Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-28 20:59:09.175 00:00:10.365 TCP 23.104.0.1:58144 -> 1.101.0.1:3000 11 1507 1 2025-07-28 20:59:26.471 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-07-28 20:59:58.130 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 20:59:57.967 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:00:09.577 00:00:10.366 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:00:26.645 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 10 6452 1 2025-07-28 20:56:02.422 00:06:00.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:01:09.983 00:00:10.324 TCP 23.104.0.1:59116 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:01:26.824 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 10 6452 1 2025-07-28 21:02:10.345 00:00:10.372 TCP 23.104.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:02:27.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50908 10 6452 1 2025-07-28 21:03:10.757 00:00:10.339 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:03:27.252 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-07-28 20:59:02.421 00:06:00.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:04:11.133 00:00:10.326 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:04:27.464 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-07-28 21:04:58.265 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:04:58.359 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:05:11.497 00:00:10.368 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:05:27.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-07-28 21:06:11.903 00:00:10.368 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:06:27.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6452 1 2025-07-28 21:07:12.307 00:00:10.366 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:07:28.104 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-07-28 21:03:02.427 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:08:12.713 00:00:10.384 TCP 23.104.0.1:40240 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:08:28.330 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-07-28 21:09:13.135 00:00:10.366 TCP 23.104.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:09:28.513 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6452 1 2025-07-28 21:09:58.289 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:09:58.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:10:13.536 00:00:10.361 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:10:28.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34934 10 6452 1 2025-07-28 21:06:02.424 00:06:00.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:11:13.937 00:00:10.378 TCP 23.104.0.1:43532 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:11:28.959 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51196 10 6452 1 2025-07-28 21:12:14.360 00:00:10.360 TCP 23.104.0.1:59850 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:12:29.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49918 10 6452 1 2025-07-28 21:13:14.757 00:00:10.337 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:13:29.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-07-28 21:14:15.133 00:00:10.320 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:14:29.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58370 10 6452 1 2025-07-28 21:14:58.302 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:14:58.231 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:10:02.428 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:15:15.496 00:00:10.363 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:15:29.824 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44186 10 6452 1 2025-07-28 21:16:15.899 00:00:10.327 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:16:30.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2025-07-28 21:17:16.269 00:00:10.372 TCP 23.104.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:17:30.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33500 10 6452 1 2025-07-28 21:13:02.427 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:18:16.675 00:00:10.366 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:18:30.489 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-07-28 21:19:17.105 00:00:10.367 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:19:30.710 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-07-28 21:19:58.161 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:19:58.318 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:20:17.510 00:00:10.320 TCP 23.104.0.1:60832 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:20:30.920 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58692 10 6452 1 2025-07-28 21:21:17.873 00:00:10.367 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:21:31.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-07-28 21:17:02.433 00:06:00.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:22:18.283 00:00:10.544 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:22:31.343 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-07-28 21:23:18.871 00:00:10.372 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:23:31.552 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43216 10 6452 1 2025-07-28 21:24:19.318 00:00:10.334 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:24:31.766 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-07-28 21:24:58.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:24:58.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:20:02.428 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:25:19.697 00:00:10.364 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:25:31.984 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-07-28 21:26:20.109 00:00:10.366 TCP 23.104.0.1:42520 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:26:32.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 10 6452 1 2025-07-28 21:27:20.508 00:00:10.325 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:27:32.383 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-07-28 21:28:20.875 00:00:10.362 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:28:32.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41138 10 6452 1 2025-07-28 21:24:02.435 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:29:21.277 00:00:10.330 TCP 23.104.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:29:32.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-07-28 21:29:58.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:29:58.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:30:21.642 00:00:10.371 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:30:32.979 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-07-28 21:31:22.060 00:00:10.330 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:31:33.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38446 10 6452 1 2025-07-28 21:27:02.432 00:06:00.242 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:32:22.427 00:00:10.367 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:32:33.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-07-28 21:33:22.828 00:00:10.329 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:33:33.601 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-07-28 21:34:23.195 00:00:10.366 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:34:33.832 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35472 10 6452 1 2025-07-28 21:34:58.903 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:34:58.829 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:35:23.598 00:00:10.366 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:35:34.071 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-07-28 21:31:02.436 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:36:24.007 00:00:10.368 TCP 23.104.0.1:49926 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:36:34.303 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6452 1 2025-07-28 21:37:24.407 00:00:10.375 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:37:34.512 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46510 10 6452 1 2025-07-28 21:38:24.829 00:00:10.377 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:38:34.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-07-28 21:34:02.435 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:39:25.246 00:00:10.318 TCP 23.104.0.1:45870 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:39:34.948 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39064 10 6452 1 2025-07-28 21:39:58.920 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:39:58.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:40:25.607 00:00:10.372 TCP 23.104.0.1:37554 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:40:35.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-07-28 21:41:26.013 00:00:10.365 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:41:35.389 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-07-28 21:42:26.419 00:00:10.370 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:42:35.561 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-07-28 21:38:02.439 00:06:00.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:43:26.826 00:00:10.416 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:43:35.770 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6452 1 2025-07-28 21:44:27.282 00:00:10.367 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:44:35.991 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6452 1 2025-07-28 21:44:58.999 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:44:59.103 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:45:27.683 00:00:10.383 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:45:36.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46058 10 6452 1 2025-07-28 21:41:02.436 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:46:28.105 00:00:10.376 TCP 23.104.0.1:38618 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:46:36.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-07-28 21:47:28.516 00:00:10.323 TCP 23.104.0.1:36888 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:47:36.631 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-07-28 21:48:28.877 00:00:10.397 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 15 1926 1 2025-07-28 21:48:36.841 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 12 10365 1 2025-07-28 21:49:29.313 00:00:10.367 TCP 23.104.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:49:37.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-07-28 21:49:58.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:49:58.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:45:02.441 00:06:00.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:50:29.717 00:00:10.373 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:50:37.257 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 10 6452 1 2025-07-28 21:51:30.137 00:00:10.367 TCP 23.104.0.1:33910 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:51:37.429 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6452 1 2025-07-28 21:52:30.535 00:00:10.362 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:52:37.600 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6452 1 2025-07-28 21:48:02.437 00:06:00.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-28 21:53:30.931 00:00:10.348 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:53:37.813 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-07-28 21:54:31.319 00:00:10.360 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:54:37.998 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-07-28 21:54:59.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-28 21:54:59.249 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-28 21:55:31.717 00:00:10.379 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:55:38.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-07-28 21:56:32.140 00:00:10.372 TCP 23.104.0.1:56026 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:56:38.427 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-07-28 21:52:02.442 00:06:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-28 21:57:32.582 00:00:10.372 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:57:38.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-07-28 21:58:32.998 00:00:10.361 TCP 23.104.0.1:42100 -> 1.101.0.1:3000 11 1507 1 2025-07-28 21:58:38.818 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57302 10 6452 1 Summary: total flows: 161, total bytes: 502557, total packets: 1576, avg bps: 1067, avg pps: 0, avg bpp: 318 Time window: 2025-07-28 20:56:02 - 2025-07-28 21:58:48 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0030s User: 0.0008s Wall: 0.0015s flows/second: 108114.5 Runtime: 0.0015s