Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 15:58:57.145 00:00:10.369 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-09-25 15:59:19.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-09-25 15:59:57.552 00:00:10.318 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:00:19.942 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-09-25 15:56:33.436 00:05:01.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:00:57.912 00:00:10.367 TCP 23.104.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:01:20.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-09-25 15:57:33.439 00:05:01.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:01:58.316 00:00:10.327 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:02:20.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6452 1 2025-09-25 16:02:58.679 00:00:10.369 TCP 23.104.0.1:56828 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:03:23.761 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:03:23.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:03:20.611 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-09-25 16:03:59.102 00:00:10.367 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:04:20.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-09-25 16:04:59.505 00:00:10.365 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:05:21.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 12 6556 1 2025-09-25 16:05:59.904 00:00:10.370 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:06:21.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-09-25 16:02:33.439 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:07:00.313 00:00:10.366 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:07:21.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-09-25 16:03:33.441 00:05:01.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:08:00.720 00:00:10.367 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:08:23.988 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:08:23.964 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:08:21.652 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6452 1 2025-09-25 16:09:01.129 00:00:10.321 TCP 23.104.0.1:37148 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:09:21.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53022 10 6452 1 2025-09-25 16:10:01.491 00:00:10.367 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:10:22.069 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6452 1 2025-09-25 16:11:01.894 00:00:10.370 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:11:22.286 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 12 10365 1 2025-09-25 16:12:02.301 00:00:10.434 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 15 1926 1 2025-09-25 16:12:22.485 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6452 1 2025-09-25 16:08:33.440 00:05:01.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:13:02.775 00:00:10.370 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:13:23.987 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:13:23.853 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:09:33.442 00:05:01.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:13:22.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-09-25 16:14:03.185 00:00:10.361 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:14:22.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 10 6452 1 2025-09-25 16:15:03.587 00:00:10.377 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:15:23.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-09-25 16:16:04.007 00:00:10.375 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:16:23.350 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-09-25 16:17:04.441 00:00:10.363 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:17:23.521 00:00:12.287 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-09-25 16:18:04.848 00:00:10.381 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:18:23.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:18:23.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:18:25.852 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-09-25 16:14:33.443 00:05:01.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:19:05.269 00:00:10.366 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:15:33.445 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:19:26.084 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44768 10 6452 1 2025-09-25 16:20:05.674 00:00:10.367 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:20:26.258 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49962 10 6452 1 2025-09-25 16:21:06.103 00:00:10.419 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:21:26.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33506 10 6452 1 2025-09-25 16:22:06.560 00:00:10.367 TCP 23.104.0.1:37124 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:22:26.680 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-09-25 16:23:06.966 00:00:10.332 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:23:23.753 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:23:23.933 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:23:26.892 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56434 10 6452 1 2025-09-25 16:24:07.341 00:00:10.333 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:20:33.447 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:24:27.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-09-25 16:25:07.712 00:00:10.375 TCP 23.104.0.1:42724 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:21:33.449 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:25:27.285 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6452 1 2025-09-25 16:26:08.130 00:00:10.370 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:26:27.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-09-25 16:27:08.539 00:00:10.365 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:27:27.675 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-09-25 16:28:08.944 00:00:10.332 TCP 23.104.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:28:24.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:28:24.251 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:28:27.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-09-25 16:29:09.316 00:00:10.368 TCP 23.104.0.1:34676 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:29:28.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55954 10 6452 1 2025-09-25 16:30:09.725 00:00:10.376 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:26:33.449 00:05:01.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:30:28.297 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-09-25 16:31:10.142 00:00:10.327 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:27:33.450 00:05:01.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:31:28.471 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-09-25 16:32:10.504 00:00:10.368 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:32:28.686 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51390 10 6452 1 2025-09-25 16:33:10.908 00:00:10.365 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:33:24.183 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:33:24.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:33:28.912 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-09-25 16:34:11.316 00:00:10.364 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:34:29.132 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-09-25 16:35:11.716 00:00:10.368 TCP 23.104.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:35:29.356 00:00:10.377 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-09-25 16:36:12.126 00:00:10.373 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:32:33.457 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:36:29.773 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-09-25 16:37:12.543 00:00:10.360 TCP 23.104.0.1:53878 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:33:33.460 00:05:01.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:37:29.951 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45120 12 6556 1 2025-09-25 16:38:24.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:38:24.201 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:38:12.948 00:00:10.369 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:38:30.191 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-09-25 16:39:13.351 00:00:10.363 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:39:30.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-09-25 16:40:13.745 00:00:10.395 TCP 23.104.0.1:50574 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:40:30.587 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-09-25 16:41:14.178 00:00:10.361 TCP 23.104.0.1:38592 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:41:30.806 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-09-25 16:42:14.582 00:00:10.372 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:38:33.459 00:05:01.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:42:31.034 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-09-25 16:43:24.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:43:14.986 00:00:10.336 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:43:24.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:39:33.461 00:05:01.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:43:31.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33720 10 6452 1 2025-09-25 16:44:15.357 00:00:10.361 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:44:31.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-09-25 16:45:15.755 00:00:10.329 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:45:31.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-09-25 16:46:16.120 00:00:10.366 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:46:31.908 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-09-25 16:47:16.522 00:00:10.370 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:47:32.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-09-25 16:48:24.633 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:48:24.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:48:16.930 00:00:10.382 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:44:33.459 00:05:01.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:48:32.332 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-09-25 16:49:17.348 00:00:10.367 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:45:33.462 00:05:01.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:49:32.511 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-09-25 16:50:17.750 00:00:10.389 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:50:32.733 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-09-25 16:51:18.177 00:00:10.325 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:51:32.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58838 10 6452 1 2025-09-25 16:52:18.539 00:00:10.363 TCP 23.104.0.1:44328 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:52:33.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35668 10 6452 1 2025-09-25 16:53:24.760 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:53:24.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:53:18.937 00:00:10.374 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:53:33.400 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-09-25 16:54:19.349 00:00:10.367 TCP 23.104.0.1:35594 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:50:33.460 00:05:01.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 16:54:33.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-09-25 16:55:19.753 00:00:10.389 TCP 23.104.0.1:34176 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:51:33.462 00:05:01.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 16:55:33.841 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-09-25 16:56:20.187 00:00:10.364 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:56:34.084 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-09-25 16:57:20.593 00:00:10.378 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:57:34.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-09-25 16:58:24.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 16:58:24.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 16:58:21.008 00:00:10.367 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-09-25 16:58:34.520 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6452 1 Summary: total flows: 164, total bytes: 502888, total packets: 1582, avg bps: 1078, avg pps: 0, avg bpp: 317 Time window: 2025-09-25 15:56:33 - 2025-09-25 16:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0015s Wall: 0.0014s flows/second: 113734.4 Runtime: 0.0015s