Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 18:59:18.467 00:00:19.058 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-10-02 18:59:35.198 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49058 10 6452 1 2025-10-02 18:56:36.713 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:00:27.564 00:00:10.372 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:00:35.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-10-02 18:57:36.716 00:05:01.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:01:27.969 00:00:10.378 TCP 23.104.0.1:41046 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:01:35.573 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6452 1 2025-10-02 19:01:49.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:01:49.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:02:28.389 00:00:10.365 TCP 23.104.0.1:51744 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:02:35.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56878 10 6452 1 2025-10-02 19:03:28.795 00:00:10.408 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 15 1926 1 2025-10-02 19:03:36.000 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44480 12 10375 1 2025-10-02 19:04:29.242 00:00:10.363 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:04:36.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-10-02 19:05:29.641 00:00:10.360 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:05:36.466 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 6452 1 2025-10-02 19:06:30.055 00:00:10.363 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:02:36.716 00:05:01.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:06:36.680 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-10-02 19:06:49.259 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:06:49.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:03:36.717 00:05:01.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:07:30.456 00:00:10.358 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:07:36.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 2025-10-02 19:08:30.855 00:00:10.378 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:08:37.113 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-10-02 19:09:31.273 00:00:10.323 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:09:37.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50130 10 6452 1 2025-10-02 19:10:31.639 00:00:10.363 TCP 23.104.0.1:45066 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:10:37.530 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-10-02 19:11:32.049 00:00:10.369 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:11:37.741 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-10-02 19:11:49.495 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:11:49.621 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:08:36.716 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:12:32.456 00:00:10.366 TCP 23.104.0.1:50030 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:12:38.467 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-10-02 19:09:36.718 00:05:01.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:13:32.863 00:00:10.366 TCP 23.104.0.1:48360 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:13:38.679 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47082 10 6452 1 2025-10-02 19:14:33.273 00:00:10.326 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:14:38.899 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-10-02 19:15:33.642 00:00:10.372 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:15:39.114 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-10-02 19:16:49.696 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:16:39.281 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51302 10 6452 1 2025-10-02 19:16:34.057 00:00:10.368 TCP 23.104.0.1:54938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:16:49.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:17:34.466 00:00:10.361 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:17:39.452 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60784 12 10375 1 2025-10-02 19:14:36.717 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:18:34.871 00:00:10.465 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 15 1926 1 2025-10-02 19:18:39.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52746 10 6452 1 2025-10-02 19:15:36.719 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:19:35.367 00:00:10.375 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:19:39.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-10-02 19:20:35.802 00:00:10.366 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:20:40.129 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58474 10 6452 1 2025-10-02 19:21:36.209 00:00:10.375 TCP 23.104.0.1:39182 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:21:49.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:21:49.538 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:21:40.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37184 10 6452 1 2025-10-02 19:22:36.624 00:00:10.370 TCP 23.104.0.1:35656 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:22:40.546 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56452 10 6452 1 2025-10-02 19:23:37.031 00:00:10.368 TCP 23.104.0.1:43750 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:23:40.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40370 10 6452 1 2025-10-02 19:20:36.719 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:24:40.933 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-10-02 19:24:37.443 00:00:10.363 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:21:36.722 00:05:01.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:25:37.849 00:00:10.337 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:25:41.178 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-10-02 19:26:49.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:26:38.221 00:00:10.372 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:26:41.405 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-10-02 19:26:49.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:27:41.630 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6452 1 2025-10-02 19:27:38.635 00:00:10.362 TCP 23.104.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:28:39.033 00:00:10.365 TCP 23.104.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:28:41.807 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-10-02 19:29:39.438 00:00:10.362 TCP 23.104.0.1:45592 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:29:42.028 00:00:10.644 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-10-02 19:26:36.721 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:30:39.835 00:00:10.389 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:30:42.709 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-10-02 19:27:36.722 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:31:50.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:31:40.258 00:00:10.587 TCP 23.104.0.1:56548 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:31:49.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:31:42.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-10-02 19:32:40.892 00:00:10.384 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:32:43.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60734 10 6452 1 2025-10-02 19:33:41.309 00:00:10.382 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:33:43.322 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-10-02 19:34:44.041 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44876 10 6452 1 2025-10-02 19:34:41.709 00:00:10.365 TCP 23.104.0.1:51132 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:35:44.258 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34588 10 6452 1 2025-10-02 19:35:42.112 00:00:10.318 TCP 23.104.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:32:36.721 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:36:50.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:36:44.474 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6452 1 2025-10-02 19:36:50.266 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:36:42.465 00:00:10.368 TCP 23.104.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:33:36.724 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:37:42.870 00:00:10.372 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:37:44.646 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58748 10 6452 1 2025-10-02 19:38:44.863 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-10-02 19:38:43.281 00:00:10.321 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:39:45.094 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39354 10 6452 1 2025-10-02 19:39:43.643 00:00:10.370 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:40:45.325 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-10-02 19:40:44.041 00:00:10.361 TCP 23.104.0.1:50522 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:41:50.117 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:41:50.232 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:41:45.496 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55468 10 6452 1 2025-10-02 19:41:44.438 00:00:10.361 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:38:36.722 00:05:01.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:42:44.837 00:00:10.371 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:42:45.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-10-02 19:39:36.725 00:05:01.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:43:45.245 00:00:10.366 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:43:45.917 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-10-02 19:44:46.113 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6452 1 2025-10-02 19:44:45.654 00:00:10.409 TCP 23.104.0.1:39872 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:45:46.368 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:40822 10 6452 1 2025-10-02 19:45:46.107 00:00:10.322 TCP 23.104.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:46:50.582 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:46:50.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:46:46.475 00:00:10.364 TCP 23.104.0.1:34080 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:46:46.560 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-10-02 19:47:46.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37420 12 6556 1 2025-10-02 19:47:46.874 00:00:10.321 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:44:36.722 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:48:47.236 00:00:10.363 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:48:46.982 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-10-02 19:45:36.725 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:49:47.637 00:00:10.364 TCP 23.104.0.1:47056 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:49:47.239 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-10-02 19:50:48.047 00:00:10.369 TCP 23.104.0.1:48382 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:50:47.454 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-10-02 19:51:50.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:51:50.054 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:51:48.455 00:00:10.358 TCP 23.104.0.1:51092 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:51:47.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-10-02 19:52:47.850 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-10-02 19:52:48.853 00:00:10.330 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:53:49.220 00:00:10.328 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:53:48.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-10-02 19:50:36.723 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 19:54:48.292 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33196 10 6452 1 2025-10-02 19:54:49.584 00:00:10.365 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:51:36.727 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 19:55:49.988 00:00:10.361 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:55:48.466 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-10-02 19:56:50.268 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 19:56:50.454 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 19:56:48.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-10-02 19:56:50.389 00:00:10.323 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:57:50.750 00:00:10.384 TCP 23.104.0.1:39722 -> 1.101.0.1:3000 11 1507 1 2025-10-02 19:57:48.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53390 10 6452 1 Summary: total flows: 162, total bytes: 499177, total packets: 1565, avg bps: 1083, avg pps: 0, avg bpp: 318 Time window: 2025-10-02 18:56:36 - 2025-10-02 19:58:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0019s Wall: 0.0029s flows/second: 56016.3 Runtime: 0.0029s