Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 10:58:50.569 00:00:10.374 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-09-27 10:59:15.235 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 10:59:04.640 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-09-27 10:59:15.011 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 10:59:50.979 00:00:10.365 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:00:04.821 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-09-27 10:56:34.302 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:00:51.381 00:00:10.325 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:01:05.004 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-09-27 10:57:34.305 00:05:01.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:01:51.749 00:00:10.388 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:02:05.192 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-09-27 11:02:52.174 00:00:10.367 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:03:05.399 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-09-27 11:03:52.581 00:00:10.331 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:04:15.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:04:05.577 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54110 10 6452 1 2025-09-27 11:04:15.607 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:04:52.953 00:00:10.326 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:05:05.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6452 1 2025-09-27 11:05:53.318 00:00:10.364 TCP 23.104.0.1:57748 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:06:05.964 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33010 10 6452 1 2025-09-27 11:02:34.304 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:06:53.722 00:00:10.376 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:07:06.146 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40618 10 6452 1 2025-09-27 11:03:34.308 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:07:54.140 00:00:10.364 TCP 23.104.0.1:49662 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:08:06.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-09-27 11:08:54.546 00:00:10.365 TCP 23.104.0.1:37552 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:09:15.315 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:09:06.520 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38876 10 6452 1 2025-09-27 11:09:15.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:09:54.951 00:00:10.323 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:10:06.746 00:00:10.407 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 10 6452 1 2025-09-27 11:10:55.315 00:00:10.375 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:11:07.190 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55340 10 6452 1 2025-09-27 11:11:55.718 00:00:10.854 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:12:07.413 00:00:14.344 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-09-27 11:08:34.306 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:12:56.611 00:00:10.368 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:13:11.803 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60384 10 6452 1 2025-09-27 11:09:34.309 00:05:01.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:13:57.019 00:00:10.363 TCP 23.104.0.1:57428 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:14:15.832 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:14:15.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:14:12.028 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-09-27 11:14:57.418 00:00:10.488 TCP 23.104.0.1:43220 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:15:12.591 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-09-27 11:15:57.962 00:00:10.323 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:16:13.078 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-09-27 11:16:58.328 00:00:10.363 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:17:13.302 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-09-27 11:17:58.734 00:00:10.367 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:18:13.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-09-27 11:14:34.307 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:18:59.146 00:00:10.359 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:19:15.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:19:15.658 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:19:14.113 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-09-27 11:15:34.309 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:19:59.547 00:00:10.364 TCP 23.104.0.1:54468 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:20:14.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-09-27 11:20:59.951 00:00:10.327 TCP 23.104.0.1:49676 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:21:14.550 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-09-27 11:22:00.320 00:00:10.369 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:22:14.766 00:00:10.582 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6452 1 2025-09-27 11:23:00.728 00:00:10.371 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:23:15.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-09-27 11:24:01.137 00:00:10.367 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:24:16.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:24:16.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:24:15.602 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-27 11:20:34.307 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:25:01.545 00:00:10.384 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:25:16.148 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-09-27 11:21:34.310 00:05:01.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:26:01.968 00:00:10.373 TCP 23.104.0.1:48450 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:26:16.361 00:00:10.798 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-09-27 11:27:02.378 00:00:10.327 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:27:17.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-09-27 11:28:02.748 00:00:10.363 TCP 23.104.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:28:17.416 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:35450 10 6452 1 2025-09-27 11:29:15.626 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:29:03.152 00:00:10.370 TCP 23.104.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:29:15.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:29:17.621 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-09-27 11:30:03.558 00:00:10.330 TCP 23.104.0.1:57844 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:30:17.843 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-09-27 11:26:34.314 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:31:03.925 00:00:10.398 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:31:18.085 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-09-27 11:27:34.314 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:32:04.361 00:00:10.439 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 15 1926 1 2025-09-27 11:32:18.307 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 12 10367 1 2025-09-27 11:33:04.839 00:00:18.694 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:33:18.557 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-09-27 11:34:16.522 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:34:15.894 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:34:13.573 00:00:10.323 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:34:18.780 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-09-27 11:35:13.936 00:00:10.396 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:35:18.992 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-09-27 11:36:14.365 00:00:10.360 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:36:19.216 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57816 10 6452 1 2025-09-27 11:32:34.311 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:37:14.764 00:00:10.378 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:37:19.457 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42500 10 6452 1 2025-09-27 11:33:34.314 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:38:15.178 00:00:10.370 TCP 23.104.0.1:37120 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:38:19.683 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39048 10 6452 1 2025-09-27 11:39:15.791 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:39:16.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:39:15.585 00:00:10.320 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:39:19.853 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36136 10 6452 1 2025-09-27 11:40:15.940 00:00:10.333 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:40:20.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 10 6452 1 2025-09-27 11:41:16.311 00:00:10.365 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:41:20.299 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-09-27 11:42:20.593 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36984 10 6452 1 2025-09-27 11:42:16.718 00:00:10.366 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:38:34.313 00:05:01.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:43:20.805 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-09-27 11:43:17.133 00:00:10.367 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:39:34.315 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:44:16.230 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:44:16.162 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:44:21.042 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6452 1 2025-09-27 11:44:17.537 00:00:10.359 TCP 23.104.0.1:48092 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:45:21.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-09-27 11:45:17.936 00:00:10.340 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:46:21.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36930 10 6452 1 2025-09-27 11:46:18.313 00:00:10.360 TCP 23.104.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:47:18.710 00:00:10.372 TCP 23.104.0.1:57138 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:47:21.675 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-09-27 11:48:19.122 00:00:10.750 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:44:34.314 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:48:21.888 00:00:10.820 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-09-27 11:49:16.267 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:49:16.249 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:49:19.914 00:00:10.363 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:45:34.318 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:49:22.744 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-09-27 11:50:20.312 00:00:10.367 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:50:22.919 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:48282 10 6452 1 2025-09-27 11:51:20.718 00:00:10.370 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:51:23.122 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55138 10 6452 1 2025-09-27 11:52:21.127 00:00:10.360 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:52:23.329 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51400 10 6452 1 2025-09-27 11:53:21.526 00:00:10.327 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:53:23.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-09-27 11:54:16.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 11:54:16.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 11:54:21.896 00:00:10.332 TCP 23.104.0.1:41136 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:54:23.718 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40870 10 6452 1 2025-09-27 11:50:34.317 00:05:01.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 11:55:23.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6452 1 2025-09-27 11:55:22.262 00:00:10.364 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:51:34.318 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 11:56:22.679 00:00:10.328 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:56:24.111 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-09-27 11:57:24.285 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-09-27 11:57:23.049 00:00:10.370 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:58:23.455 00:00:10.373 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-09-27 11:58:24.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-09-27 10:56:34 - 2025-09-27 11:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0026s flows/second: 64041.1 Runtime: 0.0026s