Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 20:59:04.358 00:00:10.362 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-09-13 20:59:11.754 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-09-13 20:54:28.050 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:00:04.753 00:00:10.370 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:00:11.924 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33532 10 6452 1 2025-09-13 21:01:05.163 00:00:10.365 TCP 23.104.0.1:41588 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:01:12.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50910 10 6452 1 2025-09-13 21:02:05.567 00:00:10.364 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:02:12.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54886 10 6452 1 2025-09-13 21:02:43.237 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:02:43.261 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:03:05.972 00:00:10.367 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:03:12.523 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-09-13 21:04:06.377 00:00:10.367 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:04:12.704 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-09-13 21:05:06.782 00:00:10.370 TCP 23.104.0.1:47742 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:05:12.917 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-09-13 21:00:28.050 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:06:07.193 00:00:10.365 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:06:13.129 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-09-13 21:01:28.052 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:07:07.597 00:00:10.417 TCP 23.104.0.1:39320 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:07:13.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-09-13 21:07:43.029 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:07:43.156 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:08:08.064 00:00:10.367 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:08:13.510 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-09-13 21:09:08.471 00:00:10.369 TCP 23.104.0.1:35712 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:09:13.683 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41754 10 6452 1 2025-09-13 21:10:08.881 00:00:10.363 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:10:13.892 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-09-13 21:11:09.283 00:00:10.363 TCP 23.104.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:11:14.105 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51976 10 6452 1 2025-09-13 21:12:09.685 00:00:10.367 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:12:14.279 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-13 21:07:28.052 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:12:43.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:12:43.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:13:10.107 00:00:10.325 TCP 23.104.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:13:14.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-09-13 21:08:28.057 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:14:10.470 00:00:10.367 TCP 23.104.0.1:55122 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:14:14.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47456 10 6452 1 2025-09-13 21:15:10.868 00:00:10.379 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:15:14.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-09-13 21:16:11.286 00:00:10.365 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:16:15.125 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42806 10 6452 1 2025-09-13 21:17:11.690 00:00:10.361 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:17:15.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-13 21:17:43.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:17:43.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:18:12.107 00:00:10.372 TCP 23.104.0.1:45524 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:18:15.548 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-09-13 21:19:15.775 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48358 10 6452 1 2025-09-13 21:19:12.516 00:00:10.364 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:14:28.054 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:20:12.918 00:00:10.382 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:20:15.951 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50946 12 6556 1 2025-09-13 21:15:28.056 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:21:16.177 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42278 10 6452 1 2025-09-13 21:21:13.342 00:00:10.320 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:22:16.349 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47776 10 6452 1 2025-09-13 21:22:13.702 00:00:10.362 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:22:43.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:22:43.672 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:23:14.117 00:00:10.322 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:23:16.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-09-13 21:24:14.478 00:00:10.363 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:24:16.773 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45356 10 6452 1 2025-09-13 21:25:14.884 00:00:10.366 TCP 23.104.0.1:56044 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:25:16.940 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44250 10 6452 1 2025-09-13 21:26:15.297 00:00:10.365 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:26:17.173 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-09-13 21:21:28.059 00:06:00.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:27:15.704 00:00:10.381 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:22:28.063 00:06:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:27:17.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33956 10 6452 1 2025-09-13 21:27:43.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:27:43.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:28:16.130 00:00:10.323 TCP 23.104.0.1:32786 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:28:17.607 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-09-13 21:29:16.493 00:00:10.443 TCP 23.104.0.1:37562 -> 1.101.0.1:3000 15 1926 1 2025-09-13 21:29:17.843 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 12 10365 1 2025-09-13 21:30:16.973 00:00:10.365 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:30:18.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-09-13 21:31:17.378 00:00:10.363 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:31:18.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-09-13 21:32:18.531 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-09-13 21:32:17.773 00:00:10.374 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:32:43.474 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:32:43.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:28:28.062 00:06:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:33:18.702 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-09-13 21:33:18.180 00:00:10.367 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:34:18.584 00:00:10.362 TCP 23.104.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:29:28.065 00:06:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:34:18.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-09-13 21:35:18.984 00:00:10.363 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:35:19.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6452 1 2025-09-13 21:36:19.338 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-09-13 21:36:19.384 00:00:10.361 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:37:19.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-09-13 21:37:19.783 00:00:10.366 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:37:44.128 00:00:00.014 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:37:44.161 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:38:20.187 00:00:10.370 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:38:19.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46814 10 6452 1 2025-09-13 21:39:20.594 00:00:10.365 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:39:19.982 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2025-09-13 21:40:21.004 00:00:10.363 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:35:28.063 00:06:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:40:20.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 2025-09-13 21:36:28.065 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:41:21.404 00:00:10.370 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:41:20.432 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55298 10 6452 1 2025-09-13 21:42:20.646 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-09-13 21:42:21.809 00:00:10.376 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:42:43.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:42:43.858 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:43:20.855 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-09-13 21:43:22.215 00:00:10.321 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:44:21.094 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48016 10 6452 1 2025-09-13 21:44:22.582 00:00:10.377 TCP 23.104.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:45:21.301 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51096 10 6452 1 2025-09-13 21:45:22.992 00:00:10.333 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:46:21.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-09-13 21:46:23.369 00:00:10.360 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:47:21.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-09-13 21:42:28.065 00:06:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:47:23.766 00:00:10.328 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:47:43.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:47:44.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:43:28.068 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:48:24.133 00:00:10.361 TCP 23.104.0.1:54510 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:48:21.934 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-09-13 21:49:22.167 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-09-13 21:49:24.533 00:00:10.360 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:50:22.379 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45638 10 6452 1 2025-09-13 21:50:24.935 00:00:10.380 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:51:22.590 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55230 10 6452 1 2025-09-13 21:51:25.354 00:00:10.367 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:52:22.802 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-09-13 21:52:25.756 00:00:10.334 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:52:44.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:52:44.063 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:53:26.129 00:00:10.364 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:53:23.036 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33908 10 6452 1 2025-09-13 21:49:28.066 00:06:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 21:54:23.254 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 12 6556 1 2025-09-13 21:54:26.533 00:00:10.364 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:50:28.071 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 21:55:23.499 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-09-13 21:55:26.938 00:00:10.389 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:56:23.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-09-13 21:56:27.380 00:00:10.371 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:57:23.886 00:00:10.261 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-09-13 21:57:27.787 00:00:10.382 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:57:44.246 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 21:57:44.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 21:58:24.187 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-09-13 21:58:28.208 00:00:10.370 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502765, total packets: 1580, avg bps: 1044, avg pps: 0, avg bpp: 318 Time window: 2025-09-13 20:54:28 - 2025-09-13 21:58:38 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0045s User: 0.0009s Wall: 0.0021s flows/second: 76850.2 Runtime: 0.0021s