Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 02:59:09.995 00:00:10.369 TCP 23.104.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:59:21.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40964 10 6452 1 2025-09-03 03:00:10.401 00:00:10.365 TCP 23.104.0.1:44036 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:00:21.395 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-09-03 03:01:10.805 00:00:10.335 TCP 23.104.0.1:56834 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:01:21.578 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-09-03 03:02:25.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:02:11.174 00:00:10.323 TCP 23.104.0.1:46872 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:02:25.361 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:02:21.786 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-09-03 03:03:11.533 00:00:10.365 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-09-03 02:59:22.697 00:05:00.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:03:22.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 10 6452 1 2025-09-03 03:00:22.697 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:04:11.945 00:00:10.327 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:04:22.234 00:00:10.859 TCP 1.101.0.1:3000 -> 22.102.0.1:36656 10 6452 1 2025-09-03 03:05:12.312 00:00:10.323 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:05:23.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-09-03 03:06:12.671 00:00:10.325 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:06:23.346 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35062 10 6452 1 2025-09-03 03:07:13.046 00:00:10.369 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:07:25.489 00:00:00.010 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:07:25.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:07:23.582 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33552 10 6452 1 2025-09-03 03:08:13.458 00:00:10.370 TCP 23.104.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:08:23.793 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-09-03 03:09:13.870 00:00:10.370 TCP 23.104.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:05:22.699 00:05:00.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:09:24.006 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-09-03 03:10:14.277 00:00:10.323 TCP 23.104.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:06:22.698 00:05:00.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:10:24.218 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35058 10 6452 1 2025-09-03 03:11:14.641 00:00:10.507 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:11:24.390 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6452 1 2025-09-03 03:12:15.187 00:00:10.372 TCP 23.104.0.1:57296 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:12:25.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:12:25.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:12:24.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48076 10 6452 1 2025-09-03 03:13:15.591 00:00:10.363 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:13:24.824 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-09-03 03:14:16.010 00:00:10.365 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:14:25.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-09-03 03:15:16.412 00:00:10.367 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:11:22.702 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:15:25.292 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-09-03 03:12:22.700 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:16:16.820 00:00:10.359 TCP 23.104.0.1:59110 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:16:25.516 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53020 10 6452 1 2025-09-03 03:17:25.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:17:25.653 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:17:17.217 00:00:10.321 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:17:25.748 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-09-03 03:18:17.577 00:00:10.360 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:18:25.957 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-09-03 03:19:17.975 00:00:10.360 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:19:26.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58076 10 6452 1 2025-09-03 03:20:18.375 00:00:10.366 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:20:26.393 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-09-03 03:17:22.705 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:21:18.778 00:00:10.364 TCP 23.104.0.1:40084 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:21:26.570 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49546 10 6452 1 2025-09-03 03:22:25.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:18:22.703 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:22:25.615 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:22:19.185 00:00:10.378 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:22:26.791 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2025-09-03 03:23:19.597 00:00:10.367 TCP 23.104.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:23:27.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58524 10 6452 1 2025-09-03 03:24:20.004 00:00:10.365 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:24:27.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46914 10 6452 1 2025-09-03 03:25:20.402 00:00:10.368 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:25:27.438 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-09-03 03:26:20.812 00:00:10.364 TCP 23.104.0.1:46882 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:26:27.656 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-09-03 03:27:26.101 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:27:25.761 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:23:22.706 00:05:00.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:27:21.215 00:00:10.326 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:27:27.872 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6452 1 2025-09-03 03:24:22.705 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:28:21.578 00:00:10.365 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:28:28.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-09-03 03:29:21.982 00:00:10.372 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:29:28.315 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-09-03 03:30:22.390 00:00:10.327 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:30:28.526 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-09-03 03:31:22.752 00:00:10.392 TCP 23.104.0.1:60826 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:31:28.742 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-09-03 03:32:25.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:32:25.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:32:23.202 00:00:10.332 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:32:28.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 12 6556 1 2025-09-03 03:29:22.708 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:33:23.567 00:00:10.359 TCP 23.104.0.1:41306 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:33:29.182 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44838 10 6452 1 2025-09-03 03:30:22.705 00:05:00.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:34:23.965 00:00:10.371 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:34:29.391 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-09-03 03:35:24.378 00:00:10.327 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:35:29.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-09-03 03:36:24.742 00:00:10.322 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:36:29.817 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-09-03 03:37:25.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:37:25.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:37:25.108 00:00:10.365 TCP 23.104.0.1:50578 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:37:30.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-09-03 03:38:25.513 00:00:10.366 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:38:30.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-09-03 03:35:22.710 00:05:00.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:39:25.916 00:00:10.368 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:39:30.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 10 6452 1 2025-09-03 03:36:22.708 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:40:26.326 00:00:10.330 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:40:30.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-09-03 03:41:26.706 00:00:10.369 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:41:30.897 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-09-03 03:42:26.054 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:42:26.096 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:42:27.121 00:00:10.371 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:42:31.111 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-09-03 03:43:31.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-09-03 03:43:27.529 00:00:10.323 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:44:27.894 00:00:10.387 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:44:31.536 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-09-03 03:41:22.713 00:05:00.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:45:28.312 00:00:10.364 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:45:31.750 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-09-03 03:42:22.711 00:05:00.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:46:28.713 00:00:10.376 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:46:31.928 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-09-03 03:47:26.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:47:26.100 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:47:29.127 00:00:10.368 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:47:32.162 00:00:10.522 TCP 1.101.0.1:3000 -> 22.102.0.1:36192 10 6452 1 2025-09-03 03:48:29.533 00:00:10.330 TCP 23.104.0.1:50582 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:48:32.719 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45358 10 6452 1 2025-09-03 03:49:29.905 00:00:10.333 TCP 23.104.0.1:48274 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:49:32.891 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-09-03 03:50:30.277 00:00:10.371 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:50:33.113 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:46976 10 6452 1 2025-09-03 03:47:22.715 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:51:30.681 00:00:10.364 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:51:33.316 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56894 10 6452 1 2025-09-03 03:52:26.189 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:48:22.712 00:05:00.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:52:26.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:52:31.105 00:00:10.367 TCP 23.104.0.1:38544 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:52:33.527 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 10 6452 1 2025-09-03 03:53:31.512 00:00:10.368 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:53:33.739 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-09-03 03:54:31.927 00:00:10.389 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:54:33.951 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48288 10 6452 1 2025-09-03 03:55:34.167 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-09-03 03:55:32.354 00:00:10.325 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:56:32.715 00:00:10.350 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:56:34.336 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-09-03 03:57:26.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 03:57:26.328 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 03:53:22.715 00:05:00.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-03 03:57:34.559 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-09-03 03:57:33.115 00:00:10.418 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-09-03 03:54:22.713 00:05:00.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-03 03:58:34.784 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-09-03 03:58:33.575 00:00:10.369 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1103, avg pps: 0, avg bpp: 316 Time window: 2025-09-03 02:59:09 - 2025-09-03 03:59:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0009s Wall: 0.0023s flows/second: 71429.5 Runtime: 0.0023s