Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 18:59:07.535 00:00:10.323 TCP 23.104.0.1:58794 -> 1.101.0.1:3000 11 1507 1 2025-09-24 18:59:15.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43446 10 6452 1 2025-09-24 19:00:07.903 00:00:10.369 TCP 23.104.0.1:44768 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:00:15.461 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-09-24 18:56:33.037 00:05:01.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:01:08.314 00:00:10.368 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:01:15.738 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 12 10367 1 2025-09-24 18:57:33.042 00:05:01.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:02:08.720 00:00:10.455 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 15 1926 1 2025-09-24 19:02:15.985 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:45398 10 6452 1 2025-09-24 19:02:58.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:02:58.176 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:03:09.214 00:00:10.330 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:03:16.175 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56552 10 6452 1 2025-09-24 19:04:09.580 00:00:10.364 TCP 23.104.0.1:52222 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:04:16.381 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-09-24 19:05:09.979 00:00:10.367 TCP 23.104.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:05:16.556 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:35224 10 6452 1 2025-09-24 19:06:10.389 00:00:10.364 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:06:17.037 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38872 10 6452 1 2025-09-24 19:02:33.038 00:05:01.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:07:10.789 00:00:10.366 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:07:17.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41290 10 6452 1 2025-09-24 19:03:33.041 00:05:01.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:07:58.457 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:07:58.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:08:11.194 00:00:10.365 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:08:17.469 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-09-24 19:09:11.599 00:00:10.361 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:09:17.685 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42374 10 6452 1 2025-09-24 19:10:12.000 00:00:10.362 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:10:17.900 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 6452 1 2025-09-24 19:11:12.397 00:00:10.362 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:11:18.119 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-09-24 19:12:12.800 00:00:10.364 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:12:18.298 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44574 10 6452 1 2025-09-24 19:08:33.064 00:05:01.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:12:58.574 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:12:58.495 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:13:13.206 00:00:10.330 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:13:18.524 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-09-24 19:09:33.066 00:05:01.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:14:13.577 00:00:10.362 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:14:18.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44344 10 6452 1 2025-09-24 19:15:13.987 00:00:10.319 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:15:18.914 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-09-24 19:16:14.345 00:00:10.378 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:16:19.105 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-09-24 19:17:14.759 00:00:10.374 TCP 23.104.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:17:19.325 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-09-24 19:17:58.719 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:17:58.690 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:18:15.173 00:00:10.395 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:18:19.568 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-09-24 19:14:33.066 00:05:01.509 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:19:15.606 00:00:10.366 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:19:19.789 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-09-24 19:15:33.068 00:05:01.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:20:16.010 00:00:10.374 TCP 23.104.0.1:53180 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:20:20.011 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41748 10 6452 1 2025-09-24 19:21:16.429 00:00:10.373 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:21:20.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43656 10 6452 1 2025-09-24 19:22:16.839 00:00:16.447 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:22:20.396 00:00:12.833 TCP 1.101.0.1:3000 -> 22.102.0.1:47426 10 6452 1 2025-09-24 19:22:58.995 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:22:58.861 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:23:23.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-09-24 19:23:23.346 00:00:10.366 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:24:23.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 6452 1 2025-09-24 19:20:33.067 00:05:01.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:24:23.754 00:00:10.379 TCP 23.104.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:25:23.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-09-24 19:25:24.167 00:00:10.363 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:21:33.069 00:05:01.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:26:23.938 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-09-24 19:26:24.563 00:00:10.323 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:27:24.132 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-09-24 19:27:24.921 00:00:10.392 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:27:58.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:27:58.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:28:25.350 00:00:10.324 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:28:24.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-09-24 19:29:25.712 00:00:10.376 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:29:24.557 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46048 10 6452 1 2025-09-24 19:30:24.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-09-24 19:26:33.069 00:05:01.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:30:26.126 00:00:10.363 TCP 23.104.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:31:24.975 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-09-24 19:31:26.534 00:00:10.328 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:27:33.073 00:05:01.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:32:25.205 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 10 6452 1 2025-09-24 19:32:26.902 00:00:10.369 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:32:58.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:32:58.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:33:25.415 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-09-24 19:33:27.309 00:00:10.364 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:34:25.628 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-09-24 19:34:27.705 00:00:10.361 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:35:25.845 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-09-24 19:35:28.110 00:00:10.365 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:36:26.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-09-24 19:32:33.071 00:05:01.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:36:28.512 00:00:10.362 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:33:33.074 00:05:01.501 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:37:26.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-09-24 19:37:28.911 00:00:10.362 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:37:58.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:37:59.066 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:38:26.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-09-24 19:38:29.307 00:00:10.317 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:39:26.725 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-09-24 19:39:29.664 00:00:10.368 TCP 23.104.0.1:42852 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:40:26.937 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-09-24 19:40:30.101 00:00:10.371 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:41:30.507 00:00:10.323 TCP 23.104.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:41:27.127 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-09-24 19:38:33.072 00:05:01.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:42:30.870 00:00:10.368 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:42:27.336 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 6452 1 2025-09-24 19:42:59.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:42:59.057 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:39:33.075 00:05:01.500 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:43:27.505 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-09-24 19:43:31.276 00:00:10.362 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:44:27.730 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-09-24 19:44:31.676 00:00:10.373 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:45:27.970 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-09-24 19:45:32.101 00:00:10.325 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:46:28.223 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-09-24 19:46:32.461 00:00:10.607 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:47:28.471 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37588 10 6452 1 2025-09-24 19:47:33.109 00:00:10.322 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:47:59.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:47:59.035 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:44:33.076 00:05:01.502 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:48:28.693 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-09-24 19:48:33.469 00:00:10.329 TCP 23.104.0.1:44200 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:45:33.078 00:05:01.498 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:49:28.916 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-09-24 19:49:33.852 00:00:10.386 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:50:29.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6452 1 2025-09-24 19:50:34.287 00:00:10.364 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:51:29.382 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 12 10367 1 2025-09-24 19:51:34.689 00:00:10.452 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 15 1926 1 2025-09-24 19:52:29.623 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-09-24 19:52:35.181 00:00:10.362 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:52:59.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:52:59.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:53:29.839 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-09-24 19:53:35.583 00:00:10.321 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:50:33.077 00:05:01.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 19:54:30.014 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-09-24 19:54:35.943 00:00:10.376 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:51:33.079 00:05:01.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 19:55:30.235 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-09-24 19:55:36.369 00:00:10.364 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:56:30.464 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-09-24 19:56:36.772 00:00:10.367 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:57:30.684 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59834 10 6452 1 2025-09-24 19:57:37.178 00:00:10.326 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-09-24 19:57:59.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 19:57:59.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 19:58:30.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6452 1 2025-09-24 19:58:37.543 00:00:10.327 TCP 23.104.0.1:35916 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507016, total packets: 1584, avg bps: 1086, avg pps: 0, avg bpp: 320 Time window: 2025-09-24 18:56:33 - 2025-09-24 19:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0023s Wall: 0.0028s flows/second: 58096.8 Runtime: 0.0028s