Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 13:59:16.584 00:00:10.364 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-09-15 13:59:15.657 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-09-15 14:00:15.870 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-09-15 13:56:28.778 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:00:16.993 00:00:10.361 TCP 23.104.0.1:43734 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:01:16.094 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52552 10 6452 1 2025-09-15 14:01:17.393 00:00:10.877 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-15 13:57:28.782 00:05:00.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:02:16.303 00:00:10.470 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 10 6452 1 2025-09-15 14:02:18.305 00:00:10.365 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:03:18.706 00:00:10.368 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:03:16.828 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55404 10 6452 1 2025-09-15 14:03:32.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:03:32.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:04:17.076 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-09-15 14:04:19.116 00:00:10.364 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:05:17.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57030 10 6452 1 2025-09-15 14:05:19.521 00:00:10.366 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:06:19.922 00:00:10.392 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:06:17.520 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-09-15 14:02:28.781 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:07:20.351 00:00:10.361 TCP 23.104.0.1:56414 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:03:28.782 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:07:17.738 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-09-15 14:08:20.749 00:00:10.324 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:08:17.964 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-09-15 14:08:32.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:08:32.660 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:09:21.113 00:00:10.368 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:09:18.225 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52070 10 6452 1 2025-09-15 14:10:21.516 00:00:10.441 TCP 23.104.0.1:50402 -> 1.101.0.1:3000 15 1926 1 2025-09-15 14:10:18.407 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51136 12 10367 1 2025-09-15 14:11:18.648 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-09-15 14:11:21.999 00:00:10.376 TCP 23.104.0.1:37802 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:12:18.867 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-09-15 14:08:28.781 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:12:22.410 00:00:10.391 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:13:19.213 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 12 6556 1 2025-09-15 14:09:28.783 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:13:32.743 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:13:32.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:13:22.841 00:00:10.378 TCP 23.104.0.1:45266 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:14:19.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56844 10 6452 1 2025-09-15 14:14:23.252 00:00:10.361 TCP 23.104.0.1:32994 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:15:19.640 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51278 10 6452 1 2025-09-15 14:15:23.651 00:00:10.321 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:16:19.857 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-09-15 14:16:24.011 00:00:10.363 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:17:20.087 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-09-15 14:17:24.413 00:00:10.366 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:18:20.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-09-15 14:14:28.781 00:05:00.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:18:33.052 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:18:24.815 00:00:10.327 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:18:32.892 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:15:28.784 00:05:00.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:19:20.536 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59040 10 6452 1 2025-09-15 14:19:25.187 00:00:10.324 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:20:20.704 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-09-15 14:20:25.546 00:00:10.367 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:21:20.922 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35876 10 6452 1 2025-09-15 14:21:25.949 00:00:10.377 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:22:21.155 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48060 10 6452 1 2025-09-15 14:22:26.363 00:00:10.362 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:23:21.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50274 10 6452 1 2025-09-15 14:23:32.764 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:23:32.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:23:26.765 00:00:10.374 TCP 23.104.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:24:21.582 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49452 10 6452 1 2025-09-15 14:20:28.782 00:05:00.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:24:27.177 00:00:10.372 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:21:28.785 00:05:00.976 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:25:21.790 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-09-15 14:25:27.584 00:00:10.363 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:26:21.965 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50546 10 6452 1 2025-09-15 14:26:27.987 00:00:10.368 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:27:22.194 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-09-15 14:27:28.392 00:00:10.366 TCP 23.104.0.1:52938 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:28:33.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:28:22.420 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-09-15 14:28:33.007 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:28:28.798 00:00:10.368 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:29:22.636 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-09-15 14:29:29.204 00:00:10.360 TCP 23.104.0.1:41128 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:26:28.783 00:05:00.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:30:22.858 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6452 1 2025-09-15 14:30:29.601 00:00:10.366 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:27:28.785 00:05:00.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:31:23.098 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-09-15 14:31:30.006 00:00:10.365 TCP 23.104.0.1:47510 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:32:23.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-09-15 14:32:30.405 00:00:10.372 TCP 23.104.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:33:32.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:33:33.132 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:33:23.532 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-09-15 14:33:30.817 00:00:10.328 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:34:23.753 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35648 10 6452 1 2025-09-15 14:34:31.183 00:00:10.364 TCP 23.104.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:35:23.969 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:34950 10 6452 1 2025-09-15 14:35:31.588 00:00:10.375 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:32:28.783 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:36:24.208 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6452 1 2025-09-15 14:36:31.995 00:00:10.378 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:33:28.786 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:37:24.434 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-09-15 14:37:32.407 00:00:10.366 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:38:32.973 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:38:33.238 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:38:24.707 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45196 10 6452 1 2025-09-15 14:38:32.803 00:00:10.364 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:39:24.916 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 10 6452 1 2025-09-15 14:39:33.210 00:00:10.327 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:40:25.130 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-09-15 14:40:33.575 00:00:10.367 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:41:25.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-09-15 14:41:33.982 00:00:10.329 TCP 23.104.0.1:60774 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:38:28.786 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:42:25.569 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-09-15 14:42:34.344 00:00:10.369 TCP 23.104.0.1:50638 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:39:28.788 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:43:25.793 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-15 14:43:33.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:43:33.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:43:34.748 00:00:10.364 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:44:25.973 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6452 1 2025-09-15 14:44:35.151 00:00:10.363 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:45:26.165 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-09-15 14:45:35.555 00:00:10.366 TCP 23.104.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:46:26.375 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-09-15 14:46:35.958 00:00:10.364 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:47:26.593 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-09-15 14:47:36.360 00:00:10.362 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:44:28.787 00:05:00.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:48:33.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:48:33.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:48:26.810 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-09-15 14:48:36.764 00:00:10.380 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:45:28.789 00:05:00.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:49:26.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-09-15 14:49:37.175 00:00:10.368 TCP 23.104.0.1:38068 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:50:27.224 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-09-15 14:50:37.580 00:00:10.323 TCP 23.104.0.1:53284 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:51:27.455 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40518 10 6452 1 2025-09-15 14:51:37.943 00:00:10.324 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:52:27.680 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-09-15 14:52:38.320 00:00:10.364 TCP 23.104.0.1:53670 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:53:33.366 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:53:33.284 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:53:27.904 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-09-15 14:53:38.724 00:00:10.321 TCP 23.104.0.1:48290 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:50:28.788 00:05:00.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 14:54:28.096 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54858 10 6452 1 2025-09-15 14:54:39.099 00:00:10.365 TCP 23.104.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:51:28.790 00:05:00.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 14:55:28.306 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-15 14:55:39.504 00:00:10.327 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:56:28.522 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-09-15 14:56:39.867 00:00:10.368 TCP 23.104.0.1:56806 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:57:28.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-09-15 14:57:40.274 00:00:10.365 TCP 23.104.0.1:41620 -> 1.101.0.1:3000 11 1507 1 2025-09-15 14:58:33.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 14:58:33.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 14:58:28.943 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-09-15 14:58:40.680 00:00:10.366 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1074, avg pps: 0, avg bpp: 318 Time window: 2025-09-15 13:56:28 - 2025-09-15 14:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0018s flows/second: 89659.3 Runtime: 0.0019s