Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 13:59:02.995 00:00:10.360 TCP 23.104.0.1:52676 -> 1.101.0.1:3000 11 1507 1 2025-07-29 13:59:09.611 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-07-29 13:56:02.715 00:05:00.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:00:03.396 00:00:10.370 TCP 23.104.0.1:53676 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:00:18.452 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:00:18.554 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:00:09.822 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6452 1 2025-07-29 14:01:03.803 00:00:10.362 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:01:10.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33276 10 6452 1 2025-07-29 14:02:04.205 00:00:10.362 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:02:10.293 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-07-29 13:59:02.717 00:05:00.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:03:04.606 00:00:10.322 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:03:10.465 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-07-29 14:04:04.968 00:00:10.365 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:04:10.638 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-07-29 14:05:05.372 00:00:10.329 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:05:10.847 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60404 10 6452 1 2025-07-29 14:05:19.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:05:19.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:02:02.716 00:05:00.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:06:05.739 00:00:10.369 TCP 23.104.0.1:54312 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:06:11.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-07-29 14:07:06.142 00:00:10.368 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:07:11.293 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-07-29 14:08:06.550 00:00:10.367 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:08:11.469 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48656 10 6452 1 2025-07-29 14:05:02.719 00:05:00.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:09:11.683 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-07-29 14:09:06.953 00:00:10.365 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:10:18.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:10:07.354 00:00:10.325 TCP 23.104.0.1:40772 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:10:18.671 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:10:11.918 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60112 10 6452 1 2025-07-29 14:11:07.720 00:00:10.375 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:11:12.125 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-07-29 14:08:02.718 00:05:00.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:12:08.130 00:00:10.321 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:12:12.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54336 10 6452 1 2025-07-29 14:13:08.489 00:00:10.366 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:13:12.542 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56002 10 6452 1 2025-07-29 14:14:08.893 00:00:10.373 TCP 23.104.0.1:49922 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:14:12.753 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57550 10 6452 1 2025-07-29 14:11:02.721 00:05:00.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:15:18.750 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:15:18.818 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:15:09.304 00:00:10.370 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:15:12.964 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-07-29 14:16:09.712 00:00:10.375 TCP 23.104.0.1:59952 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:16:13.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-07-29 14:17:10.125 00:00:10.327 TCP 23.104.0.1:46192 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:17:13.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-07-29 14:14:02.721 00:05:00.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:18:10.492 00:00:10.365 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:18:13.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-07-29 14:19:10.895 00:00:10.376 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:19:13.781 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-07-29 14:20:18.788 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:20:11.309 00:00:10.363 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:20:18.962 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:20:13.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-07-29 14:17:02.728 00:05:00.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:21:14.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-07-29 14:21:11.715 00:00:10.372 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:22:12.130 00:00:10.366 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:22:14.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45626 10 6452 1 2025-07-29 14:23:12.527 00:00:10.373 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:23:14.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 10 6452 1 2025-07-29 14:20:02.727 00:05:00.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:24:14.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-07-29 14:24:12.953 00:00:10.327 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:25:20.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:25:20.130 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:25:13.326 00:00:10.375 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:25:15.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33902 10 6452 1 2025-07-29 14:26:15.304 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46402 10 6452 1 2025-07-29 14:26:13.743 00:00:10.367 TCP 23.104.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:23:02.729 00:05:00.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:27:14.149 00:00:10.360 TCP 23.104.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:27:15.483 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2025-07-29 14:28:15.654 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-07-29 14:28:14.544 00:00:10.366 TCP 23.104.0.1:41376 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:29:15.868 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-07-29 14:29:14.946 00:00:10.373 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:26:02.727 00:05:00.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:30:19.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:30:19.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:30:15.357 00:00:10.370 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:30:16.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-07-29 14:31:16.298 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-07-29 14:31:15.763 00:00:10.329 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:32:16.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-07-29 14:32:16.134 00:00:10.363 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:29:02.732 00:05:00.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:33:16.541 00:00:10.321 TCP 23.104.0.1:49672 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:33:16.733 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-07-29 14:34:16.951 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 10 6452 1 2025-07-29 14:34:16.901 00:00:10.376 TCP 23.104.0.1:36930 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:35:19.195 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:35:19.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:35:17.323 00:00:10.369 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:35:17.169 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6452 1 2025-07-29 14:32:02.730 00:05:00.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:36:17.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-07-29 14:36:17.733 00:00:10.373 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:37:17.555 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-07-29 14:37:18.137 00:00:10.368 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:38:17.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-07-29 14:38:18.543 00:00:10.362 TCP 23.104.0.1:38612 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:35:02.732 00:05:00.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:39:17.942 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49054 10 6452 1 2025-07-29 14:39:18.940 00:00:10.376 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:40:19.352 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:40:19.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:40:19.359 00:00:10.362 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:40:18.175 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39978 10 6452 1 2025-07-29 14:41:18.388 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-07-29 14:41:19.757 00:00:10.426 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:38:02.730 00:05:00.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:42:20.226 00:00:10.324 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:42:18.557 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-07-29 14:43:18.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-07-29 14:43:20.586 00:00:10.324 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:44:18.990 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-07-29 14:44:20.948 00:00:10.366 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:41:02.732 00:05:00.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:45:19.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:45:19.384 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:45:19.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 2025-07-29 14:45:21.353 00:00:10.366 TCP 23.104.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:46:19.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54826 10 6452 1 2025-07-29 14:46:21.760 00:00:10.375 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:47:19.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44232 10 6452 1 2025-07-29 14:47:22.177 00:00:10.369 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:44:02.732 00:05:00.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:48:19.854 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 10 6452 1 2025-07-29 14:48:22.585 00:00:10.369 TCP 23.104.0.1:37866 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:49:20.082 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-07-29 14:49:22.989 00:00:10.365 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:50:19.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:50:19.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:50:20.306 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6452 1 2025-07-29 14:50:23.397 00:00:10.322 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:47:02.735 00:05:00.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:51:20.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38442 10 6452 1 2025-07-29 14:51:23.756 00:00:10.380 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:52:20.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41828 10 6452 1 2025-07-29 14:52:24.173 00:00:10.323 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:53:20.950 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 12 10367 1 2025-07-29 14:53:24.535 00:00:10.435 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 15 1926 1 2025-07-29 14:50:02.733 00:05:00.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 14:54:21.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-07-29 14:54:25.011 00:00:10.366 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:55:19.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 14:55:19.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 14:55:21.434 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-07-29 14:55:25.416 00:00:10.371 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:56:21.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-07-29 14:56:25.827 00:00:10.385 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:53:02.736 00:05:00.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 14:57:26.257 00:00:10.375 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:57:21.869 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54398 10 6452 1 2025-07-29 14:58:22.065 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-07-29 14:58:26.678 00:00:10.393 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1071, avg pps: 0, avg bpp: 318 Time window: 2025-07-29 13:56:02 - 2025-07-29 14:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0020s Wall: 0.0018s flows/second: 88894.5 Runtime: 0.0019s