Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 15:59:25.377 00:00:10.329 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 15:59:30.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38928 10 6452 1 2025-10-01 16:00:25.745 00:00:10.856 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:00:30.744 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53246 10 6452 1 2025-10-01 15:56:36.203 00:05:01.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:01:16.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:01:16.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 15:57:36.205 00:05:01.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:01:26.649 00:00:10.366 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:01:30.947 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-10-01 16:02:27.065 00:00:10.366 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:02:31.187 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-10-01 16:03:27.471 00:00:10.369 TCP 23.104.0.1:37398 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:03:31.366 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:52312 10 6452 1 2025-10-01 16:04:27.878 00:00:10.357 TCP 23.104.0.1:46660 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:04:32.035 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6452 1 2025-10-01 16:05:28.274 00:00:10.327 TCP 23.104.0.1:45726 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:05:32.245 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-10-01 16:06:16.950 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:06:16.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:02:36.203 00:05:01.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:06:28.637 00:00:10.325 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:06:32.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-10-01 16:07:29.001 00:00:10.376 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:03:36.207 00:05:01.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:07:32.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 10 6452 1 2025-10-01 16:08:29.413 00:00:10.398 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 15 1926 1 2025-10-01 16:08:32.879 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38186 12 10375 1 2025-10-01 16:09:29.852 00:00:10.379 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:09:33.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39310 10 6452 1 2025-10-01 16:10:30.268 00:00:10.360 TCP 23.104.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:10:33.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51276 10 6452 1 2025-10-01 16:11:17.292 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:11:17.112 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:11:30.668 00:00:10.366 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:11:33.558 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-10-01 16:08:36.206 00:05:01.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:12:31.099 00:00:10.362 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:12:33.732 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47548 10 6452 1 2025-10-01 16:09:36.209 00:05:01.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:13:31.503 00:00:10.329 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:13:33.942 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-10-01 16:14:31.860 00:00:10.373 TCP 23.104.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:14:34.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45758 10 6452 1 2025-10-01 16:15:34.393 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-10-01 16:15:32.273 00:00:10.325 TCP 23.104.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:16:16.875 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:16:16.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:16:32.640 00:00:10.320 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:16:34.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-10-01 16:17:32.998 00:00:10.363 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:17:34.839 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-10-01 16:14:36.207 00:05:01.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:18:33.399 00:00:10.369 TCP 23.104.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:18:35.084 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-10-01 16:15:36.209 00:05:01.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:19:33.804 00:00:10.339 TCP 23.104.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:19:35.303 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-10-01 16:20:34.183 00:00:10.378 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:20:35.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 2025-10-01 16:21:17.121 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:21:17.280 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:21:35.743 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-10-01 16:21:34.605 00:00:10.371 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:22:35.010 00:00:10.366 TCP 23.104.0.1:50222 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:22:35.965 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-10-01 16:23:36.199 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-10-01 16:23:35.413 00:00:10.361 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:24:35.815 00:00:10.369 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:20:36.209 00:05:01.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:24:36.417 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-10-01 16:21:36.211 00:05:01.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:25:36.224 00:00:10.365 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:25:36.600 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 12 6556 1 2025-10-01 16:26:17.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:26:17.474 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:26:36.837 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-10-01 16:26:36.633 00:00:10.368 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:27:37.034 00:00:10.370 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:27:37.081 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-10-01 16:28:37.437 00:00:10.366 TCP 23.104.0.1:49872 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:28:37.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-10-01 16:29:37.509 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-10-01 16:29:37.841 00:00:10.385 TCP 23.104.0.1:33548 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:26:36.211 00:05:01.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:30:38.044 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-10-01 16:30:38.261 00:00:10.325 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:31:17.425 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:31:17.357 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:27:36.213 00:05:01.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:31:38.624 00:00:10.327 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:31:38.261 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-10-01 16:32:38.983 00:00:10.368 TCP 23.104.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:32:38.488 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-10-01 16:33:38.708 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-10-01 16:33:39.386 00:00:10.332 TCP 23.104.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:34:39.754 00:00:10.675 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:34:38.929 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-10-01 16:35:40.469 00:00:10.336 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:35:39.152 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-10-01 16:36:17.667 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:36:17.609 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:32:36.211 00:05:01.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:36:39.371 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-10-01 16:36:40.830 00:00:10.333 TCP 23.104.0.1:39282 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:33:36.214 00:05:01.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:37:41.207 00:00:10.365 TCP 23.104.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:37:39.554 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-10-01 16:38:39.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-10-01 16:38:41.612 00:00:10.360 TCP 23.104.0.1:39834 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:39:39.983 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-10-01 16:39:42.012 00:00:10.773 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:40:40.214 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33700 10 6452 1 2025-10-01 16:40:42.823 00:00:10.370 TCP 23.104.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:41:17.704 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:41:17.761 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:41:40.384 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-10-01 16:41:43.232 00:00:10.365 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:38:36.214 00:05:01.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:42:40.590 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 12 10375 1 2025-10-01 16:42:43.635 00:00:10.400 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 15 1926 1 2025-10-01 16:39:36.217 00:05:01.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:43:40.831 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53486 10 6452 1 2025-10-01 16:43:44.092 00:00:10.369 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:44:41.083 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35046 10 6452 1 2025-10-01 16:44:44.498 00:00:10.369 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:45:41.299 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-10-01 16:45:44.907 00:00:10.367 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:46:17.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:46:17.953 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:46:41.523 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:45236 10 6452 1 2025-10-01 16:46:45.324 00:00:11.053 TCP 23.104.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:47:41.934 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-10-01 16:47:46.430 00:00:10.850 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:44:36.214 00:05:01.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:48:42.180 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-10-01 16:48:47.320 00:00:10.367 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:45:36.218 00:05:01.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:49:42.400 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-10-01 16:49:47.723 00:00:10.331 TCP 23.104.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:50:42.625 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56886 10 6452 1 2025-10-01 16:50:48.105 00:00:10.364 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:51:17.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:51:18.024 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:51:42.848 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48978 10 6452 1 2025-10-01 16:51:48.508 00:00:10.372 TCP 23.104.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:52:43.082 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-10-01 16:52:48.913 00:00:10.378 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:53:43.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57068 10 6452 1 2025-10-01 16:53:49.331 00:00:10.328 TCP 23.104.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:50:36.216 00:05:01.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 16:54:43.513 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52060 10 6452 1 2025-10-01 16:54:49.698 00:00:10.371 TCP 23.104.0.1:49358 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:51:36.219 00:05:01.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 16:55:43.734 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-10-01 16:55:50.112 00:00:10.370 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:56:17.905 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 16:56:17.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 16:56:43.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 12 6556 1 2025-10-01 16:56:50.521 00:00:10.322 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-10-01 16:57:44.193 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-10-01 16:57:50.882 00:00:10.370 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499281, total packets: 1567, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-01 15:56:36 - 2025-10-01 16:58:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0049s User: 0.0008s Wall: 0.0021s flows/second: 77957.5 Runtime: 0.0021s