Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 01:58:42.742 00:00:10.327 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-10-03 01:59:39.174 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51536 10 6452 1 2025-10-03 01:59:43.114 00:00:10.369 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-10-03 01:56:36.849 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:00:39.433 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-10-03 02:00:43.523 00:00:10.370 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-10-03 01:57:36.850 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:01:39.701 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-10-03 02:01:58.103 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:01:43.934 00:00:10.375 TCP 23.104.0.1:58840 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:01:57.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:02:39.909 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-10-03 02:02:44.351 00:00:10.362 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:03:40.125 00:00:11.561 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-10-03 02:03:44.756 00:00:10.386 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:04:41.723 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-10-03 02:04:45.191 00:00:10.327 TCP 23.104.0.1:51236 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:05:41.897 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6452 1 2025-10-03 02:05:45.554 00:00:10.324 TCP 23.104.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:02:36.850 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:06:42.119 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6452 1 2025-10-03 02:06:45.920 00:00:10.382 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:06:57.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:06:57.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:03:36.852 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:07:42.332 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-10-03 02:07:46.338 00:00:10.320 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:08:42.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56868 10 6452 1 2025-10-03 02:08:46.697 00:00:10.363 TCP 23.104.0.1:44210 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:09:42.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-10-03 02:09:47.109 00:00:10.375 TCP 23.104.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:10:42.987 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-10-03 02:10:47.517 00:00:10.364 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:11:43.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-10-03 02:11:58.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:11:57.791 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:11:47.915 00:00:10.360 TCP 23.104.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:08:36.851 00:05:01.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:12:43.438 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:50470 12 10375 1 2025-10-03 02:12:48.312 00:00:10.442 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 15 1926 1 2025-10-03 02:09:36.854 00:05:01.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:13:43.695 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37338 10 6452 1 2025-10-03 02:13:48.793 00:00:10.373 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:14:43.870 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6452 1 2025-10-03 02:14:49.202 00:00:10.366 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:15:44.092 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-10-03 02:15:49.606 00:00:10.366 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:16:44.302 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-10-03 02:16:57.994 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:16:57.976 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:16:50.011 00:00:10.360 TCP 23.104.0.1:42946 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:17:44.513 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-10-03 02:17:50.413 00:00:10.330 TCP 23.104.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:14:36.852 00:05:01.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:18:44.726 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-10-03 02:18:50.796 00:00:10.348 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:15:36.855 00:05:01.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:19:44.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-10-03 02:19:51.181 00:00:10.325 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:20:45.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46370 10 6452 1 2025-10-03 02:20:51.562 00:00:10.371 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:21:45.324 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60574 10 6452 1 2025-10-03 02:21:58.049 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:21:58.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:21:51.971 00:00:10.392 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:22:45.504 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-10-03 02:22:52.419 00:00:10.332 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:23:45.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6452 1 2025-10-03 02:23:52.790 00:00:10.368 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:20:36.856 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:24:45.979 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-10-03 02:24:53.193 00:00:10.326 TCP 23.104.0.1:33820 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:21:36.859 00:05:01.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:25:46.214 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34708 10 6452 1 2025-10-03 02:25:53.558 00:00:10.321 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:26:46.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6452 1 2025-10-03 02:26:58.605 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:26:58.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:26:53.917 00:00:10.374 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:27:46.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-10-03 02:27:54.333 00:00:10.369 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:28:46.884 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-10-03 02:28:54.740 00:00:10.365 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:29:47.076 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-10-03 02:29:55.146 00:00:10.372 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:26:36.858 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:30:47.442 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-10-03 02:30:55.554 00:00:10.323 TCP 23.104.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:27:36.859 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:31:58.507 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:31:47.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 10 6452 1 2025-10-03 02:31:58.104 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:31:55.916 00:00:10.701 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:32:47.869 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6452 1 2025-10-03 02:32:56.657 00:00:10.365 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:33:48.102 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-10-03 02:33:57.086 00:00:10.363 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:34:48.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46852 10 6452 1 2025-10-03 02:34:57.505 00:00:10.384 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:35:48.518 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37984 10 6452 1 2025-10-03 02:35:57.947 00:00:10.367 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:32:36.858 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:36:48.695 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-10-03 02:36:58.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:36:58.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:36:58.352 00:00:10.359 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:33:36.861 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:37:48.915 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40190 10 6452 1 2025-10-03 02:37:58.758 00:00:10.379 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:38:49.132 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-10-03 02:38:59.173 00:00:10.363 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:39:49.354 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-10-03 02:39:59.571 00:00:10.365 TCP 23.104.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:40:49.574 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51756 10 6452 1 2025-10-03 02:40:59.977 00:00:10.374 TCP 23.104.0.1:46420 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:41:58.409 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:41:58.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:41:49.783 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60908 10 6452 1 2025-10-03 02:42:00.388 00:00:10.322 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:38:36.858 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:42:50.006 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-10-03 02:43:00.749 00:00:10.384 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:39:36.863 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:43:50.230 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-10-03 02:44:01.166 00:00:10.370 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:44:50.466 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-10-03 02:45:01.577 00:00:10.366 TCP 23.104.0.1:36598 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:45:50.683 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60114 10 6452 1 2025-10-03 02:46:01.985 00:00:10.325 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:46:50.900 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-10-03 02:46:58.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:46:58.586 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:47:02.354 00:00:10.363 TCP 23.104.0.1:45680 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:47:51.090 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 12 10375 1 2025-10-03 02:48:02.762 00:00:10.405 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 15 1926 1 2025-10-03 02:44:36.863 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:48:51.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33238 10 6452 1 2025-10-03 02:49:03.203 00:00:10.369 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:45:36.865 00:05:01.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:49:51.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45470 10 6452 1 2025-10-03 02:50:03.626 00:00:10.368 TCP 23.104.0.1:33754 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:50:51.729 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-10-03 02:51:04.032 00:00:10.367 TCP 23.104.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:51:58.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:51:58.706 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:51:51.907 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-10-03 02:52:04.439 00:00:10.363 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:52:52.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41470 10 6452 1 2025-10-03 02:53:04.846 00:00:10.384 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:53:52.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-10-03 02:54:05.269 00:00:10.343 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:50:36.863 00:05:01.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 02:54:52.560 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41354 10 6452 1 2025-10-03 02:55:05.662 00:00:10.327 TCP 23.104.0.1:54454 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:51:36.865 00:05:01.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 02:55:52.778 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-10-03 02:56:06.036 00:00:10.365 TCP 23.104.0.1:54032 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:56:58.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 02:56:58.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 02:56:52.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-10-03 02:57:06.436 00:00:10.366 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:57:53.185 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6452 1 2025-10-03 02:58:06.844 00:00:10.380 TCP 23.104.0.1:50592 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500580, total packets: 1574, avg bps: 1082, avg pps: 0, avg bpp: 318 Time window: 2025-10-03 01:56:36 - 2025-10-03 02:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0019s Wall: 0.0025s flows/second: 66202.3 Runtime: 0.0025s