Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 07:58:45.858 00:00:10.332 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-09-29 07:59:10.837 00:00:10.408 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-09-29 07:59:46.230 00:00:10.365 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:00:09.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:00:09.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:00:11.283 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34860 10 6452 1 2025-09-29 07:56:35.175 00:05:01.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:00:46.641 00:00:10.372 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:01:11.500 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49740 10 6452 1 2025-09-29 07:57:35.178 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:01:47.065 00:00:10.329 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:02:11.720 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-09-29 08:02:47.434 00:00:10.332 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:03:11.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-09-29 08:03:47.797 00:00:10.366 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:04:12.172 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42518 10 6452 1 2025-09-29 08:04:48.201 00:00:10.327 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:05:09.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:05:09.617 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:05:12.409 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-09-29 08:05:48.565 00:00:10.367 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:06:12.633 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58616 10 6452 1 2025-09-29 08:02:35.177 00:05:01.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:06:48.970 00:00:10.333 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:07:12.860 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-09-29 08:03:35.180 00:05:01.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:07:49.339 00:00:10.368 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:08:13.195 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-09-29 08:08:49.745 00:00:10.366 TCP 23.104.0.1:51156 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:09:13.424 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-09-29 08:09:50.148 00:00:10.366 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:10:09.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:10:09.652 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:10:13.639 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-09-29 08:10:50.557 00:00:10.376 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:11:13.867 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-09-29 08:11:50.970 00:00:10.388 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:12:14.098 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-09-29 08:08:35.179 00:05:01.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:12:51.391 00:00:10.334 TCP 23.104.0.1:50832 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:13:14.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-09-29 08:09:35.181 00:05:01.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:13:51.778 00:00:10.380 TCP 23.104.0.1:33782 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:14:14.498 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:48314 10 6452 1 2025-09-29 08:14:52.187 00:00:10.324 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:15:09.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:15:09.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:15:15.356 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-09-29 08:15:52.564 00:00:10.363 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:16:15.564 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6452 1 2025-09-29 08:16:52.967 00:00:10.334 TCP 23.104.0.1:53436 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:17:15.750 00:00:17.475 TCP 1.101.0.1:3000 -> 22.102.0.1:55414 10 6452 1 2025-09-29 08:17:53.338 00:00:10.364 TCP 23.104.0.1:45424 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:18:23.267 00:00:11.056 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-09-29 08:14:35.181 00:05:01.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:18:53.747 00:00:10.360 TCP 23.104.0.1:38042 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:19:24.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-09-29 08:15:35.185 00:05:01.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:19:54.147 00:00:10.375 TCP 23.104.0.1:48566 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:20:09.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:20:09.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:20:24.571 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6452 1 2025-09-29 08:20:54.562 00:00:10.371 TCP 23.104.0.1:56518 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:21:24.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33860 10 6452 1 2025-09-29 08:21:54.970 00:00:10.371 TCP 23.104.0.1:54270 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:22:24.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6452 1 2025-09-29 08:22:55.381 00:00:10.327 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:23:25.224 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-09-29 08:23:55.744 00:00:10.361 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:24:25.436 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 10 6452 1 2025-09-29 08:20:35.184 00:05:01.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:24:56.144 00:00:10.356 TCP 23.104.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:25:09.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:25:09.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:21:35.186 00:05:01.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:25:25.650 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-09-29 08:25:56.540 00:00:10.362 TCP 23.104.0.1:51976 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:26:25.826 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58034 10 6452 1 2025-09-29 08:26:56.942 00:00:10.371 TCP 23.104.0.1:47256 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:27:26.067 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-09-29 08:27:57.355 00:00:10.560 TCP 23.104.0.1:40742 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:28:26.297 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43800 10 6452 1 2025-09-29 08:28:57.960 00:00:10.363 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:29:26.509 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-09-29 08:30:09.781 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:30:09.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:29:58.366 00:00:10.360 TCP 23.104.0.1:34058 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:26:35.184 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:30:26.732 00:00:15.359 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-09-29 08:30:58.770 00:00:10.376 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:27:35.187 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:31:32.135 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-09-29 08:31:59.184 00:00:10.365 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:32:32.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50732 10 6452 1 2025-09-29 08:32:59.588 00:00:10.362 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:33:32.577 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34478 10 6452 1 2025-09-29 08:33:59.995 00:00:10.366 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:34:32.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60756 10 6452 1 2025-09-29 08:35:10.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:35:00.397 00:00:10.324 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:35:10.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:35:33.002 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-09-29 08:36:00.759 00:00:10.375 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:32:35.187 00:05:01.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:36:33.224 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58280 10 6452 1 2025-09-29 08:37:01.171 00:00:10.359 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:33:35.189 00:05:01.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:37:33.445 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-09-29 08:38:01.570 00:00:10.361 TCP 23.104.0.1:33220 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:38:33.663 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34604 10 6452 1 2025-09-29 08:39:01.970 00:00:10.373 TCP 23.104.0.1:38592 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:39:33.885 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 10 6452 1 2025-09-29 08:40:10.006 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:40:10.181 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:40:02.382 00:00:10.365 TCP 23.104.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:40:34.076 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-09-29 08:41:02.785 00:00:10.325 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:41:34.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47574 10 6452 1 2025-09-29 08:42:03.149 00:00:10.367 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:38:35.188 00:05:01.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:42:34.497 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43406 10 6452 1 2025-09-29 08:43:03.554 00:00:10.369 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:39:35.190 00:05:01.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:43:34.719 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40478 10 6452 1 2025-09-29 08:44:03.959 00:00:12.218 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:44:34.938 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:37784 10 6452 1 2025-09-29 08:45:10.424 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:45:10.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:45:06.215 00:00:10.362 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:45:35.133 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60262 10 6452 1 2025-09-29 08:46:06.617 00:00:10.362 TCP 23.104.0.1:40516 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:46:35.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-09-29 08:47:07.023 00:00:10.321 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:47:35.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36130 10 6452 1 2025-09-29 08:48:07.385 00:00:10.635 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:44:35.189 00:05:01.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:48:35.724 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-09-29 08:49:08.086 00:00:10.326 TCP 23.104.0.1:37128 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:45:35.191 00:05:01.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:49:35.940 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-09-29 08:50:10.408 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:50:10.293 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:50:08.453 00:00:10.361 TCP 23.104.0.1:44560 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:50:36.173 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44204 10 6452 1 2025-09-29 08:51:08.851 00:00:10.385 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:51:36.388 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-09-29 08:52:09.291 00:00:10.437 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 15 1926 1 2025-09-29 08:52:36.616 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 12 10367 1 2025-09-29 08:53:09.766 00:00:10.369 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:53:36.861 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:59616 10 6452 1 2025-09-29 08:54:10.175 00:00:10.365 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:50:35.192 00:05:01.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 08:54:37.125 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48950 10 6452 1 2025-09-29 08:55:10.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 08:55:10.810 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 08:55:10.575 00:00:10.365 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:51:35.196 00:05:01.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 08:55:37.372 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52496 10 6452 1 2025-09-29 08:56:10.979 00:00:10.367 TCP 23.104.0.1:37166 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:56:37.592 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40934 10 6452 1 2025-09-29 08:57:11.387 00:00:10.328 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:57:37.810 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-09-29 08:58:11.758 00:00:10.365 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-09-29 08:58:38.047 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-09-29 07:56:35 - 2025-09-29 08:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0000s Wall: 0.0022s flows/second: 75225.9 Runtime: 0.0022s