Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 19:59:27.916 00:00:10.374 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:59:31.313 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6438 1 2025-07-25 20:00:31.481 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6438 1 2025-07-25 20:00:28.336 00:00:10.368 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:56:01.191 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-07-25 20:01:31.690 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6438 1 2025-07-25 20:01:28.744 00:00:10.366 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-07-25 19:57:01.032 00:06:00.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 20:02:29.146 00:00:10.365 TCP 23.104.0.1:55228 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:02:31.863 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35274 10 6438 1 2025-07-25 20:03:30.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:03:30.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:03:29.549 00:00:10.445 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 15 1925 1 2025-07-25 20:03:32.086 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42482 12 10352 1 2025-07-25 20:04:30.036 00:00:10.365 TCP 23.104.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:04:32.331 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6438 1 2025-07-25 20:05:30.433 00:00:10.365 TCP 23.104.0.1:39796 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:05:32.500 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55584 10 6438 1 2025-07-25 20:06:30.835 00:00:10.386 TCP 23.104.0.1:41954 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:06:32.710 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47296 10 6438 1 2025-07-25 20:03:01.035 00:04:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-25 20:07:31.259 00:00:10.364 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:07:32.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6438 1 2025-07-25 20:04:01.034 00:04:00.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-25 20:08:30.408 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:08:30.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:08:31.667 00:00:10.369 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:08:33.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55106 10 6438 1 2025-07-25 20:09:32.105 00:00:10.364 TCP 23.104.0.1:43314 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:09:33.350 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44558 10 6438 1 2025-07-25 20:10:33.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57448 10 6438 1 2025-07-25 20:10:32.506 00:00:10.366 TCP 23.104.0.1:54132 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:11:33.788 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6438 1 2025-07-25 20:11:32.913 00:00:10.323 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:12:34.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6438 1 2025-07-25 20:12:33.276 00:00:10.362 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:09:01.034 00:04:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-25 20:08:01.038 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 20:13:30.394 00:00:00.010 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:13:30.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:13:33.689 00:00:10.392 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:13:34.226 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6438 1 2025-07-25 20:14:34.406 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6438 1 2025-07-25 20:14:34.117 00:00:10.370 TCP 23.104.0.1:38848 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:15:34.525 00:00:10.373 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:15:34.630 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6438 1 2025-07-25 20:16:34.942 00:00:10.381 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:16:34.812 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47470 10 6438 1 2025-07-25 20:17:35.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37926 10 6438 1 2025-07-25 20:17:35.358 00:00:10.362 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:18:30.687 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:18:30.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:18:35.762 00:00:10.377 TCP 23.104.0.1:40016 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:18:35.243 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6438 1 2025-07-25 20:14:01.039 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 20:19:35.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6438 1 2025-07-25 20:19:36.177 00:00:10.365 TCP 23.104.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:15:01.044 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 20:20:35.664 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6438 1 2025-07-25 20:20:36.577 00:00:10.363 TCP 23.104.0.1:47192 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:21:35.838 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6438 1 2025-07-25 20:21:36.985 00:00:10.368 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:22:36.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6438 1 2025-07-25 20:22:37.391 00:00:10.360 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:23:30.784 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:23:30.830 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:23:36.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 11 6478 1 2025-07-25 20:23:37.788 00:00:10.322 TCP 23.104.0.1:56444 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:24:36.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47152 10 6438 1 2025-07-25 20:24:38.145 00:00:10.374 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:25:36.728 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6438 1 2025-07-25 20:25:38.554 00:00:10.322 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:21:01.042 00:06:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 20:26:36.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6438 1 2025-07-25 20:26:38.918 00:00:10.374 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:22:01.044 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-07-25 20:27:39.330 00:00:10.362 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:27:37.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6438 1 2025-07-25 20:28:30.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:28:30.843 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:28:39.737 00:00:10.368 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:28:37.333 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6438 1 2025-07-25 20:29:40.147 00:00:10.362 TCP 23.104.0.1:60416 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:29:37.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6438 1 2025-07-25 20:30:37.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58878 10 6438 1 2025-07-25 20:30:40.547 00:00:10.370 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:31:37.963 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6438 1 2025-07-25 20:31:40.955 00:00:10.366 TCP 23.104.0.1:40294 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:32:41.360 00:00:10.317 TCP 23.104.0.1:54546 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:32:38.188 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6438 1 2025-07-25 20:28:01.205 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 809 1 2025-07-25 20:28:01.043 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-07-25 20:33:30.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:33:30.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:33:38.398 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6438 1 2025-07-25 20:33:41.714 00:00:10.372 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:34:38.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6438 1 2025-07-25 20:34:42.130 00:00:10.364 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:35:38.792 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6438 1 2025-07-25 20:35:42.530 00:00:10.369 TCP 23.104.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:36:38.975 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:52886 10 6438 1 2025-07-25 20:36:42.943 00:00:10.387 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:37:39.161 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6438 1 2025-07-25 20:37:43.371 00:00:10.325 TCP 23.104.0.1:52576 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:38:31.032 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:38:31.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:38:39.378 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49290 10 6438 1 2025-07-25 20:38:43.735 00:00:10.380 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:34:01.214 00:05:59.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 790 1 2025-07-25 20:35:01.046 00:04:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 615 1 2025-07-25 20:39:39.604 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50244 10 6438 1 2025-07-25 20:39:44.145 00:00:10.327 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:40:39.832 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40646 10 6438 1 2025-07-25 20:40:44.513 00:00:10.364 TCP 23.104.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:41:40.081 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6438 1 2025-07-25 20:41:44.912 00:00:10.365 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:42:40.250 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41144 10 6438 1 2025-07-25 20:42:45.313 00:00:10.365 TCP 23.104.0.1:49696 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:43:30.876 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:43:30.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:43:40.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50814 10 6438 1 2025-07-25 20:43:45.714 00:00:10.375 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:44:40.655 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6438 1 2025-07-25 20:44:46.133 00:00:10.367 TCP 23.104.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:41:01.047 00:04:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 615 1 2025-07-25 20:40:01.047 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 20:45:40.879 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50290 10 6438 1 2025-07-25 20:45:46.537 00:00:10.370 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:46:41.077 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59114 10 6438 1 2025-07-25 20:46:46.949 00:00:10.372 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:47:41.287 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6438 1 2025-07-25 20:47:47.362 00:00:10.364 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:48:31.185 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:48:31.222 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:48:41.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6438 1 2025-07-25 20:48:47.761 00:00:10.384 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:49:41.718 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6438 1 2025-07-25 20:49:48.186 00:00:10.367 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:50:41.941 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6438 1 2025-07-25 20:46:01.046 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 20:50:48.589 00:00:10.330 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:51:42.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6438 1 2025-07-25 20:51:48.962 00:00:10.385 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:47:01.051 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 20:52:42.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6438 1 2025-07-25 20:52:49.386 00:00:10.365 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:53:31.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 20:53:31.354 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:53:42.600 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 10 6438 1 2025-07-25 20:53:49.784 00:00:10.364 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:54:42.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50760 10 6438 1 2025-07-25 20:54:50.190 00:00:10.365 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:55:42.982 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6438 1 2025-07-25 20:55:50.593 00:00:10.365 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:56:43.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6438 1 2025-07-25 20:56:51.000 00:00:10.642 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:57:43.392 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6438 1 2025-07-25 20:53:01.051 00:06:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 20:57:51.682 00:00:10.367 TCP 23.104.0.1:56730 -> 1.101.0.1:3000 11 1507 1 2025-07-25 20:58:31.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 20:58:31.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 161, total bytes: 494006, total packets: 1559, avg bps: 1045, avg pps: 0, avg bpp: 316 Time window: 2025-07-25 19:56:01 - 2025-07-25 20:59:01 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0026s User: 0.0017s Wall: 0.0035s flows/second: 45959.5 Runtime: 0.0035s