Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 11:59:29.022 00:00:10.360 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-09-12 11:59:35.346 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-09-12 12:00:29.421 00:00:10.362 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:00:35.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-09-12 11:57:27.344 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 11:57:27.346 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:01:29.822 00:00:10.360 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:01:35.734 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 11 6504 1 2025-09-12 12:02:03.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:02:03.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:02:30.223 00:00:10.358 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:02:36.002 00:00:10.666 TCP 1.101.0.1:3000 -> 22.102.0.1:42918 10 6452 1 2025-09-12 12:03:30.625 00:00:10.382 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:03:36.707 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41666 10 6452 1 2025-09-12 12:04:31.073 00:00:10.361 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:04:36.929 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-09-12 12:05:31.475 00:00:10.357 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:05:37.165 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-09-12 12:06:31.872 00:00:10.371 TCP 23.104.0.1:41016 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:06:37.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-09-12 12:07:03.340 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:07:03.775 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:03:27.346 00:05:00.865 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:03:27.349 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:07:32.280 00:00:10.322 TCP 23.104.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:07:37.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-09-12 12:08:32.647 00:00:10.449 TCP 23.104.0.1:33930 -> 1.101.0.1:3000 15 1926 1 2025-09-12 12:08:37.767 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 12 10367 1 2025-09-12 12:09:33.133 00:00:10.361 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:09:38.044 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-09-12 12:10:33.532 00:00:10.363 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:10:38.251 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6452 1 2025-09-12 12:11:33.934 00:00:10.375 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:11:38.459 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-09-12 12:12:03.633 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:12:03.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:12:34.345 00:00:10.325 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:12:38.636 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-09-12 12:09:27.348 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:09:27.351 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:13:34.707 00:00:10.365 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:13:38.846 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38390 10 6452 1 2025-09-12 12:14:35.111 00:00:10.365 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:14:39.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40086 10 6452 1 2025-09-12 12:15:35.513 00:00:10.328 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:15:39.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49394 10 6452 1 2025-09-12 12:16:35.884 00:00:10.397 TCP 23.104.0.1:45934 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:16:39.506 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-09-12 12:17:03.673 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:17:03.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:17:36.340 00:00:10.325 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:17:39.671 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-09-12 12:18:39.844 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-09-12 12:18:36.707 00:00:10.392 TCP 23.104.0.1:35298 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:15:27.348 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:15:27.350 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:19:37.138 00:00:10.373 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:19:40.091 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56128 10 6452 1 2025-09-12 12:20:37.551 00:00:10.366 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:20:40.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46288 10 6452 1 2025-09-12 12:21:40.524 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42116 10 6452 1 2025-09-12 12:21:37.956 00:00:10.368 TCP 23.104.0.1:50782 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:22:03.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:22:03.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:22:38.375 00:00:10.373 TCP 23.104.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:22:40.746 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55926 10 6452 1 2025-09-12 12:23:40.966 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-09-12 12:23:38.784 00:00:10.367 TCP 23.104.0.1:52180 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:24:39.186 00:00:10.367 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:24:41.197 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-09-12 12:21:27.350 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:21:27.353 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:25:41.414 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-09-12 12:25:39.590 00:00:10.374 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:26:41.643 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-09-12 12:26:40.000 00:00:10.319 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:27:03.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:27:03.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:27:40.360 00:00:10.363 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:27:41.863 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-09-12 12:28:40.758 00:00:10.335 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:28:42.259 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-09-12 12:29:41.134 00:00:10.367 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:29:42.475 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-09-12 12:30:41.537 00:00:10.696 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:30:42.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36280 10 6452 1 2025-09-12 12:27:27.355 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:27:27.352 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:31:42.908 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-09-12 12:31:42.270 00:00:10.367 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:32:03.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:32:04.009 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:32:43.122 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38990 10 6452 1 2025-09-12 12:32:42.671 00:00:10.372 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:33:43.111 00:00:10.363 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:33:43.328 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47958 10 6452 1 2025-09-12 12:34:43.544 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-09-12 12:34:43.508 00:00:10.368 TCP 23.104.0.1:35944 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:35:43.913 00:00:10.360 TCP 23.104.0.1:53566 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:35:43.711 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52144 10 6452 1 2025-09-12 12:36:43.932 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44544 10 6452 1 2025-09-12 12:36:44.312 00:00:10.363 TCP 23.104.0.1:39764 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:37:03.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:37:04.149 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:33:27.357 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:33:27.354 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:37:44.712 00:00:10.373 TCP 23.104.0.1:45266 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:37:44.177 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35622 10 6452 1 2025-09-12 12:38:45.126 00:00:10.767 TCP 23.104.0.1:46504 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:38:44.403 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-09-12 12:39:45.957 00:00:10.365 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:39:44.632 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36884 10 6452 1 2025-09-12 12:40:44.847 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-09-12 12:40:46.365 00:00:10.367 TCP 23.104.0.1:39332 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:41:45.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-09-12 12:41:46.765 00:00:10.339 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:42:04.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:42:04.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:42:45.306 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54872 10 6452 1 2025-09-12 12:42:47.143 00:00:10.368 TCP 23.104.0.1:56624 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:39:27.355 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:39:27.358 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:43:45.488 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-09-12 12:43:47.548 00:00:10.365 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:44:45.698 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38078 10 6452 1 2025-09-12 12:44:47.951 00:00:10.370 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:45:45.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-09-12 12:45:48.360 00:00:10.367 TCP 23.104.0.1:52092 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:46:46.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2025-09-12 12:46:48.769 00:00:10.332 TCP 23.104.0.1:34370 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:47:04.449 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:47:04.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:47:46.339 00:00:10.644 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-09-12 12:47:49.134 00:00:10.367 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:48:47.068 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-09-12 12:48:49.539 00:00:10.364 TCP 23.104.0.1:60266 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:45:27.358 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:45:27.357 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:49:47.289 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-09-12 12:49:49.946 00:00:10.378 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:50:47.504 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55906 10 6452 1 2025-09-12 12:50:50.365 00:00:10.365 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:51:47.675 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-09-12 12:51:50.774 00:00:10.337 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:52:04.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:52:04.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:52:51.143 00:00:16.125 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:52:47.888 00:00:19.289 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-09-12 12:53:57.336 00:00:10.367 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:53:57.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-09-12 12:54:57.438 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-09-12 12:54:57.743 00:00:10.361 TCP 23.104.0.1:44086 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:51:27.365 00:05:00.857 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 12:51:27.362 00:05:00.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 12:55:58.140 00:00:10.878 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:55:57.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-09-12 12:57:04.641 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 12:56:57.827 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-09-12 12:57:05.079 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 12:56:59.069 00:00:10.322 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:57:59.433 00:00:10.368 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-09-12 12:57:58.061 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 Summary: total flows: 162, total bytes: 494775, total packets: 1558, avg bps: 1086, avg pps: 0, avg bpp: 317 Time window: 2025-09-12 11:57:27 - 2025-09-12 12:58:09 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0008s Wall: 0.0020s flows/second: 82701.7 Runtime: 0.0020s