Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-09 00:58:57.773 00:00:10.444 TCP 23.104.0.1:42790 -> 1.101.0.1:3000 15 1926 1 2025-08-09 00:59:18.525 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 12 10367 1 2025-08-09 00:56:08.386 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 00:59:58.255 00:00:10.369 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:00:20.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:00:20.493 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:00:18.760 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-08-09 00:57:08.389 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:00:58.663 00:00:10.324 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:01:18.936 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-08-09 01:01:59.026 00:00:10.379 TCP 23.104.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:02:19.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 10 6452 1 2025-08-09 01:02:59.450 00:00:10.743 TCP 23.104.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:03:19.355 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56834 10 6452 1 2025-08-09 01:04:00.235 00:00:10.363 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:04:19.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46220 10 6452 1 2025-08-09 01:05:00.635 00:00:10.324 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:05:21.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:05:21.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:05:19.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-08-09 01:02:08.388 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:06:01.005 00:00:10.364 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:06:19.965 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41260 10 6452 1 2025-08-09 01:07:01.408 00:00:10.370 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:03:08.391 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:07:20.180 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-08-09 01:08:01.821 00:00:10.362 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:08:20.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49994 10 6452 1 2025-08-09 01:09:02.221 00:00:10.363 TCP 23.104.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:09:20.561 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6452 1 2025-08-09 01:10:02.624 00:00:10.366 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:10:20.827 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:10:20.627 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:10:20.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-08-09 01:11:03.033 00:00:10.362 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:11:20.992 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-08-09 01:08:08.391 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:12:03.436 00:00:10.365 TCP 23.104.0.1:38496 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:12:21.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6452 1 2025-08-09 01:09:08.394 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:13:03.839 00:00:10.389 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:13:21.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6452 1 2025-08-09 01:14:04.262 00:00:10.398 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 15 1926 1 2025-08-09 01:14:21.641 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 12 10365 1 2025-08-09 01:15:04.698 00:00:10.361 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:15:20.759 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:15:20.698 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:15:21.883 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57068 10 6452 1 2025-08-09 01:16:05.107 00:00:10.365 TCP 23.104.0.1:50072 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:16:22.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-08-09 01:17:05.513 00:00:10.360 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:17:22.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35688 10 6452 1 2025-08-09 01:14:08.391 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:18:05.922 00:00:10.373 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:18:22.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-08-09 01:15:08.395 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:19:06.331 00:00:10.368 TCP 23.104.0.1:32824 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:19:22.735 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-08-09 01:20:20.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:20:06.741 00:00:10.395 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:20:20.875 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:20:22.948 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43670 10 6452 1 2025-08-09 01:21:07.172 00:00:10.371 TCP 23.104.0.1:38304 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:21:23.167 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-08-09 01:22:07.581 00:00:10.367 TCP 23.104.0.1:53848 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:22:23.382 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-08-09 01:23:07.983 00:00:10.370 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:23:23.559 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39526 10 6452 1 2025-08-09 01:20:08.397 00:05:00.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:24:08.390 00:00:10.320 TCP 23.104.0.1:38780 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:24:23.769 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-08-09 01:21:08.400 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:25:20.890 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:25:20.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:25:08.749 00:00:10.381 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:25:23.984 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-08-09 01:26:09.167 00:00:10.324 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:26:24.207 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-08-09 01:27:09.536 00:00:10.363 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:27:24.379 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52496 10 6452 1 2025-08-09 01:28:09.941 00:00:10.371 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:28:24.600 00:00:11.818 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-08-09 01:29:10.358 00:00:10.370 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:29:26.457 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 10 6452 1 2025-08-09 01:26:08.400 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:30:21.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:30:21.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:30:10.788 00:00:10.355 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:30:26.630 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-08-09 01:27:08.402 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:31:11.182 00:00:10.361 TCP 23.104.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:31:26.837 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-08-09 01:32:11.580 00:00:10.366 TCP 23.104.0.1:60174 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:32:27.068 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-08-09 01:33:11.979 00:00:10.379 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:33:27.288 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 2025-08-09 01:34:12.398 00:00:10.366 TCP 23.104.0.1:35862 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:34:27.509 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 10 6452 1 2025-08-09 01:35:21.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:35:21.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:35:12.807 00:00:10.366 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:35:27.730 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-08-09 01:32:08.401 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:36:13.207 00:00:10.362 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:36:27.950 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-08-09 01:33:08.404 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:37:13.608 00:00:10.367 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:37:28.141 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45196 10 6452 1 2025-08-09 01:38:14.016 00:00:10.368 TCP 23.104.0.1:35926 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:38:28.351 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6452 1 2025-08-09 01:39:14.419 00:00:10.330 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:39:28.525 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-08-09 01:40:21.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:40:21.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:40:14.786 00:00:10.371 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:40:28.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-08-09 01:41:15.191 00:00:10.362 TCP 23.104.0.1:37378 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:41:28.922 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-08-09 01:38:08.402 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:42:15.592 00:00:10.360 TCP 23.104.0.1:39840 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:42:29.133 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60318 10 6452 1 2025-08-09 01:39:08.404 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:43:15.988 00:00:10.325 TCP 23.104.0.1:49832 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:43:29.341 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-08-09 01:44:16.351 00:00:10.322 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:44:29.557 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 10 6452 1 2025-08-09 01:45:21.518 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:45:21.505 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:45:16.707 00:00:10.365 TCP 23.104.0.1:60146 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:45:29.745 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-08-09 01:46:17.113 00:00:10.322 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:46:29.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2025-08-09 01:47:17.473 00:00:10.365 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:47:30.134 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-08-09 01:44:08.403 00:05:00.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:48:17.871 00:00:10.366 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:48:30.359 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50428 10 6452 1 2025-08-09 01:45:08.405 00:05:00.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:49:18.278 00:00:10.366 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:49:30.575 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39642 10 6452 1 2025-08-09 01:50:21.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:50:21.432 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:50:18.682 00:00:10.324 TCP 23.104.0.1:48240 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:50:30.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-08-09 01:51:19.048 00:00:10.362 TCP 23.104.0.1:44104 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:51:31.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-08-09 01:52:19.447 00:00:10.367 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:52:31.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-08-09 01:53:19.856 00:00:10.379 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:53:31.433 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-08-09 01:50:08.404 00:05:00.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-09 01:54:20.274 00:00:10.439 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 15 1926 1 2025-08-09 01:54:31.642 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47678 12 10367 1 2025-08-09 01:51:08.405 00:05:00.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-09 01:55:21.771 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-09 01:55:21.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-09 01:55:20.753 00:00:10.380 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:55:31.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-08-09 01:56:21.176 00:00:10.365 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:56:32.113 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35042 10 6452 1 2025-08-09 01:57:21.580 00:00:10.365 TCP 23.104.0.1:36984 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:57:32.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-08-09 01:58:21.988 00:00:10.367 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-08-09 01:58:32.541 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 Summary: total flows: 164, total bytes: 511348, total packets: 1590, avg bps: 1089, avg pps: 0, avg bpp: 321 Time window: 2025-08-09 00:56:08 - 2025-08-09 01:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0018s User: 0.0027s Wall: 0.0024s flows/second: 68621.9 Runtime: 0.0024s