Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 01:58:49.916 00:00:10.390 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:54:23.279 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 01:59:29.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34548 10 6452 1 2025-09-04 01:59:50.345 00:00:10.362 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-09-04 01:55:23.274 00:06:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:00:29.558 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-09-04 02:00:50.745 00:00:10.367 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:01:29.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43214 10 6452 1 2025-09-04 02:01:51.147 00:00:10.370 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:02:29.979 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-09-04 02:02:53.110 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:02:53.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:02:51.547 00:00:10.358 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:03:30.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41806 10 6452 1 2025-09-04 02:03:51.944 00:00:10.373 TCP 23.104.0.1:60308 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:04:30.381 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42752 10 6452 1 2025-09-04 02:04:52.353 00:00:10.323 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:05:30.587 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43974 10 6452 1 2025-09-04 02:05:52.715 00:00:10.333 TCP 23.104.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:01:23.281 00:06:00.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:06:30.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-09-04 02:06:53.108 00:00:10.323 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:02:23.278 00:06:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:07:31.035 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6452 1 2025-09-04 02:07:53.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:07:53.141 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:07:53.471 00:00:10.323 TCP 23.104.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:08:31.206 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-09-04 02:08:53.835 00:00:10.386 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:09:31.386 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54568 10 6452 1 2025-09-04 02:09:54.265 00:00:10.334 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:10:31.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-09-04 02:10:54.653 00:00:10.366 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:11:31.827 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-09-04 02:11:55.059 00:00:10.368 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:12:32.065 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-09-04 02:12:52.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:12:53.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:12:55.469 00:00:10.322 TCP 23.104.0.1:58330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:08:23.283 00:06:00.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:13:32.282 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-09-04 02:13:55.829 00:00:10.387 TCP 23.104.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:09:23.279 00:06:00.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:14:32.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-09-04 02:14:56.246 00:00:10.370 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:15:32.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-09-04 02:15:56.649 00:00:10.363 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:16:32.925 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-09-04 02:16:57.069 00:00:10.323 TCP 23.104.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:17:33.147 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-09-04 02:17:53.424 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:17:53.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:17:57.431 00:00:10.366 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:18:33.356 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 11 6504 1 2025-09-04 02:18:57.837 00:00:10.396 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:19:33.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-09-04 02:19:58.278 00:00:10.363 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:15:23.286 00:06:00.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:20:33.830 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54498 10 6452 1 2025-09-04 02:20:58.691 00:00:10.362 TCP 23.104.0.1:44086 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:16:23.281 00:06:00.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:21:34.062 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-09-04 02:21:59.101 00:00:10.358 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:22:34.274 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-09-04 02:22:53.573 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:22:53.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:22:59.500 00:00:10.364 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:23:34.459 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-09-04 02:23:59.904 00:00:10.362 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:24:34.685 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-09-04 02:25:00.306 00:00:10.366 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:25:34.855 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-09-04 02:26:00.711 00:00:10.325 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:26:35.055 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-09-04 02:27:01.105 00:00:10.359 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:22:23.285 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:27:35.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43418 10 6452 1 2025-09-04 02:27:53.598 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:27:53.570 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:28:01.503 00:00:10.367 TCP 23.104.0.1:36264 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:23:23.282 00:06:00.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:28:35.482 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35376 10 6452 1 2025-09-04 02:29:01.911 00:00:10.360 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:29:35.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6452 1 2025-09-04 02:30:02.314 00:00:10.373 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:30:35.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42086 10 6452 1 2025-09-04 02:31:02.724 00:00:10.373 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:31:36.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56374 10 6452 1 2025-09-04 02:32:03.136 00:00:10.369 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:32:36.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6452 1 2025-09-04 02:32:53.608 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:32:53.780 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:33:03.541 00:00:10.324 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:33:36.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-09-04 02:34:03.906 00:00:10.323 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:29:23.286 00:06:00.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:34:36.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60246 10 6452 1 2025-09-04 02:35:04.268 00:00:10.365 TCP 23.104.0.1:45934 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:30:23.284 00:06:00.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:35:36.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-09-04 02:36:04.668 00:00:10.370 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:36:37.205 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51142 10 6452 1 2025-09-04 02:37:05.101 00:00:10.363 TCP 23.104.0.1:46086 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:37:37.420 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6452 1 2025-09-04 02:37:53.652 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:37:54.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:38:05.501 00:00:10.366 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:38:37.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47852 10 6452 1 2025-09-04 02:39:05.906 00:00:10.913 TCP 23.104.0.1:44798 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:39:37.854 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54746 10 6452 1 2025-09-04 02:40:06.857 00:00:10.375 TCP 23.104.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:40:38.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-09-04 02:41:07.276 00:00:10.366 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:36:23.313 00:06:00.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:41:38.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-09-04 02:42:07.678 00:00:10.373 TCP 23.104.0.1:60242 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:37:23.313 00:06:00.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:42:38.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-09-04 02:42:53.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:42:53.939 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:43:08.114 00:00:10.363 TCP 23.104.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:43:38.726 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-09-04 02:44:08.517 00:00:10.364 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:44:38.948 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50590 10 6452 1 2025-09-04 02:45:08.920 00:00:10.392 TCP 23.104.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:45:39.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-09-04 02:46:09.351 00:00:10.363 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:46:39.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47250 11 6492 1 2025-09-04 02:47:09.757 00:00:10.342 TCP 23.104.0.1:45952 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:47:39.619 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-09-04 02:47:53.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:47:53.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:48:10.132 00:00:10.443 TCP 23.104.0.1:33818 -> 1.101.0.1:3000 15 1926 1 2025-09-04 02:43:23.320 00:06:00.655 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:48:39.832 00:00:10.419 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 12 10365 1 2025-09-04 02:49:10.617 00:00:10.332 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:44:23.317 00:06:00.660 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:49:40.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-09-04 02:50:10.985 00:00:10.371 TCP 23.104.0.1:55328 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:50:40.510 00:00:10.346 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-09-04 02:51:11.393 00:00:10.328 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:51:40.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-09-04 02:52:11.762 00:00:10.374 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:52:41.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60732 10 6452 1 2025-09-04 02:52:53.846 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:52:54.258 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:53:12.178 00:00:10.372 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:53:41.332 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:60254 10 6452 1 2025-09-04 02:54:12.591 00:00:10.975 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:54:41.585 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-09-04 02:50:23.320 00:06:00.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-04 02:55:13.604 00:00:10.365 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:55:41.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-09-04 02:51:23.318 00:06:00.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-04 02:56:14.010 00:00:10.328 TCP 23.104.0.1:42140 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:56:42.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-09-04 02:57:14.375 00:00:10.372 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-09-04 02:57:42.230 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-09-04 02:57:53.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 02:57:54.042 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 02:58:14.789 00:00:10.440 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 161, total bytes: 497477, total packets: 1586, avg bps: 1035, avg pps: 0, avg bpp: 313 Time window: 2025-09-04 01:54:23 - 2025-09-04 02:58:25 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0025s User: 0.0013s Wall: 0.0014s flows/second: 111727.8 Runtime: 0.0015s