Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-14 02:59:36.131 00:00:10.373 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:59:36.117 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-09-14 02:56:28.153 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:00:36.339 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47568 10 6452 1 2025-09-14 03:00:36.545 00:00:10.368 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-09-14 02:57:28.156 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:01:36.569 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-09-14 03:01:36.954 00:00:10.367 TCP 23.104.0.1:49602 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:02:36.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47754 10 6452 1 2025-09-14 03:02:50.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:02:50.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:02:37.358 00:00:10.366 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:03:37.768 00:00:10.431 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:03:37.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-09-14 03:04:37.244 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-09-14 03:04:38.239 00:00:10.324 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:05:37.429 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-09-14 03:05:38.610 00:00:10.326 TCP 23.104.0.1:47798 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:02:28.153 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:06:38.978 00:00:10.323 TCP 23.104.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:06:37.650 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-09-14 03:03:28.157 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:07:39.342 00:00:10.364 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:07:50.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:07:50.680 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:07:37.875 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-09-14 03:08:39.745 00:00:10.325 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:08:38.102 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-09-14 03:09:38.272 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51532 10 6452 1 2025-09-14 03:09:40.112 00:00:10.371 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:10:40.520 00:00:10.370 TCP 23.104.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:10:38.485 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40152 10 6452 1 2025-09-14 03:11:40.929 00:00:10.384 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:11:38.659 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 10 6452 1 2025-09-14 03:08:28.155 00:05:00.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:12:50.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:12:41.365 00:00:10.370 TCP 23.104.0.1:33208 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:12:38.836 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-09-14 03:12:50.935 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:09:28.156 00:05:00.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:13:39.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45116 10 6452 1 2025-09-14 03:13:41.774 00:00:10.365 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:14:39.309 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6452 1 2025-09-14 03:14:42.177 00:00:10.367 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:15:39.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59792 10 6452 1 2025-09-14 03:15:42.584 00:00:10.373 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:16:39.729 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-09-14 03:16:42.998 00:00:10.369 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:17:39.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-09-14 03:17:50.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:17:50.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:17:43.398 00:00:10.362 TCP 23.104.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:14:28.158 00:05:00.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:18:40.175 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52724 10 6452 1 2025-09-14 03:18:43.800 00:00:10.368 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:15:28.161 00:05:00.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:19:40.382 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-09-14 03:19:44.205 00:00:10.367 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:20:40.599 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6452 1 2025-09-14 03:20:44.612 00:00:10.363 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:21:40.825 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-09-14 03:21:45.013 00:00:10.364 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:22:50.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:22:50.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:22:41.068 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-09-14 03:22:45.422 00:00:10.369 TCP 23.104.0.1:57094 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:23:41.281 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45082 10 6452 1 2025-09-14 03:23:45.827 00:00:10.399 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:20:28.159 00:05:00.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:24:41.493 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-09-14 03:24:46.256 00:00:10.366 TCP 23.104.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:21:28.161 00:05:00.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:25:41.712 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-09-14 03:25:46.659 00:00:10.383 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:26:41.904 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-09-14 03:26:47.094 00:00:10.357 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:27:50.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:27:50.852 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:27:42.081 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-09-14 03:27:47.505 00:00:10.365 TCP 23.104.0.1:33856 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:28:42.257 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54896 10 6452 1 2025-09-14 03:28:47.912 00:00:10.362 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:29:42.470 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59516 10 6452 1 2025-09-14 03:29:48.313 00:00:10.365 TCP 23.104.0.1:35238 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:26:28.161 00:05:00.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:30:42.681 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-09-14 03:30:48.722 00:00:10.370 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:27:28.163 00:05:00.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:31:42.917 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-09-14 03:31:49.139 00:00:10.369 TCP 23.104.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:32:50.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:32:50.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:32:43.122 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-09-14 03:32:49.542 00:00:10.370 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:33:43.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60172 10 6452 1 2025-09-14 03:33:49.951 00:00:10.326 TCP 23.104.0.1:45566 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:34:43.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54242 10 6452 1 2025-09-14 03:34:50.317 00:00:10.386 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:35:43.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-09-14 03:35:50.748 00:00:10.361 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:32:28.162 00:05:00.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:36:43.981 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60484 10 6452 1 2025-09-14 03:36:51.146 00:00:10.365 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:33:28.164 00:05:00.885 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:37:51.056 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:37:50.676 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:37:44.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-09-14 03:37:51.553 00:00:10.365 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:38:44.425 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34124 10 6452 1 2025-09-14 03:38:51.951 00:00:10.370 TCP 23.104.0.1:42842 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:39:44.634 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 10 6452 1 2025-09-14 03:39:52.358 00:00:10.329 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:40:44.808 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48638 10 6452 1 2025-09-14 03:40:52.721 00:00:10.373 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:41:45.024 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-09-14 03:41:53.133 00:00:10.857 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:38:28.162 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:42:51.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:42:51.096 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:42:45.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-09-14 03:42:54.027 00:00:10.325 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:39:28.165 00:05:00.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:43:45.447 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33604 10 6452 1 2025-09-14 03:43:54.388 00:00:10.365 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:44:45.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-09-14 03:44:54.788 00:00:10.366 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:45:45.825 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-09-14 03:45:55.189 00:00:10.367 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:46:46.068 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-09-14 03:46:55.597 00:00:10.375 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:47:51.319 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:47:51.034 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:47:46.282 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-09-14 03:47:56.010 00:00:10.365 TCP 23.104.0.1:59084 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:44:28.164 00:05:00.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:48:46.499 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-09-14 03:48:56.416 00:00:10.370 TCP 23.104.0.1:54034 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:45:28.168 00:05:00.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:49:46.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43598 10 6452 1 2025-09-14 03:49:56.824 00:00:10.367 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:50:46.926 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:32984 10 6452 1 2025-09-14 03:50:57.228 00:00:10.326 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:51:47.169 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6452 1 2025-09-14 03:51:57.589 00:00:10.370 TCP 23.104.0.1:48062 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:52:51.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:52:51.359 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:52:47.380 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 10 6452 1 2025-09-14 03:52:58.021 00:00:10.367 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:53:47.590 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 12 10367 1 2025-09-14 03:53:58.427 00:00:10.439 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 15 1926 1 2025-09-14 03:50:28.168 00:05:00.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-14 03:54:47.834 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-09-14 03:54:58.909 00:00:10.325 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:51:28.171 00:05:00.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-14 03:55:48.069 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-09-14 03:55:59.274 00:00:10.329 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:56:48.289 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-09-14 03:56:59.646 00:00:10.364 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-09-14 03:57:51.133 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 03:57:51.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 03:57:48.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-09-14 03:58:00.066 00:00:10.372 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494723, total packets: 1557, avg bps: 1069, avg pps: 0, avg bpp: 317 Time window: 2025-09-14 02:56:28 - 2025-09-14 03:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0000s Wall: 0.0017s flows/second: 95405.4 Runtime: 0.0017s