Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 22:59:28.001 00:00:10.360 TCP 23.104.0.1:40926 -> 1.101.0.1:3000 11 1507 1 2025-09-23 22:59:35.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-09-23 22:56:32.617 00:05:01.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:00:28.402 00:00:10.364 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:00:35.870 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-09-23 22:57:32.622 00:05:01.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:01:28.807 00:00:10.355 TCP 23.104.0.1:47774 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:01:36.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-09-23 23:02:34.131 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:02:34.307 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:02:29.202 00:00:10.366 TCP 23.104.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:02:36.315 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39582 10 6452 1 2025-09-23 23:03:29.615 00:00:10.333 TCP 23.104.0.1:57256 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:03:36.488 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-09-23 23:04:29.982 00:00:10.370 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:04:36.693 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 10 6452 1 2025-09-23 23:05:30.393 00:00:10.366 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:05:36.904 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-09-23 23:02:32.620 00:05:01.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:06:30.796 00:00:10.365 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:06:37.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49004 10 6452 1 2025-09-23 23:07:34.317 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:07:34.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:03:32.623 00:05:01.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:07:31.206 00:00:10.322 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:07:37.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-09-23 23:08:31.569 00:00:10.322 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:08:37.549 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-09-23 23:09:31.930 00:00:10.341 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:09:37.780 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-09-23 23:10:32.309 00:00:10.360 TCP 23.104.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:10:37.950 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-09-23 23:11:32.708 00:00:10.362 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:11:38.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-09-23 23:12:34.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:12:34.527 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:08:32.623 00:05:01.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:12:33.111 00:00:10.364 TCP 23.104.0.1:53794 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:12:38.407 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6452 1 2025-09-23 23:09:32.626 00:05:01.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:13:33.513 00:00:10.367 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:13:38.627 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-09-23 23:14:33.916 00:00:10.365 TCP 23.104.0.1:32966 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:14:38.796 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-09-23 23:15:34.316 00:00:10.587 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:15:39.007 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-09-23 23:16:34.941 00:00:10.367 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:16:39.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-09-23 23:17:34.572 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:17:34.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:17:35.352 00:00:10.360 TCP 23.104.0.1:57240 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:17:39.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-09-23 23:14:32.623 00:05:01.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:18:35.750 00:00:10.389 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:18:39.657 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-09-23 23:15:32.627 00:05:01.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:19:36.181 00:00:10.373 TCP 23.104.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:19:39.878 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-09-23 23:20:36.591 00:00:10.357 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:20:40.098 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 10 6452 1 2025-09-23 23:21:36.986 00:00:10.384 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:21:40.267 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37424 10 6452 1 2025-09-23 23:22:34.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:22:34.640 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:22:40.481 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-09-23 23:22:37.415 00:00:10.328 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:23:40.659 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-09-23 23:23:37.777 00:00:10.371 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:20:32.625 00:05:01.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:24:38.187 00:00:10.369 TCP 23.104.0.1:40140 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:24:40.877 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46318 10 6452 1 2025-09-23 23:21:32.628 00:05:01.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:25:38.588 00:00:10.363 TCP 23.104.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:25:41.113 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33566 10 6452 1 2025-09-23 23:26:41.287 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-09-23 23:26:38.990 00:00:10.370 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:27:34.828 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:27:34.646 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:27:41.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38578 10 6452 1 2025-09-23 23:27:39.395 00:00:10.366 TCP 23.104.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:28:39.795 00:00:10.988 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:28:41.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-09-23 23:29:40.822 00:00:10.358 TCP 23.104.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:29:41.925 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39384 10 6452 1 2025-09-23 23:26:32.639 00:05:01.470 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:30:41.230 00:00:10.370 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:30:42.157 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-09-23 23:27:32.641 00:05:01.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:31:41.641 00:00:10.361 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:31:42.404 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-09-23 23:32:34.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:32:34.823 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:32:42.652 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-09-23 23:32:42.047 00:00:10.370 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:33:42.456 00:00:10.359 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:33:42.834 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-09-23 23:34:42.857 00:00:10.374 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:34:43.073 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-09-23 23:35:43.301 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39814 10 6452 1 2025-09-23 23:35:43.275 00:00:10.361 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:32:32.640 00:05:01.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:36:43.678 00:00:10.406 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 15 1926 1 2025-09-23 23:36:43.471 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 12 10365 1 2025-09-23 23:37:34.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:33:32.642 00:05:01.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:37:34.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:37:43.709 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56572 10 6452 1 2025-09-23 23:37:44.132 00:00:10.362 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:38:43.919 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58976 10 6452 1 2025-09-23 23:38:44.533 00:00:10.360 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:39:44.142 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-09-23 23:39:44.950 00:00:10.367 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:40:44.358 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-09-23 23:40:45.360 00:00:10.359 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:41:44.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35378 10 6452 1 2025-09-23 23:41:45.760 00:00:10.385 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:42:35.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:38:32.642 00:05:01.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:42:34.970 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:42:46.181 00:00:10.330 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:42:44.780 00:00:11.029 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-09-23 23:39:32.645 00:05:01.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:43:46.550 00:00:10.360 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:43:45.840 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-09-23 23:44:46.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-09-23 23:44:46.944 00:00:10.333 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:45:46.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-09-23 23:45:47.313 00:00:10.366 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:46:46.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-09-23 23:46:47.718 00:00:10.339 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:47:35.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:47:35.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:47:46.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39292 10 6452 1 2025-09-23 23:47:48.113 00:00:10.390 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:44:32.642 00:05:01.474 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:48:48.555 00:00:10.368 TCP 23.104.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:48:46.934 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-09-23 23:45:32.647 00:05:01.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:49:48.960 00:00:10.364 TCP 23.104.0.1:47184 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:49:47.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-09-23 23:50:47.391 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-09-23 23:50:49.361 00:00:10.374 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:51:49.771 00:00:10.374 TCP 23.104.0.1:58424 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:51:47.605 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-09-23 23:52:35.218 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:52:35.392 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:52:50.179 00:00:10.359 TCP 23.104.0.1:39840 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:52:47.826 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-09-23 23:53:50.579 00:00:10.371 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:53:47.997 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-09-23 23:50:32.646 00:05:01.471 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 23:54:50.985 00:00:10.381 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:54:48.227 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-09-23 23:51:32.648 00:05:01.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 23:55:51.422 00:00:10.371 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:55:48.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-09-23 23:56:48.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43128 10 6452 1 2025-09-23 23:56:51.832 00:00:10.395 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-09-23 23:57:35.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 23:57:35.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 23:57:48.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-09-23 23:57:52.267 00:00:10.326 TCP 23.104.0.1:51160 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494721, total packets: 1557, avg bps: 1072, avg pps: 0, avg bpp: 317 Time window: 2025-09-23 22:56:32 - 2025-09-23 23:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0023s Wall: 0.0021s flows/second: 77468.6 Runtime: 0.0021s