Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 04:58:53.508 00:00:10.367 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-10-05 04:59:12.977 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-10-05 04:59:53.913 00:00:10.367 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:00:13.212 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-10-05 04:56:37.828 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:00:54.315 00:00:10.325 TCP 23.104.0.1:49716 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:01:13.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-10-05 04:57:37.831 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:01:54.676 00:00:10.373 TCP 23.104.0.1:55558 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:02:13.638 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37742 10 6452 1 2025-10-05 05:02:59.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:02:59.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:02:55.102 00:00:10.369 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:03:13.844 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-10-05 05:03:55.508 00:00:10.367 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:04:14.078 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-10-05 05:04:55.908 00:00:10.367 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:05:14.295 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-10-05 05:05:56.312 00:00:10.325 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:06:14.510 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-10-05 05:02:37.829 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:06:56.672 00:00:10.362 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:07:14.688 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-10-05 05:03:37.833 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:07:59.301 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:07:59.311 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:07:57.096 00:00:10.365 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:08:14.902 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-10-05 05:08:57.500 00:00:10.367 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:09:15.115 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43138 10 6452 1 2025-10-05 05:09:57.909 00:00:10.366 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:10:15.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37594 10 6452 1 2025-10-05 05:10:58.319 00:00:10.577 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:11:15.543 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-10-05 05:11:58.934 00:00:10.372 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:12:15.727 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54650 10 6452 1 2025-10-05 05:08:37.829 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:12:59.314 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:12:59.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:12:59.344 00:00:10.362 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:13:15.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-10-05 05:09:37.832 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:13:59.748 00:00:10.326 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:14:16.189 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-10-05 05:15:00.113 00:00:10.366 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:15:16.409 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-10-05 05:16:00.519 00:00:10.367 TCP 23.104.0.1:42722 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:16:16.583 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34512 10 6452 1 2025-10-05 05:17:00.923 00:00:10.382 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:17:16.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-10-05 05:17:59.425 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:17:59.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:18:01.343 00:00:10.360 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:18:16.981 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-10-05 05:14:37.829 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:19:01.744 00:00:10.361 TCP 23.104.0.1:60544 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:19:17.213 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2025-10-05 05:15:37.833 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:20:02.147 00:00:10.361 TCP 23.104.0.1:42326 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:20:17.382 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-10-05 05:21:02.546 00:00:10.362 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:21:17.591 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49160 10 6452 1 2025-10-05 05:22:02.962 00:00:10.363 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:22:17.806 00:00:10.488 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-10-05 05:22:59.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:22:59.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:23:03.368 00:00:10.362 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:23:18.332 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-10-05 05:24:03.769 00:00:10.368 TCP 23.104.0.1:56970 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:24:18.556 00:00:10.975 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-10-05 05:20:37.830 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:25:04.177 00:00:10.324 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:25:19.569 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-10-05 05:21:37.832 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:26:04.542 00:00:10.365 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:26:19.777 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-10-05 05:27:04.949 00:00:10.372 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:27:20.002 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-10-05 05:27:59.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:27:59.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:28:05.367 00:00:10.366 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:28:20.218 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43954 10 6452 1 2025-10-05 05:29:05.771 00:00:10.329 TCP 23.104.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:29:20.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-10-05 05:30:06.137 00:00:10.363 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:30:20.637 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 10 6452 1 2025-10-05 05:26:37.834 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:31:06.537 00:00:10.363 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:31:20.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-05 05:27:37.836 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:32:06.942 00:00:10.370 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:32:21.041 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-10-05 05:32:59.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:32:59.721 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:33:07.356 00:00:10.368 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:33:21.259 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-10-05 05:34:07.764 00:00:10.377 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:34:21.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6452 1 2025-10-05 05:35:08.176 00:00:10.370 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:35:21.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51074 10 6452 1 2025-10-05 05:36:08.583 00:00:10.328 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:36:21.855 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-10-05 05:32:37.834 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:37:08.947 00:00:11.058 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:37:22.034 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37588 10 6452 1 2025-10-05 05:33:37.836 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:37:59.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:37:59.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:38:10.045 00:00:10.329 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:38:22.247 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-10-05 05:39:10.412 00:00:10.327 TCP 23.104.0.1:53986 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:39:22.474 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39036 10 6452 1 2025-10-05 05:40:10.777 00:00:10.368 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:40:22.650 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-10-05 05:41:11.190 00:00:10.365 TCP 23.104.0.1:46888 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:41:22.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 10 6452 1 2025-10-05 05:42:11.594 00:00:10.733 TCP 23.104.0.1:40820 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:42:23.055 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-10-05 05:38:37.836 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:43:00.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:42:59.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:43:12.372 00:00:11.068 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 15 1926 1 2025-10-05 05:43:23.264 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:43306 12 10375 1 2025-10-05 05:39:37.838 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:44:13.480 00:00:10.366 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:44:23.516 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51826 10 6452 1 2025-10-05 05:45:13.884 00:00:10.378 TCP 23.104.0.1:47770 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:45:23.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 10 6452 1 2025-10-05 05:46:14.301 00:00:10.364 TCP 23.104.0.1:35088 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:46:23.955 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45526 10 6452 1 2025-10-05 05:47:14.704 00:00:10.363 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:47:24.161 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-10-05 05:48:00.180 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:48:00.261 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:48:15.109 00:00:10.363 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:48:24.381 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-10-05 05:44:37.837 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:49:15.512 00:00:10.358 TCP 23.104.0.1:35502 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:49:24.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38966 10 6452 1 2025-10-05 05:45:37.839 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:50:15.909 00:00:10.364 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:50:24.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55360 10 6452 1 2025-10-05 05:51:16.316 00:00:10.328 TCP 23.104.0.1:33422 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:51:25.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-10-05 05:52:16.681 00:00:10.327 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:52:25.253 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:54676 10 6452 1 2025-10-05 05:53:00.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:53:00.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:53:17.056 00:00:10.364 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:53:25.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-10-05 05:54:17.456 00:00:10.366 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:54:25.757 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36854 10 6452 1 2025-10-05 05:50:37.843 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 05:55:17.864 00:00:10.329 TCP 23.104.0.1:36200 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:55:25.972 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-10-05 05:51:37.844 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 05:56:18.228 00:00:10.373 TCP 23.104.0.1:57848 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:56:26.215 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33000 10 6452 1 2025-10-05 05:57:18.639 00:00:10.364 TCP 23.104.0.1:51224 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:57:26.388 00:00:10.584 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-10-05 05:58:00.203 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 05:58:00.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 05:58:19.041 00:00:10.366 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-10-05 05:58:27.008 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-05 04:56:37 - 2025-10-05 05:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0008s Wall: 0.0015s flows/second: 111485.6 Runtime: 0.0015s