Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 12:59:40.902 00:00:10.367 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-09-25 12:59:38.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-09-25 12:56:33.375 00:05:01.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:00:41.308 00:00:10.362 TCP 23.104.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:00:38.543 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:42358 10 6452 1 2025-09-25 12:57:33.377 00:05:01.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:01:38.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49654 10 6452 1 2025-09-25 13:01:41.705 00:00:10.363 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:02:39.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47208 10 6452 1 2025-09-25 13:02:42.109 00:00:10.815 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:03:19.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:03:19.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:03:39.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-09-25 13:03:42.961 00:00:10.326 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:04:39.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-09-25 13:04:43.326 00:00:10.325 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:05:39.818 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47884 10 6452 1 2025-09-25 13:05:43.690 00:00:10.370 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:02:33.390 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:06:40.072 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2025-09-25 13:06:44.105 00:00:10.366 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:03:33.392 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:07:40.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-09-25 13:07:44.506 00:00:10.378 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:08:20.213 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:08:20.055 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:08:40.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-09-25 13:08:44.932 00:00:10.398 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:09:40.725 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38870 10 6452 1 2025-09-25 13:09:45.363 00:00:10.369 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:10:40.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-09-25 13:10:45.773 00:00:10.377 TCP 23.104.0.1:33856 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:11:41.114 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-09-25 13:11:46.187 00:00:10.341 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:08:33.390 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:12:46.575 00:00:10.367 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:12:41.972 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33570 10 6452 1 2025-09-25 13:13:20.424 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:13:20.046 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:09:33.393 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:13:42.216 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-09-25 13:13:46.983 00:00:10.402 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:14:42.407 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-25 13:14:47.427 00:00:10.363 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:15:42.615 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-09-25 13:15:47.828 00:00:10.386 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:16:42.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-09-25 13:16:48.250 00:00:10.359 TCP 23.104.0.1:47376 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:17:43.067 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39878 10 6452 1 2025-09-25 13:17:48.651 00:00:10.362 TCP 23.104.0.1:41970 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:18:20.068 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:18:20.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:14:33.393 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:18:43.277 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-09-25 13:18:49.057 00:00:10.362 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:15:33.395 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:19:43.484 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-09-25 13:19:49.457 00:00:10.327 TCP 23.104.0.1:34092 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:20:43.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-09-25 13:20:49.822 00:00:10.361 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:21:43.911 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-09-25 13:21:50.221 00:00:10.325 TCP 23.104.0.1:45452 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:22:44.127 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54580 10 6452 1 2025-09-25 13:22:50.584 00:00:10.426 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:23:20.238 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:23:20.304 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:23:44.347 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 10 6452 1 2025-09-25 13:23:51.061 00:00:10.368 TCP 23.104.0.1:58780 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:20:33.397 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:24:44.518 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-09-25 13:24:51.466 00:00:10.329 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:21:33.398 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:25:44.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-09-25 13:25:51.832 00:00:10.383 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:26:44.952 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-09-25 13:26:52.249 00:00:10.415 TCP 23.104.0.1:33208 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:27:45.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-09-25 13:27:52.705 00:00:10.366 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:28:20.515 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:28:20.339 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:28:45.393 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-09-25 13:28:53.116 00:00:10.364 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:29:45.569 00:00:10.449 TCP 1.101.0.1:3000 -> 22.102.0.1:36592 10 6452 1 2025-09-25 13:29:53.515 00:00:10.367 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:26:33.397 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:30:46.077 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42796 10 6452 1 2025-09-25 13:30:53.916 00:00:10.375 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:27:33.400 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:31:46.255 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 12 10367 1 2025-09-25 13:31:54.332 00:00:10.399 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 15 1926 1 2025-09-25 13:32:46.518 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-09-25 13:32:54.774 00:00:10.372 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:33:20.657 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:33:20.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:33:46.739 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-09-25 13:33:55.185 00:00:10.366 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:34:47.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56394 10 6452 1 2025-09-25 13:34:55.585 00:00:10.324 TCP 23.104.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:35:47.302 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 10 6452 1 2025-09-25 13:35:55.958 00:00:10.362 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:32:33.401 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:36:47.529 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40420 10 6452 1 2025-09-25 13:36:56.358 00:00:10.323 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:33:33.403 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:37:47.743 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-09-25 13:37:56.721 00:00:10.370 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:38:20.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:38:20.361 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:38:47.959 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52978 10 6452 1 2025-09-25 13:38:57.130 00:00:10.365 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:39:48.186 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-09-25 13:39:57.535 00:00:10.369 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:40:48.412 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 10 6452 1 2025-09-25 13:40:57.945 00:00:10.346 TCP 23.104.0.1:41512 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:41:48.588 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-09-25 13:41:58.345 00:00:10.367 TCP 23.104.0.1:47982 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:38:33.401 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:42:48.798 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-09-25 13:42:58.756 00:00:10.386 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:43:20.677 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:43:20.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:39:33.403 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:43:48.972 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-09-25 13:43:59.179 00:00:10.376 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:44:49.190 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52824 10 6452 1 2025-09-25 13:44:59.593 00:00:10.372 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:45:49.406 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-09-25 13:46:00.008 00:00:10.365 TCP 23.104.0.1:43606 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:46:49.581 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-09-25 13:47:00.408 00:00:10.366 TCP 23.104.0.1:55442 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:47:49.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-09-25 13:48:00.811 00:00:10.369 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:48:20.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:48:20.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:44:33.403 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:48:50.012 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51416 10 6452 1 2025-09-25 13:49:01.221 00:00:10.361 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:45:33.404 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:49:50.189 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-09-25 13:50:01.620 00:00:10.376 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:50:50.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50794 10 6452 1 2025-09-25 13:51:02.051 00:00:10.364 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:51:50.610 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 10 6452 1 2025-09-25 13:52:02.451 00:00:10.360 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:52:50.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-09-25 13:53:02.852 00:00:10.334 TCP 23.104.0.1:38880 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:53:20.942 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 13:53:20.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:53:50.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-09-25 13:54:03.224 00:00:10.370 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:50:33.402 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 13:54:51.223 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-09-25 13:55:03.626 00:00:10.396 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:51:33.406 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 13:55:51.396 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43860 10 6452 1 2025-09-25 13:56:04.060 00:00:10.367 TCP 23.104.0.1:59548 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:56:51.612 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6452 1 2025-09-25 13:57:04.463 00:00:10.323 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:57:51.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57652 10 6452 1 2025-09-25 13:58:04.826 00:00:10.356 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-09-25 13:58:21.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 13:58:21.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 494723, total packets: 1557, avg bps: 1067, avg pps: 0, avg bpp: 317 Time window: 2025-09-25 12:56:33 - 2025-09-25 13:58:21 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0026s Wall: 0.0020s flows/second: 79027.4 Runtime: 0.0021s