Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 18:59:04.174 00:00:10.325 TCP 23.104.0.1:53824 -> 1.101.0.1:3000 11 1507 1 2025-07-29 18:59:13.292 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-07-29 18:56:02.861 00:05:00.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:00:04.537 00:00:10.367 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:00:24.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:00:13.467 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-07-29 19:00:24.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:01:04.944 00:00:10.370 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:01:13.647 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-07-29 19:02:05.355 00:00:10.361 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:02:13.859 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-07-29 18:59:02.866 00:05:00.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:03:05.763 00:00:10.368 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:03:14.100 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-07-29 19:04:06.167 00:00:10.363 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:04:14.311 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-07-29 19:05:06.569 00:00:10.377 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:05:24.946 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:05:24.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:05:14.486 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56106 10 6452 1 2025-07-29 19:02:02.863 00:05:00.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:06:06.985 00:00:10.371 TCP 23.104.0.1:49022 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:06:14.696 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-07-29 19:07:07.396 00:00:10.368 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:07:14.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34974 10 6452 1 2025-07-29 19:08:07.803 00:00:10.363 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:08:15.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-07-29 19:05:02.866 00:05:00.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:09:08.205 00:00:10.321 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:09:15.324 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39422 10 6452 1 2025-07-29 19:10:08.564 00:00:10.362 TCP 23.104.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:10:15.499 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-07-29 19:10:24.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:10:24.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:11:08.968 00:00:10.377 TCP 23.104.0.1:40924 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:11:15.711 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59136 10 6452 1 2025-07-29 19:08:02.863 00:05:00.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:12:09.380 00:00:10.372 TCP 23.104.0.1:40964 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:12:15.930 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-07-29 19:13:09.789 00:00:10.374 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:13:16.165 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-07-29 19:14:10.214 00:00:10.364 TCP 23.104.0.1:55904 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:14:16.339 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58316 10 6452 1 2025-07-29 19:11:02.867 00:05:00.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:15:10.618 00:00:10.365 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:15:24.671 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:15:24.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:15:16.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-07-29 19:16:11.023 00:00:10.365 TCP 23.104.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:16:16.767 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-07-29 19:17:11.428 00:00:10.324 TCP 23.104.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:17:16.986 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-07-29 19:14:02.866 00:05:00.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:18:11.800 00:00:10.339 TCP 23.104.0.1:44884 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:18:17.240 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58140 10 6452 1 2025-07-29 19:19:12.177 00:00:10.362 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:19:17.451 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33188 10 6452 1 2025-07-29 19:20:24.877 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:20:24.741 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:20:12.578 00:00:10.323 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:20:17.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-07-29 19:17:02.868 00:05:00.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:21:12.939 00:00:10.386 TCP 23.104.0.1:51502 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:21:17.876 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-07-29 19:22:13.368 00:00:10.322 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:22:18.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-07-29 19:23:13.732 00:00:10.371 TCP 23.104.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:23:18.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-07-29 19:20:02.868 00:05:00.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:24:14.141 00:00:10.571 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:24:18.542 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55812 10 6452 1 2025-07-29 19:25:25.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:25:25.174 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:25:14.750 00:00:10.365 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:25:18.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-07-29 19:26:15.152 00:00:10.367 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:26:18.977 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-07-29 19:23:02.869 00:05:00.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:27:15.556 00:00:10.367 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:27:19.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-07-29 19:28:15.961 00:00:10.324 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:28:19.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-07-29 19:29:16.325 00:00:10.325 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:29:19.595 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48116 10 6452 1 2025-07-29 19:26:02.867 00:05:00.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:30:25.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:30:24.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:30:19.808 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-07-29 19:30:16.688 00:00:10.365 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:31:17.110 00:00:10.364 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:31:20.034 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54596 10 6452 1 2025-07-29 19:32:20.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-07-29 19:32:17.514 00:00:10.361 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:29:02.872 00:05:00.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:33:17.920 00:00:10.375 TCP 23.104.0.1:48546 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:33:20.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47938 10 6452 1 2025-07-29 19:34:18.334 00:00:10.367 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:34:20.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39286 10 6452 1 2025-07-29 19:35:25.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:35:25.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:35:20.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-07-29 19:35:18.739 00:00:10.363 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:32:02.870 00:05:00.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:36:21.112 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 10 6452 1 2025-07-29 19:36:19.144 00:00:10.324 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:37:21.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53812 10 6452 1 2025-07-29 19:37:19.505 00:00:10.370 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:38:19.909 00:00:10.370 TCP 23.104.0.1:37102 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:38:21.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-07-29 19:35:02.873 00:05:00.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:39:21.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-07-29 19:39:20.315 00:00:10.396 TCP 23.104.0.1:50674 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:40:25.162 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:40:25.354 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:40:20.759 00:00:10.378 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:40:21.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6452 1 2025-07-29 19:41:21.174 00:00:10.368 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:41:22.202 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59234 10 6452 1 2025-07-29 19:38:02.870 00:05:00.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:42:21.583 00:00:10.363 TCP 23.104.0.1:60496 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:42:22.418 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-07-29 19:43:22.641 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60904 12 10365 1 2025-07-29 19:43:21.982 00:00:10.403 TCP 23.104.0.1:38994 -> 1.101.0.1:3000 15 1926 1 2025-07-29 19:44:22.878 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34148 10 6452 1 2025-07-29 19:44:22.426 00:00:10.366 TCP 23.104.0.1:34010 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:41:02.875 00:05:00.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:45:25.225 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:45:25.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:45:23.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-07-29 19:45:22.829 00:00:10.396 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:46:23.265 00:00:10.358 TCP 23.104.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:46:23.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39958 10 6452 1 2025-07-29 19:47:23.664 00:00:10.369 TCP 23.104.0.1:32768 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:47:23.506 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-07-29 19:44:02.872 00:05:00.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:48:24.099 00:00:10.375 TCP 23.104.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:48:23.733 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-07-29 19:49:24.506 00:00:10.367 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:49:23.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-07-29 19:50:25.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:50:25.424 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:50:24.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-07-29 19:50:24.911 00:00:10.364 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:47:02.876 00:05:00.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:51:24.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-07-29 19:51:25.311 00:00:10.361 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:52:24.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39364 10 6452 1 2025-07-29 19:52:25.707 00:00:10.363 TCP 23.104.0.1:45340 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:53:26.105 00:00:10.324 TCP 23.104.0.1:47124 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:53:24.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-07-29 19:50:02.874 00:05:00.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 19:54:26.472 00:00:10.366 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:54:25.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-07-29 19:55:25.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 19:55:25.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 19:55:25.247 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 10 6452 1 2025-07-29 19:55:26.880 00:00:10.338 TCP 23.104.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:56:25.445 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-07-29 19:56:27.258 00:00:10.368 TCP 23.104.0.1:48884 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:53:02.877 00:05:00.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 19:57:25.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-07-29 19:57:27.664 00:00:10.366 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-07-29 19:58:25.831 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54930 10 6452 1 2025-07-29 19:58:28.105 00:00:10.322 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1070, avg pps: 0, avg bpp: 318 Time window: 2025-07-29 18:56:02 - 2025-07-29 19:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0024s flows/second: 66971.7 Runtime: 0.0025s