Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 05:58:48.847 00:00:10.542 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 17 2241 1 2025-09-14 05:59:14.931 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 14 14278 1 2025-09-14 05:59:49.426 00:00:10.365 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:00:15.182 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-09-14 05:56:28.201 00:05:00.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:00:49.829 00:00:10.356 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:01:15.400 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44384 10 6452 1 2025-09-14 05:57:28.203 00:05:00.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:01:50.235 00:00:10.368 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:02:15.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-09-14 06:02:54.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:02:53.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:02:50.643 00:00:10.373 TCP 23.104.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:03:15.834 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-09-14 06:03:51.062 00:00:10.363 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:04:16.014 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-09-14 06:04:51.462 00:00:10.369 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:05:16.230 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36192 10 6452 1 2025-09-14 06:05:51.867 00:00:10.369 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:06:16.447 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:40932 10 6452 1 2025-09-14 06:02:28.202 00:05:00.896 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:06:52.270 00:00:10.374 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:03:28.204 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:07:16.833 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-09-14 06:07:53.991 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:07:54.199 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:07:52.672 00:00:10.370 TCP 23.104.0.1:35064 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:08:17.075 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-09-14 06:08:53.108 00:00:10.375 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:09:17.290 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-09-14 06:09:53.527 00:00:10.364 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:10:17.501 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-09-14 06:10:53.931 00:00:10.380 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:11:17.729 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-09-14 06:11:54.351 00:00:10.368 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:12:17.951 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 12 6556 1 2025-09-14 06:08:28.203 00:05:00.896 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:12:54.115 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:12:54.197 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:12:54.760 00:00:11.109 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:09:28.205 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:13:18.184 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52976 10 6452 1 2025-09-14 06:13:55.908 00:00:10.323 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:14:18.355 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41410 10 6452 1 2025-09-14 06:14:56.273 00:00:10.361 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:15:18.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-09-14 06:15:56.674 00:00:10.364 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:16:18.790 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43818 10 6452 1 2025-09-14 06:16:57.110 00:00:10.363 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:17:19.004 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-09-14 06:17:54.090 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:17:54.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:17:57.512 00:00:10.362 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:18:19.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-09-14 06:14:28.204 00:05:00.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:18:57.917 00:00:10.390 TCP 23.104.0.1:34250 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:15:28.207 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:19:19.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-09-14 06:19:58.346 00:00:10.364 TCP 23.104.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:20:19.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-09-14 06:20:58.744 00:00:10.365 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:21:19.867 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-09-14 06:21:59.146 00:00:10.365 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:22:20.098 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-09-14 06:22:54.445 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:22:54.325 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:22:59.551 00:00:10.364 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:23:20.268 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44094 10 6452 1 2025-09-14 06:23:59.951 00:00:10.322 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:20:28.206 00:05:00.896 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:24:20.482 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-09-14 06:25:00.312 00:00:10.375 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:21:28.208 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:25:20.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 12 6556 1 2025-09-14 06:26:00.724 00:00:10.372 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:26:20.909 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59268 10 6452 1 2025-09-14 06:27:01.134 00:00:10.327 TCP 23.104.0.1:40840 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:27:21.130 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40556 10 6452 1 2025-09-14 06:27:54.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:27:54.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:28:01.498 00:00:10.365 TCP 23.104.0.1:48628 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:28:21.343 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33692 10 6452 1 2025-09-14 06:29:01.903 00:00:10.370 TCP 23.104.0.1:37598 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:29:21.527 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-09-14 06:30:02.309 00:00:10.363 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:30:21.751 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-09-14 06:26:28.206 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:31:02.713 00:00:10.357 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:27:28.208 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:31:21.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6452 1 2025-09-14 06:32:03.111 00:00:10.394 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:32:22.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-09-14 06:32:54.567 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:32:54.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:33:03.541 00:00:10.369 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:33:22.406 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-09-14 06:34:03.946 00:00:10.370 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:34:22.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-09-14 06:35:04.353 00:00:10.372 TCP 23.104.0.1:60438 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:35:22.794 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-09-14 06:36:04.758 00:00:10.386 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:32:28.206 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:36:22.978 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-09-14 06:37:05.181 00:00:10.366 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:33:28.209 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:37:23.223 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-09-14 06:37:54.549 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:37:54.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:38:05.590 00:00:10.331 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:38:23.387 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-09-14 06:39:05.960 00:00:10.365 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:39:23.567 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-09-14 06:40:06.364 00:00:10.367 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:40:23.790 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-09-14 06:41:06.777 00:00:10.367 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:41:24.000 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-09-14 06:42:07.187 00:00:10.369 TCP 23.104.0.1:32930 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:38:28.208 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:42:24.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-09-14 06:42:54.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:42:54.996 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:43:07.590 00:00:10.336 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:39:28.209 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:43:24.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-09-14 06:44:07.964 00:00:10.333 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:44:24.911 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-09-14 06:45:08.340 00:00:10.367 TCP 23.104.0.1:44116 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:45:25.151 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49492 10 6452 1 2025-09-14 06:46:08.748 00:00:10.399 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:46:25.364 00:00:10.780 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-09-14 06:47:09.184 00:00:10.365 TCP 23.104.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:47:26.183 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39278 10 6452 1 2025-09-14 06:47:54.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:47:54.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:48:09.595 00:00:10.371 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:44:28.206 00:05:00.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:48:26.394 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-09-14 06:49:10.006 00:00:10.384 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:45:28.208 00:05:00.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:49:26.611 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58178 10 6452 1 2025-09-14 06:50:10.412 00:00:10.368 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:50:26.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-09-14 06:51:10.816 00:00:10.952 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:51:27.039 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-09-14 06:52:11.809 00:00:10.363 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:52:27.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44778 10 6452 1 2025-09-14 06:52:54.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:52:54.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:53:12.213 00:00:10.383 TCP 23.104.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:53:27.466 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-09-14 06:54:12.632 00:00:10.370 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:50:28.206 00:05:00.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 06:54:27.646 00:00:10.464 TCP 1.101.0.1:3000 -> 22.102.0.1:35894 10 6452 1 2025-09-14 06:55:13.057 00:00:10.369 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:51:28.211 00:05:00.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 06:55:28.157 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 10 6452 1 2025-09-14 06:56:13.462 00:00:10.322 TCP 23.104.0.1:56460 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:56:28.365 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6452 1 2025-09-14 06:57:13.818 00:00:10.364 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:57:28.579 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57210 10 6452 1 2025-09-14 06:57:55.404 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 06:57:55.186 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 06:58:14.226 00:00:10.363 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-09-14 06:58:28.795 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35352 10 6452 1 Summary: total flows: 164, total bytes: 507116, total packets: 1586, avg bps: 1087, avg pps: 0, avg bpp: 319 Time window: 2025-09-14 05:56:28 - 2025-09-14 06:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0000s Wall: 0.0016s flows/second: 104937.6 Runtime: 0.0016s