Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-04 09:59:08.355 00:00:10.321 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-09-04 09:55:23.470 00:05:00.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 09:59:22.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-09-04 10:00:08.716 00:00:10.376 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:00:22.981 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 10 6452 1 2025-09-04 10:01:09.134 00:00:10.367 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:01:23.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-09-04 10:02:09.546 00:00:10.321 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:02:23.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35038 10 6452 1 2025-09-04 10:03:02.709 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:03:02.381 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:03:09.903 00:00:10.329 TCP 23.104.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:03:23.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-09-04 10:04:10.267 00:00:10.378 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:00:23.469 00:05:00.673 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:04:23.852 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-09-04 10:05:10.679 00:00:10.853 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:01:23.472 00:05:00.674 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:05:24.082 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 10 6452 1 2025-09-04 10:06:11.567 00:00:10.370 TCP 23.104.0.1:37572 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:06:24.257 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-09-04 10:07:11.970 00:00:10.372 TCP 23.104.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:07:24.435 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-09-04 10:08:02.548 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:08:02.925 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:08:12.386 00:00:10.366 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:08:24.653 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-09-04 10:09:12.787 00:00:10.374 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:09:24.891 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-09-04 10:10:13.200 00:00:10.321 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:06:23.470 00:05:00.672 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:10:25.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-09-04 10:07:23.475 00:05:00.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:11:13.560 00:00:10.366 TCP 23.104.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:11:25.323 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59110 10 6452 1 2025-09-04 10:12:13.963 00:00:10.375 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:12:25.542 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55548 10 6452 1 2025-09-04 10:13:03.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:13:02.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:13:14.378 00:00:10.327 TCP 23.104.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:13:25.714 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-09-04 10:14:14.746 00:00:10.364 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:14:25.927 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-09-04 10:15:15.150 00:00:10.364 TCP 23.104.0.1:56738 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:15:26.135 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-09-04 10:16:15.560 00:00:10.383 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:12:23.473 00:05:00.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:16:26.349 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-09-04 10:17:15.986 00:00:10.332 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:13:23.480 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:17:26.525 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-09-04 10:18:02.673 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:18:03.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:18:16.356 00:00:10.325 TCP 23.104.0.1:58090 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:18:26.695 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-09-04 10:19:16.722 00:00:10.496 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:19:26.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-09-04 10:20:17.260 00:00:10.323 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:20:27.091 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33922 10 6452 1 2025-09-04 10:21:17.623 00:00:10.373 TCP 23.104.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:21:27.305 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59936 10 6452 1 2025-09-04 10:18:23.480 00:05:00.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:22:18.034 00:00:10.880 TCP 23.104.0.1:58630 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:22:27.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42076 10 6452 1 2025-09-04 10:23:03.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:23:03.095 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:19:23.482 00:05:00.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:23:18.971 00:00:10.380 TCP 23.104.0.1:33390 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:23:27.736 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59258 10 6452 1 2025-09-04 10:24:19.392 00:00:10.369 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:24:27.906 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-09-04 10:25:19.800 00:00:10.367 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:25:28.092 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-04 10:26:20.201 00:00:10.364 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:26:28.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-09-04 10:27:20.609 00:00:10.364 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:27:28.522 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 12 6556 1 2025-09-04 10:28:03.459 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:28:03.277 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:24:23.482 00:05:00.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:28:21.015 00:00:10.365 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:28:28.736 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-09-04 10:25:23.483 00:05:00.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:29:21.421 00:00:10.368 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:29:28.948 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40208 10 6452 1 2025-09-04 10:30:21.825 00:00:10.365 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:30:29.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-09-04 10:31:22.225 00:00:10.871 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:31:29.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-09-04 10:32:23.125 00:00:10.364 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:32:29.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-09-04 10:33:02.993 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:33:03.109 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:33:23.527 00:00:10.369 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:33:29.809 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55088 10 6452 1 2025-09-04 10:30:23.484 00:05:00.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:34:23.939 00:00:10.384 TCP 23.104.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:34:29.978 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-09-04 10:31:23.487 00:05:00.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:35:24.365 00:00:10.365 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:35:30.177 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37538 10 6452 1 2025-09-04 10:36:24.767 00:00:10.376 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:36:30.405 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-09-04 10:37:25.176 00:00:10.363 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:37:30.579 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-09-04 10:38:03.491 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:38:03.133 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:38:25.577 00:00:10.323 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:38:30.787 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 10 6452 1 2025-09-04 10:39:25.936 00:00:10.367 TCP 23.104.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:39:31.001 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 2025-09-04 10:36:23.486 00:05:00.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:40:26.347 00:00:10.374 TCP 23.104.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:40:31.216 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44980 10 6452 1 2025-09-04 10:37:23.487 00:05:00.667 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:41:31.435 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6452 1 2025-09-04 10:41:26.763 00:00:10.387 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:42:31.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-09-04 10:42:27.188 00:00:10.372 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:43:03.479 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:43:03.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:43:27.597 00:00:10.367 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:43:31.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 11 6492 1 2025-09-04 10:44:28.004 00:00:10.364 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:44:32.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-09-04 10:45:28.408 00:00:10.363 TCP 23.104.0.1:39096 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:45:32.245 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-09-04 10:42:23.486 00:05:00.673 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:46:28.810 00:00:10.379 TCP 23.104.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:46:32.461 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-09-04 10:43:23.489 00:05:00.668 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:47:29.228 00:00:10.373 TCP 23.104.0.1:45412 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:47:32.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52632 10 6452 1 2025-09-04 10:48:03.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:48:03.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:48:29.651 00:00:10.359 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:48:32.887 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34964 10 6452 1 2025-09-04 10:49:30.057 00:00:10.335 TCP 23.104.0.1:38926 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:49:33.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-09-04 10:50:30.436 00:00:10.359 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:50:33.322 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42982 10 6452 1 2025-09-04 10:51:30.842 00:00:10.387 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:51:33.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-09-04 10:48:23.490 00:05:00.672 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:52:31.270 00:00:10.370 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:52:33.714 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36854 10 6452 1 2025-09-04 10:53:03.755 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:53:03.800 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:49:23.492 00:05:00.667 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-04 10:53:33.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-09-04 10:53:31.710 00:00:10.378 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:54:32.122 00:00:10.377 TCP 23.104.0.1:49220 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:54:34.137 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55894 10 6452 1 2025-09-04 10:55:34.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-09-04 10:55:32.538 00:00:10.361 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:56:32.938 00:00:10.385 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:56:34.573 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6452 1 2025-09-04 10:57:34.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-09-04 10:57:33.360 00:00:10.366 TCP 23.104.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-09-04 10:58:03.735 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-04 10:58:03.755 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-04 10:54:23.489 00:05:00.673 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-04 10:58:35.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-09-04 10:58:33.769 00:00:10.338 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1038, avg pps: 0, avg bpp: 316 Time window: 2025-09-04 09:55:23 - 2025-09-04 10:59:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0017s Wall: 0.0023s flows/second: 71244.5 Runtime: 0.0023s