Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 17:59:23.824 00:00:10.363 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-09-23 17:59:27.130 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-09-23 18:00:24.233 00:00:10.870 TCP 23.104.0.1:50358 -> 1.101.0.1:3000 11 1507 1 2025-09-23 17:56:32.526 00:05:01.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:00:27.347 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-09-23 17:57:32.527 00:05:01.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:01:25.140 00:00:10.366 TCP 23.104.0.1:46096 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:01:27.567 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58024 10 6452 1 2025-09-23 18:02:28.092 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:02:28.292 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:02:25.548 00:00:10.340 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:02:27.793 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 10 6452 1 2025-09-23 18:03:25.931 00:00:10.383 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:03:27.967 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 10 6452 1 2025-09-23 18:04:26.358 00:00:10.361 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:04:28.185 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-09-23 18:05:26.755 00:00:10.380 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:05:28.400 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57634 10 6452 1 2025-09-23 18:02:32.528 00:05:01.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:06:28.620 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-09-23 18:06:27.171 00:00:10.368 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:07:28.463 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:07:28.450 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:03:32.529 00:05:01.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:07:27.579 00:00:10.368 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:07:28.800 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-09-23 18:08:27.986 00:00:10.360 TCP 23.104.0.1:52622 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:08:29.037 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-09-23 18:09:29.253 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-09-23 18:09:28.380 00:00:10.327 TCP 23.104.0.1:48428 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:10:28.748 00:00:10.387 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:10:29.476 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45082 10 6452 1 2025-09-23 18:11:29.685 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-09-23 18:11:29.170 00:00:10.363 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:12:28.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:12:28.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:08:32.529 00:05:01.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:12:29.905 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57796 10 6452 1 2025-09-23 18:12:29.569 00:00:10.365 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:09:32.532 00:05:01.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:13:29.969 00:00:10.369 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:13:30.141 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-09-23 18:14:30.350 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-09-23 18:14:30.378 00:00:10.362 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:15:30.776 00:00:10.368 TCP 23.104.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:15:30.571 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48632 10 6452 1 2025-09-23 18:16:30.782 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-09-23 18:16:31.183 00:00:10.367 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:17:28.566 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:17:28.503 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:17:30.997 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-09-23 18:17:31.589 00:00:10.337 TCP 23.104.0.1:49456 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:14:32.531 00:05:01.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:18:31.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6452 1 2025-09-23 18:18:31.972 00:00:10.376 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:15:32.535 00:05:01.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:19:31.420 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-09-23 18:19:32.388 00:00:10.333 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:20:31.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-09-23 18:20:32.755 00:00:10.394 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:21:31.813 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-09-23 18:21:33.190 00:00:10.367 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:22:28.527 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:22:28.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:22:32.037 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38556 10 6452 1 2025-09-23 18:22:33.593 00:00:10.366 TCP 23.104.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:23:33.997 00:00:10.366 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:23:32.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40240 10 6452 1 2025-09-23 18:20:32.535 00:05:01.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:24:34.401 00:00:10.370 TCP 23.104.0.1:44342 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:24:32.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-09-23 18:21:32.539 00:05:01.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:25:34.809 00:00:10.339 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:25:32.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-09-23 18:26:32.909 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2025-09-23 18:26:35.185 00:00:10.373 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:27:28.620 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:27:28.815 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:27:35.590 00:00:10.364 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:27:33.115 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-09-23 18:28:33.336 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-09-23 18:28:35.991 00:00:10.361 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:29:33.515 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-09-23 18:29:36.391 00:00:10.366 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:26:32.537 00:05:01.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:30:33.737 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-09-23 18:30:36.794 00:00:10.334 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:27:32.541 00:05:01.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:31:33.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57556 10 6452 1 2025-09-23 18:31:37.167 00:00:10.324 TCP 23.104.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:32:28.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:32:28.999 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:32:34.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-09-23 18:32:37.531 00:00:10.341 TCP 23.104.0.1:59840 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:33:34.342 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 11 6504 1 2025-09-23 18:33:37.912 00:00:10.365 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:34:34.626 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-09-23 18:34:38.314 00:00:10.364 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:35:34.851 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-09-23 18:35:38.717 00:00:10.339 TCP 23.104.0.1:49028 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:32:32.540 00:05:01.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:36:35.026 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-09-23 18:36:39.111 00:00:10.363 TCP 23.104.0.1:54836 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:37:28.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:37:28.966 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:33:32.542 00:05:01.425 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:37:35.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-09-23 18:37:39.516 00:00:10.361 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:38:35.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6452 1 2025-09-23 18:38:39.918 00:00:10.371 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:39:35.673 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-09-23 18:39:40.328 00:00:10.689 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:40:35.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-09-23 18:40:41.065 00:00:10.362 TCP 23.104.0.1:46272 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:41:36.103 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53938 10 6452 1 2025-09-23 18:41:41.466 00:00:10.367 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:42:29.020 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:42:29.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:38:32.543 00:05:01.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:42:36.326 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-09-23 18:42:41.872 00:00:10.366 TCP 23.104.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:39:32.546 00:05:01.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:43:36.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35148 10 6452 1 2025-09-23 18:43:42.280 00:00:10.362 TCP 23.104.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:44:36.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41972 10 6452 1 2025-09-23 18:44:42.679 00:00:10.365 TCP 23.104.0.1:55040 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:45:36.970 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-09-23 18:45:43.102 00:00:10.323 TCP 23.104.0.1:51680 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:46:37.197 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-09-23 18:46:43.465 00:00:10.366 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:47:29.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:47:28.851 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:47:37.411 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-09-23 18:47:43.869 00:00:10.372 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:44:32.544 00:05:01.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:48:37.627 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40868 10 6452 1 2025-09-23 18:48:44.281 00:00:10.362 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:45:32.548 00:05:01.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:49:37.840 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-09-23 18:49:44.688 00:00:10.327 TCP 23.104.0.1:35138 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:50:38.089 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-09-23 18:50:45.059 00:00:10.324 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:51:38.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-09-23 18:51:45.421 00:00:10.367 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:52:29.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:52:29.195 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:52:38.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38246 10 6452 1 2025-09-23 18:52:45.823 00:00:10.364 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:53:38.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-09-23 18:53:46.227 00:00:10.325 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:50:32.547 00:05:01.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 18:54:38.944 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50704 10 6452 1 2025-09-23 18:54:46.594 00:00:10.366 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:51:32.550 00:05:01.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 18:55:39.186 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-09-23 18:55:46.995 00:00:10.368 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:56:39.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-09-23 18:56:47.398 00:00:10.377 TCP 23.104.0.1:46698 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:57:29.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 18:57:29.326 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 18:57:39.608 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36974 10 6452 1 2025-09-23 18:57:47.815 00:00:10.359 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-09-23 18:58:39.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40460 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-23 17:56:32 - 2025-09-23 18:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0030s flows/second: 53989.7 Runtime: 0.0030s