Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 01:58:44.766 00:00:10.371 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-10-02 01:59:21.321 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-10-02 01:59:45.176 00:00:10.373 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:00:21.529 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2025-10-02 01:56:36.371 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:00:45.588 00:00:10.368 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:01:29.018 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:01:21.749 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:60268 11 6504 1 2025-10-02 02:01:29.086 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 01:57:36.374 00:05:01.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:01:45.994 00:00:10.331 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:02:22.008 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60226 10 6452 1 2025-10-02 02:02:46.377 00:00:10.328 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:03:22.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-10-02 02:03:46.743 00:00:10.370 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:04:22.440 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-10-02 02:04:47.144 00:00:10.325 TCP 23.104.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:05:22.662 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-10-02 02:05:47.503 00:00:10.364 TCP 23.104.0.1:59808 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:06:28.963 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:06:29.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:06:22.875 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52918 10 6452 1 2025-10-02 02:02:36.371 00:05:01.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:06:47.905 00:00:10.323 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:07:23.099 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-10-02 02:03:36.374 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:07:48.269 00:00:10.366 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:08:23.272 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-10-02 02:08:48.677 00:00:10.378 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:09:23.508 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38770 10 6452 1 2025-10-02 02:09:49.105 00:00:10.642 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:10:23.726 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6452 1 2025-10-02 02:10:49.782 00:00:10.368 TCP 23.104.0.1:49448 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:11:29.152 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:11:28.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:11:23.900 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 10 6452 1 2025-10-02 02:11:50.190 00:00:10.367 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:12:24.084 00:00:10.273 TCP 1.101.0.1:3000 -> 22.102.0.1:48722 10 6452 1 2025-10-02 02:08:36.373 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:12:50.590 00:00:10.474 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 15 1926 1 2025-10-02 02:13:24.399 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 12 10375 1 2025-10-02 02:09:36.376 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:13:51.105 00:00:10.362 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:14:24.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-10-02 02:14:51.506 00:00:10.367 TCP 23.104.0.1:39318 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:15:24.857 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 10 6452 1 2025-10-02 02:15:51.911 00:00:10.325 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:16:29.191 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:16:29.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:16:25.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2025-10-02 02:16:52.275 00:00:10.338 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:17:25.293 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-10-02 02:17:52.653 00:00:10.363 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:18:25.460 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 10 6452 1 2025-10-02 02:14:36.381 00:05:01.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:18:53.068 00:00:10.365 TCP 23.104.0.1:46070 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:19:25.677 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38846 10 6452 1 2025-10-02 02:15:36.385 00:05:01.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:19:53.474 00:00:10.367 TCP 23.104.0.1:37988 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:20:25.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-10-02 02:20:53.889 00:00:10.384 TCP 23.104.0.1:58632 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:21:29.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:21:29.367 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:21:26.106 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-10-02 02:21:54.307 00:00:10.367 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:22:26.326 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-10-02 02:22:54.711 00:00:10.375 TCP 23.104.0.1:33608 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:23:26.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59822 10 6452 1 2025-10-02 02:23:55.128 00:00:10.378 TCP 23.104.0.1:34608 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:24:26.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-10-02 02:20:36.385 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:24:55.552 00:00:10.369 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:21:36.387 00:05:01.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:25:27.016 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-10-02 02:25:55.965 00:00:10.392 TCP 23.104.0.1:56570 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:26:29.496 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:26:29.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:26:27.234 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53842 10 6452 1 2025-10-02 02:26:56.393 00:00:10.375 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:27:27.449 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6452 1 2025-10-02 02:27:56.799 00:00:10.368 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:28:27.654 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-10-02 02:28:57.202 00:00:10.329 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:29:27.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52132 10 6452 1 2025-10-02 02:29:57.566 00:00:10.415 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:30:28.043 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-10-02 02:26:36.387 00:05:01.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:30:58.024 00:00:10.364 TCP 23.104.0.1:42462 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:31:29.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:31:29.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:27:36.391 00:05:01.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:31:28.255 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-10-02 02:31:58.431 00:00:10.364 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:32:28.468 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-10-02 02:32:58.832 00:00:10.349 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:33:28.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-10-02 02:33:59.227 00:00:18.768 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:34:28.888 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 10 6452 1 2025-10-02 02:35:08.035 00:00:10.364 TCP 23.104.0.1:57704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:35:29.111 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-10-02 02:36:08.441 00:00:10.417 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:36:29.646 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:36:29.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:36:29.326 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-10-02 02:32:36.388 00:05:01.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:37:08.899 00:00:10.324 TCP 23.104.0.1:34754 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:37:29.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43192 10 6452 1 2025-10-02 02:33:36.391 00:05:01.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:38:09.258 00:00:10.330 TCP 23.104.0.1:32942 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:38:29.752 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-10-02 02:39:09.628 00:00:10.376 TCP 23.104.0.1:46996 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:39:29.968 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-10-02 02:40:10.044 00:00:10.366 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:40:30.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34424 10 6452 1 2025-10-02 02:41:10.450 00:00:10.365 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:41:29.568 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:41:29.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:41:30.403 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-10-02 02:42:10.850 00:00:10.380 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:42:30.575 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-10-02 02:38:36.392 00:05:01.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:43:11.269 00:00:10.435 TCP 23.104.0.1:40286 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:39:36.395 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:43:30.794 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51810 10 6452 1 2025-10-02 02:44:11.741 00:00:10.817 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:44:31.004 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48958 10 6452 1 2025-10-02 02:45:12.591 00:00:10.325 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:45:31.223 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-10-02 02:46:12.952 00:00:10.364 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:46:30.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:46:30.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:46:31.397 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-10-02 02:47:13.356 00:00:10.325 TCP 23.104.0.1:33780 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:47:31.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-10-02 02:48:13.716 00:00:10.453 TCP 23.104.0.1:59704 -> 1.101.0.1:3000 15 1926 1 2025-10-02 02:48:31.784 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 12 10375 1 2025-10-02 02:44:36.393 00:05:01.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:49:14.207 00:00:10.368 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:45:36.396 00:05:01.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:49:32.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-10-02 02:50:14.607 00:00:10.544 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:50:32.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38482 10 6452 1 2025-10-02 02:51:15.190 00:00:10.365 TCP 23.104.0.1:41798 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:51:29.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:51:29.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:51:32.471 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-10-02 02:52:15.589 00:00:10.380 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:52:32.681 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57242 10 6452 1 2025-10-02 02:53:15.990 00:00:10.370 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:53:32.897 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-10-02 02:54:16.393 00:00:10.374 TCP 23.104.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:50:36.395 00:05:01.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 02:54:33.111 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:46082 10 6452 1 2025-10-02 02:55:16.806 00:00:10.368 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:51:36.399 00:05:01.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 02:55:33.317 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-10-02 02:56:30.189 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 02:56:29.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 02:56:17.214 00:00:10.368 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:56:33.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-10-02 02:57:17.625 00:00:10.365 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:57:33.746 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54736 10 6452 1 2025-10-02 02:58:18.028 00:00:10.364 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-10-02 02:58:33.920 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 11 6775 1 Summary: total flows: 164, total bytes: 507407, total packets: 1586, avg bps: 1088, avg pps: 0, avg bpp: 319 Time window: 2025-10-02 01:56:36 - 2025-10-02 02:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0031s Wall: 0.0038s flows/second: 43056.2 Runtime: 0.0038s