Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 00:59:05.556 00:00:10.325 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-04 00:59:39.991 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-10-04 01:00:05.918 00:00:10.338 TCP 23.104.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-10-04 00:56:37.319 00:05:01.911 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:00:40.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49344 10 6452 1 2025-10-04 01:01:06.294 00:00:10.365 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-10-04 00:57:37.323 00:05:01.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:01:40.392 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-10-04 01:02:06.694 00:00:10.364 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:02:25.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:02:25.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:02:40.611 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-10-04 01:03:07.102 00:00:10.327 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:03:40.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39656 10 6452 1 2025-10-04 01:04:07.460 00:00:10.362 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:04:40.995 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43054 10 6452 1 2025-10-04 01:05:07.860 00:00:10.372 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:05:41.227 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46034 10 6452 1 2025-10-04 01:06:08.272 00:00:10.365 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:02:37.322 00:05:01.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:06:41.450 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-10-04 01:07:08.676 00:00:10.382 TCP 23.104.0.1:60628 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:07:25.621 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:07:25.526 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:03:37.326 00:05:01.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:07:41.677 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-10-04 01:08:09.107 00:00:10.376 TCP 23.104.0.1:52586 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:08:41.897 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-10-04 01:09:09.521 00:00:10.326 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:09:42.125 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45284 10 6452 1 2025-10-04 01:10:09.882 00:00:10.741 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:10:42.291 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6452 1 2025-10-04 01:11:10.661 00:00:10.367 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:11:42.507 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44718 10 6452 1 2025-10-04 01:12:11.095 00:00:10.364 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:12:26.021 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:12:25.915 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:08:37.324 00:05:01.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:12:42.681 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-10-04 01:13:11.499 00:00:10.370 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:09:37.326 00:05:01.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:13:42.889 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-10-04 01:14:11.910 00:00:10.375 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:14:43.106 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-10-04 01:15:12.335 00:00:10.327 TCP 23.104.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:15:43.317 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-10-04 01:16:12.697 00:00:10.416 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:16:43.491 00:00:18.254 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-10-04 01:17:13.151 00:00:10.324 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:17:26.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:17:25.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:17:51.784 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6452 1 2025-10-04 01:18:13.513 00:00:10.332 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:14:37.323 00:05:01.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:18:51.956 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 12 6556 1 2025-10-04 01:19:13.883 00:00:10.372 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:15:37.326 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:19:52.180 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-10-04 01:20:14.293 00:00:10.363 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:20:52.418 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-10-04 01:21:14.697 00:00:10.371 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:21:52.625 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 12 6556 1 2025-10-04 01:22:25.817 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:22:15.113 00:00:10.365 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:22:25.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:22:52.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54480 10 6452 1 2025-10-04 01:23:15.511 00:00:10.374 TCP 23.104.0.1:60374 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:23:53.078 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54738 10 6452 1 2025-10-04 01:24:15.923 00:00:10.390 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:20:37.326 00:05:01.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:24:53.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-10-04 01:25:16.358 00:00:10.364 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:21:37.328 00:05:01.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:25:53.517 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-10-04 01:26:16.766 00:00:10.379 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:26:53.734 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-10-04 01:27:26.025 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:27:25.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:27:17.192 00:00:10.370 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:27:53.919 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-10-04 01:28:17.613 00:00:10.362 TCP 23.104.0.1:45012 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:28:54.168 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-10-04 01:29:18.010 00:00:10.509 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:29:54.377 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-10-04 01:30:18.551 00:00:10.361 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:26:37.326 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:30:54.587 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-10-04 01:31:18.950 00:00:10.370 TCP 23.104.0.1:33980 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:27:37.329 00:05:01.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:31:54.803 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-10-04 01:32:26.169 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:32:26.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:32:19.358 00:00:10.373 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:32:55.013 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54436 10 6452 1 2025-10-04 01:33:19.769 00:00:10.372 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:33:55.226 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-10-04 01:34:20.176 00:00:10.361 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:34:55.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-10-04 01:35:20.576 00:00:10.362 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:35:55.668 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-10-04 01:36:20.974 00:00:10.331 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:32:37.328 00:05:01.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:36:55.890 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44320 10 6452 1 2025-10-04 01:37:26.309 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:37:26.247 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:37:21.338 00:00:10.364 TCP 23.104.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:33:37.330 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:37:56.118 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-10-04 01:38:21.740 00:00:10.368 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:38:56.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-10-04 01:39:22.146 00:00:10.532 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:39:56.498 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48758 10 6452 1 2025-10-04 01:40:22.717 00:00:10.319 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:40:56.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-10-04 01:41:23.101 00:00:10.364 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:41:56.926 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:45698 10 6452 1 2025-10-04 01:42:26.932 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:42:27.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:42:23.509 00:00:10.322 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:38:37.329 00:05:01.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:42:57.379 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-10-04 01:43:23.866 00:00:10.369 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:39:37.332 00:05:01.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:43:57.601 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-10-04 01:44:24.275 00:00:10.322 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:44:57.806 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-10-04 01:45:24.634 00:00:10.361 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:45:58.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-10-04 01:46:25.035 00:00:10.365 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:46:58.249 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39504 10 6452 1 2025-10-04 01:47:25.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:47:25.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:47:25.437 00:00:18.131 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:47:58.462 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 12 10375 1 2025-10-04 01:44:37.330 00:05:01.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:48:33.635 00:00:10.450 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 16 1978 1 2025-10-04 01:48:58.709 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52430 10 6452 1 2025-10-04 01:45:37.332 00:05:01.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:49:34.125 00:00:10.320 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:49:58.922 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-10-04 01:50:34.483 00:00:10.364 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:50:59.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-10-04 01:51:34.885 00:00:10.375 TCP 23.104.0.1:50138 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:51:59.528 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-10-04 01:52:26.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:52:26.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:52:35.303 00:00:10.365 TCP 23.104.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:52:59.712 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-10-04 01:53:35.706 00:00:10.323 TCP 23.104.0.1:41594 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:53:59.895 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37014 10 6452 1 2025-10-04 01:50:37.330 00:05:01.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 01:54:36.098 00:00:10.363 TCP 23.104.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:55:00.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-10-04 01:51:37.333 00:05:01.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 01:55:36.506 00:00:10.359 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:56:00.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-04 01:56:36.899 00:00:10.329 TCP 23.104.0.1:54020 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:57:00.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-10-04 01:57:26.549 00:00:00.015 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 01:57:26.697 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 01:57:37.266 00:00:10.372 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-10-04 01:58:00.762 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-10-04 01:58:37.673 00:00:10.371 TCP 23.104.0.1:48382 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496498, total packets: 1573, avg bps: 1064, avg pps: 0, avg bpp: 315 Time window: 2025-10-04 00:56:37 - 2025-10-04 01:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0024s flows/second: 68285.2 Runtime: 0.0024s