Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 17:58:48.132 00:00:10.436 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 15 1926 1 2025-08-02 17:59:27.653 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-08-02 17:55:05.317 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 17:59:48.606 00:00:10.363 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-08-02 17:55:05.319 00:06:00.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:00:27.826 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-08-02 18:00:49.009 00:00:10.359 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:01:28.054 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-08-02 18:01:49.404 00:00:10.362 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:02:18.809 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:02:18.932 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:02:28.269 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35940 10 6452 1 2025-08-02 18:02:49.808 00:00:10.369 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:03:28.440 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-08-02 18:03:50.212 00:00:10.365 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:04:28.667 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-08-02 18:04:50.619 00:00:10.365 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:05:28.834 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-08-02 18:05:51.027 00:00:10.364 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:06:29.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-08-02 18:06:51.435 00:00:10.388 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:02:05.320 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:02:05.319 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:07:18.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:07:19.048 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:07:29.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50304 10 6452 1 2025-08-02 18:07:51.884 00:00:10.385 TCP 23.104.0.1:35540 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:08:29.504 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-08-02 18:08:52.302 00:00:10.368 TCP 23.104.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:09:29.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46126 10 6452 1 2025-08-02 18:09:52.707 00:00:10.364 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:10:29.932 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-08-02 18:10:53.112 00:00:10.322 TCP 23.104.0.1:52460 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:11:30.140 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-08-02 18:11:53.472 00:00:10.364 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:12:19.040 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:12:19.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:12:30.311 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53150 10 6452 1 2025-08-02 18:12:53.873 00:00:10.388 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:13:30.493 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6452 1 2025-08-02 18:09:05.322 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:13:54.301 00:00:10.362 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:09:05.319 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:14:30.726 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 12 6556 1 2025-08-02 18:14:54.702 00:00:10.365 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:15:30.936 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-08-02 18:15:55.113 00:00:10.362 TCP 23.104.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:16:31.129 00:00:11.525 TCP 1.101.0.1:3000 -> 22.102.0.1:58966 10 6452 1 2025-08-02 18:16:55.515 00:00:10.365 TCP 23.104.0.1:55744 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:17:19.166 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:17:19.091 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:17:32.692 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51292 10 6452 1 2025-08-02 18:17:55.923 00:00:10.388 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:18:32.903 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55410 10 6452 1 2025-08-02 18:18:56.351 00:00:10.363 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:19:33.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-08-02 18:19:56.755 00:00:10.387 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:20:33.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-08-02 18:16:05.325 00:06:00.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:16:05.327 00:06:00.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:20:57.202 00:00:10.365 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:21:33.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-08-02 18:21:57.611 00:00:10.365 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:22:19.241 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:22:19.309 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:22:33.757 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-08-02 18:22:58.021 00:00:10.362 TCP 23.104.0.1:57256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:23:33.924 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 12 10367 1 2025-08-02 18:23:58.418 00:00:10.398 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 15 1926 1 2025-08-02 18:24:34.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-08-02 18:24:58.856 00:00:10.373 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:25:34.405 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-08-02 18:25:59.271 00:00:10.327 TCP 23.104.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:26:34.621 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-08-02 18:26:59.641 00:00:10.324 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:27:19.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:27:19.290 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:27:34.799 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-08-02 18:23:05.329 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:23:05.327 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:28:00.002 00:00:10.363 TCP 23.104.0.1:50790 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:28:35.040 00:00:10.337 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-08-02 18:29:00.403 00:00:10.377 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:29:35.424 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46222 10 6452 1 2025-08-02 18:30:00.824 00:00:10.366 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:30:35.639 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-08-02 18:31:01.231 00:00:10.365 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:31:35.853 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59330 10 6452 1 2025-08-02 18:32:01.633 00:00:10.327 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:32:19.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:32:19.474 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:32:36.077 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-08-02 18:33:02.002 00:00:10.363 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:33:36.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6452 1 2025-08-02 18:34:02.406 00:00:10.321 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:34:36.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-08-02 18:30:05.330 00:06:00.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:30:05.333 00:06:00.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:35:02.769 00:00:10.372 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:35:36.704 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-08-02 18:36:03.185 00:00:10.406 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:36:36.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6452 1 2025-08-02 18:37:03.676 00:00:10.376 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:37:19.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:37:19.940 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:37:37.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58570 10 6452 1 2025-08-02 18:38:04.110 00:00:10.396 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:38:37.334 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-08-02 18:39:04.516 00:00:10.371 TCP 23.104.0.1:44804 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:39:37.569 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6452 1 2025-08-02 18:40:04.923 00:00:10.386 TCP 23.104.0.1:51820 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:40:37.802 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-08-02 18:41:05.344 00:00:10.327 TCP 23.104.0.1:56112 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:41:38.017 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42186 10 6452 1 2025-08-02 18:37:05.350 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:37:05.353 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:42:19.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:42:05.707 00:00:10.329 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:42:19.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:42:38.226 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-08-02 18:43:06.101 00:00:10.365 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:43:38.451 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42522 10 6452 1 2025-08-02 18:44:06.502 00:00:10.367 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:44:38.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-08-02 18:45:06.909 00:00:10.360 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:45:38.877 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-08-02 18:46:07.305 00:00:10.365 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:46:39.115 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38416 10 6452 1 2025-08-02 18:47:20.159 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:47:07.714 00:00:10.384 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:47:20.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:47:39.286 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-08-02 18:48:08.132 00:00:10.368 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:48:39.501 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-08-02 18:44:05.352 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:44:05.354 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:49:08.539 00:00:10.367 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:49:39.720 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-08-02 18:50:08.949 00:00:10.365 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:50:39.937 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-08-02 18:51:09.352 00:00:10.364 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:51:40.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-08-02 18:52:20.064 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:52:09.759 00:00:10.384 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:52:19.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:52:40.347 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-08-02 18:53:10.194 00:00:10.368 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:53:40.516 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-08-02 18:54:10.606 00:00:10.317 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:54:40.737 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-08-02 18:55:10.960 00:00:10.370 TCP 23.104.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:55:40.954 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-08-02 18:51:05.357 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 18:51:05.354 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 18:56:11.375 00:00:10.365 TCP 23.104.0.1:47096 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:56:41.190 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-08-02 18:57:20.096 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 18:57:20.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 18:57:11.781 00:00:10.369 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:57:41.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-08-02 18:58:12.186 00:00:10.366 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-08-02 18:58:41.611 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 Summary: total flows: 162, total bytes: 503943, total packets: 1596, avg bps: 1053, avg pps: 0, avg bpp: 315 Time window: 2025-08-02 17:55:05 - 2025-08-02 18:58:51 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0031s flows/second: 52820.1 Runtime: 0.0031s