Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 12:58:44.138 00:00:10.363 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-07-19 12:59:24.480 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6438 1 2025-07-19 12:59:44.542 00:00:10.370 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:00:28.865 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:00:28.572 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:00:24.654 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6438 1 2025-07-19 13:00:44.951 00:00:10.370 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:01:24.831 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6438 1 2025-07-19 13:01:45.359 00:00:10.360 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-07-19 12:57:57.941 00:05:00.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:02:25.070 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6438 1 2025-07-19 13:02:45.761 00:00:10.372 TCP 23.104.0.1:45458 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:03:25.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6438 1 2025-07-19 13:03:46.173 00:00:10.366 TCP 23.104.0.1:58954 -> 1.101.0.1:3000 11 1507 1 2025-07-19 12:59:57.939 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:04:25.467 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6438 1 2025-07-19 13:04:46.574 00:00:10.363 TCP 23.104.0.1:32970 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:05:28.405 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:05:28.540 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:05:25.687 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6438 1 2025-07-19 13:05:46.977 00:00:10.363 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:06:25.896 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6438 1 2025-07-19 13:06:47.387 00:00:10.364 TCP 23.104.0.1:33306 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:07:26.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6438 1 2025-07-19 13:03:57.942 00:05:00.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:07:47.787 00:00:10.330 TCP 23.104.0.1:51374 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:08:26.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6438 1 2025-07-19 13:08:48.152 00:00:10.332 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:09:26.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59040 10 6438 1 2025-07-19 13:05:57.939 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:09:48.527 00:00:10.360 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:10:28.827 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:10:28.799 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:10:26.745 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39188 10 6438 1 2025-07-19 13:10:48.924 00:00:10.382 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:11:26.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6438 1 2025-07-19 13:11:49.348 00:00:10.364 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:12:27.187 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6438 1 2025-07-19 13:12:49.750 00:00:10.439 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 15 1925 1 2025-07-19 13:13:27.396 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 14 17495 1 2025-07-19 13:13:50.227 00:00:10.367 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:09:57.942 00:05:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:14:27.595 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6438 1 2025-07-19 13:14:50.636 00:00:10.368 TCP 23.104.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:15:29.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:15:29.064 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:15:27.808 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6438 1 2025-07-19 13:11:57.941 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:15:51.048 00:00:10.363 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:16:28.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6438 1 2025-07-19 13:16:51.450 00:00:10.328 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:17:28.255 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6438 1 2025-07-19 13:17:51.826 00:00:10.357 TCP 23.104.0.1:34552 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:18:28.472 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6438 1 2025-07-19 13:18:52.223 00:00:10.361 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:19:28.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6438 1 2025-07-19 13:15:57.944 00:05:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:19:52.626 00:00:10.369 TCP 23.104.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:20:28.880 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:20:28.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:20:28.893 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48432 10 6438 1 2025-07-19 13:20:53.032 00:00:10.364 TCP 23.104.0.1:49482 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:21:29.101 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6438 1 2025-07-19 13:17:57.946 00:05:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:21:53.438 00:00:10.372 TCP 23.104.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:22:30.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6438 1 2025-07-19 13:22:53.845 00:00:10.376 TCP 23.104.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:23:30.293 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6438 1 2025-07-19 13:23:54.264 00:00:10.374 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:24:30.506 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6438 1 2025-07-19 13:24:54.669 00:00:10.383 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:25:28.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:25:28.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:25:30.678 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6438 1 2025-07-19 13:21:57.950 00:05:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:25:55.103 00:00:10.371 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:26:30.895 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6438 1 2025-07-19 13:26:55.508 00:00:10.333 TCP 23.104.0.1:54642 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:27:31.088 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6438 1 2025-07-19 13:23:57.947 00:05:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:27:55.877 00:00:10.346 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:28:31.258 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44018 10 6438 1 2025-07-19 13:28:56.261 00:00:10.363 TCP 23.104.0.1:41890 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:29:31.468 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 12 6542 1 2025-07-19 13:29:56.661 00:00:10.366 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:30:29.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:30:29.108 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:30:31.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6438 1 2025-07-19 13:30:57.090 00:00:10.362 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:31:31.893 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6438 1 2025-07-19 13:27:57.952 00:05:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:31:57.505 00:00:10.329 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:32:32.110 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6438 1 2025-07-19 13:32:57.870 00:00:10.364 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:33:32.284 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49740 10 6438 1 2025-07-19 13:29:57.949 00:05:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:33:58.278 00:00:10.364 TCP 23.104.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:34:32.456 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6438 1 2025-07-19 13:34:58.682 00:00:10.369 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:35:29.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:35:29.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:35:32.666 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6438 1 2025-07-19 13:35:59.106 00:00:10.377 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:36:32.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6438 1 2025-07-19 13:36:59.526 00:00:10.364 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:37:33.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57868 10 6438 1 2025-07-19 13:33:57.954 00:05:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:37:59.928 00:00:10.378 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:38:33.277 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6438 1 2025-07-19 13:39:00.346 00:00:10.365 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:39:33.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6438 1 2025-07-19 13:35:57.952 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:40:00.751 00:00:10.366 TCP 23.104.0.1:39890 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:40:29.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:40:29.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:40:33.700 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33642 10 6438 1 2025-07-19 13:41:01.160 00:00:10.366 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:41:33.914 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6438 1 2025-07-19 13:42:01.557 00:00:10.331 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:42:34.095 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6438 1 2025-07-19 13:43:01.920 00:00:10.389 TCP 23.104.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:43:34.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6438 1 2025-07-19 13:39:57.957 00:05:00.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:44:02.347 00:00:10.366 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:44:34.529 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34234 10 6438 1 2025-07-19 13:45:02.750 00:00:10.379 TCP 23.104.0.1:57176 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:45:29.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:45:29.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:45:34.741 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6438 1 2025-07-19 13:41:57.956 00:05:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:46:03.171 00:00:10.369 TCP 23.104.0.1:47480 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:46:34.956 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 10 6438 1 2025-07-19 13:47:03.575 00:00:10.377 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:47:35.191 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6438 1 2025-07-19 13:48:03.989 00:00:10.368 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:48:35.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6438 1 2025-07-19 13:49:04.392 00:00:10.365 TCP 23.104.0.1:37216 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:49:35.619 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6438 1 2025-07-19 13:45:57.958 00:05:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:50:04.792 00:00:10.371 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:50:29.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:50:29.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:50:35.830 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6438 1 2025-07-19 13:51:05.208 00:00:10.364 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:51:36.064 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57436 10 6438 1 2025-07-19 13:47:57.956 00:05:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:52:05.609 00:00:10.383 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:52:36.273 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6438 1 2025-07-19 13:53:06.035 00:00:10.364 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:53:36.546 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6438 1 2025-07-19 13:54:06.438 00:00:10.319 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:54:36.757 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35968 10 6438 1 2025-07-19 13:55:06.794 00:00:10.369 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:55:29.679 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-19 13:55:29.513 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-19 13:55:36.981 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51712 10 6438 1 2025-07-19 13:51:57.960 00:05:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-19 13:56:07.196 00:00:10.365 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:56:37.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 10 6438 1 2025-07-19 13:57:07.601 00:00:10.364 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:57:37.417 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60736 10 6438 1 2025-07-19 13:53:57.958 00:05:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-19 13:58:08.011 00:00:10.339 TCP 23.104.0.1:48830 -> 1.101.0.1:3000 11 1507 1 2025-07-19 13:58:37.634 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48016 10 6438 1 Summary: total flows: 164, total bytes: 509087, total packets: 1582, avg bps: 1112, avg pps: 0, avg bpp: 321 Time window: 2025-07-19 12:57:57 - 2025-07-19 13:58:58 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0010s Wall: 0.0030s flows/second: 54069.0 Runtime: 0.0031s