Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 18:58:55.467 00:00:10.362 TCP 23.104.0.1:34714 -> 1.101.0.1:3000 11 1507 1 2025-09-11 18:59:18.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43378 10 6452 1 2025-09-11 18:59:55.866 00:00:10.367 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:00:18.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40752 10 6452 1 2025-09-11 18:56:26.945 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:00:56.270 00:00:10.359 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:01:18.625 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-09-11 19:01:42.886 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:01:43.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:01:56.664 00:00:10.372 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:02:18.845 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 12 6544 1 2025-09-11 19:02:57.100 00:00:10.363 TCP 23.104.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:03:19.080 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 12 10367 1 2025-09-11 19:03:57.501 00:00:10.445 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 15 1926 1 2025-09-11 19:00:26.948 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:04:19.280 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-09-11 19:04:57.983 00:00:10.362 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:05:19.517 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33826 10 6452 1 2025-09-11 19:05:58.383 00:00:11.531 TCP 23.104.0.1:48208 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:06:19.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50894 10 6452 1 2025-09-11 19:02:26.947 00:05:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:06:43.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:06:43.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:06:59.953 00:00:10.368 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:07:19.955 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 12 6556 1 2025-09-11 19:08:00.358 00:00:10.366 TCP 23.104.0.1:40372 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:08:20.195 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-09-11 19:09:00.775 00:00:10.367 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:09:20.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-09-11 19:10:01.178 00:00:10.361 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:06:26.952 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:10:20.575 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49084 10 6452 1 2025-09-11 19:11:01.585 00:00:10.366 TCP 23.104.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:11:20.786 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-09-11 19:11:43.044 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:11:43.078 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:12:01.991 00:00:10.358 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:08:26.953 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:12:20.998 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-09-11 19:13:02.390 00:00:10.360 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:13:21.226 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-09-11 19:14:02.789 00:00:10.368 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:14:21.449 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 11 6504 1 2025-09-11 19:15:03.197 00:00:10.329 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:15:21.730 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 12 6556 1 2025-09-11 19:16:03.564 00:00:10.364 TCP 23.104.0.1:47640 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:12:26.956 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:16:21.952 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 12 6556 1 2025-09-11 19:16:43.048 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:16:43.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:17:03.968 00:00:10.421 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:17:22.196 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 10 6452 1 2025-09-11 19:18:04.430 00:00:10.325 TCP 23.104.0.1:54568 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:14:26.953 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:18:22.416 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39796 10 6452 1 2025-09-11 19:19:04.794 00:00:10.349 TCP 23.104.0.1:46920 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:19:22.642 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42630 10 6452 1 2025-09-11 19:20:05.176 00:00:10.369 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:20:22.811 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-09-11 19:21:05.581 00:00:10.384 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:21:23.038 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43222 10 6452 1 2025-09-11 19:21:43.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:21:43.601 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:22:05.983 00:00:10.368 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:18:26.957 00:05:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:22:23.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-09-11 19:23:06.388 00:00:10.370 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:23:23.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-09-11 19:24:06.795 00:00:10.367 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:20:26.956 00:05:00.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:24:23.650 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47510 10 6452 1 2025-09-11 19:25:07.201 00:00:10.329 TCP 23.104.0.1:44326 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:25:23.823 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6452 1 2025-09-11 19:26:07.564 00:00:10.327 TCP 23.104.0.1:56742 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:26:23.995 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-09-11 19:26:43.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:26:43.472 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:27:07.929 00:00:10.388 TCP 23.104.0.1:59514 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:27:24.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6452 1 2025-09-11 19:28:08.356 00:00:10.360 TCP 23.104.0.1:44680 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:24:26.959 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:28:24.388 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-09-11 19:29:08.767 00:00:10.366 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:29:24.599 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-09-11 19:30:09.173 00:00:10.372 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:26:26.957 00:05:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:30:24.813 00:00:15.098 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-09-11 19:31:09.578 00:00:10.365 TCP 23.104.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:31:29.954 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-09-11 19:31:43.559 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:31:43.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:32:09.976 00:00:10.897 TCP 23.104.0.1:46606 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:32:30.148 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42930 10 6452 1 2025-09-11 19:33:10.911 00:00:10.362 TCP 23.104.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:33:30.326 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42806 10 6452 1 2025-09-11 19:34:11.306 00:00:10.365 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:30:26.961 00:05:00.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:34:30.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-09-11 19:35:11.714 00:00:10.634 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:35:30.757 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6452 1 2025-09-11 19:36:12.388 00:00:10.370 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:32:26.958 00:05:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:36:30.968 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-09-11 19:36:43.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:36:43.601 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:37:12.796 00:00:10.366 TCP 23.104.0.1:39268 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:37:31.195 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-09-11 19:38:13.200 00:00:10.365 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:38:31.414 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38444 10 6452 1 2025-09-11 19:39:13.609 00:00:10.378 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:39:31.624 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-09-11 19:40:14.045 00:00:10.365 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:36:26.964 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:40:31.846 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6452 1 2025-09-11 19:41:14.451 00:00:10.363 TCP 23.104.0.1:34652 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:41:32.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6452 1 2025-09-11 19:41:43.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:41:43.796 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:42:14.849 00:00:10.382 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:38:26.962 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:42:32.295 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-09-11 19:43:15.265 00:00:10.321 TCP 23.104.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:43:32.481 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-09-11 19:44:15.622 00:00:10.365 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:44:32.705 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-09-11 19:45:16.027 00:00:10.362 TCP 23.104.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:45:32.963 00:00:10.278 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6452 1 2025-09-11 19:46:16.426 00:00:10.372 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:42:26.967 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:46:43.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:46:33.279 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-09-11 19:46:43.762 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:47:16.837 00:00:10.383 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:47:33.499 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-09-11 19:44:26.965 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:48:17.262 00:00:10.438 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 15 1926 1 2025-09-11 19:48:33.759 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48240 12 10367 1 2025-09-11 19:49:17.740 00:00:10.367 TCP 23.104.0.1:46062 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:49:34.009 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-09-11 19:50:18.143 00:00:10.323 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:50:34.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-09-11 19:51:18.508 00:00:10.365 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:51:44.066 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:51:34.404 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-09-11 19:51:43.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:52:18.914 00:00:10.367 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:48:26.969 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:52:34.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6452 1 2025-09-11 19:53:19.321 00:00:10.376 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:53:34.835 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-09-11 19:54:19.744 00:00:10.367 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:50:26.966 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 19:54:35.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-09-11 19:55:20.149 00:00:10.365 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:55:35.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-09-11 19:56:20.552 00:00:10.376 TCP 23.104.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:56:44.056 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 19:56:35.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 10 6452 1 2025-09-11 19:56:43.860 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 19:57:20.967 00:00:10.366 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:57:35.705 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-09-11 19:58:21.374 00:00:10.366 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-09-11 19:54:26.969 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 19:58:35.912 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 Summary: total flows: 164, total bytes: 507472, total packets: 1593, avg bps: 1073, avg pps: 0, avg bpp: 318 Time window: 2025-09-11 18:56:26 - 2025-09-11 19:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0019s Wall: 0.0020s flows/second: 80152.2 Runtime: 0.0021s