Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 23:59:19.954 00:00:10.364 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-09-25 23:59:20.665 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-09-26 00:00:20.876 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-09-26 00:00:20.359 00:00:10.367 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-09-25 23:56:33.595 00:05:01.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:01:21.097 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 12 10367 1 2025-09-26 00:01:20.760 00:00:10.445 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 15 1926 1 2025-09-25 23:57:33.600 00:05:01.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:02:21.241 00:00:10.373 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:02:21.342 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37370 10 6452 1 2025-09-26 00:03:21.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6452 1 2025-09-26 00:03:33.406 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:03:21.653 00:00:10.369 TCP 23.104.0.1:53094 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:03:33.466 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:04:22.066 00:00:10.332 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:04:21.769 00:00:10.496 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-09-26 00:05:22.438 00:00:10.526 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:05:22.301 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-09-26 00:06:23.008 00:00:10.359 TCP 23.104.0.1:38570 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:06:22.857 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6452 1 2025-09-26 00:02:33.596 00:05:01.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:03:33.599 00:05:01.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:07:23.402 00:00:10.325 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:07:23.090 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-09-26 00:08:23.268 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51556 10 6452 1 2025-09-26 00:08:33.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:08:23.766 00:00:10.376 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:08:33.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:09:23.480 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-09-26 00:09:24.180 00:00:10.377 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:10:24.602 00:00:10.370 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:10:23.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-09-26 00:11:25.005 00:00:10.361 TCP 23.104.0.1:46658 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:11:23.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-09-26 00:12:24.128 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40154 10 6452 1 2025-09-26 00:08:33.600 00:05:01.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:12:25.409 00:00:10.324 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:13:24.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 2025-09-26 00:13:33.428 00:00:00.055 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:09:33.605 00:05:01.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:13:25.777 00:00:10.696 TCP 23.104.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:13:33.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:14:26.513 00:00:10.377 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:14:24.561 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-09-26 00:15:24.733 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 11 6504 1 2025-09-26 00:15:26.932 00:00:10.375 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:16:24.953 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 12 6556 1 2025-09-26 00:16:27.345 00:00:10.327 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:17:25.200 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 11 6504 1 2025-09-26 00:17:27.710 00:00:10.318 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:18:33.552 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:18:25.472 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-09-26 00:14:33.602 00:05:01.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:18:33.667 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:18:28.093 00:00:10.320 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:15:33.606 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:19:25.701 00:00:15.950 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 2025-09-26 00:19:28.450 00:00:13.265 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:20:31.692 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-09-26 00:20:31.755 00:00:10.336 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:21:32.128 00:00:10.371 TCP 23.104.0.1:46100 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:21:31.912 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-09-26 00:22:32.533 00:00:10.365 TCP 23.104.0.1:41448 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:22:32.153 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6452 1 2025-09-26 00:23:33.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:23:33.527 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:23:32.931 00:00:10.368 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:23:32.364 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-09-26 00:20:33.606 00:05:01.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:24:32.540 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-09-26 00:24:33.338 00:00:10.371 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:21:33.610 00:05:01.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:25:32.752 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6452 1 2025-09-26 00:25:33.746 00:00:10.385 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:26:34.162 00:00:10.330 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:26:32.965 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-09-26 00:27:34.522 00:00:10.327 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:27:33.197 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-09-26 00:28:33.851 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:28:33.856 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:28:33.550 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-09-26 00:28:34.885 00:00:10.372 TCP 23.104.0.1:55536 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:29:33.720 00:00:10.603 TCP 1.101.0.1:3000 -> 22.102.0.1:51518 10 6452 1 2025-09-26 00:29:35.300 00:00:10.367 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:26:33.608 00:05:01.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:30:34.362 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-09-26 00:30:35.711 00:00:10.377 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:27:33.611 00:05:01.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:31:36.126 00:00:10.322 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:31:34.585 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-09-26 00:32:36.487 00:00:10.370 TCP 23.104.0.1:46896 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:32:34.807 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-09-26 00:33:33.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:33:33.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:33:35.035 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-09-26 00:33:36.899 00:00:10.334 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:34:35.272 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-09-26 00:34:37.289 00:00:10.363 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:35:35.489 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-09-26 00:35:37.693 00:00:10.336 TCP 23.104.0.1:55950 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:32:33.611 00:05:01.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:36:35.706 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58666 10 6452 1 2025-09-26 00:36:38.111 00:00:10.363 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:33:33.613 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:37:35.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-09-26 00:37:38.516 00:00:10.368 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:38:33.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:38:33.962 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:38:36.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51838 10 6452 1 2025-09-26 00:38:38.927 00:00:10.348 TCP 23.104.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:39:36.330 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-09-26 00:39:39.319 00:00:10.369 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:40:36.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47840 10 6452 1 2025-09-26 00:40:39.738 00:00:10.363 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:41:36.812 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43116 10 6452 1 2025-09-26 00:41:40.134 00:00:10.358 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:38:33.618 00:05:01.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:42:40.537 00:00:10.360 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:42:37.042 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35552 10 6452 1 2025-09-26 00:39:33.615 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:43:34.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:43:33.881 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:43:37.266 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-09-26 00:43:40.931 00:00:10.336 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:44:41.301 00:00:10.365 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:44:37.479 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-09-26 00:45:37.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-09-26 00:45:41.704 00:00:10.366 TCP 23.104.0.1:50528 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:46:37.900 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60342 10 6452 1 2025-09-26 00:46:42.111 00:00:10.326 TCP 23.104.0.1:36840 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:47:38.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48352 10 6452 1 2025-09-26 00:47:42.502 00:00:10.367 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:48:34.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:48:34.133 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:44:33.611 00:05:01.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:48:38.340 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-09-26 00:48:42.906 00:00:10.366 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:45:33.615 00:05:01.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:49:38.554 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45038 10 6452 1 2025-09-26 00:49:43.306 00:00:10.330 TCP 23.104.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:50:38.728 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-09-26 00:50:43.670 00:00:10.378 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:51:38.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59592 10 6452 1 2025-09-26 00:51:44.102 00:00:10.375 TCP 23.104.0.1:35980 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:52:39.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6452 1 2025-09-26 00:52:44.514 00:00:10.322 TCP 23.104.0.1:44010 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:53:34.311 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:53:34.169 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:53:39.396 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-09-26 00:53:44.875 00:00:10.365 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:50:33.614 00:05:01.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 00:54:39.603 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-09-26 00:54:45.280 00:00:10.362 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:51:33.618 00:05:01.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 00:55:39.825 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-09-26 00:55:45.677 00:00:10.373 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:56:40.067 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34900 10 6452 1 2025-09-26 00:56:46.105 00:00:10.370 TCP 23.104.0.1:42520 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:57:40.292 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-09-26 00:57:46.511 00:00:10.361 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-09-26 00:58:34.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 00:58:34.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 00:58:40.503 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 Summary: total flows: 163, total bytes: 501383, total packets: 1571, avg bps: 1073, avg pps: 0, avg bpp: 319 Time window: 2025-09-25 23:56:33 - 2025-09-26 00:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0064s User: 0.0000s Wall: 0.0035s flows/second: 46865.3 Runtime: 0.0035s