Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 13:58:46.444 00:00:10.370 TCP 23.104.0.1:35914 -> 1.101.0.1:3000 11 1507 1 2025-09-18 13:59:08.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47148 10 6452 1 2025-09-18 13:59:59.147 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 13:59:59.035 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 13:59:46.859 00:00:10.331 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:00:08.548 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-09-18 13:56:30.164 00:05:01.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:00:47.241 00:00:10.362 TCP 23.104.0.1:52318 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:01:08.763 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56134 10 6452 1 2025-09-18 13:57:30.167 00:05:01.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:01:47.645 00:00:10.365 TCP 23.104.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:02:08.983 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-09-18 14:02:48.057 00:00:10.320 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:03:09.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-09-18 14:03:48.422 00:00:10.373 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:04:09.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6452 1 2025-09-18 14:04:59.117 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:04:58.978 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:04:48.835 00:00:10.391 TCP 23.104.0.1:56320 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:05:09.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-09-18 14:05:49.263 00:00:10.371 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:06:09.813 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-09-18 14:02:30.165 00:05:01.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:06:49.670 00:00:10.323 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:07:09.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-09-18 14:03:30.169 00:05:01.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:07:50.035 00:00:10.365 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:08:10.208 00:00:10.640 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 10 6452 1 2025-09-18 14:08:50.437 00:00:10.365 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:09:10.891 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58086 10 6452 1 2025-09-18 14:09:59.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:09:50.837 00:00:10.368 TCP 23.104.0.1:53938 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:09:59.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:10:11.087 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:45524 10 6452 1 2025-09-18 14:10:51.245 00:00:10.363 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:11:11.667 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58452 10 6452 1 2025-09-18 14:11:51.647 00:00:10.374 TCP 23.104.0.1:60294 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:12:11.894 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-09-18 14:08:30.169 00:05:01.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:12:52.059 00:00:10.365 TCP 23.104.0.1:46650 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:13:12.088 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-09-18 14:09:30.170 00:05:01.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:13:52.463 00:00:10.365 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:14:12.257 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-09-18 14:14:59.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:14:59.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:14:52.864 00:00:10.370 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:15:12.438 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-09-18 14:15:53.277 00:00:10.321 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:16:12.656 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33932 10 6452 1 2025-09-18 14:16:53.640 00:00:10.361 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:17:12.887 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38992 10 6452 1 2025-09-18 14:17:54.057 00:00:10.362 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:18:13.119 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-09-18 14:14:30.171 00:05:01.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:18:54.463 00:00:10.366 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:19:13.340 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-09-18 14:15:30.174 00:05:01.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:19:59.277 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:19:59.140 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:19:54.866 00:00:10.368 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:20:13.551 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-09-18 14:20:55.270 00:00:10.324 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:21:13.777 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:42246 10 6452 1 2025-09-18 14:21:55.638 00:00:10.363 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:22:14.154 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59672 10 6452 1 2025-09-18 14:22:56.058 00:00:10.369 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:23:14.369 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54618 10 6452 1 2025-09-18 14:23:56.466 00:00:10.418 TCP 23.104.0.1:34292 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:24:14.582 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-09-18 14:20:30.172 00:05:01.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:24:59.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:24:59.481 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:24:56.927 00:00:10.382 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:25:14.803 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33934 10 6452 1 2025-09-18 14:21:30.176 00:05:01.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:25:57.346 00:00:10.329 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:26:15.029 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38358 10 6452 1 2025-09-18 14:26:57.711 00:00:10.383 TCP 23.104.0.1:45818 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:27:15.245 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-09-18 14:27:58.136 00:00:10.366 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:28:15.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-09-18 14:28:58.548 00:00:10.369 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:29:15.664 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 2025-09-18 14:29:59.482 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:29:59.523 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:29:58.952 00:00:10.378 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:30:15.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57074 10 6452 1 2025-09-18 14:26:30.172 00:05:01.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:30:59.372 00:00:10.326 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:31:16.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 10 6452 1 2025-09-18 14:27:30.175 00:05:01.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:31:59.738 00:00:15.022 TCP 23.104.0.1:55544 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:32:16.284 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-09-18 14:33:04.810 00:00:10.330 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:33:16.494 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-09-18 14:34:05.176 00:00:10.365 TCP 23.104.0.1:39722 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:34:16.709 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-09-18 14:34:59.665 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:34:59.726 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:35:05.581 00:00:10.363 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:35:16.922 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:37898 10 6452 1 2025-09-18 14:36:05.986 00:00:10.369 TCP 23.104.0.1:47220 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:36:17.208 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-09-18 14:32:30.175 00:05:01.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:37:06.389 00:00:10.413 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:33:30.176 00:05:01.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:37:17.430 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-09-18 14:38:06.843 00:00:10.385 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:38:17.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52752 10 6452 1 2025-09-18 14:39:07.265 00:00:10.328 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:39:17.819 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 10 6452 1 2025-09-18 14:39:59.743 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:39:59.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:40:07.628 00:00:10.373 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:40:17.987 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-09-18 14:41:08.050 00:00:10.368 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:41:18.192 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49768 10 6452 1 2025-09-18 14:42:08.454 00:00:10.362 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:42:18.407 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-09-18 14:38:30.176 00:05:01.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:43:08.852 00:00:10.380 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:43:18.624 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-09-18 14:39:30.179 00:05:01.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:44:09.269 00:00:10.361 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:44:18.803 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:54568 10 6452 1 2025-09-18 14:45:00.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:45:00.132 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:45:09.682 00:00:10.363 TCP 23.104.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:45:18.987 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-09-18 14:46:10.105 00:00:10.993 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:46:19.209 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-09-18 14:47:11.136 00:00:10.363 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:47:19.417 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-09-18 14:48:11.539 00:00:10.362 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:48:19.586 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-09-18 14:44:30.180 00:05:01.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:49:11.938 00:00:10.333 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:49:19.757 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51028 10 6452 1 2025-09-18 14:45:30.180 00:05:01.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:49:59.669 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:50:00.048 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:50:12.309 00:00:10.360 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:50:19.973 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-09-18 14:51:12.708 00:00:10.360 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:51:20.206 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-09-18 14:52:13.111 00:00:10.378 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:52:20.420 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-09-18 14:53:13.524 00:00:10.367 TCP 23.104.0.1:45222 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:53:20.635 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45490 10 6452 1 2025-09-18 14:54:13.927 00:00:10.388 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:54:20.843 00:00:10.518 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-09-18 14:50:30.178 00:05:01.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 14:54:59.972 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 14:55:00.194 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 14:55:14.354 00:00:10.324 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:51:30.180 00:05:01.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 14:55:21.404 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-09-18 14:56:14.713 00:00:10.337 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:56:21.631 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-09-18 14:57:15.097 00:00:10.368 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:57:21.815 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-18 14:58:15.498 00:00:10.361 TCP 23.104.0.1:50192 -> 1.101.0.1:3000 11 1507 1 2025-09-18 14:58:22.080 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47734 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-09-18 13:56:30 - 2025-09-18 14:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0009s Wall: 0.0023s flows/second: 72498.5 Runtime: 0.0023s