Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 02:58:45.879 00:00:10.463 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:59:20.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36402 10 6452 1 2025-09-11 02:59:46.379 00:00:10.365 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-09-11 02:56:26.617 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:00:20.345 00:00:10.722 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-09-11 03:00:46.783 00:00:10.369 TCP 23.104.0.1:32890 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:01:23.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:01:23.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:01:21.109 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48148 10 6452 1 2025-09-11 03:01:47.195 00:00:10.362 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:02:21.313 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6452 1 2025-09-11 03:02:47.599 00:00:10.364 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:03:21.533 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-09-11 03:03:48.001 00:00:10.358 TCP 23.104.0.1:39044 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:00:26.620 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:04:21.751 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-09-11 03:04:48.396 00:00:10.364 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:05:21.917 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-09-11 03:05:48.796 00:00:10.369 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:06:23.825 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:06:23.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:02:26.620 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:06:22.134 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56134 10 6452 1 2025-09-11 03:06:49.199 00:00:10.370 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:07:22.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-09-11 03:07:49.606 00:00:10.360 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:08:22.558 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-09-11 03:08:50.008 00:00:10.360 TCP 23.104.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:09:22.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43156 10 6452 1 2025-09-11 03:09:50.407 00:00:10.362 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:06:26.623 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:10:22.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-09-11 03:10:50.809 00:00:10.363 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:11:23.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:11:23.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:11:23.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-09-11 03:11:51.213 00:00:10.368 TCP 23.104.0.1:35552 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:08:26.620 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:12:23.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-09-11 03:12:51.624 00:00:10.416 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:13:23.608 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-09-11 03:13:52.098 00:00:10.360 TCP 23.104.0.1:37396 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:14:23.779 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-09-11 03:14:52.499 00:00:10.370 TCP 23.104.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:15:23.956 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45210 12 6556 1 2025-09-11 03:15:52.905 00:00:10.326 TCP 23.104.0.1:56290 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:16:24.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:16:24.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:12:26.627 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:16:24.194 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-09-11 03:16:53.269 00:00:10.365 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:17:24.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-09-11 03:17:53.674 00:00:10.381 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:14:26.625 00:05:00.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:18:24.631 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43598 10 6452 1 2025-09-11 03:18:54.110 00:00:10.447 TCP 23.104.0.1:51058 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:19:24.859 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6452 1 2025-09-11 03:19:54.597 00:00:10.368 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:20:25.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-09-11 03:20:55.005 00:00:10.363 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:21:24.413 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:21:23.878 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:21:25.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-09-11 03:21:55.409 00:00:10.365 TCP 23.104.0.1:38892 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:18:26.627 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:22:25.518 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-09-11 03:22:55.816 00:00:10.371 TCP 23.104.0.1:41880 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:23:25.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-09-11 03:23:56.244 00:00:10.322 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:20:26.624 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:24:25.948 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-09-11 03:24:56.600 00:00:10.367 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:25:26.180 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-09-11 03:25:57.009 00:00:10.897 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:26:24.066 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:26:24.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:26:26.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6452 1 2025-09-11 03:26:57.947 00:00:10.328 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:27:26.603 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57780 10 6452 1 2025-09-11 03:27:58.314 00:00:10.365 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:24:26.629 00:05:00.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:28:26.823 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-09-11 03:28:58.719 00:00:10.378 TCP 23.104.0.1:52414 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:29:27.069 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-09-11 03:29:59.136 00:00:10.370 TCP 23.104.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:26:26.626 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:30:27.272 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:58438 10 6452 1 2025-09-11 03:30:59.544 00:00:10.368 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:31:24.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:31:24.292 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:31:27.891 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 10 6452 1 2025-09-11 03:31:59.948 00:00:10.375 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:32:28.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-09-11 03:33:00.354 00:00:10.329 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:33:28.290 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-09-11 03:34:00.725 00:00:10.372 TCP 23.104.0.1:46278 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:30:26.627 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:34:28.512 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-09-11 03:35:01.134 00:00:10.360 TCP 23.104.0.1:34924 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:35:28.730 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-09-11 03:36:01.534 00:00:10.365 TCP 23.104.0.1:51126 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:36:24.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:36:24.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:32:26.626 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:36:28.954 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-09-11 03:37:01.937 00:00:10.379 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:37:29.187 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 6452 1 2025-09-11 03:38:02.360 00:00:10.364 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:38:29.414 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-09-11 03:39:02.761 00:00:10.687 TCP 23.104.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:39:29.595 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:56466 11 6504 1 2025-09-11 03:40:03.487 00:00:10.324 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:36:26.632 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:40:29.866 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-09-11 03:41:03.853 00:00:10.381 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:41:24.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:41:24.487 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:41:30.315 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38402 10 6452 1 2025-09-11 03:42:04.276 00:00:10.363 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:38:26.628 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:42:30.529 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-09-11 03:43:04.674 00:00:10.949 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:43:30.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-09-11 03:44:05.663 00:00:10.364 TCP 23.104.0.1:35120 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:44:30.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 12 6556 1 2025-09-11 03:45:06.098 00:00:10.372 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:45:31.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-09-11 03:46:06.511 00:00:10.368 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:46:24.680 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:46:24.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:42:26.631 00:05:00.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:46:31.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-09-11 03:47:06.914 00:00:10.383 TCP 23.104.0.1:40700 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:47:31.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36584 10 6452 1 2025-09-11 03:48:07.334 00:00:10.363 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:44:26.629 00:05:00.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:48:31.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-09-11 03:49:07.734 00:00:10.372 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:49:32.072 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-09-11 03:50:08.143 00:00:10.365 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:50:32.283 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-09-11 03:51:08.541 00:00:10.365 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:51:25.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:51:24.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:51:32.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-09-11 03:52:08.946 00:00:10.377 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:48:26.632 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:52:32.710 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-09-11 03:53:09.358 00:00:10.366 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:53:32.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-09-11 03:54:09.759 00:00:10.364 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:50:26.630 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 03:54:33.130 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:54518 10 6452 1 2025-09-11 03:55:10.163 00:00:10.936 TCP 23.104.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:55:33.865 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52404 10 6452 1 2025-09-11 03:56:11.136 00:00:10.366 TCP 23.104.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:56:24.692 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 03:56:24.827 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 03:56:34.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-09-11 03:57:11.539 00:00:10.357 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:57:34.310 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-09-11 03:58:11.934 00:00:10.380 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-09-11 03:54:26.635 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 03:58:34.486 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43688 10 6452 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1055, avg pps: 0, avg bpp: 316 Time window: 2025-09-11 02:56:26 - 2025-09-11 03:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0023s flows/second: 70695.4 Runtime: 0.0023s