Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 12:58:48.024 00:00:10.360 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-09-14 12:59:12.478 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6870 1 2025-09-14 12:59:48.422 00:00:10.366 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:00:12.699 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6870 1 2025-09-14 12:56:28.320 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:00:48.830 00:00:10.359 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:01:12.872 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6870 1 2025-09-14 12:57:28.321 00:05:00.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:01:49.228 00:00:10.367 TCP 23.104.0.1:39002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:02:13.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6870 1 2025-09-14 13:02:49.633 00:00:10.363 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:03:02.569 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:03:02.516 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:03:13.305 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6870 1 2025-09-14 13:03:50.036 00:00:11.112 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:04:13.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6870 1 2025-09-14 13:04:51.187 00:00:10.368 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:05:13.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6870 1 2025-09-14 13:05:51.593 00:00:10.363 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:06:13.955 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50554 10 6870 1 2025-09-14 13:02:28.321 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:06:51.990 00:00:10.370 TCP 23.104.0.1:45306 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:07:14.192 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6870 1 2025-09-14 13:03:28.323 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:08:02.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:07:52.397 00:00:10.365 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:08:02.349 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:08:14.469 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6870 1 2025-09-14 13:08:52.801 00:00:10.364 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:09:14.686 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6870 1 2025-09-14 13:09:53.203 00:00:10.360 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:10:14.930 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6870 1 2025-09-14 13:10:53.606 00:00:10.362 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:11:15.176 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6870 1 2025-09-14 13:11:54.012 00:00:10.375 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:12:15.407 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6870 1 2025-09-14 13:08:28.321 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:13:02.520 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:12:54.423 00:00:10.369 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:13:02.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:13:15.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6870 1 2025-09-14 13:09:28.325 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:13:54.828 00:00:10.359 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:14:15.844 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6870 1 2025-09-14 13:14:55.226 00:00:10.367 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:15:16.091 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6870 1 2025-09-14 13:15:55.629 00:00:10.359 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:16:16.305 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6870 1 2025-09-14 13:16:56.031 00:00:10.368 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:17:16.522 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60676 10 6870 1 2025-09-14 13:18:02.708 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:18:02.646 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:17:56.430 00:00:10.364 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:18:16.749 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6870 1 2025-09-14 13:14:28.323 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:18:56.842 00:00:10.347 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:15:28.326 00:05:00.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:19:16.969 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6870 1 2025-09-14 13:19:57.229 00:00:10.366 TCP 23.104.0.1:60678 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:20:17.207 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6870 1 2025-09-14 13:20:57.636 00:00:10.330 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:21:17.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6870 1 2025-09-14 13:21:58.024 00:00:10.367 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:22:17.645 00:00:16.707 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6870 1 2025-09-14 13:23:02.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:23:02.961 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:22:58.427 00:00:10.328 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:23:24.394 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6870 1 2025-09-14 13:23:58.795 00:00:10.369 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:20:28.327 00:05:00.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:24:24.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6870 1 2025-09-14 13:24:59.205 00:00:10.372 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:21:28.330 00:05:00.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:25:24.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6870 1 2025-09-14 13:25:59.617 00:00:10.364 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:26:25.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6870 1 2025-09-14 13:27:00.019 00:00:10.561 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:27:25.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6870 1 2025-09-14 13:28:02.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:28:03.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:28:00.613 00:00:10.365 TCP 23.104.0.1:39288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:28:25.522 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56880 10 6870 1 2025-09-14 13:29:01.016 00:00:10.362 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:29:25.749 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6870 1 2025-09-14 13:30:01.420 00:00:10.366 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:26:28.330 00:05:00.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:30:25.968 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6870 1 2025-09-14 13:31:01.826 00:00:10.322 TCP 23.104.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:27:28.334 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:31:26.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 10 6870 1 2025-09-14 13:32:02.187 00:00:10.361 TCP 23.104.0.1:33884 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:32:26.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6870 1 2025-09-14 13:33:03.096 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:33:02.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:33:02.588 00:00:10.368 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:33:26.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6870 1 2025-09-14 13:34:02.988 00:00:10.374 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:34:26.854 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6870 1 2025-09-14 13:35:03.400 00:00:10.361 TCP 23.104.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:35:27.110 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6870 1 2025-09-14 13:36:03.802 00:00:10.369 TCP 23.104.0.1:33410 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:32:28.330 00:05:00.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:36:27.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6870 1 2025-09-14 13:37:04.210 00:00:10.366 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:33:28.333 00:05:00.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:37:27.549 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34024 10 6870 1 2025-09-14 13:38:03.062 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:38:03.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:38:04.613 00:00:10.325 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:38:27.773 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6870 1 2025-09-14 13:39:04.976 00:00:10.366 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:39:28.021 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6870 1 2025-09-14 13:40:05.381 00:00:10.366 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:40:28.236 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43486 10 6870 1 2025-09-14 13:41:05.788 00:00:10.371 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:41:28.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6870 1 2025-09-14 13:42:06.210 00:00:10.360 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:38:28.336 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:42:28.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6870 1 2025-09-14 13:43:03.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:43:03.330 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:43:06.607 00:00:10.369 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:39:28.337 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:43:28.879 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6870 1 2025-09-14 13:44:07.012 00:00:10.365 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:44:29.109 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6870 1 2025-09-14 13:45:07.417 00:00:10.368 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:45:29.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6870 1 2025-09-14 13:46:07.830 00:00:10.431 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:46:29.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6870 1 2025-09-14 13:47:08.296 00:00:10.369 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:47:29.752 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6870 1 2025-09-14 13:48:03.114 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:48:03.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:48:08.709 00:00:10.385 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:44:28.337 00:05:00.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:48:29.964 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44684 12 6974 1 2025-09-14 13:49:09.141 00:00:10.365 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:45:28.340 00:05:00.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:49:30.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 10 6870 1 2025-09-14 13:50:09.545 00:00:10.364 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:50:30.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6870 1 2025-09-14 13:51:09.949 00:00:10.366 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:51:30.628 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6870 1 2025-09-14 13:52:10.354 00:00:10.367 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:52:30.840 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6870 1 2025-09-14 13:53:03.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:53:03.252 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:53:10.757 00:00:10.383 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:53:31.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6870 1 2025-09-14 13:54:11.178 00:00:11.017 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:50:28.340 00:05:00.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 13:54:31.288 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6870 1 2025-09-14 13:55:12.233 00:00:10.363 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:51:28.342 00:05:00.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 13:55:31.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6870 1 2025-09-14 13:56:12.636 00:00:10.367 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:56:31.704 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6870 1 2025-09-14 13:57:13.046 00:00:10.367 TCP 23.104.0.1:56206 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:57:31.882 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6870 1 2025-09-14 13:58:03.375 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 13:58:03.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 13:58:13.450 00:00:10.737 TCP 23.104.0.1:40340 -> 1.101.0.1:3000 11 1507 1 2025-09-14 13:58:32.083 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6870 1 Summary: total flows: 164, total bytes: 523532, total packets: 1574, avg bps: 1121, avg pps: 0, avg bpp: 332 Time window: 2025-09-14 12:56:28 - 2025-09-14 13:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0011s Wall: 0.0025s flows/second: 65237.7 Runtime: 0.0025s