Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 00:59:15.408 00:00:10.368 TCP 23.104.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-08-01 00:59:22.215 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48762 10 6452 1 2025-08-01 01:00:15.811 00:00:10.368 TCP 23.104.0.1:49326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:00:22.442 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6452 1 2025-08-01 01:01:16.216 00:00:10.338 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:01:29.649 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:01:29.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:01:22.629 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-08-01 01:02:16.582 00:00:10.367 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:02:22.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-08-01 01:03:16.988 00:00:10.322 TCP 23.104.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:03:23.072 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-08-01 00:59:04.300 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 00:59:04.298 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 01:04:17.348 00:00:10.364 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:04:23.291 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-08-01 01:05:17.749 00:00:10.326 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:05:23.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-08-01 01:06:29.600 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:06:18.111 00:00:10.365 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:06:29.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:06:23.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-08-01 01:07:18.513 00:00:10.368 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:07:23.936 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-08-01 01:08:18.923 00:00:10.387 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:08:24.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-08-01 01:09:19.348 00:00:10.370 TCP 23.104.0.1:54004 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:09:24.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-08-01 01:10:19.754 00:00:10.328 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:10:24.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-08-01 01:06:04.303 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 01:06:04.302 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:11:29.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:11:29.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:11:20.127 00:00:10.365 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:11:24.755 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-08-01 01:12:20.529 00:00:10.358 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:12:24.981 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-08-01 01:13:20.932 00:00:10.378 TCP 23.104.0.1:60152 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:13:25.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-01 01:14:21.350 00:00:10.364 TCP 23.104.0.1:39648 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:14:25.419 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-08-01 01:15:25.637 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-08-01 01:15:21.756 00:00:10.386 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:16:29.831 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:16:29.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:16:22.178 00:00:10.365 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:16:25.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-08-01 01:17:22.584 00:00:10.361 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:17:26.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-08-01 01:13:04.302 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:13:04.303 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 01:18:22.989 00:00:10.368 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:18:26.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34876 10 6452 1 2025-08-01 01:19:23.401 00:00:10.363 TCP 23.104.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:19:26.534 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-08-01 01:20:26.746 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-08-01 01:20:23.806 00:00:10.368 TCP 23.104.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:21:30.107 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:21:30.051 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:21:24.210 00:00:10.358 TCP 23.104.0.1:60604 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:21:26.969 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-08-01 01:22:24.606 00:00:10.363 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:22:27.205 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-08-01 01:23:25.012 00:00:10.365 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:23:27.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2025-08-01 01:24:25.416 00:00:10.368 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:24:27.625 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-08-01 01:20:04.305 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 757 1 2025-08-01 01:20:04.303 00:06:00.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:25:25.828 00:00:10.373 TCP 23.104.0.1:60914 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:25:27.802 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-08-01 01:26:30.104 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:26:30.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:26:26.235 00:00:10.367 TCP 23.104.0.1:33160 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:26:28.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-08-01 01:27:28.244 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6452 1 2025-08-01 01:27:26.644 00:00:10.378 TCP 23.104.0.1:44288 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:28:27.066 00:00:10.364 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:28:28.463 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6452 1 2025-08-01 01:29:27.463 00:00:10.366 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:29:28.674 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6452 1 2025-08-01 01:30:27.867 00:00:10.368 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:30:28.891 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-08-01 01:31:30.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:31:30.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:31:29.113 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57780 10 6452 1 2025-08-01 01:31:28.277 00:00:10.367 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:27:04.308 00:06:00.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 10 653 1 2025-08-01 01:27:04.305 00:06:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:32:28.681 00:00:10.396 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 12 1559 1 2025-08-01 01:32:29.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-08-01 01:33:29.501 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-08-01 01:33:29.112 00:00:10.375 TCP 23.104.0.1:52412 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:34:29.528 00:00:10.362 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:34:29.724 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-08-01 01:35:29.954 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-08-01 01:35:29.931 00:00:10.380 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:36:30.231 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:36:30.346 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:36:30.352 00:00:10.321 TCP 23.104.0.1:59010 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:36:30.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-08-01 01:37:30.720 00:00:10.384 TCP 23.104.0.1:34804 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:37:30.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-08-01 01:38:30.599 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-08-01 01:38:31.147 00:00:10.364 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:34:04.308 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:34:04.309 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 01:39:31.550 00:00:10.362 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:39:30.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-08-01 01:40:31.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-08-01 01:40:31.947 00:00:10.366 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:41:30.452 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:41:30.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:41:31.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-08-01 01:41:32.363 00:00:10.337 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:42:31.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-08-01 01:42:32.747 00:00:10.321 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:43:31.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-08-01 01:43:33.113 00:00:10.331 TCP 23.104.0.1:43752 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:44:31.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-08-01 01:44:33.483 00:00:10.365 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:45:33.888 00:00:10.370 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:45:32.104 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45272 10 6452 1 2025-08-01 01:41:04.311 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 01:41:04.310 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:46:30.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:46:30.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:46:34.309 00:00:10.374 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:46:32.276 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-08-01 01:47:32.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-08-01 01:47:34.722 00:00:10.373 TCP 23.104.0.1:35150 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:48:35.134 00:00:10.323 TCP 23.104.0.1:45540 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:48:32.694 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-08-01 01:49:35.493 00:00:10.372 TCP 23.104.0.1:56804 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:49:32.914 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51224 10 6452 1 2025-08-01 01:50:33.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41666 10 6452 1 2025-08-01 01:50:35.906 00:00:10.374 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:51:30.426 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:51:30.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:51:33.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47070 10 6452 1 2025-08-01 01:51:36.303 00:00:10.368 TCP 23.104.0.1:56880 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:52:33.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2025-08-01 01:52:36.707 00:00:10.326 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:48:04.311 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 705 1 2025-08-01 01:48:04.311 00:06:00.014 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 01:53:33.770 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43724 10 6452 1 2025-08-01 01:53:37.096 00:00:10.362 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:54:33.984 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-08-01 01:54:37.504 00:00:10.364 TCP 23.104.0.1:55852 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:55:34.224 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-08-01 01:55:37.905 00:00:10.365 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:56:30.697 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 01:56:30.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 01:56:34.393 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36774 10 6452 1 2025-08-01 01:56:38.309 00:00:10.319 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:57:34.606 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-08-01 01:57:38.673 00:00:10.381 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-08-01 01:58:34.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-08-01 01:58:39.093 00:00:10.356 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 496948, total packets: 1548, avg bps: 1108, avg pps: 0, avg bpp: 321 Time window: 2025-08-01 00:59:04 - 2025-08-01 01:58:49 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0024s User: 0.0024s Wall: 0.0025s flows/second: 64176.0 Runtime: 0.0025s