Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 01:59:11.168 00:00:10.366 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:54:28.135 00:06:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 01:59:22.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51728 10 6452 1 2025-09-14 02:00:11.578 00:00:10.322 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-09-14 01:55:28.137 00:06:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:00:22.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-09-14 02:01:11.943 00:00:10.368 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:01:22.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50528 10 6452 1 2025-09-14 02:02:12.353 00:00:10.323 TCP 23.104.0.1:34198 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:02:23.178 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:49286 10 6452 1 2025-09-14 02:02:48.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:02:49.212 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:03:12.725 00:00:10.373 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:03:23.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-09-14 02:04:13.136 00:00:10.363 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:04:23.714 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-09-14 02:05:13.538 00:00:10.371 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:05:23.891 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56622 10 6452 1 2025-09-14 02:06:13.948 00:00:10.380 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:01:28.136 00:06:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:06:24.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6452 1 2025-09-14 02:07:14.357 00:00:10.367 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:02:28.139 00:06:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:07:24.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-09-14 02:07:49.299 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:07:49.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:08:14.759 00:00:10.382 TCP 23.104.0.1:59624 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:08:24.542 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-09-14 02:09:15.179 00:00:10.438 TCP 23.104.0.1:42198 -> 1.101.0.1:3000 15 1926 1 2025-09-14 02:09:24.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 12 10367 1 2025-09-14 02:10:15.661 00:00:10.368 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:10:24.974 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:38816 10 6452 1 2025-09-14 02:11:16.088 00:00:10.371 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:11:25.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40738 10 6452 1 2025-09-14 02:12:16.500 00:00:10.364 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:12:25.455 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33898 10 6452 1 2025-09-14 02:12:49.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:12:49.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:13:16.902 00:00:10.325 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:08:28.138 00:06:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:13:25.679 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-09-14 02:14:17.273 00:00:10.324 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:09:28.140 00:06:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:14:25.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-09-14 02:15:17.637 00:00:10.362 TCP 23.104.0.1:48524 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:15:26.111 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-14 02:16:18.036 00:00:10.362 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:16:26.340 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35530 10 6452 1 2025-09-14 02:17:18.436 00:00:10.364 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:17:26.557 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42404 10 6452 1 2025-09-14 02:17:49.378 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:17:49.453 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:18:18.838 00:00:10.384 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:18:26.776 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58156 10 6452 1 2025-09-14 02:19:19.260 00:00:10.368 TCP 23.104.0.1:39114 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:19:26.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-09-14 02:15:28.139 00:06:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:20:19.664 00:00:10.366 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:20:27.183 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-09-14 02:21:20.094 00:00:10.366 TCP 23.104.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:16:28.142 00:06:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:21:27.407 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6452 1 2025-09-14 02:22:20.495 00:00:10.365 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:22:27.624 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39866 10 6452 1 2025-09-14 02:22:49.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:22:49.341 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:23:20.895 00:00:10.368 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:23:27.796 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38044 10 6452 1 2025-09-14 02:24:21.304 00:00:10.438 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 15 1926 1 2025-09-14 02:24:28.012 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 12 10367 1 2025-09-14 02:25:21.781 00:00:10.366 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:25:28.260 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-09-14 02:26:22.183 00:00:10.379 TCP 23.104.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:26:28.494 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-09-14 02:22:28.145 00:06:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:27:22.589 00:00:10.392 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:27:28.715 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-09-14 02:27:49.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:27:49.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:23:28.148 00:06:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:28:23.020 00:00:10.328 TCP 23.104.0.1:35808 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:28:28.938 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-09-14 02:29:23.385 00:00:10.763 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:29:29.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35126 10 6452 1 2025-09-14 02:30:24.179 00:00:10.380 TCP 23.104.0.1:34912 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:30:29.389 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47568 10 6452 1 2025-09-14 02:31:24.595 00:00:10.367 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:31:29.611 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-09-14 02:32:24.996 00:00:10.363 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:32:29.848 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-09-14 02:32:49.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:32:49.707 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:33:25.399 00:00:10.362 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:33:30.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-09-14 02:29:28.146 00:06:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:34:25.801 00:00:10.463 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:34:30.316 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-09-14 02:30:28.152 00:06:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:35:26.304 00:00:10.365 TCP 23.104.0.1:36826 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:35:30.536 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-09-14 02:36:30.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42394 10 6452 1 2025-09-14 02:36:26.703 00:00:10.367 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:37:27.109 00:00:10.365 TCP 23.104.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:37:30.975 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 13 6608 1 2025-09-14 02:37:49.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:37:49.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:38:27.511 00:00:10.369 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:38:31.225 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-09-14 02:39:27.921 00:00:10.391 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:39:31.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-09-14 02:40:31.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-09-14 02:40:28.348 00:00:10.368 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:36:28.149 00:06:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:41:28.753 00:00:10.382 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:41:31.857 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48778 10 6452 1 2025-09-14 02:37:28.151 00:06:00.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:42:29.175 00:00:10.368 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:42:32.088 00:00:10.562 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-09-14 02:42:49.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:42:49.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:43:29.582 00:00:10.366 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:43:32.694 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-09-14 02:44:29.986 00:00:10.370 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:44:32.863 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58332 10 6452 1 2025-09-14 02:45:30.394 00:00:10.365 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:45:33.101 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-09-14 02:46:30.803 00:00:10.364 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:46:33.316 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-09-14 02:47:31.205 00:00:10.364 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:47:33.554 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-09-14 02:47:49.702 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:47:49.861 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:43:28.150 00:06:00.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 02:48:31.605 00:00:10.327 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:48:33.769 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41646 10 6452 1 2025-09-14 02:44:28.154 00:06:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 02:49:33.993 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-09-14 02:49:31.973 00:00:10.382 TCP 23.104.0.1:34478 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:50:32.395 00:00:10.371 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:50:34.223 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-09-14 02:51:32.801 00:00:10.414 TCP 23.104.0.1:52018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:51:34.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6452 1 2025-09-14 02:52:34.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-09-14 02:52:33.256 00:00:10.363 TCP 23.104.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:52:49.932 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:52:50.030 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:53:33.656 00:00:10.365 TCP 23.104.0.1:49850 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:53:34.864 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-09-14 02:50:28.152 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 02:54:35.032 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52784 10 6452 1 2025-09-14 02:54:34.064 00:00:10.366 TCP 23.104.0.1:43412 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:51:28.154 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 02:55:34.466 00:00:10.362 TCP 23.104.0.1:57658 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:55:35.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6452 1 2025-09-14 02:56:35.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 10 6452 1 2025-09-14 02:56:34.870 00:00:10.366 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:57:35.677 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36066 10 6452 1 2025-09-14 02:57:35.272 00:00:10.389 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:57:50.455 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 02:57:50.466 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 02:58:35.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55228 10 6452 1 2025-09-14 02:58:35.715 00:00:10.382 TCP 23.104.0.1:50922 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 507664, total packets: 1595, avg bps: 1052, avg pps: 0, avg bpp: 318 Time window: 2025-09-14 01:54:28 - 2025-09-14 02:58:46 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0011s Wall: 0.0023s flows/second: 69059.6 Runtime: 0.0024s