Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 05:59:02.184 00:00:10.370 TCP 23.104.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:59:36.554 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58836 10 6452 1 2025-10-11 06:00:02.594 00:00:10.364 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:56:40.659 00:05:02.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:00:36.766 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-10-11 06:00:53.562 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:00:53.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:01:03.001 00:00:10.369 TCP 23.104.0.1:55318 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:56:42.970 00:05:57.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:01:36.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-10-11 06:02:03.400 00:00:10.368 TCP 23.104.0.1:35058 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:02:37.216 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39668 10 6452 1 2025-10-11 06:03:03.801 00:00:10.328 TCP 23.104.0.1:45646 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:03:37.444 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-10-11 06:04:04.169 00:00:10.361 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:04:37.664 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-10-11 06:05:04.566 00:00:10.368 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:05:37.879 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-10-11 06:05:53.456 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:05:53.674 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:06:04.980 00:00:10.366 TCP 23.104.0.1:44634 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:02:40.660 00:05:02.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:06:38.097 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44468 10 6452 1 2025-10-11 06:07:05.385 00:00:10.364 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:02:42.974 00:05:57.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:07:38.269 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-10-11 06:08:05.789 00:00:10.367 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:08:38.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59256 10 6452 1 2025-10-11 06:09:06.195 00:00:10.329 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:09:38.660 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-10-11 06:10:06.588 00:00:10.371 TCP 23.104.0.1:59506 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:10:38.828 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-10-11 06:10:53.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:10:53.531 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:11:06.995 00:00:10.342 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:11:39.055 00:00:14.285 TCP 1.101.0.1:3000 -> 22.102.0.1:53410 10 6452 1 2025-10-11 06:12:07.395 00:00:10.371 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:08:40.660 00:05:02.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:12:43.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-10-11 06:13:07.803 00:00:10.334 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:08:42.979 00:05:57.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:13:43.615 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 10 6452 1 2025-10-11 06:14:08.177 00:00:10.324 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:14:43.831 00:00:14.700 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 10 6452 1 2025-10-11 06:15:08.532 00:00:10.360 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:15:53.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:15:53.819 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:15:48.570 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42708 10 6452 1 2025-10-11 06:16:08.931 00:00:10.388 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:16:48.751 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-10-11 06:17:09.356 00:00:10.362 TCP 23.104.0.1:40942 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:17:48.927 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-10-11 06:18:09.758 00:00:10.388 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:14:40.662 00:05:02.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:18:49.125 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-10-11 06:19:10.182 00:00:10.497 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:14:42.979 00:05:57.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:19:49.347 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-10-11 06:20:10.739 00:00:10.396 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:20:53.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:20:53.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:20:49.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-10-11 06:21:11.186 00:00:10.366 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:21:49.773 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6452 1 2025-10-11 06:22:11.588 00:00:10.366 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:22:49.987 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-10-11 06:23:11.993 00:00:10.367 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:23:50.227 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 12 6556 1 2025-10-11 06:24:12.398 00:00:10.373 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:20:40.664 00:05:02.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:24:50.452 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-10-11 06:25:12.810 00:00:13.528 TCP 23.104.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:20:42.980 00:05:57.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:25:54.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:25:54.289 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:25:50.670 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-10-11 06:26:16.378 00:00:10.366 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:26:50.922 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56320 10 6452 1 2025-10-11 06:27:16.780 00:00:10.372 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:27:51.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42236 10 6452 1 2025-10-11 06:28:17.190 00:00:10.370 TCP 23.104.0.1:41696 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:28:51.345 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39668 10 6452 1 2025-10-11 06:29:17.599 00:00:10.363 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:29:51.574 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39712 10 6452 1 2025-10-11 06:30:18.002 00:00:10.369 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:26:40.666 00:05:02.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:30:54.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:30:54.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:30:51.798 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-10-11 06:31:18.414 00:00:10.366 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:26:42.985 00:05:57.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:31:52.028 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:43232 10 6452 1 2025-10-11 06:32:18.820 00:00:10.361 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:32:52.209 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45340 10 6452 1 2025-10-11 06:33:19.217 00:00:10.365 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:33:52.387 00:00:10.621 TCP 1.101.0.1:3000 -> 22.102.0.1:39104 10 6452 1 2025-10-11 06:34:19.620 00:00:10.321 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:34:53.073 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33440 10 6452 1 2025-10-11 06:35:19.980 00:00:10.362 TCP 23.104.0.1:35510 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:35:54.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:35:54.290 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:35:53.312 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-10-11 06:36:20.385 00:00:10.366 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:32:40.666 00:05:02.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:36:53.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-10-11 06:37:20.792 00:00:10.362 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:32:42.983 00:05:57.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:37:53.742 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-10-11 06:38:21.192 00:00:10.367 TCP 23.104.0.1:37020 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:38:53.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46232 10 6452 1 2025-10-11 06:39:21.599 00:00:10.358 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:39:54.185 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57346 10 6452 1 2025-10-11 06:40:21.996 00:00:10.362 TCP 23.104.0.1:34854 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:40:54.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:40:54.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:40:54.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-10-11 06:41:22.396 00:00:10.324 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:41:54.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-10-11 06:42:22.771 00:00:10.370 TCP 23.104.0.1:34718 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:38:40.668 00:05:02.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:42:54.816 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-10-11 06:43:23.189 00:00:10.362 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:38:42.985 00:05:57.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:43:55.034 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6452 1 2025-10-11 06:44:23.585 00:00:10.321 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:44:55.251 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-10-11 06:45:23.946 00:00:10.328 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:45:54.895 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:45:54.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:45:55.468 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58474 10 6452 1 2025-10-11 06:46:24.313 00:00:10.419 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:46:55.679 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-10-11 06:47:24.782 00:00:10.380 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:47:55.907 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44588 10 6452 1 2025-10-11 06:48:25.207 00:00:10.377 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:44:40.668 00:05:02.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:48:56.146 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-10-11 06:49:25.622 00:00:10.363 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:44:42.988 00:05:57.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:49:56.363 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34514 10 6452 1 2025-10-11 06:50:26.024 00:00:10.373 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:50:54.662 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:50:54.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:50:56.586 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58372 10 6452 1 2025-10-11 06:51:26.446 00:00:10.362 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:51:56.806 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-10-11 06:52:26.848 00:00:10.386 TCP 23.104.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:52:56.980 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48522 10 6452 1 2025-10-11 06:53:27.276 00:00:10.372 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:53:57.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-10-11 06:54:27.682 00:00:10.368 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:50:40.673 00:05:02.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 06:54:57.437 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44508 10 6452 1 2025-10-11 06:50:42.989 00:05:57.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 06:55:28.105 00:00:10.374 TCP 23.104.0.1:34060 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:55:54.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 06:55:54.681 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 06:55:57.647 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-10-11 06:56:28.511 00:00:10.367 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:56:57.872 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-10-11 06:57:28.914 00:00:10.396 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-10-11 06:57:58.107 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2025-10-11 06:58:29.344 00:00:10.368 TCP 23.104.0.1:42234 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1058, avg pps: 0, avg bpp: 314 Time window: 2025-10-11 05:56:40 - 2025-10-11 06:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0011s Wall: 0.0024s flows/second: 68800.6 Runtime: 0.0024s