Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 03:58:42.324 00:00:10.369 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:58:47.646 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54946 10 6452 1 2025-10-02 03:59:42.730 00:00:10.373 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-10-02 03:59:47.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-10-02 03:56:36.413 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:00:43.141 00:00:10.332 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:00:48.032 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33014 10 6452 1 2025-10-02 04:01:31.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:01:31.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 03:57:36.415 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:01:43.506 00:00:10.370 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:01:48.244 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59280 10 6452 1 2025-10-02 04:02:43.913 00:00:10.368 TCP 23.104.0.1:42820 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:02:48.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44802 10 6452 1 2025-10-02 04:03:44.316 00:00:10.549 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:03:48.664 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-10-02 04:04:44.905 00:00:10.368 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:04:48.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6452 1 2025-10-02 04:05:45.310 00:00:10.369 TCP 23.104.0.1:47440 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:05:49.123 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-10-02 04:06:31.414 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:06:31.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:02:36.413 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:06:45.713 00:00:10.368 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:06:49.335 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41248 10 6452 1 2025-10-02 04:03:36.418 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:07:46.117 00:00:10.577 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:07:49.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58648 10 6452 1 2025-10-02 04:08:46.734 00:00:10.366 TCP 23.104.0.1:35672 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:08:49.720 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-10-02 04:09:47.139 00:00:10.366 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:09:49.934 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58026 10 6452 1 2025-10-02 04:10:50.160 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37968 10 6452 1 2025-10-02 04:10:47.544 00:00:10.362 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:11:31.273 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:11:31.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:11:47.948 00:00:10.371 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:11:50.375 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56658 10 6452 1 2025-10-02 04:08:36.417 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:12:48.363 00:00:10.356 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:12:50.550 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-10-02 04:09:36.420 00:05:01.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:13:50.767 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58440 10 6452 1 2025-10-02 04:13:48.757 00:00:10.380 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:14:50.979 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-10-02 04:14:49.175 00:00:10.330 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:15:49.543 00:00:10.365 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:15:51.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-10-02 04:16:31.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:16:31.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:16:49.945 00:00:10.372 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:16:51.386 00:00:10.779 TCP 1.101.0.1:3000 -> 22.102.0.1:52104 10 6452 1 2025-10-02 04:17:50.356 00:00:10.440 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 15 1926 1 2025-10-02 04:17:52.199 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 12 10369 1 2025-10-02 04:14:36.419 00:05:01.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:18:50.834 00:00:10.396 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:18:52.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-10-02 04:15:36.421 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:19:51.272 00:00:10.366 TCP 23.104.0.1:54532 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:19:52.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51372 10 6452 1 2025-10-02 04:20:51.683 00:00:10.365 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:20:52.863 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-10-02 04:21:31.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:21:31.541 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:21:52.110 00:00:10.382 TCP 23.104.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:21:53.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-10-02 04:22:52.560 00:00:10.364 TCP 23.104.0.1:41734 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:22:53.301 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44416 10 6452 1 2025-10-02 04:23:53.529 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-10-02 04:23:52.962 00:00:10.370 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:20:36.419 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:24:53.750 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-10-02 04:24:53.374 00:00:10.371 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:21:36.422 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:25:53.786 00:00:10.371 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:25:53.965 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33368 12 6556 1 2025-10-02 04:26:31.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:26:31.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:26:54.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56118 10 6452 1 2025-10-02 04:26:54.195 00:00:10.365 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:27:54.594 00:00:10.365 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:27:54.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-10-02 04:28:54.996 00:00:10.329 TCP 23.104.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:28:54.616 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-10-02 04:29:55.362 00:00:10.319 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:29:54.828 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-10-02 04:26:36.422 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:30:55.067 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-10-02 04:30:55.723 00:00:10.353 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:31:32.197 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:31:32.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:27:36.424 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:31:56.114 00:00:10.367 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:31:55.241 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-10-02 04:32:56.521 00:00:10.369 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:32:55.471 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54178 10 6452 1 2025-10-02 04:33:55.682 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-10-02 04:33:56.926 00:00:10.384 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:34:55.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-10-02 04:34:57.348 00:00:10.369 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:35:56.082 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-10-02 04:35:57.755 00:00:10.375 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:36:32.531 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:36:32.411 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:32:36.424 00:05:01.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:36:56.291 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-10-02 04:36:58.168 00:00:10.367 TCP 23.104.0.1:55882 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:33:36.427 00:05:01.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:37:56.460 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-10-02 04:37:58.572 00:00:10.364 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:38:56.635 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49422 10 6452 1 2025-10-02 04:38:58.975 00:00:10.330 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:39:56.844 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37902 10 6452 1 2025-10-02 04:39:59.343 00:00:10.369 TCP 23.104.0.1:45098 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:40:57.078 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-10-02 04:40:59.751 00:00:10.392 TCP 23.104.0.1:35606 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:41:32.008 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:41:32.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:42:00.183 00:00:10.363 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:41:57.290 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-10-02 04:38:36.425 00:05:01.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:43:00.586 00:00:10.399 TCP 23.104.0.1:38392 -> 1.101.0.1:3000 15 1926 1 2025-10-02 04:42:57.466 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 12 10369 1 2025-10-02 04:39:36.428 00:05:01.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:43:57.707 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-10-02 04:44:01.024 00:00:10.364 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:45:01.428 00:00:10.364 TCP 23.104.0.1:39780 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:44:57.919 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57530 10 6452 1 2025-10-02 04:45:58.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-10-02 04:46:01.828 00:00:10.371 TCP 23.104.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:46:32.330 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:46:32.248 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:46:58.348 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48240 10 6452 1 2025-10-02 04:47:02.234 00:00:10.622 TCP 23.104.0.1:36414 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:47:58.557 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-10-02 04:48:02.894 00:00:10.385 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:44:36.429 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:48:58.771 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:35764 10 6452 1 2025-10-02 04:49:03.309 00:00:10.364 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:45:36.431 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:49:59.255 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6452 1 2025-10-02 04:50:03.716 00:00:10.375 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:50:59.472 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-10-02 04:51:04.128 00:00:10.530 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:51:32.596 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:51:32.625 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:51:59.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-10-02 04:52:04.700 00:00:10.367 TCP 23.104.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:52:59.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-10-02 04:53:05.104 00:00:10.371 TCP 23.104.0.1:38448 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:54:00.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-10-02 04:54:05.516 00:00:10.369 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:50:36.430 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 04:55:00.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-10-02 04:55:05.923 00:00:10.861 TCP 23.104.0.1:34540 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:51:36.431 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 04:56:00.550 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-10-02 04:56:06.835 00:00:10.383 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:56:32.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 04:56:32.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:57:00.725 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-10-02 04:57:07.250 00:00:10.367 TCP 23.104.0.1:59260 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:58:00.950 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2025-10-02 04:58:07.652 00:00:10.367 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507124, total packets: 1586, avg bps: 1096, avg pps: 0, avg bpp: 319 Time window: 2025-10-02 03:56:36 - 2025-10-02 04:58:18 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0010s Wall: 0.0014s flows/second: 118312.0 Runtime: 0.0014s