Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 19:58:55.930 00:00:10.375 TCP 23.104.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:59:10.107 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-09-29 19:59:56.348 00:00:10.359 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:00:10.325 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-09-29 20:00:23.830 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:00:23.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:56:35.391 00:05:01.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:00:56.746 00:00:10.363 TCP 23.104.0.1:41716 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:01:10.539 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2025-09-29 19:57:35.392 00:05:01.667 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:01:57.148 00:00:10.322 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:02:10.766 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-09-29 20:02:57.507 00:00:10.369 TCP 23.104.0.1:39248 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:03:10.978 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-09-29 20:03:57.913 00:00:10.367 TCP 23.104.0.1:40942 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:04:11.222 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-09-29 20:04:58.316 00:00:10.364 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:05:11.442 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44366 10 6452 1 2025-09-29 20:05:23.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:05:24.112 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:05:58.712 00:00:10.375 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:06:11.659 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-09-29 20:02:35.389 00:05:01.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:06:59.126 00:00:10.603 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:07:11.890 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48450 10 6452 1 2025-09-29 20:03:35.392 00:05:01.668 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:07:59.769 00:00:10.374 TCP 23.104.0.1:47882 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:08:12.109 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-09-29 20:09:00.180 00:00:10.699 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:09:12.331 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-09-29 20:10:00.916 00:00:10.374 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:10:24.047 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:10:12.904 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60390 10 6452 1 2025-09-29 20:10:24.240 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:11:01.331 00:00:10.368 TCP 23.104.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:11:13.088 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:54730 10 6452 1 2025-09-29 20:12:01.734 00:00:10.368 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:12:13.502 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50994 10 6452 1 2025-09-29 20:08:35.392 00:05:01.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:13:02.140 00:00:10.376 TCP 23.104.0.1:42398 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:13:13.714 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-09-29 20:09:35.394 00:05:01.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:14:02.554 00:00:10.363 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:14:13.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-09-29 20:15:02.954 00:00:10.372 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:15:24.823 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:15:14.130 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-09-29 20:15:24.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:16:03.365 00:00:10.370 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:16:14.367 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40962 10 6452 1 2025-09-29 20:17:03.771 00:00:10.369 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:17:14.531 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 12 10375 1 2025-09-29 20:18:04.179 00:00:10.407 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 15 1926 1 2025-09-29 20:18:14.773 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57558 10 6452 1 2025-09-29 20:14:35.394 00:05:01.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:19:04.621 00:00:10.359 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:19:14.985 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-09-29 20:15:35.396 00:05:01.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:20:05.021 00:00:10.421 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:20:24.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:20:24.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:20:15.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-09-29 20:21:05.481 00:00:10.851 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:21:15.528 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54808 10 6452 1 2025-09-29 20:22:06.373 00:00:10.363 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:22:15.740 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-09-29 20:23:06.779 00:00:10.371 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:23:15.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-09-29 20:24:07.191 00:00:10.376 TCP 23.104.0.1:41794 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:24:16.128 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-09-29 20:20:35.394 00:05:01.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:25:07.605 00:00:10.660 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:25:16.291 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44976 10 6452 1 2025-09-29 20:25:24.455 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:25:24.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:21:35.397 00:05:01.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:26:08.318 00:00:10.367 TCP 23.104.0.1:42352 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:26:16.515 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-09-29 20:27:08.721 00:00:10.379 TCP 23.104.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:27:16.725 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-09-29 20:28:09.160 00:00:10.370 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:28:16.948 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42740 10 6452 1 2025-09-29 20:29:09.566 00:00:10.371 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:29:17.177 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58138 10 6452 1 2025-09-29 20:30:09.970 00:00:10.380 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:30:24.351 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:30:24.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:30:17.399 00:00:10.766 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-09-29 20:26:35.402 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:31:10.387 00:00:10.365 TCP 23.104.0.1:41824 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:31:18.212 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 13 6608 1 2025-09-29 20:27:35.404 00:05:01.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:32:10.796 00:00:10.441 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 15 1926 1 2025-09-29 20:32:18.518 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:40432 13 10419 1 2025-09-29 20:33:11.271 00:00:10.366 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:33:18.815 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-09-29 20:34:11.673 00:00:10.328 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:34:19.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-09-29 20:35:12.053 00:00:10.368 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:35:24.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:35:24.698 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:35:19.257 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-09-29 20:36:12.462 00:00:10.364 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:36:19.432 00:00:10.712 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-09-29 20:32:35.404 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:37:12.866 00:00:10.370 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:37:20.186 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-09-29 20:33:35.406 00:05:01.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:38:13.274 00:00:10.358 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:38:20.404 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-09-29 20:39:13.675 00:00:10.372 TCP 23.104.0.1:55490 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:39:20.625 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54226 10 6452 1 2025-09-29 20:40:24.884 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:40:24.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:40:14.108 00:00:10.365 TCP 23.104.0.1:46406 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:40:20.843 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-09-29 20:41:14.513 00:00:11.072 TCP 23.104.0.1:39062 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:41:21.082 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-09-29 20:42:15.624 00:00:10.332 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:42:21.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-09-29 20:38:35.404 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:43:15.993 00:00:10.364 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:43:21.517 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33084 10 6452 1 2025-09-29 20:39:35.408 00:05:01.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:44:16.403 00:00:10.366 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:44:21.723 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-09-29 20:45:24.755 00:00:00.014 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:45:24.650 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:45:16.806 00:00:10.367 TCP 23.104.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:45:21.933 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 10 6452 1 2025-09-29 20:46:17.210 00:00:10.363 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:46:22.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 6452 1 2025-09-29 20:47:17.615 00:00:10.395 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:47:22.386 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-09-29 20:48:18.064 00:00:10.362 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:48:22.611 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52256 10 6452 1 2025-09-29 20:44:35.407 00:05:01.667 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:49:18.465 00:00:10.364 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:49:22.835 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 10 6452 1 2025-09-29 20:45:35.408 00:05:01.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:50:24.813 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:50:24.749 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:50:18.872 00:00:10.337 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:50:23.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48048 10 6452 1 2025-09-29 20:51:19.241 00:00:10.365 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:51:23.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-09-29 20:52:19.650 00:00:10.444 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 15 1926 1 2025-09-29 20:52:23.518 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 12 10369 1 2025-09-29 20:53:20.133 00:00:10.374 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:53:23.760 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-09-29 20:54:20.548 00:00:10.365 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:54:23.976 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-09-29 20:50:35.407 00:05:01.667 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 20:55:25.254 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 20:55:25.150 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 20:55:20.950 00:00:10.377 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:55:24.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-09-29 20:51:35.410 00:05:01.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 20:56:21.366 00:00:10.347 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:56:24.432 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6452 1 2025-09-29 20:57:24.652 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-09-29 20:57:21.756 00:00:10.372 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-09-29 20:58:24.823 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36328 10 6452 1 2025-09-29 20:58:22.176 00:00:10.368 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511568, total packets: 1594, avg bps: 1100, avg pps: 0, avg bpp: 320 Time window: 2025-09-29 19:56:35 - 2025-09-29 20:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0019s Wall: 0.0027s flows/second: 60830.0 Runtime: 0.0027s