Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-21 11:58:45.264 00:00:10.364 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-09-21 11:59:10.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6661 1 2025-09-21 11:59:45.667 00:00:10.365 TCP 23.104.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:00:11.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6661 1 2025-09-21 11:56:31.528 00:05:01.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:00:46.095 00:00:10.368 TCP 23.104.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:01:11.438 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6661 1 2025-09-21 12:01:22.990 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:01:23.136 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 11:57:31.532 00:05:01.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:01:46.498 00:00:10.365 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:02:11.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6661 1 2025-09-21 12:02:46.898 00:00:10.326 TCP 23.104.0.1:40240 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:03:11.867 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6661 1 2025-09-21 12:03:47.268 00:00:10.363 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:04:12.060 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6661 1 2025-09-21 12:04:47.670 00:00:10.371 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:05:12.273 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56690 10 6661 1 2025-09-21 12:05:48.124 00:00:10.367 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:06:23.271 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:06:12.445 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6661 1 2025-09-21 12:06:23.437 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:02:31.530 00:05:01.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:06:48.526 00:00:10.366 TCP 23.104.0.1:36358 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:07:12.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45682 10 6661 1 2025-09-21 12:03:31.532 00:05:01.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:07:48.932 00:00:10.386 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:08:12.889 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6661 1 2025-09-21 12:08:49.357 00:00:10.366 TCP 23.104.0.1:48708 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:09:13.129 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6661 1 2025-09-21 12:09:49.761 00:00:10.371 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:10:13.356 00:00:10.548 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6661 1 2025-09-21 12:10:50.170 00:00:10.376 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:11:23.429 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:11:13.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33784 10 6661 1 2025-09-21 12:11:23.414 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:11:50.583 00:00:10.366 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:12:14.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6661 1 2025-09-21 12:08:31.530 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:12:50.985 00:00:10.370 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:13:14.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47798 10 6661 1 2025-09-21 12:09:31.534 00:05:01.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:13:51.392 00:00:10.368 TCP 23.104.0.1:36088 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:14:14.606 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6661 1 2025-09-21 12:14:51.793 00:00:10.371 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:15:14.845 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6661 1 2025-09-21 12:15:52.196 00:00:10.365 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:16:23.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:16:15.021 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6661 1 2025-09-21 12:16:23.579 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:16:52.602 00:00:10.366 TCP 23.104.0.1:59280 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:17:15.238 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39116 10 6661 1 2025-09-21 12:17:53.011 00:00:10.374 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:18:15.454 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6661 1 2025-09-21 12:14:31.531 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:18:53.417 00:00:10.365 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:19:15.671 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6661 1 2025-09-21 12:15:31.534 00:05:01.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:19:53.816 00:00:10.366 TCP 23.104.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:20:15.900 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35932 10 6661 1 2025-09-21 12:20:54.221 00:00:10.370 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:21:16.121 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33174 10 6661 1 2025-09-21 12:21:23.958 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:21:23.539 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:21:54.627 00:00:10.332 TCP 23.104.0.1:45250 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:22:16.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6661 1 2025-09-21 12:22:54.996 00:00:10.366 TCP 23.104.0.1:48168 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:23:16.507 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:57488 10 6661 1 2025-09-21 12:23:55.401 00:00:10.380 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:24:16.886 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6661 1 2025-09-21 12:20:31.532 00:05:01.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:24:55.818 00:00:10.369 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:25:17.077 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6661 1 2025-09-21 12:21:31.534 00:05:01.336 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:25:56.228 00:00:10.328 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:26:23.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:26:23.900 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:26:17.292 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53374 10 6661 1 2025-09-21 12:26:56.590 00:00:10.376 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:27:17.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6661 1 2025-09-21 12:27:57.008 00:00:10.362 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:28:17.741 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6661 1 2025-09-21 12:28:57.409 00:00:10.368 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:29:17.927 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:45120 10 6661 1 2025-09-21 12:29:57.819 00:00:10.333 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:30:18.127 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56126 10 6661 1 2025-09-21 12:26:31.534 00:05:01.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:30:58.193 00:00:10.366 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:31:23.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:31:23.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:31:18.337 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6661 1 2025-09-21 12:27:31.536 00:05:01.335 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:31:58.597 00:00:10.373 TCP 23.104.0.1:55228 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:32:18.545 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6661 1 2025-09-21 12:32:59.012 00:00:10.325 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:33:18.763 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6661 1 2025-09-21 12:33:59.376 00:00:10.362 TCP 23.104.0.1:44326 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:34:18.981 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6661 1 2025-09-21 12:34:59.772 00:00:10.372 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:35:19.225 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6661 1 2025-09-21 12:36:00.185 00:00:10.366 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:36:23.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:36:23.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:36:19.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6661 1 2025-09-21 12:32:31.535 00:05:01.339 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:37:00.588 00:00:10.321 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:37:19.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43144 10 6661 1 2025-09-21 12:33:31.538 00:05:01.334 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:38:00.948 00:00:10.368 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:38:19.846 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6661 1 2025-09-21 12:39:01.353 00:00:10.361 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:39:20.080 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38434 10 6661 1 2025-09-21 12:40:01.752 00:00:10.335 TCP 23.104.0.1:40170 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:40:20.253 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6661 1 2025-09-21 12:41:02.127 00:00:10.329 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:41:24.032 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:41:23.941 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:41:20.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6661 1 2025-09-21 12:42:02.491 00:00:10.358 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:42:20.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6661 1 2025-09-21 12:38:31.538 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:43:02.893 00:00:10.369 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:43:20.852 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53232 10 6661 1 2025-09-21 12:39:31.541 00:05:01.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:44:03.303 00:00:10.366 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:44:21.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6661 1 2025-09-21 12:45:03.710 00:00:10.323 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:45:21.295 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6661 1 2025-09-21 12:46:04.096 00:00:10.362 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:46:24.055 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:46:24.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:46:21.502 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48698 10 6661 1 2025-09-21 12:47:04.499 00:00:10.369 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:47:21.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6661 1 2025-09-21 12:48:04.906 00:00:10.369 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:48:21.932 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:51362 10 6661 1 2025-09-21 12:44:31.539 00:05:01.338 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:49:05.314 00:00:10.361 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:49:22.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50126 10 6661 1 2025-09-21 12:45:31.542 00:05:01.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:50:05.713 00:00:10.322 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:50:22.346 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59010 10 6661 1 2025-09-21 12:51:06.102 00:00:10.368 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:51:24.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:51:24.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:51:22.554 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6661 1 2025-09-21 12:52:06.521 00:00:10.363 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:52:23.173 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59518 10 6661 1 2025-09-21 12:53:06.918 00:00:10.322 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:53:23.386 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6661 1 2025-09-21 12:54:07.278 00:00:10.360 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:54:23.715 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6661 1 2025-09-21 12:50:31.543 00:05:01.336 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-21 12:55:07.689 00:00:10.367 TCP 23.104.0.1:57266 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:55:23.932 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6661 1 2025-09-21 12:51:31.545 00:05:01.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-21 12:56:08.102 00:00:10.329 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:56:24.469 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-21 12:56:24.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-21 12:56:24.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6661 1 2025-09-21 12:57:08.470 00:00:10.325 TCP 23.104.0.1:44668 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:57:24.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6661 1 2025-09-21 12:58:08.831 00:00:10.380 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-09-21 12:58:24.600 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:33252 10 6661 1 Summary: total flows: 164, total bytes: 510888, total packets: 1572, avg bps: 1097, avg pps: 0, avg bpp: 324 Time window: 2025-09-21 11:56:31 - 2025-09-21 12:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0023s flows/second: 72697.7 Runtime: 0.0023s