Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 14:59:35.018 00:00:10.316 TCP 23.104.0.1:59906 -> 1.101.0.1:3000 11 1507 1 2025-10-02 14:59:34.407 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-10-02 14:56:36.648 00:05:01.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:00:35.375 00:00:10.365 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:00:34.619 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-10-02 14:57:36.649 00:05:01.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:01:34.831 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-10-02 15:01:44.462 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:01:44.457 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:01:35.781 00:00:10.363 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:02:36.190 00:00:10.361 TCP 23.104.0.1:49738 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:02:35.067 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:39218 10 6452 1 2025-10-02 15:03:35.234 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35472 10 6452 1 2025-10-02 15:03:36.589 00:00:10.324 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:04:35.443 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-10-02 15:04:36.947 00:00:10.367 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:05:35.663 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-10-02 15:05:37.351 00:00:10.479 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:02:36.648 00:05:01.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:06:35.880 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-10-02 15:06:44.582 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:06:44.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:06:37.869 00:00:10.365 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:03:36.651 00:05:01.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:07:36.106 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-10-02 15:07:38.274 00:00:10.318 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:08:36.358 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58020 10 6452 1 2025-10-02 15:08:38.628 00:00:10.322 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:09:36.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48702 10 6452 1 2025-10-02 15:09:38.990 00:00:10.369 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:10:36.793 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33430 10 6452 1 2025-10-02 15:10:39.400 00:00:10.369 TCP 23.104.0.1:44230 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:11:44.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:11:44.791 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:11:39.812 00:00:10.363 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:11:36.975 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:35676 10 6452 1 2025-10-02 15:08:36.650 00:05:01.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:12:37.224 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58654 10 6452 1 2025-10-02 15:12:40.214 00:00:10.363 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:09:36.654 00:05:01.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:13:40.615 00:00:10.325 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:13:37.448 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-10-02 15:14:37.666 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-10-02 15:14:40.984 00:00:10.367 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:15:41.389 00:00:10.365 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:15:37.877 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46782 10 6452 1 2025-10-02 15:16:44.671 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:16:44.624 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:16:38.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38096 10 6452 1 2025-10-02 15:16:41.794 00:00:10.369 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:17:38.313 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 12 10369 1 2025-10-02 15:17:42.207 00:00:10.440 TCP 23.104.0.1:52978 -> 1.101.0.1:3000 15 1926 1 2025-10-02 15:14:36.653 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:18:38.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-10-02 15:18:42.683 00:00:10.369 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:15:36.655 00:05:01.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:19:38.765 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53542 10 6452 1 2025-10-02 15:19:43.106 00:00:10.362 TCP 23.104.0.1:59488 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:20:38.989 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56190 10 6452 1 2025-10-02 15:20:43.508 00:00:10.366 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:21:45.052 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:21:45.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:21:39.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-10-02 15:21:43.916 00:00:10.371 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:22:39.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-10-02 15:22:44.322 00:00:10.319 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:23:39.643 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52774 10 6452 1 2025-10-02 15:23:44.682 00:00:10.365 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:20:36.654 00:05:01.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:24:39.856 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55930 10 6452 1 2025-10-02 15:24:45.100 00:00:10.364 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:21:36.656 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:25:40.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51380 10 6452 1 2025-10-02 15:25:45.518 00:00:10.371 TCP 23.104.0.1:58932 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:26:44.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:26:44.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:26:40.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-10-02 15:26:45.927 00:00:10.345 TCP 23.104.0.1:35774 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:27:40.510 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-10-02 15:27:46.309 00:00:10.362 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:28:40.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33840 10 6452 1 2025-10-02 15:28:46.711 00:00:10.434 TCP 23.104.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:29:40.938 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58908 10 6452 1 2025-10-02 15:29:47.184 00:00:10.361 TCP 23.104.0.1:51222 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:26:36.655 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:30:41.172 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-10-02 15:30:47.585 00:00:10.369 TCP 23.104.0.1:59148 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:27:36.658 00:05:01.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:31:45.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:31:45.321 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:31:41.345 00:00:12.917 TCP 1.101.0.1:3000 -> 22.102.0.1:36538 10 6452 1 2025-10-02 15:31:47.990 00:00:11.777 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:32:44.311 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-10-02 15:32:49.804 00:00:10.505 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:33:44.481 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6452 1 2025-10-02 15:33:50.345 00:00:10.365 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:34:44.691 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-10-02 15:34:50.746 00:00:10.395 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:35:44.865 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-10-02 15:35:51.181 00:00:10.365 TCP 23.104.0.1:48748 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:32:36.659 00:05:01.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:36:45.345 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:36:45.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:36:45.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-10-02 15:36:51.585 00:00:10.363 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:33:36.661 00:05:01.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:37:45.302 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56354 10 6452 1 2025-10-02 15:37:51.988 00:00:10.371 TCP 23.104.0.1:43304 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:38:45.531 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-10-02 15:38:52.397 00:00:10.324 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:39:45.746 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-10-02 15:39:52.765 00:00:10.380 TCP 23.104.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:40:45.955 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34616 10 6452 1 2025-10-02 15:40:53.180 00:00:10.327 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:41:45.157 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:41:45.498 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:41:46.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 10 6452 1 2025-10-02 15:41:53.544 00:00:10.366 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:38:36.658 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:42:46.399 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 12 10375 1 2025-10-02 15:42:53.942 00:00:10.407 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 15 1926 1 2025-10-02 15:39:36.661 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:43:46.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-10-02 15:43:54.386 00:00:10.361 TCP 23.104.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:44:46.861 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 10 6452 1 2025-10-02 15:44:54.785 00:00:10.361 TCP 23.104.0.1:47590 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:45:47.091 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 10 6452 1 2025-10-02 15:45:55.185 00:00:10.366 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:46:45.591 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:46:45.270 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:46:47.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 2025-10-02 15:46:55.588 00:00:10.369 TCP 23.104.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:47:47.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-10-02 15:47:55.993 00:00:10.367 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:44:36.661 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:48:47.729 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-10-02 15:48:56.401 00:00:10.366 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:45:36.663 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:49:47.940 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-10-02 15:49:56.799 00:00:10.364 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:50:48.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54592 10 6452 1 2025-10-02 15:50:57.199 00:00:10.381 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:51:45.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:51:45.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:51:48.348 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-10-02 15:51:57.616 00:00:10.327 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:52:48.563 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53472 10 6452 1 2025-10-02 15:52:57.980 00:00:10.372 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:53:48.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6452 1 2025-10-02 15:53:58.394 00:00:10.364 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:50:36.663 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 15:54:48.992 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2025-10-02 15:54:58.797 00:00:10.370 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:51:36.665 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 15:55:49.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-10-02 15:55:59.206 00:00:10.363 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:56:45.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 15:56:45.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 15:56:49.422 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-10-02 15:56:59.611 00:00:10.341 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-10-02 15:57:49.639 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-10-02 15:57:59.977 00:00:10.365 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499067, total packets: 1563, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-10-02 14:56:36 - 2025-10-02 15:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0027s User: 0.0018s Wall: 0.0022s flows/second: 74446.9 Runtime: 0.0022s