Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 07:59:00.876 00:00:10.371 TCP 23.104.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-07-21 07:59:37.380 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6438 1 2025-07-21 08:00:01.281 00:00:10.361 TCP 23.104.0.1:38492 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:00:37.604 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6438 1 2025-07-21 08:01:01.682 00:00:10.363 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:01:20.323 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:01:20.001 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:01:37.822 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6438 1 2025-07-21 07:57:58.875 00:05:00.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 07:57:58.872 00:05:00.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:02:02.102 00:00:10.368 TCP 23.104.0.1:59142 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:02:38.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6438 1 2025-07-21 08:03:02.502 00:00:10.369 TCP 23.104.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:03:38.284 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6438 1 2025-07-21 08:04:02.909 00:00:10.367 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:04:38.509 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6438 1 2025-07-21 08:05:03.314 00:00:10.377 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:05:38.732 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35586 10 6438 1 2025-07-21 08:06:03.727 00:00:10.371 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:06:20.873 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:06:20.713 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:06:38.954 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6438 1 2025-07-21 08:07:04.137 00:00:10.366 TCP 23.104.0.1:38870 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:07:39.193 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6438 1 2025-07-21 08:03:58.876 00:05:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:03:58.873 00:05:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:08:04.542 00:00:10.367 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:08:39.365 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6438 1 2025-07-21 08:09:04.949 00:00:10.369 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:09:39.584 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43916 10 6438 1 2025-07-21 08:10:05.355 00:00:10.366 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:10:39.759 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6438 1 2025-07-21 08:11:05.760 00:00:10.376 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:11:20.442 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:11:20.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:11:39.973 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51678 10 6438 1 2025-07-21 08:12:06.173 00:00:10.366 TCP 23.104.0.1:58782 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:12:40.204 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6438 1 2025-07-21 08:13:06.577 00:00:10.366 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:13:40.380 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 10 6438 1 2025-07-21 08:09:58.874 00:05:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:09:58.879 00:05:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:14:06.980 00:00:10.361 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:14:40.593 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6438 1 2025-07-21 08:15:07.379 00:00:10.324 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:15:40.804 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6438 1 2025-07-21 08:16:20.542 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:16:07.740 00:00:10.367 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:16:20.403 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:16:41.030 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6438 1 2025-07-21 08:17:08.142 00:00:10.359 TCP 23.104.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:17:41.239 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6438 1 2025-07-21 08:18:08.540 00:00:10.325 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:18:41.416 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6438 1 2025-07-21 08:19:08.901 00:00:10.373 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:19:41.630 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6438 1 2025-07-21 08:15:58.880 00:05:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:15:58.877 00:05:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:20:09.310 00:00:10.334 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:20:41.843 00:00:10.257 TCP 1.101.0.1:3000 -> 22.102.0.1:40586 11 6490 1 2025-07-21 08:21:20.614 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:21:20.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:21:09.690 00:00:10.377 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:21:42.138 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6438 1 2025-07-21 08:22:10.109 00:00:10.329 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:22:42.354 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6438 1 2025-07-21 08:23:10.482 00:00:10.363 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:23:42.582 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6438 1 2025-07-21 08:24:10.884 00:00:10.389 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:24:42.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6438 1 2025-07-21 08:25:11.312 00:00:10.367 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:25:43.034 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42856 10 6438 1 2025-07-21 08:21:58.880 00:05:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:21:58.878 00:05:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:26:20.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:26:20.678 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:26:11.720 00:00:10.373 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:26:43.244 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6438 1 2025-07-21 08:27:12.132 00:00:10.367 TCP 23.104.0.1:34020 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:27:43.459 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6438 1 2025-07-21 08:28:12.539 00:00:10.433 TCP 23.104.0.1:44564 -> 1.101.0.1:3000 15 1925 1 2025-07-21 08:28:43.671 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34810 12 10352 1 2025-07-21 08:29:13.013 00:00:10.367 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:29:43.905 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6438 1 2025-07-21 08:30:13.420 00:00:10.365 TCP 23.104.0.1:43888 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:30:44.116 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6438 1 2025-07-21 08:31:20.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:31:20.934 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:31:13.822 00:00:10.331 TCP 23.104.0.1:54314 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:31:44.292 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6438 1 2025-07-21 08:27:58.879 00:05:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:27:58.883 00:05:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:32:14.190 00:00:10.359 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:32:44.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6438 1 2025-07-21 08:33:14.589 00:00:10.366 TCP 23.104.0.1:36656 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:33:44.687 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47250 10 6438 1 2025-07-21 08:34:14.991 00:00:10.374 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:34:44.861 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6438 1 2025-07-21 08:35:15.390 00:00:10.327 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:35:45.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6438 1 2025-07-21 08:36:20.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:36:20.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:36:15.754 00:00:10.379 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:36:45.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6438 1 2025-07-21 08:37:16.171 00:00:10.363 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:37:45.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6438 1 2025-07-21 08:33:58.880 00:05:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:33:58.883 00:05:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:38:16.573 00:00:10.445 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 15 1925 1 2025-07-21 08:38:45.731 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53300 12 10352 1 2025-07-21 08:39:17.062 00:00:10.361 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:39:45.967 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 12 6542 1 2025-07-21 08:40:17.460 00:00:10.362 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:40:46.194 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6438 1 2025-07-21 08:41:21.174 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:41:20.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:41:17.858 00:00:10.336 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:41:46.420 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53306 10 6438 1 2025-07-21 08:42:18.227 00:00:10.370 TCP 23.104.0.1:43090 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:42:46.634 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6438 1 2025-07-21 08:43:18.636 00:00:10.324 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:39:58.880 00:05:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:43:46.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6438 1 2025-07-21 08:39:58.883 00:05:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:44:19.002 00:00:10.365 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:44:47.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6438 1 2025-07-21 08:45:19.406 00:00:10.323 TCP 23.104.0.1:59446 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:45:47.298 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6438 1 2025-07-21 08:46:20.986 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:46:21.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:46:19.770 00:00:10.374 TCP 23.104.0.1:50638 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:46:47.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6438 1 2025-07-21 08:47:20.183 00:00:10.367 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:47:47.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59958 10 6438 1 2025-07-21 08:48:20.585 00:00:10.322 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:48:47.907 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45902 10 6438 1 2025-07-21 08:49:20.949 00:00:10.363 TCP 23.104.0.1:33440 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:49:48.124 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6438 1 2025-07-21 08:45:58.884 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:45:58.881 00:05:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:50:21.351 00:00:10.363 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:50:48.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40432 10 6438 1 2025-07-21 08:51:21.775 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:51:21.384 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:51:21.752 00:00:10.317 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:51:48.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32954 10 6438 1 2025-07-21 08:52:22.112 00:00:10.373 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:52:48.787 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 12 10350 1 2025-07-21 08:53:22.530 00:00:10.446 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 15 1925 1 2025-07-21 08:53:49.026 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51622 10 6438 1 2025-07-21 08:54:23.022 00:00:10.377 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:54:49.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32832 10 6438 1 2025-07-21 08:55:23.446 00:00:10.318 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:51:58.882 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 08:51:58.886 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 08:55:49.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37626 10 6438 1 2025-07-21 08:56:20.977 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 08:56:21.292 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 08:56:23.803 00:00:10.345 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:56:49.671 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6438 1 2025-07-21 08:57:24.186 00:00:10.371 TCP 23.104.0.1:57094 -> 1.101.0.1:3000 11 1507 1 2025-07-21 08:57:49.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6438 1 2025-07-21 08:58:24.590 00:00:10.367 TCP 23.104.0.1:42436 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504220, total packets: 1583, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-07-21 07:57:58 - 2025-07-21 08:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0018s Wall: 0.0027s flows/second: 60325.7 Runtime: 0.0027s