Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 10:59:01.006 00:00:10.366 TCP 23.104.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-09-29 10:59:05.644 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-09-29 11:00:01.406 00:00:10.361 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:00:05.861 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-09-29 11:00:13.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:00:13.253 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 10:56:35.229 00:05:01.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:01:01.803 00:00:10.371 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:01:06.089 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-09-29 10:57:35.231 00:05:01.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:02:02.213 00:00:10.323 TCP 23.104.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:02:06.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-09-29 11:03:02.574 00:00:10.367 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:03:06.529 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-09-29 11:04:02.979 00:00:10.367 TCP 23.104.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:04:06.709 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-09-29 11:05:03.383 00:00:10.330 TCP 23.104.0.1:45470 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:05:13.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:05:13.316 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:05:06.915 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58308 10 6452 1 2025-09-29 11:06:03.752 00:00:10.361 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:06:07.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-09-29 11:02:35.230 00:05:01.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:07:04.148 00:00:10.323 TCP 23.104.0.1:37542 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:07:07.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-09-29 11:03:35.234 00:05:01.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:08:04.513 00:00:10.346 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:08:07.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54130 10 6452 1 2025-09-29 11:09:04.929 00:00:10.381 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:09:07.743 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38066 10 6452 1 2025-09-29 11:10:13.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:10:05.351 00:00:10.366 TCP 23.104.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:10:13.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:10:07.959 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:33298 10 6452 1 2025-09-29 11:11:05.757 00:00:10.329 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:11:08.229 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-09-29 11:12:06.137 00:00:10.364 TCP 23.104.0.1:42436 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:12:08.457 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-09-29 11:08:35.233 00:05:01.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:13:06.541 00:00:10.365 TCP 23.104.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:13:08.679 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-09-29 11:09:35.235 00:05:01.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:14:06.946 00:00:10.370 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:14:08.898 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32976 10 6452 1 2025-09-29 11:15:13.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:15:13.335 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:15:09.118 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-09-29 11:15:07.357 00:00:10.364 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:16:09.341 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-09-29 11:16:07.759 00:00:10.381 TCP 23.104.0.1:35494 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:17:09.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-09-29 11:17:08.182 00:00:10.366 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:18:08.584 00:00:10.368 TCP 23.104.0.1:41310 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:18:09.733 00:00:10.552 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 10 6452 1 2025-09-29 11:14:35.233 00:05:01.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:19:10.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33616 10 6452 1 2025-09-29 11:19:09.000 00:00:10.361 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:15:35.236 00:05:01.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:20:13.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:20:13.307 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:20:09.399 00:00:10.366 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:20:10.536 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60904 10 6452 1 2025-09-29 11:21:09.805 00:00:10.367 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:21:10.713 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-09-29 11:22:10.210 00:00:10.375 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:22:11.188 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-09-29 11:23:10.625 00:00:10.365 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:23:11.408 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58180 10 6452 1 2025-09-29 11:24:11.032 00:00:10.372 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:24:11.590 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6452 1 2025-09-29 11:20:35.239 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:25:13.419 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:25:13.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:25:11.434 00:00:10.327 TCP 23.104.0.1:33518 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:25:11.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-09-29 11:21:35.240 00:05:01.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:26:11.801 00:00:10.365 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:26:11.972 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6452 1 2025-09-29 11:27:12.202 00:00:10.381 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:27:12.163 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-09-29 11:28:12.379 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-09-29 11:28:12.608 00:00:10.360 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:29:12.598 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-09-29 11:29:13.009 00:00:10.334 TCP 23.104.0.1:35644 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:30:13.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:30:13.649 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:30:13.386 00:00:10.361 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:30:12.770 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-09-29 11:26:35.241 00:05:01.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:31:12.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-09-29 11:31:13.780 00:00:10.367 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:27:35.243 00:05:01.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:32:13.170 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-09-29 11:32:14.185 00:00:10.363 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:33:14.584 00:00:10.323 TCP 23.104.0.1:47106 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:33:13.380 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43670 10 6452 1 2025-09-29 11:34:14.944 00:00:10.373 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:34:13.588 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43848 10 6452 1 2025-09-29 11:35:13.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:35:13.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:35:15.352 00:00:10.363 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:35:13.799 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 11 6504 1 2025-09-29 11:36:14.077 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-09-29 11:36:15.757 00:00:10.368 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:32:35.241 00:05:01.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:37:14.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 12 6556 1 2025-09-29 11:37:16.164 00:00:10.367 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:33:35.244 00:05:01.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:38:14.503 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-09-29 11:38:16.569 00:00:10.368 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:39:14.671 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37718 10 6452 1 2025-09-29 11:39:16.974 00:00:10.331 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:40:13.698 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:40:13.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:40:14.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-09-29 11:40:17.343 00:00:10.364 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:41:15.102 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-09-29 11:41:17.742 00:00:11.052 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:42:15.327 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36328 10 6452 1 2025-09-29 11:42:18.832 00:00:10.372 TCP 23.104.0.1:34350 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:38:35.243 00:05:01.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:43:15.499 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-09-29 11:43:19.237 00:00:10.366 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:39:35.246 00:05:01.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:44:15.678 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49990 10 6452 1 2025-09-29 11:44:19.642 00:00:10.368 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:45:13.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:45:14.074 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:45:15.909 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35408 10 6452 1 2025-09-29 11:45:20.058 00:00:10.329 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:46:16.083 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-09-29 11:46:20.424 00:00:10.329 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:47:16.292 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 14 10473 1 2025-09-29 11:47:20.789 00:00:10.447 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 15 1926 1 2025-09-29 11:48:16.573 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46328 10 6452 1 2025-09-29 11:48:21.276 00:00:10.360 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:44:35.245 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:49:16.790 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51796 10 6452 1 2025-09-29 11:49:21.676 00:00:10.361 TCP 23.104.0.1:50844 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:45:35.247 00:05:01.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:50:14.142 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:50:14.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:50:16.967 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44454 10 6452 1 2025-09-29 11:50:22.101 00:00:10.363 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:51:17.189 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-09-29 11:51:22.505 00:00:10.366 TCP 23.104.0.1:34354 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:52:17.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 12 6556 1 2025-09-29 11:52:22.913 00:00:10.339 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:53:17.620 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-09-29 11:53:23.292 00:00:10.361 TCP 23.104.0.1:57558 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:54:17.834 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-09-29 11:54:23.700 00:00:10.367 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:50:35.246 00:05:01.612 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 11:55:14.104 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 11:55:14.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 11:55:18.076 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51714 10 6452 1 2025-09-29 11:55:24.108 00:00:10.361 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:51:35.248 00:05:01.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 11:56:18.286 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-09-29 11:56:24.511 00:00:10.363 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:57:18.497 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 10 6452 1 2025-09-29 11:57:24.915 00:00:10.381 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-09-29 11:58:18.718 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-09-29 11:58:25.336 00:00:10.363 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503048, total packets: 1585, avg bps: 1081, avg pps: 0, avg bpp: 317 Time window: 2025-09-29 10:56:35 - 2025-09-29 11:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0000s Wall: 0.0029s flows/second: 57422.6 Runtime: 0.0029s