Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 01:59:27.962 00:00:10.366 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:59:41.495 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50440 10 6452 1 2025-09-30 02:00:31.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:00:30.922 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 01:56:35.493 00:05:01.667 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:00:28.371 00:00:10.362 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:00:41.700 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-09-30 02:01:28.775 00:00:10.372 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-09-30 01:57:35.495 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:01:41.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-09-30 02:02:29.184 00:00:10.367 TCP 23.104.0.1:54402 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:02:42.127 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-09-30 02:03:29.583 00:00:10.364 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:03:42.331 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6452 1 2025-09-30 02:04:29.990 00:00:10.329 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:04:42.848 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6452 1 2025-09-30 02:05:31.188 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:05:31.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:05:30.356 00:00:10.367 TCP 23.104.0.1:40902 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:05:43.085 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-09-30 02:06:30.764 00:00:10.336 TCP 23.104.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:02:35.497 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:06:43.281 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 10 6452 1 2025-09-30 02:03:35.500 00:05:01.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:07:31.139 00:00:10.364 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:07:43.528 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-09-30 02:08:31.542 00:00:10.384 TCP 23.104.0.1:58024 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:08:43.751 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38594 10 6452 1 2025-09-30 02:09:31.950 00:00:10.374 TCP 23.104.0.1:39296 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:09:43.959 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-09-30 02:10:31.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:10:31.550 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:10:32.356 00:00:10.366 TCP 23.104.0.1:49360 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:10:44.143 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59404 10 6452 1 2025-09-30 02:11:32.760 00:00:10.376 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:11:44.315 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-09-30 02:08:35.499 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:12:33.176 00:00:10.364 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:12:44.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49264 10 6452 1 2025-09-30 02:09:35.502 00:05:01.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:13:33.577 00:00:10.365 TCP 23.104.0.1:46192 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:13:44.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-09-30 02:14:33.979 00:00:10.368 TCP 23.104.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:14:44.948 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:46856 10 6452 1 2025-09-30 02:15:31.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:15:31.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:15:34.393 00:00:10.367 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:15:45.145 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-09-30 02:16:34.802 00:00:10.364 TCP 23.104.0.1:41762 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:16:45.369 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-09-30 02:17:35.206 00:00:10.366 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:17:45.544 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45868 10 6452 1 2025-09-30 02:14:35.499 00:05:01.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:18:35.610 00:00:10.434 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:18:45.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-09-30 02:15:35.503 00:05:01.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:19:36.098 00:00:10.453 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:19:45.981 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-09-30 02:20:31.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:20:31.873 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:20:36.589 00:00:10.360 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:20:46.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-09-30 02:21:36.992 00:00:10.555 TCP 23.104.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:21:46.428 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-09-30 02:22:37.583 00:00:10.365 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:22:46.653 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-09-30 02:23:37.986 00:00:10.370 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:23:46.874 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40688 10 6452 1 2025-09-30 02:20:35.502 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:24:38.405 00:00:10.369 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:24:47.063 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55860 10 6452 1 2025-09-30 02:25:31.465 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:25:31.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:21:35.504 00:05:01.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:25:38.815 00:00:10.370 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:25:47.272 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37244 10 6452 1 2025-09-30 02:26:39.224 00:00:10.322 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:26:47.483 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58382 10 6452 1 2025-09-30 02:27:39.585 00:00:10.327 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:27:47.657 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38370 10 6452 1 2025-09-30 02:28:39.950 00:00:10.368 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:28:47.821 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-09-30 02:29:40.356 00:00:10.614 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:29:48.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-09-30 02:30:31.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:30:31.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:26:35.503 00:05:01.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:30:41.009 00:00:10.364 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:30:48.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51236 10 6452 1 2025-09-30 02:27:35.506 00:05:01.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:31:41.410 00:00:10.576 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:31:48.479 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-09-30 02:32:42.028 00:00:10.365 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:32:48.657 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46242 10 6452 1 2025-09-30 02:33:42.433 00:00:10.326 TCP 23.104.0.1:38470 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:33:48.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-09-30 02:34:42.802 00:00:10.366 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:34:49.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34580 10 6452 1 2025-09-30 02:35:31.667 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:35:31.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:35:43.204 00:00:10.375 TCP 23.104.0.1:52520 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:35:49.316 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-09-30 02:32:35.504 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:36:43.616 00:00:10.367 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:36:49.530 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-09-30 02:33:35.510 00:05:01.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:37:44.023 00:00:10.492 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:37:49.748 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53614 10 6452 1 2025-09-30 02:38:44.553 00:00:10.323 TCP 23.104.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:38:49.963 00:00:10.545 TCP 1.101.0.1:3000 -> 22.102.0.1:36322 10 6452 1 2025-09-30 02:39:44.915 00:00:10.375 TCP 23.104.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:39:50.547 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47370 10 6452 1 2025-09-30 02:40:31.957 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:40:32.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:40:45.328 00:00:10.367 TCP 23.104.0.1:45416 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:40:50.725 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-09-30 02:41:45.731 00:00:10.366 TCP 23.104.0.1:48426 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:41:50.951 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 10 6452 1 2025-09-30 02:38:35.507 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:42:46.135 00:00:10.363 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:42:51.171 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-09-30 02:39:35.511 00:05:01.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:43:46.536 00:00:10.329 TCP 23.104.0.1:41174 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:43:51.385 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49840 10 6452 1 2025-09-30 02:44:51.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-09-30 02:44:46.914 00:00:10.366 TCP 23.104.0.1:49460 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:45:31.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:45:32.066 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:45:51.809 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-09-30 02:45:47.316 00:00:10.374 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:46:47.728 00:00:10.374 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:46:52.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 2025-09-30 02:47:48.140 00:00:10.368 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:47:52.243 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-30 02:44:35.511 00:05:01.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:48:48.545 00:00:10.368 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:48:52.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-09-30 02:45:35.513 00:05:01.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:49:48.949 00:00:10.383 TCP 23.104.0.1:56834 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:49:52.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43272 10 6452 1 2025-09-30 02:50:32.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:50:32.115 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:50:49.364 00:00:10.324 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:50:52.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-09-30 02:51:49.727 00:00:10.324 TCP 23.104.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:51:53.105 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43340 10 6452 1 2025-09-30 02:52:50.102 00:00:10.340 TCP 23.104.0.1:48238 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:52:53.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58376 10 6452 1 2025-09-30 02:53:50.480 00:00:10.327 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:53:53.529 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6452 1 2025-09-30 02:50:35.510 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 02:54:50.845 00:00:10.381 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:54:53.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-09-30 02:55:32.166 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 02:55:32.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 02:51:35.513 00:05:01.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 02:55:51.268 00:00:10.325 TCP 23.104.0.1:37654 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:55:53.962 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55948 13 6608 1 2025-09-30 02:56:51.640 00:00:10.376 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-09-30 02:56:54.172 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-09-30 02:57:54.387 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-09-30 02:57:52.072 00:00:10.363 TCP 23.104.0.1:57976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490545, total packets: 1554, avg bps: 1063, avg pps: 0, avg bpp: 315 Time window: 2025-09-30 01:56:35 - 2025-09-30 02:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0000s Wall: 0.0013s flows/second: 122450.4 Runtime: 0.0013s