.372 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-07-19 07:59:21.594 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6438 1 2025-07-19 07:59:43.109 00:00:10.361 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:00:22.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:00:22.129 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:00:21.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6438 1 2025-07-19 08:00:43.512 00:00:10.329 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:01:21.982 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6438 1 2025-07-19 08:01:43.885 00:00:10.384 TCP 23.104.0.1:46192 -> 1.101.0.1:3000 11 1507 1 2025-07-19 07:57:57.842 00:05:00.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:02:22.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6438 1 2025-07-19 08:02:44.334 00:00:10.366 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:03:22.424 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 12 10352 1 2025-07-19 08:03:44.739 00:00:10.442 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 15 1925 1 2025-07-19 07:59:57.840 00:05:00.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:04:22.659 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6438 1 2025-07-19 08:04:45.217 00:00:10.363 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:05:22.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:05:22.275 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:05:22.869 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6438 1 2025-07-19 08:05:45.619 00:00:10.364 TCP 23.104.0.1:34524 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:06:23.068 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6438 1 2025-07-19 08:06:46.020 00:00:10.362 TCP 23.104.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:07:23.282 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6438 1 2025-07-19 08:07:46.418 00:00:10.365 TCP 23.104.0.1:43412 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:03:57.843 00:05:00.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:08:23.489 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6438 1 2025-07-19 08:08:46.821 00:00:10.364 TCP 23.104.0.1:51666 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:09:23.698 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6438 1 2025-07-19 08:09:47.221 00:00:10.363 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:05:57.841 00:05:00.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:10:22.589 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:10:22.518 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:10:23.907 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6438 1 2025-07-19 08:10:47.629 00:00:10.365 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:11:24.117 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44054 10 6438 1 2025-07-19 08:11:48.032 00:00:10.327 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:12:24.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6438 1 2025-07-19 08:12:48.395 00:00:10.334 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:13:24.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6438 1 2025-07-19 08:09:57.843 00:05:00.212 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:13:48.775 00:00:10.385 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:14:24.754 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6438 1 2025-07-19 08:14:49.208 00:00:10.375 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:15:23.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:15:23.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:15:24.967 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6438 1 2025-07-19 08:15:49.634 00:00:10.370 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:11:57.841 00:05:00.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:16:25.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6438 1 2025-07-19 08:16:50.056 00:00:10.366 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:17:25.403 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6438 1 2025-07-19 08:17:50.463 00:00:10.366 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:18:25.578 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55698 10 6438 1 2025-07-19 08:18:50.870 00:00:10.366 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:19:25.765 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6438 1 2025-07-19 08:15:57.845 00:05:00.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:19:51.274 00:00:10.370 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:20:22.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:20:22.765 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:20:25.983 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6438 1 2025-07-19 08:20:51.677 00:00:10.325 TCP 23.104.0.1:38548 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:21:26.207 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6438 1 2025-07-19 08:17:57.841 00:05:00.220 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:21:52.034 00:00:10.375 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:22:26.416 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52946 10 6438 1 2025-07-19 08:22:52.448 00:00:10.370 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:23:26.628 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6438 1 2025-07-19 08:23:52.858 00:00:10.330 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:24:26.846 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60980 10 6438 1 2025-07-19 08:24:53.225 00:00:10.325 TCP 23.104.0.1:37758 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:25:22.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:25:22.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:25:27.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6438 1 2025-07-19 08:21:57.844 00:05:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:25:53.588 00:00:10.368 TCP 23.104.0.1:34212 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:26:27.295 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6438 1 2025-07-19 08:26:53.996 00:00:10.359 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:27:27.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6438 1 2025-07-19 08:23:57.841 00:05:00.221 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:27:54.393 00:00:10.322 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:28:27.683 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 10 6438 1 2025-07-19 08:28:54.753 00:00:10.379 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:29:27.854 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6438 1 2025-07-19 08:29:55.169 00:00:10.327 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:30:22.954 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:30:22.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:30:28.031 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37426 10 6438 1 2025-07-19 08:30:55.537 00:00:10.376 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:31:28.240 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6438 1 2025-07-19 08:27:57.846 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:31:55.947 00:00:10.367 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:32:28.460 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33830 10 6438 1 2025-07-19 08:32:56.352 00:00:10.364 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:33:28.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6438 1 2025-07-19 08:29:57.843 00:05:00.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:33:56.757 00:00:10.342 TCP 23.104.0.1:52522 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:34:28.855 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6438 1 2025-07-19 08:34:57.140 00:00:10.420 TCP 23.104.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:35:22.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:35:23.140 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:35:29.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51098 10 6438 1 2025-07-19 08:35:57.597 00:00:10.325 TCP 23.104.0.1:60414 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:36:29.292 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6438 1 2025-07-19 08:36:57.963 00:00:10.378 TCP 23.104.0.1:56610 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:37:29.464 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6438 1 2025-07-19 08:33:57.853 00:05:00.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:37:58.376 00:00:10.365 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:38:29.681 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43802 10 6438 1 2025-07-19 08:38:58.787 00:00:10.321 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:39:29.903 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46520 10 6438 1 2025-07-19 08:35:57.851 00:05:00.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:39:59.144 00:00:10.367 TCP 23.104.0.1:59828 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:40:23.047 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:40:23.258 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:40:30.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60072 10 6438 1 2025-07-19 08:40:59.548 00:00:10.363 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:41:30.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6438 1 2025-07-19 08:41:59.945 00:00:10.371 TCP 23.104.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:42:30.546 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6438 1 2025-07-19 08:43:00.360 00:00:10.374 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:43:30.783 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:46510 10 6438 1 2025-07-19 08:39:57.854 00:05:00.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:44:00.785 00:00:10.363 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:44:31.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43542 10 6438 1 2025-07-19 08:45:01.196 00:00:10.364 TCP 23.104.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:45:23.259 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:45:23.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:45:31.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34804 10 6438 1 2025-07-19 08:41:57.853 00:05:00.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:46:01.597 00:00:10.362 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:46:31.458 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45040 10 6438 1 2025-07-19 08:47:01.994 00:00:10.372 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:47:31.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6438 1 2025-07-19 08:48:02.405 00:00:10.369 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:48:31.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52154 10 6438 1 2025-07-19 08:49:02.809 00:00:10.367 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:49:32.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46152 10 6438 1 2025-07-19 08:45:57.856 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:50:03.209 00:00:10.366 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:50:23.504 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:50:23.306 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:50:32.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6438 1 2025-07-19 08:51:03.615 00:00:10.365 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:51:32.530 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48068 10 6438 1 2025-07-19 08:47:57.855 00:05:00.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:52:04.023 00:00:10.373 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:52:32.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6438 1 2025-07-19 08:53:04.436 00:00:10.361 TCP 23.104.0.1:40724 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:53:32.958 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6438 1 2025-07-19 08:54:04.834 00:00:10.398 TCP 23.104.0.1:33854 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:54:33.149 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43370 10 6438 1 2025-07-19 08:55:05.274 00:00:10.374 TCP 23.104.0.1:52490 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:55:24.087 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 08:55:24.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 08:55:33.366 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6438 1 2025-07-19 08:51:57.859 00:05:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 08:56:05.686 00:00:10.372 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:56:33.575 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6438 1 2025-07-19 08:57:06.107 00:00:10.366 TCP 23.104.0.1:47588 -> 1.101.0.1:3000 11 1507 1 2025-07-19 08:57:33.783 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6438 1 2025-07-19 08:53:57.856 00:05:00.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 08:58:06.513 00:00:10.439 TCP 23.104.0.1:35758 -> 1.101.0.1:3000 15 1925 1 2025-07-19 08:58:33.995 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45702 12 10352 1 Summary: total flows: 164, total bytes: 506172, total packets: 1584, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-07-19 07:57:57 - 2025-07-19 08:58:58 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0019s Wall: 0.0020s flows/second: 81713.7 Runtime: 0.0020s