Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 00:58:45.118 00:00:10.438 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 15 1926 1 2025-07-29 00:54:02.478 00:06:00.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 00:59:16.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-07-29 00:59:45.593 00:00:10.369 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:00:02.804 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:00:03.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:00:16.707 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-07-29 01:00:46.018 00:00:10.363 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:01:16.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-07-29 01:01:46.419 00:00:10.318 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-07-29 00:57:02.477 00:06:00.271 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:02:17.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-07-29 01:02:46.776 00:00:10.327 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:03:17.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-07-29 01:03:47.143 00:00:10.363 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:04:17.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-07-29 01:04:47.545 00:00:10.372 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:05:02.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:05:03.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:05:17.753 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-07-29 01:05:47.970 00:00:10.373 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:01:02.481 00:06:00.265 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:06:17.972 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6452 1 2025-07-29 01:06:48.385 00:00:10.364 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:07:18.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-07-29 01:07:48.784 00:00:10.335 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:08:18.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43770 10 6452 1 2025-07-29 01:08:49.155 00:00:10.358 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:04:02.478 00:06:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:09:18.625 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-07-29 01:09:49.552 00:00:10.360 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:10:03.297 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:10:03.287 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:10:18.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40820 10 6452 1 2025-07-29 01:10:49.955 00:00:10.366 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:11:19.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-07-29 01:11:50.357 00:00:10.329 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:12:19.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-07-29 01:12:50.721 00:00:10.374 TCP 23.104.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:08:02.482 00:06:00.265 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:13:19.513 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43696 12 10365 1 2025-07-29 01:13:51.133 00:00:10.436 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 15 1926 1 2025-07-29 01:14:19.716 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-07-29 01:15:03.597 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:14:51.607 00:00:10.384 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:15:03.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:15:19.925 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44894 10 6452 1 2025-07-29 01:11:02.480 00:06:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:15:52.019 00:00:10.371 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:16:20.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6452 1 2025-07-29 01:16:52.418 00:00:10.323 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:17:20.321 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 2025-07-29 01:17:52.773 00:00:10.371 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:18:20.538 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-07-29 01:18:53.184 00:00:10.364 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:19:20.752 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-07-29 01:20:02.990 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:15:02.484 00:06:00.266 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:20:03.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:19:53.586 00:00:10.364 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:20:20.927 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-07-29 01:20:53.992 00:00:10.370 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:21:21.165 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-07-29 01:21:54.395 00:00:10.366 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:22:21.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-07-29 01:22:54.798 00:00:10.364 TCP 23.104.0.1:37990 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:18:02.485 00:06:00.270 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:23:21.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-07-29 01:23:55.203 00:00:10.365 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:24:21.804 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57352 10 6452 1 2025-07-29 01:25:04.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:24:55.603 00:00:10.363 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:25:04.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:25:22.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-07-29 01:25:56.008 00:00:10.319 TCP 23.104.0.1:60678 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:26:22.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-07-29 01:22:02.489 00:06:00.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:26:56.367 00:00:10.364 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:27:22.458 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44980 10 6452 1 2025-07-29 01:27:56.768 00:00:10.377 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:28:22.700 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 14 14280 1 2025-07-29 01:28:57.183 00:00:10.512 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 17 2241 1 2025-07-29 01:29:22.966 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-07-29 01:30:03.592 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:25:02.486 00:06:00.269 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:30:03.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:29:57.740 00:00:10.339 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:30:23.200 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36514 10 6452 1 2025-07-29 01:30:58.118 00:00:10.335 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:31:23.422 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-07-29 01:31:58.534 00:00:10.378 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:32:23.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-07-29 01:32:58.953 00:00:10.370 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:33:23.849 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-07-29 01:29:02.491 00:06:00.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:33:59.363 00:00:10.366 TCP 23.104.0.1:36036 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:34:24.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40286 10 6452 1 2025-07-29 01:35:04.168 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:35:03.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:34:59.776 00:00:10.374 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:35:24.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37496 10 6452 1 2025-07-29 01:36:00.186 00:00:10.369 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:36:24.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6452 1 2025-07-29 01:32:02.487 00:06:00.273 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:37:00.595 00:00:10.328 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:37:24.719 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-07-29 01:38:00.959 00:00:10.697 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:38:24.886 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-07-29 01:39:01.707 00:00:10.374 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:39:25.114 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6452 1 2025-07-29 01:40:03.749 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:40:03.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:40:02.124 00:00:10.366 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:40:25.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39534 10 6452 1 2025-07-29 01:36:02.491 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:41:02.529 00:00:10.364 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:41:25.535 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-07-29 01:42:02.926 00:00:10.348 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:42:25.755 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-07-29 01:43:03.314 00:00:10.364 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:43:25.926 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-07-29 01:39:02.489 00:06:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:44:03.718 00:00:10.368 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:44:26.158 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-07-29 01:45:03.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:45:03.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:45:04.127 00:00:10.374 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:45:26.373 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40436 10 6452 1 2025-07-29 01:46:04.534 00:00:10.364 TCP 23.104.0.1:47366 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:46:26.587 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58794 10 6452 1 2025-07-29 01:47:04.934 00:00:10.343 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:47:26.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-07-29 01:43:02.493 00:06:00.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:48:05.313 00:00:10.373 TCP 23.104.0.1:60150 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:48:26.979 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-07-29 01:49:05.718 00:00:10.329 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:49:27.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-07-29 01:50:03.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:50:03.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:50:06.111 00:00:10.363 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:50:27.433 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-07-29 01:46:02.491 00:06:00.273 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:51:06.516 00:00:10.362 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:51:27.699 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-07-29 01:52:06.916 00:00:10.374 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:52:27.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 10 6452 1 2025-07-29 01:53:07.329 00:00:10.439 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 15 1926 1 2025-07-29 01:53:28.110 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35528 12 10367 1 2025-07-29 01:54:07.808 00:00:10.362 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:54:28.351 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-07-29 01:55:04.318 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 01:55:04.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 01:50:02.494 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-29 01:55:08.209 00:00:10.323 TCP 23.104.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:55:28.564 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-07-29 01:56:08.574 00:00:10.363 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:56:28.782 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-07-29 01:57:08.982 00:00:10.341 TCP 23.104.0.1:56752 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:57:28.995 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-07-29 01:53:02.495 00:06:00.271 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-29 01:58:09.361 00:00:10.363 TCP 23.104.0.1:55266 -> 1.101.0.1:3000 11 1507 1 2025-07-29 01:58:29.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 Summary: total flows: 162, total bytes: 516733, total packets: 1610, avg bps: 1059, avg pps: 0, avg bpp: 320 Time window: 2025-07-29 00:54:02 - 2025-07-29 01:59:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0016s User: 0.0031s Wall: 0.0026s flows/second: 63301.4 Runtime: 0.0026s