Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 11:59:16.658 00:00:10.327 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:59:40.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-10-13 12:00:17.023 00:00:10.371 TCP 23.104.0.1:36036 -> 1.101.0.1:3000 11 1507 1 2025-10-13 11:56:41.679 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 11:56:41.678 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:00:41.039 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2025-10-13 12:01:17.433 00:00:10.436 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 15 1926 1 2025-10-13 12:01:41.260 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:58308 12 10375 1 2025-10-13 12:01:58.799 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:01:58.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:02:17.913 00:00:10.366 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:02:41.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35996 10 6452 1 2025-10-13 12:03:18.315 00:00:10.365 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:03:42.123 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-10-13 12:04:18.721 00:00:10.373 TCP 23.104.0.1:44988 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:04:42.351 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52030 11 6492 1 2025-10-13 12:05:19.133 00:00:10.327 TCP 23.104.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:05:42.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-10-13 12:06:19.501 00:00:10.371 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:02:41.685 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:02:41.682 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:06:58.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:06:42.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-10-13 12:06:58.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:07:19.907 00:00:10.372 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:07:43.003 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-10-13 12:08:20.319 00:00:10.363 TCP 23.104.0.1:58382 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:08:43.215 00:00:11.164 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-10-13 12:09:20.722 00:00:10.332 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:09:44.413 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-10-13 12:10:21.115 00:00:10.432 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:10:44.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-10-13 12:11:21.585 00:00:10.322 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:11:58.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:11:44.853 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60240 10 6452 1 2025-10-13 12:11:58.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:12:21.946 00:00:10.333 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:08:41.683 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:08:41.686 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:12:45.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6452 1 2025-10-13 12:13:22.328 00:00:10.404 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:13:45.311 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-10-13 12:14:22.768 00:00:10.372 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:14:45.483 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-10-13 12:15:23.182 00:00:10.366 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:15:45.692 00:00:10.625 TCP 1.101.0.1:3000 -> 22.102.0.1:58738 10 6452 1 2025-10-13 12:16:23.587 00:00:10.371 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:16:46.356 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-10-13 12:16:58.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:16:59.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:17:23.992 00:00:10.373 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:17:46.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44888 10 6452 1 2025-10-13 12:18:24.405 00:00:10.371 TCP 23.104.0.1:59084 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:14:41.683 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:14:41.686 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:18:46.785 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-10-13 12:19:24.812 00:00:10.361 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:19:47.007 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41598 10 6452 1 2025-10-13 12:20:25.212 00:00:10.365 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:20:47.190 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:46738 12 10375 1 2025-10-13 12:21:25.616 00:00:10.442 TCP 23.104.0.1:50174 -> 1.101.0.1:3000 15 1926 1 2025-10-13 12:21:58.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:21:47.439 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38588 10 6452 1 2025-10-13 12:21:58.904 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:22:26.110 00:00:10.370 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:22:47.661 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-10-13 12:23:26.524 00:00:11.199 TCP 23.104.0.1:52790 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:23:47.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-10-13 12:24:27.770 00:00:10.370 TCP 23.104.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:20:41.687 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:20:41.684 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:24:48.114 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-10-13 12:25:28.179 00:00:10.364 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:25:48.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6452 1 2025-10-13 12:26:28.581 00:00:10.370 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:26:59.277 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:26:48.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-10-13 12:26:59.304 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:27:28.994 00:00:10.371 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:27:48.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39090 10 6452 1 2025-10-13 12:28:29.402 00:00:10.326 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:28:48.965 00:00:13.308 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-10-13 12:29:29.767 00:00:10.378 TCP 23.104.0.1:42486 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:29:52.317 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58948 10 6452 1 2025-10-13 12:30:30.176 00:00:10.388 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:26:41.687 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:26:41.686 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:30:52.542 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-10-13 12:31:30.602 00:00:10.359 TCP 23.104.0.1:42602 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:31:59.319 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:31:59.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:31:52.761 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-10-13 12:32:30.998 00:00:10.370 TCP 23.104.0.1:42974 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:32:52.978 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-10-13 12:33:31.405 00:00:10.364 TCP 23.104.0.1:35972 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:33:53.214 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39866 10 6452 1 2025-10-13 12:34:31.809 00:00:10.329 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:34:53.421 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-10-13 12:35:32.179 00:00:10.366 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:35:53.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-10-13 12:32:41.690 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:36:32.583 00:00:10.327 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:32:41.693 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:36:59.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:36:59.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:36:53.864 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 10 6452 1 2025-10-13 12:37:32.943 00:00:10.599 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:37:54.097 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2025-10-13 12:38:33.580 00:00:10.327 TCP 23.104.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:38:54.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-10-13 12:39:33.946 00:00:10.335 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:39:54.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-10-13 12:40:34.313 00:00:10.364 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:40:54.745 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-10-13 12:41:34.721 00:00:10.330 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:41:59.363 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:41:59.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:41:54.963 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 10 6452 1 2025-10-13 12:38:41.691 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:42:35.096 00:00:10.358 TCP 23.104.0.1:38488 -> 1.101.0.1:3000 12 1559 1 2025-10-13 12:38:41.694 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:42:55.193 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-10-13 12:43:35.498 00:00:10.368 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:43:55.418 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59814 10 6452 1 2025-10-13 12:44:35.902 00:00:10.333 TCP 23.104.0.1:40344 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:44:55.642 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-10-13 12:45:36.282 00:00:10.326 TCP 23.104.0.1:49242 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:45:55.863 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53018 10 6452 1 2025-10-13 12:46:36.642 00:00:10.367 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:46:59.161 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:46:59.532 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:46:56.069 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50046 10 6452 1 2025-10-13 12:47:37.065 00:00:10.325 TCP 23.104.0.1:36732 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:47:56.235 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 10 6452 1 2025-10-13 12:44:41.695 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:44:41.694 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:48:37.428 00:00:10.362 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:48:56.409 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-10-13 12:49:37.833 00:00:10.350 TCP 23.104.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:49:56.623 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 10 6452 1 2025-10-13 12:50:38.224 00:00:10.363 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:50:56.790 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-10-13 12:51:38.628 00:00:10.363 TCP 23.104.0.1:58850 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:51:59.541 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:51:59.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:51:56.970 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-10-13 12:52:39.031 00:00:10.364 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:52:57.200 00:00:10.760 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-10-13 12:53:39.435 00:00:10.363 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:53:58.005 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-10-13 12:50:41.697 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 12:50:41.695 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 12:54:39.840 00:00:10.385 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:54:58.229 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-10-13 12:55:40.268 00:00:10.369 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:55:58.461 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-10-13 12:56:40.675 00:00:10.369 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:56:59.765 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 12:56:59.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 12:56:58.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 10 6452 1 2025-10-13 12:57:41.104 00:00:10.364 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 12:57:58.892 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-10-13 12:58:41.504 00:00:10.363 TCP 23.104.0.1:52004 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500672, total packets: 1576, avg bps: 1073, avg pps: 0, avg bpp: 317 Time window: 2025-10-13 11:56:41 - 2025-10-13 12:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0020s Wall: 0.0024s flows/second: 68772.9 Runtime: 0.0024s