Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 05:58:44.529 00:00:10.325 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-09-25 05:59:02.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-09-25 05:59:44.890 00:00:10.339 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:00:02.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-09-25 05:56:33.235 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:00:45.267 00:00:10.325 TCP 23.104.0.1:38036 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:01:02.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48328 10 6452 1 2025-09-25 05:57:33.238 00:05:01.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:01:45.628 00:00:10.367 TCP 23.104.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:02:02.859 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2025-09-25 06:02:46.031 00:00:10.369 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:03:11.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:03:11.636 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:03:03.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44756 10 6452 1 2025-09-25 06:03:46.439 00:00:10.763 TCP 23.104.0.1:49652 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:04:03.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54520 10 6452 1 2025-09-25 06:04:47.236 00:00:10.370 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:05:03.522 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-09-25 06:05:47.646 00:00:10.363 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:06:03.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-09-25 06:02:33.240 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:06:48.052 00:00:10.374 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:07:03.927 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6452 1 2025-09-25 06:03:33.244 00:05:01.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:07:48.462 00:00:10.369 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:08:12.025 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:08:11.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:08:04.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-09-25 06:08:48.877 00:00:10.368 TCP 23.104.0.1:49760 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:09:04.339 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-09-25 06:09:49.286 00:00:10.366 TCP 23.104.0.1:49810 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:10:04.553 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 12 6556 1 2025-09-25 06:10:49.689 00:00:10.365 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:11:04.766 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34764 10 6452 1 2025-09-25 06:11:50.109 00:00:10.372 TCP 23.104.0.1:42184 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:12:04.984 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-09-25 06:08:33.245 00:05:01.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:12:50.521 00:00:10.365 TCP 23.104.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:13:11.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:13:11.692 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:13:05.185 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6452 1 2025-09-25 06:09:33.245 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:13:50.922 00:00:10.366 TCP 23.104.0.1:60198 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:14:05.545 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-09-25 06:14:51.324 00:00:10.364 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:15:05.731 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59738 10 6452 1 2025-09-25 06:15:51.736 00:00:10.329 TCP 23.104.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:16:05.940 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:57314 10 6452 1 2025-09-25 06:16:52.112 00:00:10.319 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:17:06.139 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57536 10 6452 1 2025-09-25 06:18:11.806 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:17:52.472 00:00:10.322 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:18:11.679 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:18:06.353 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-09-25 06:14:33.243 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:18:52.837 00:00:10.345 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:19:06.576 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6452 1 2025-09-25 06:15:33.246 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:19:53.218 00:00:10.330 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:20:06.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-09-25 06:20:53.589 00:00:10.365 TCP 23.104.0.1:54314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:21:07.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-09-25 06:21:53.996 00:00:10.323 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:22:07.225 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-09-25 06:22:54.362 00:00:10.360 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:23:11.946 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:23:11.952 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:23:07.452 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-09-25 06:23:54.768 00:00:10.367 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:24:07.637 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2025-09-25 06:20:33.243 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:24:55.169 00:00:10.361 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:25:07.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55070 10 6452 1 2025-09-25 06:21:33.246 00:05:01.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:25:55.570 00:00:10.368 TCP 23.104.0.1:37310 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:26:08.079 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 10 6452 1 2025-09-25 06:26:55.974 00:00:10.369 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:27:08.307 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-09-25 06:27:56.385 00:00:10.360 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:28:11.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:28:12.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:28:08.545 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-09-25 06:28:56.785 00:00:11.199 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:29:08.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-09-25 06:29:58.028 00:00:10.371 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:30:08.935 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-09-25 06:26:33.246 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:30:58.437 00:00:10.373 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:31:09.184 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-09-25 06:27:33.248 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:31:58.842 00:00:10.340 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:32:09.405 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-09-25 06:32:59.214 00:00:10.366 TCP 23.104.0.1:59406 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:33:12.422 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:33:12.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:33:09.632 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:48534 10 6452 1 2025-09-25 06:33:59.617 00:00:10.363 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:34:09.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6452 1 2025-09-25 06:35:00.018 00:00:10.333 TCP 23.104.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:35:10.118 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-09-25 06:36:00.386 00:00:10.365 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:36:10.362 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-09-25 06:32:33.248 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:37:00.790 00:00:10.368 TCP 23.104.0.1:54078 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:37:10.533 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-09-25 06:33:33.250 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:38:01.193 00:00:10.325 TCP 23.104.0.1:47412 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:38:12.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:38:12.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:38:10.753 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-09-25 06:39:01.559 00:00:10.368 TCP 23.104.0.1:60490 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:39:10.973 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-09-25 06:40:01.971 00:00:10.370 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:40:11.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-09-25 06:41:02.380 00:00:10.364 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:41:11.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-09-25 06:42:02.780 00:00:10.329 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:42:11.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-09-25 06:38:33.248 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:43:12.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:43:12.468 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:43:03.145 00:00:10.366 TCP 23.104.0.1:51828 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:43:11.858 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56460 10 6452 1 2025-09-25 06:39:33.250 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:44:03.553 00:00:10.370 TCP 23.104.0.1:42502 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:44:12.105 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54196 10 6452 1 2025-09-25 06:45:03.959 00:00:10.378 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:45:12.326 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-09-25 06:46:04.399 00:00:10.367 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:46:12.499 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-09-25 06:47:04.802 00:00:10.365 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:47:12.670 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57076 10 6452 1 2025-09-25 06:48:05.209 00:00:10.368 TCP 23.104.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:48:12.636 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:48:12.358 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:48:12.839 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57740 10 6452 1 2025-09-25 06:44:33.249 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:49:05.615 00:00:10.365 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:49:13.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47256 10 6452 1 2025-09-25 06:45:33.251 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:50:06.017 00:00:10.363 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:50:13.293 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-09-25 06:51:06.419 00:00:10.368 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:51:13.513 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45404 12 10367 1 2025-09-25 06:52:06.821 00:00:10.751 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 15 1926 1 2025-09-25 06:52:13.752 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-09-25 06:53:12.454 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:53:12.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:53:07.617 00:00:10.367 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:53:13.944 00:00:10.551 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-09-25 06:54:08.021 00:00:10.371 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:54:14.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-09-25 06:50:33.251 00:05:01.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 06:55:08.431 00:00:10.380 TCP 23.104.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:55:14.744 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-09-25 06:51:33.254 00:05:01.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 06:56:08.857 00:00:10.431 TCP 23.104.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:56:14.969 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52408 10 6452 1 2025-09-25 06:57:09.320 00:00:10.363 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:57:15.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-09-25 06:58:12.653 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 06:58:12.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 06:58:09.723 00:00:10.374 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-09-25 06:58:15.443 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50804 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-09-25 05:56:33 - 2025-09-25 06:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0017s Wall: 0.0021s flows/second: 76353.2 Runtime: 0.0022s