Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 06:58:50.172 00:00:10.365 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-09-24 06:59:24.922 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34972 10 6452 1 2025-09-24 06:59:50.578 00:00:10.320 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:00:25.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45312 10 6452 1 2025-09-24 06:56:32.772 00:05:01.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:00:50.939 00:00:10.383 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:01:25.314 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37684 10 6452 1 2025-09-24 06:57:32.775 00:05:01.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:01:51.360 00:00:10.367 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:02:25.529 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6452 1 2025-09-24 07:02:43.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:02:43.974 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:02:51.767 00:00:10.368 TCP 23.104.0.1:58944 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:03:25.700 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56064 10 6452 1 2025-09-24 07:03:52.176 00:00:10.324 TCP 23.104.0.1:47760 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:04:25.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-09-24 07:04:52.547 00:00:10.369 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:05:26.127 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-09-24 07:05:52.956 00:00:10.368 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:06:26.337 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60752 10 6452 1 2025-09-24 07:02:32.774 00:05:01.492 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:06:53.364 00:00:10.367 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:03:32.778 00:05:01.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:07:26.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-09-24 07:07:44.144 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:07:44.017 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:07:53.767 00:00:10.369 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:08:26.776 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 10 6452 1 2025-09-24 07:08:54.175 00:00:10.374 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:09:26.949 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-09-24 07:09:54.595 00:00:10.367 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:10:27.171 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49162 10 6452 1 2025-09-24 07:10:54.998 00:00:10.367 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:11:27.348 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-09-24 07:11:55.400 00:00:10.364 TCP 23.104.0.1:48896 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:08:32.776 00:05:01.492 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:12:27.570 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49490 10 6452 1 2025-09-24 07:12:44.198 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:12:43.913 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:12:55.803 00:00:10.574 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:09:32.779 00:05:01.488 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:13:27.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50682 10 6452 1 2025-09-24 07:13:56.416 00:00:10.372 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:14:28.003 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-09-24 07:14:56.829 00:00:10.388 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:15:28.186 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-09-24 07:15:57.258 00:00:10.369 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:16:28.396 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 12 10367 1 2025-09-24 07:16:57.668 00:00:10.443 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 15 1926 1 2025-09-24 07:17:28.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-09-24 07:17:44.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:17:44.209 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:17:58.151 00:00:10.360 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:14:32.776 00:05:01.494 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:18:28.812 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-09-24 07:18:58.552 00:00:10.323 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:15:32.780 00:05:01.488 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:19:29.030 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-09-24 07:19:58.914 00:00:10.362 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:20:29.203 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58966 10 6452 1 2025-09-24 07:20:59.324 00:00:10.366 TCP 23.104.0.1:56174 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:21:29.416 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-09-24 07:21:59.729 00:00:10.329 TCP 23.104.0.1:47992 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:22:29.589 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-09-24 07:22:44.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:22:44.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:23:00.105 00:00:10.365 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:23:29.808 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-09-24 07:24:00.510 00:00:10.326 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:20:32.783 00:05:01.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:24:29.978 00:00:10.791 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-09-24 07:25:00.872 00:00:10.369 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:21:32.785 00:05:01.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:25:30.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43696 10 6452 1 2025-09-24 07:26:01.274 00:00:10.363 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:26:31.029 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 2025-09-24 07:27:01.681 00:00:10.682 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:27:31.195 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50316 10 6452 1 2025-09-24 07:27:44.558 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:27:44.546 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:28:02.399 00:00:10.370 TCP 23.104.0.1:50572 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:28:31.367 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-09-24 07:29:02.807 00:00:10.369 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:29:31.536 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-09-24 07:30:03.217 00:00:10.376 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:26:32.783 00:05:01.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:30:31.751 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53798 10 6452 1 2025-09-24 07:31:03.624 00:00:10.627 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:27:32.786 00:05:01.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:31:31.960 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44636 12 6556 1 2025-09-24 07:32:04.289 00:00:10.361 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:32:44.372 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:32:32.181 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-09-24 07:32:44.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:33:04.689 00:00:10.368 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:33:32.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36334 10 6452 1 2025-09-24 07:34:05.108 00:00:10.365 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:34:32.602 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2025-09-24 07:35:05.510 00:00:10.365 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:35:32.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-09-24 07:36:05.912 00:00:10.377 TCP 23.104.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:32:32.785 00:05:01.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:36:33.025 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-09-24 07:37:06.330 00:00:10.368 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:33:32.787 00:05:01.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:37:33.201 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-09-24 07:37:44.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:37:44.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:38:06.733 00:00:10.327 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:38:33.423 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-09-24 07:39:07.108 00:00:11.381 TCP 23.104.0.1:41310 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:39:33.634 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49470 10 6452 1 2025-09-24 07:40:08.533 00:00:10.362 TCP 23.104.0.1:39256 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:40:33.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6452 1 2025-09-24 07:41:08.935 00:00:10.342 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:41:34.043 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-09-24 07:42:09.313 00:00:10.366 TCP 23.104.0.1:54246 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:38:32.791 00:05:01.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:42:34.253 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-09-24 07:42:44.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:42:44.971 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:43:09.714 00:00:10.370 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:39:32.793 00:05:01.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:43:34.470 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-09-24 07:44:10.124 00:00:10.329 TCP 23.104.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:44:34.702 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-09-24 07:45:10.488 00:00:10.378 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:45:34.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-09-24 07:46:10.909 00:00:10.323 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:46:35.134 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57924 10 6452 1 2025-09-24 07:47:11.269 00:00:10.322 TCP 23.104.0.1:40570 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:47:44.751 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:47:35.310 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-09-24 07:47:45.054 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:48:11.628 00:00:10.325 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:44:32.793 00:05:01.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:48:35.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-09-24 07:49:11.996 00:00:10.377 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:45:32.796 00:05:01.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:49:35.700 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-09-24 07:50:12.409 00:00:10.363 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:50:35.918 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-09-24 07:51:12.808 00:00:10.331 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:51:36.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-09-24 07:52:13.173 00:00:10.327 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:52:44.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:52:36.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48404 10 6452 1 2025-09-24 07:52:45.004 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:53:13.541 00:00:10.367 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:53:36.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43002 10 6452 1 2025-09-24 07:54:13.952 00:00:10.327 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:50:32.794 00:05:01.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 07:54:36.770 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-09-24 07:55:14.319 00:00:10.372 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:51:32.796 00:05:01.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 07:55:37.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-09-24 07:56:14.727 00:00:10.365 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:56:37.248 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-09-24 07:57:15.135 00:00:10.365 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:57:44.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 07:57:44.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 07:57:37.457 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-09-24 07:58:15.531 00:00:10.363 TCP 23.104.0.1:57572 -> 1.101.0.1:3000 11 1507 1 2025-09-24 07:58:38.006 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46916 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-24 06:56:32 - 2025-09-24 07:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0019s Wall: 0.0019s flows/second: 85555.5 Runtime: 0.0019s