Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 01:58:51.500 00:00:10.365 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-09-16 01:59:31.803 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-09-16 01:59:51.904 00:00:10.369 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-09-16 01:56:28.964 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:00:32.437 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6452 1 2025-09-16 02:00:52.309 00:00:10.366 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-09-16 01:57:28.968 00:05:01.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:01:32.657 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58158 10 6452 1 2025-09-16 02:01:52.712 00:00:10.377 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:02:32.884 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-09-16 02:02:53.126 00:00:10.482 TCP 23.104.0.1:49604 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:03:46.807 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:03:46.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:03:33.122 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-09-16 02:03:53.652 00:00:10.326 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:04:33.298 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-09-16 02:04:54.014 00:00:10.364 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:05:33.477 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:58772 10 6452 1 2025-09-16 02:05:54.417 00:00:10.324 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:02:28.966 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:06:33.645 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-09-16 02:06:54.783 00:00:10.364 TCP 23.104.0.1:56884 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:03:28.969 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:07:33.870 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-09-16 02:07:55.187 00:00:10.369 TCP 23.104.0.1:60422 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:08:34.092 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-09-16 02:08:46.851 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:08:47.038 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:08:55.592 00:00:10.366 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:09:34.273 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53842 10 6452 1 2025-09-16 02:09:56.000 00:00:10.319 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:10:34.493 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-09-16 02:10:56.363 00:00:10.368 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:11:34.705 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54694 10 6452 1 2025-09-16 02:11:56.767 00:00:10.375 TCP 23.104.0.1:34444 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:08:28.966 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:12:34.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 12 6556 1 2025-09-16 02:12:57.178 00:00:10.330 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:09:28.969 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:13:35.131 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38026 10 6452 1 2025-09-16 02:13:46.963 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:13:47.062 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:13:57.564 00:00:10.364 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:14:35.348 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-09-16 02:14:57.964 00:00:10.371 TCP 23.104.0.1:43810 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:15:35.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60004 10 6452 1 2025-09-16 02:15:58.371 00:00:10.365 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:16:35.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-09-16 02:16:58.771 00:00:10.370 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:17:35.986 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47070 10 6452 1 2025-09-16 02:17:59.185 00:00:10.367 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:14:28.969 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:18:47.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:18:36.219 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 12 6556 1 2025-09-16 02:18:47.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:18:59.589 00:00:10.375 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:15:28.970 00:05:01.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:19:36.460 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-09-16 02:20:00.010 00:00:10.364 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:20:36.666 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-09-16 02:21:00.422 00:00:10.363 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:21:36.873 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-09-16 02:22:00.819 00:00:10.368 TCP 23.104.0.1:53990 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:22:37.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-09-16 02:23:01.224 00:00:10.373 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:23:47.459 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:23:37.318 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-09-16 02:23:47.150 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:24:01.636 00:00:10.371 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:20:28.970 00:05:01.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:24:37.824 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-09-16 02:25:02.064 00:00:10.328 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:21:28.972 00:05:01.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:25:38.064 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-09-16 02:26:02.429 00:00:10.331 TCP 23.104.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:26:38.282 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48476 10 6452 1 2025-09-16 02:27:02.801 00:00:10.365 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:27:38.452 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-09-16 02:28:03.205 00:00:10.362 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:28:38.629 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-09-16 02:28:47.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:28:47.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:29:03.607 00:00:10.372 TCP 23.104.0.1:59034 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:29:38.847 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-09-16 02:30:04.021 00:00:10.360 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:26:28.972 00:05:01.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:30:39.086 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-09-16 02:31:04.417 00:00:10.325 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:27:28.977 00:05:01.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:31:39.310 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45130 10 6452 1 2025-09-16 02:32:04.780 00:00:10.627 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:32:39.482 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53254 10 6452 1 2025-09-16 02:33:05.444 00:00:10.364 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:33:39.703 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47170 10 6452 1 2025-09-16 02:33:47.713 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:33:47.993 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:34:05.845 00:00:10.388 TCP 23.104.0.1:41008 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:34:39.929 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-09-16 02:35:06.275 00:00:10.362 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:35:40.179 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56254 10 6452 1 2025-09-16 02:36:06.683 00:00:10.363 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:32:28.973 00:05:01.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:36:40.401 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-09-16 02:37:07.107 00:00:10.321 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:33:28.975 00:05:01.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:37:40.627 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-09-16 02:38:07.468 00:00:10.362 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:38:40.847 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51098 10 6452 1 2025-09-16 02:38:47.711 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:38:47.832 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:39:07.870 00:00:10.362 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:39:41.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-09-16 02:40:08.270 00:00:10.431 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:40:41.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-09-16 02:41:08.738 00:00:11.154 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:41:41.517 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54822 10 6452 1 2025-09-16 02:42:09.929 00:00:10.376 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:38:28.976 00:05:01.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:42:41.743 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54950 10 6452 1 2025-09-16 02:43:10.343 00:00:10.330 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:39:28.979 00:05:01.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:43:47.733 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:43:47.647 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:43:41.965 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52804 10 6452 1 2025-09-16 02:44:10.710 00:00:10.321 TCP 23.104.0.1:35326 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:44:42.194 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-09-16 02:45:11.101 00:00:10.325 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:45:42.423 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54706 10 6452 1 2025-09-16 02:46:11.464 00:00:10.508 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:46:42.630 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52916 10 6452 1 2025-09-16 02:47:12.012 00:00:10.362 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:47:42.847 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-09-16 02:48:12.413 00:00:10.367 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:44:28.978 00:05:01.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:48:47.735 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:48:47.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:48:43.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-09-16 02:49:12.817 00:00:10.368 TCP 23.104.0.1:50722 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:45:28.980 00:05:01.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:49:43.294 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-09-16 02:50:13.230 00:00:10.382 TCP 23.104.0.1:57954 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:50:43.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-09-16 02:51:13.650 00:00:10.337 TCP 23.104.0.1:51102 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:51:43.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-09-16 02:52:14.032 00:00:10.328 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:52:43.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-09-16 02:53:14.394 00:00:10.336 TCP 23.104.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:53:48.099 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:53:48.175 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 02:53:44.181 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-09-16 02:54:14.772 00:00:10.373 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:50:28.979 00:05:01.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 02:54:44.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-09-16 02:55:15.190 00:00:10.364 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:51:28.983 00:05:01.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 02:55:44.620 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-09-16 02:56:15.588 00:00:10.321 TCP 23.104.0.1:36802 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:56:44.793 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39824 10 6452 1 2025-09-16 02:57:15.950 00:00:10.364 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:57:45.038 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-09-16 02:58:16.350 00:00:10.373 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-09-16 02:58:48.109 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 02:58:48.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1052, avg pps: 0, avg bpp: 314 Time window: 2025-09-16 01:56:28 - 2025-09-16 02:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0016s Wall: 0.0023s flows/second: 70898.2 Runtime: 0.0023s