Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-03 18:58:55.128 00:00:10.371 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:58:58.680 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-09-03 18:54:23.084 00:06:00.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 18:59:55.536 00:00:10.329 TCP 23.104.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-09-03 18:59:58.897 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35264 10 6452 1 2025-09-03 18:55:23.082 00:06:00.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:00:55.898 00:00:10.373 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:00:59.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-09-03 19:01:56.311 00:00:10.328 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:01:59.323 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36340 10 6452 1 2025-09-03 19:02:44.530 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:02:44.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:02:59.535 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 12 10365 1 2025-09-03 19:02:56.687 00:00:10.408 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 15 1926 1 2025-09-03 19:03:57.135 00:00:10.320 TCP 23.104.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:03:59.739 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-09-03 19:04:59.982 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-09-03 19:04:57.493 00:00:10.376 TCP 23.104.0.1:60792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:05:57.906 00:00:10.325 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:06:00.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40832 10 6452 1 2025-09-03 19:01:23.087 00:06:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:06:58.270 00:00:10.358 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:07:00.431 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34080 10 6452 1 2025-09-03 19:02:23.084 00:06:00.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:07:44.539 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:07:44.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:07:58.670 00:00:11.000 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:08:00.644 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-09-03 19:08:59.707 00:00:10.365 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:09:00.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39628 10 6452 1 2025-09-03 19:10:01.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-09-03 19:10:00.113 00:00:10.325 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:11:00.474 00:00:10.360 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:11:01.300 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-09-03 19:12:00.873 00:00:10.324 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:12:01.476 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-09-03 19:12:44.833 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:12:44.853 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:13:01.235 00:00:10.368 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:13:01.649 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-09-03 19:08:23.088 00:06:00.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:14:01.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-09-03 19:14:01.642 00:00:10.371 TCP 23.104.0.1:56774 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:09:23.086 00:06:00.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:15:02.056 00:00:10.327 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:15:02.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-09-03 19:16:02.418 00:00:10.373 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:16:02.302 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-09-03 19:17:02.830 00:00:10.351 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:17:02.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-09-03 19:17:44.843 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:17:44.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:18:02.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 6452 1 2025-09-03 19:18:03.220 00:00:10.363 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:19:02.967 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-09-03 19:19:03.619 00:00:10.815 TCP 23.104.0.1:59042 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:20:03.148 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38416 10 6452 1 2025-09-03 19:20:04.471 00:00:10.372 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:15:23.089 00:06:00.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:21:03.366 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-09-03 19:21:04.882 00:00:10.387 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:16:23.086 00:06:00.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:22:05.300 00:00:10.364 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:22:03.576 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-09-03 19:22:45.065 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:22:44.905 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:23:05.701 00:00:10.368 TCP 23.104.0.1:33422 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:23:03.792 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-09-03 19:24:04.011 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6452 1 2025-09-03 19:24:06.114 00:00:10.363 TCP 23.104.0.1:53870 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:25:06.520 00:00:10.365 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:25:04.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-09-03 19:26:04.442 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49014 10 6452 1 2025-09-03 19:26:06.927 00:00:10.388 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:27:04.653 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43724 10 6452 1 2025-09-03 19:27:07.356 00:00:10.368 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:22:23.091 00:06:00.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:27:45.088 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:27:45.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:28:04.866 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 10 6452 1 2025-09-03 19:28:07.762 00:00:10.343 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:23:23.091 00:06:00.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:29:05.093 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-09-03 19:29:08.140 00:00:10.363 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:30:05.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-09-03 19:30:08.538 00:00:10.364 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:31:05.516 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-09-03 19:31:08.939 00:00:10.338 TCP 23.104.0.1:59600 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:32:05.739 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-09-03 19:32:09.311 00:00:10.367 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:32:45.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:32:45.241 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:33:05.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 10 6452 1 2025-09-03 19:33:09.712 00:00:10.371 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:34:06.134 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-09-03 19:34:10.123 00:00:10.366 TCP 23.104.0.1:45160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:29:23.092 00:06:00.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:35:06.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-09-03 19:35:10.531 00:00:10.378 TCP 23.104.0.1:52108 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:30:23.090 00:06:00.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:36:06.521 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-09-03 19:36:10.945 00:00:10.327 TCP 23.104.0.1:38594 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:37:06.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-09-03 19:37:11.315 00:00:10.366 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:37:45.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:37:45.457 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:38:06.941 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35844 10 6452 1 2025-09-03 19:38:11.721 00:00:10.325 TCP 23.104.0.1:49832 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:39:07.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-09-03 19:39:12.108 00:00:10.362 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:40:07.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60446 10 6452 1 2025-09-03 19:40:12.511 00:00:10.366 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:41:07.601 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43028 10 6452 1 2025-09-03 19:41:12.913 00:00:10.361 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:36:23.093 00:06:00.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:42:07.813 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-09-03 19:42:13.309 00:00:10.325 TCP 23.104.0.1:38336 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:37:23.090 00:06:00.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:42:45.228 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:42:45.353 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:43:08.036 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59372 10 6452 1 2025-09-03 19:43:13.667 00:00:10.375 TCP 23.104.0.1:35160 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:44:08.199 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40494 10 6452 1 2025-09-03 19:44:14.097 00:00:10.357 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:45:08.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-09-03 19:45:14.489 00:00:10.366 TCP 23.104.0.1:47728 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:46:08.659 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40726 10 6452 1 2025-09-03 19:46:14.892 00:00:10.385 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:47:08.874 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-09-03 19:47:15.321 00:00:10.376 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:47:45.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:47:45.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:48:09.069 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53396 10 6452 1 2025-09-03 19:48:15.736 00:00:10.327 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:43:23.093 00:06:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:49:09.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-09-03 19:49:16.104 00:00:10.368 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:44:23.092 00:06:00.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:50:09.515 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6452 1 2025-09-03 19:50:16.507 00:00:10.381 TCP 23.104.0.1:43714 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:51:09.686 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-09-03 19:51:16.932 00:00:10.381 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:52:09.900 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-09-03 19:52:17.348 00:00:10.327 TCP 23.104.0.1:43604 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:52:45.739 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:52:45.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:53:10.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-09-03 19:53:17.706 00:00:10.363 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:54:10.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-09-03 19:54:18.112 00:00:10.654 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:55:10.547 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60476 10 6452 1 2025-09-03 19:50:23.095 00:06:00.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-03 19:55:18.805 00:00:10.370 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:56:10.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-09-03 19:51:23.093 00:06:00.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-03 19:56:19.203 00:00:10.371 TCP 23.104.0.1:52158 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:57:10.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6452 1 2025-09-03 19:57:19.612 00:00:10.370 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-09-03 19:57:45.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-03 19:57:45.724 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-03 19:58:11.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-09-03 19:58:20.017 00:00:10.377 TCP 23.104.0.1:37688 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503418, total packets: 1590, avg bps: 1046, avg pps: 0, avg bpp: 316 Time window: 2025-09-03 18:54:23 - 2025-09-03 19:58:30 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 79573.4 Runtime: 0.0021s