Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 02:58:48.542 00:00:10.368 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:58:52.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-10-15 02:59:48.948 00:00:10.373 TCP 23.104.0.1:58108 -> 1.101.0.1:3000 11 1507 1 2025-10-15 02:59:52.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42660 10 6452 1 2025-10-15 02:56:42.448 00:05:02.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 02:56:42.447 00:05:02.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:00:49.355 00:00:10.362 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:00:52.887 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43614 10 6452 1 2025-10-15 03:01:49.760 00:00:10.447 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 15 1926 1 2025-10-15 03:01:53.107 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 12 10375 1 2025-10-15 03:02:45.649 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:02:45.419 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:02:50.248 00:00:10.368 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:02:53.344 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-10-15 03:03:50.651 00:00:10.363 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:03:53.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6452 1 2025-10-15 03:04:51.060 00:00:10.364 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:04:53.764 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36742 10 6452 1 2025-10-15 03:05:51.462 00:00:10.379 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:05:53.978 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-10-15 03:02:42.447 00:05:02.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:02:42.450 00:05:02.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:06:51.882 00:00:10.383 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:06:54.204 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37116 10 6452 1 2025-10-15 03:07:45.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:07:45.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:07:54.382 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-10-15 03:07:52.298 00:00:10.362 TCP 23.104.0.1:58000 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:08:52.703 00:00:10.367 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:08:54.597 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54854 10 6452 1 2025-10-15 03:09:54.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-10-15 03:09:53.109 00:00:10.319 TCP 23.104.0.1:44152 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:10:53.472 00:00:10.362 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:10:55.023 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-10-15 03:11:53.876 00:00:10.363 TCP 23.104.0.1:47178 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:11:55.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43342 10 6452 1 2025-10-15 03:12:45.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:08:42.451 00:05:02.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:12:45.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:08:42.448 00:05:02.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:12:54.279 00:00:10.360 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:12:55.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-10-15 03:13:55.665 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54748 10 6452 1 2025-10-15 03:13:54.680 00:00:10.364 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:14:55.103 00:00:10.363 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:14:55.880 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-10-15 03:15:56.072 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41516 10 6452 1 2025-10-15 03:15:55.503 00:00:10.416 TCP 23.104.0.1:35184 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:16:56.286 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6452 1 2025-10-15 03:16:55.957 00:00:10.375 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:17:45.697 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:17:45.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:17:56.475 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 11 6504 1 2025-10-15 03:17:56.372 00:00:10.550 TCP 23.104.0.1:43220 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:14:42.450 00:05:02.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:14:42.449 00:05:02.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:18:56.967 00:00:10.331 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:18:56.970 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40758 10 6452 1 2025-10-15 03:19:57.335 00:00:10.369 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:19:57.150 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-10-15 03:20:57.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36632 10 6452 1 2025-10-15 03:20:57.740 00:00:10.369 TCP 23.104.0.1:55284 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:21:57.570 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47920 10 6452 1 2025-10-15 03:21:58.142 00:00:10.369 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:22:45.823 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:22:46.017 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:22:57.783 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-10-15 03:22:58.548 00:00:10.322 TCP 23.104.0.1:37232 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:23:58.904 00:00:10.330 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:23:57.962 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49116 10 6452 1 2025-10-15 03:20:42.450 00:05:02.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:20:42.452 00:05:02.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:24:58.144 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-10-15 03:24:59.269 00:00:10.368 TCP 23.104.0.1:39282 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:25:58.364 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39332 10 6452 1 2025-10-15 03:25:59.670 00:00:10.372 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:27:00.096 00:00:10.361 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:26:58.535 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54484 10 6452 1 2025-10-15 03:27:46.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:27:45.744 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:28:00.496 00:00:10.368 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:27:58.704 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54406 10 6452 1 2025-10-15 03:28:58.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 10 6452 1 2025-10-15 03:29:00.903 00:00:10.370 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:30:01.313 00:00:10.369 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:29:59.135 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52752 10 6452 1 2025-10-15 03:26:42.453 00:05:02.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:26:42.451 00:05:02.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:30:59.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53608 10 6452 1 2025-10-15 03:31:01.733 00:00:10.329 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:31:59.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-10-15 03:32:02.113 00:00:10.325 TCP 23.104.0.1:57666 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:32:46.121 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:32:45.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:32:59.729 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-10-15 03:33:02.476 00:00:10.328 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:33:59.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58724 10 6452 1 2025-10-15 03:34:02.837 00:00:10.384 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:35:00.177 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6452 1 2025-10-15 03:35:03.259 00:00:10.369 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:36:00.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-10-15 03:36:03.662 00:00:10.370 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:32:42.451 00:05:02.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:32:42.454 00:05:02.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:37:00.607 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41362 10 6452 1 2025-10-15 03:37:04.096 00:00:10.367 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:37:46.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:37:45.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:38:00.776 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-10-15 03:38:04.498 00:00:10.369 TCP 23.104.0.1:44252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:39:00.987 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41950 10 6452 1 2025-10-15 03:39:04.905 00:00:10.369 TCP 23.104.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:40:01.213 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-10-15 03:40:05.313 00:00:10.358 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:41:01.435 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-10-15 03:41:05.714 00:00:10.379 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:42:01.619 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-10-15 03:42:06.131 00:00:10.368 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:42:46.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:38:42.454 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:42:46.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:38:42.456 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:43:01.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-10-15 03:43:06.539 00:00:10.408 TCP 23.104.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:44:02.065 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59988 10 6452 1 2025-10-15 03:44:06.984 00:00:10.370 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:45:02.276 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6452 1 2025-10-15 03:45:07.392 00:00:10.367 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:46:02.522 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-10-15 03:46:07.797 00:00:10.374 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:47:02.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-10-15 03:47:08.212 00:00:10.367 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:47:46.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:47:46.443 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:48:02.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6452 1 2025-10-15 03:48:08.619 00:00:10.326 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:44:42.457 00:05:02.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:44:42.459 00:05:02.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:49:03.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38780 10 6452 1 2025-10-15 03:49:08.984 00:00:10.568 TCP 23.104.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:50:03.335 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-10-15 03:50:09.591 00:00:10.369 TCP 23.104.0.1:42842 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:51:03.546 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51748 10 6452 1 2025-10-15 03:51:09.994 00:00:10.364 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:52:03.727 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35880 10 6452 1 2025-10-15 03:52:10.400 00:00:10.364 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:52:46.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:52:46.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:53:04.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-10-15 03:53:10.802 00:00:10.369 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:54:04.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34124 10 6452 1 2025-10-15 03:54:11.222 00:00:10.373 TCP 23.104.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:50:42.456 00:05:02.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 03:50:42.460 00:05:02.478 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 03:55:04.504 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55428 10 6452 1 2025-10-15 03:55:11.642 00:00:10.370 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:56:04.672 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41286 10 6452 1 2025-10-15 03:56:12.059 00:00:10.358 TCP 23.104.0.1:42484 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:57:04.889 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-10-15 03:57:12.465 00:00:10.367 TCP 23.104.0.1:59528 -> 1.101.0.1:3000 11 1507 1 2025-10-15 03:57:46.926 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 03:57:46.876 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 03:58:05.080 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-10-15 03:58:12.870 00:00:10.373 TCP 23.104.0.1:39788 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1086, avg pps: 0, avg bpp: 318 Time window: 2025-10-15 02:56:42 - 2025-10-15 03:58:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0008s Wall: 0.0028s flows/second: 58716.7 Runtime: 0.0028s