Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 00:59:08.422 00:00:10.329 TCP 23.104.0.1:41400 -> 1.101.0.1:3000 11 1507 1 2025-10-16 00:59:20.138 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54684 10 6452 1 2025-10-16 01:00:08.790 00:00:10.350 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:00:20.351 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-10-16 00:56:42.857 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 00:56:42.855 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:01:09.180 00:00:10.370 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:01:20.567 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43094 10 6452 1 2025-10-16 01:02:09.588 00:00:10.374 TCP 23.104.0.1:56352 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:02:20.740 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37800 10 6452 1 2025-10-16 01:03:12.501 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:03:12.287 00:00:00.012 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:03:10.010 00:00:10.614 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:03:20.953 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-10-16 01:04:10.660 00:00:10.363 TCP 23.104.0.1:38294 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:04:21.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-10-16 01:05:11.092 00:00:10.327 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:05:21.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-10-16 01:06:11.454 00:00:10.365 TCP 23.104.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:06:21.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-10-16 01:02:42.860 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:02:42.862 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:07:11.860 00:00:10.376 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:07:21.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-10-16 01:08:11.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:08:12.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:08:12.272 00:00:10.325 TCP 23.104.0.1:50928 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:08:22.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-10-16 01:09:12.633 00:00:10.366 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:09:22.250 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51210 10 6452 1 2025-10-16 01:10:13.049 00:00:10.369 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:10:22.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-10-16 01:11:13.457 00:00:10.436 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 15 1926 1 2025-10-16 01:11:22.640 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 12 10369 1 2025-10-16 01:12:13.935 00:00:10.370 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:12:22.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6452 1 2025-10-16 01:08:42.862 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:08:42.864 00:05:02.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:13:12.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:13:12.292 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:13:14.340 00:00:10.362 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:13:23.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6452 1 2025-10-16 01:14:14.743 00:00:10.364 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:14:23.317 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-10-16 01:15:15.148 00:00:10.363 TCP 23.104.0.1:36206 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:15:23.489 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60932 10 6452 1 2025-10-16 01:16:15.549 00:00:10.362 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:16:23.657 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6452 1 2025-10-16 01:17:15.952 00:00:10.364 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:17:23.869 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-10-16 01:18:12.438 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:18:12.257 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:18:16.360 00:00:10.371 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:18:24.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51998 10 6452 1 2025-10-16 01:14:42.863 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:14:42.866 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:19:16.759 00:00:11.155 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:19:24.296 00:00:10.621 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-10-16 01:20:17.950 00:00:10.366 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:20:24.950 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-10-16 01:21:18.358 00:00:10.325 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:21:25.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-10-16 01:22:18.722 00:00:10.848 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:22:25.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-10-16 01:23:13.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:23:12.523 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:23:19.612 00:00:10.333 TCP 23.104.0.1:40912 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:23:25.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-10-16 01:24:19.989 00:00:10.326 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:24:25.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-10-16 01:20:42.867 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:20:42.863 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:25:20.359 00:00:10.320 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:25:26.051 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-10-16 01:26:20.717 00:00:10.379 TCP 23.104.0.1:33324 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:26:26.258 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37462 10 6452 1 2025-10-16 01:27:21.127 00:00:10.374 TCP 23.104.0.1:50774 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:27:26.480 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-10-16 01:28:12.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:28:12.503 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:28:21.547 00:00:10.326 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:28:26.699 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 10 6452 1 2025-10-16 01:29:21.911 00:00:10.365 TCP 23.104.0.1:58288 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:29:26.922 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57408 10 6452 1 2025-10-16 01:30:22.313 00:00:10.328 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:30:27.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-10-16 01:26:42.868 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:26:42.867 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:31:22.676 00:00:10.341 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:31:27.343 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-10-16 01:32:23.061 00:00:10.373 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:32:27.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-10-16 01:33:12.565 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:33:12.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:33:23.475 00:00:10.330 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:33:27.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-10-16 01:34:23.840 00:00:10.348 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:34:27.982 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36680 10 6452 1 2025-10-16 01:35:24.229 00:00:10.366 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:35:28.215 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40146 10 6452 1 2025-10-16 01:36:24.631 00:00:10.377 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:36:28.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-10-16 01:32:42.869 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:32:42.867 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:37:25.050 00:00:10.586 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:37:28.623 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-10-16 01:38:12.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:38:12.813 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:38:25.678 00:00:10.363 TCP 23.104.0.1:34740 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:38:28.841 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-10-16 01:39:26.098 00:00:10.365 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:39:29.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-10-16 01:40:26.501 00:00:10.321 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:40:29.302 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-10-16 01:41:29.493 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-10-16 01:41:26.863 00:00:10.366 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:42:29.675 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-10-16 01:42:27.270 00:00:10.325 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:38:42.869 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:38:42.873 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:43:13.174 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:43:13.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:43:29.888 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-10-16 01:43:27.638 00:00:10.773 TCP 23.104.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:44:28.449 00:00:10.365 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:44:30.740 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58240 10 6452 1 2025-10-16 01:45:30.956 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35238 10 6452 1 2025-10-16 01:45:28.855 00:00:10.374 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:46:31.190 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55290 10 6452 1 2025-10-16 01:46:29.270 00:00:10.359 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:47:29.671 00:00:10.374 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:47:31.411 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-10-16 01:48:13.177 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:48:13.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:48:31.630 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-10-16 01:48:30.108 00:00:10.365 TCP 23.104.0.1:47766 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:44:42.874 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:44:42.871 00:05:02.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:49:30.508 00:00:10.366 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:49:31.845 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41000 10 6452 1 2025-10-16 01:50:30.912 00:00:10.373 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:50:32.079 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6452 1 2025-10-16 01:51:31.320 00:00:10.438 TCP 23.104.0.1:56792 -> 1.101.0.1:3000 15 1926 1 2025-10-16 01:51:32.302 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 12 10369 1 2025-10-16 01:52:32.552 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6452 1 2025-10-16 01:52:31.796 00:00:10.348 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:53:14.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:53:14.271 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:53:32.184 00:00:10.326 TCP 23.104.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:53:32.766 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-10-16 01:54:33.621 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-10-16 01:50:42.872 00:05:02.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 01:50:42.874 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 01:54:32.547 00:00:10.367 TCP 23.104.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:55:33.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60224 10 6452 1 2025-10-16 01:55:32.948 00:00:10.369 TCP 23.104.0.1:42576 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:56:34.072 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59956 10 6452 1 2025-10-16 01:56:33.357 00:00:10.362 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:57:33.760 00:00:10.361 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:57:34.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-10-16 01:58:13.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 01:58:13.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 01:58:34.160 00:00:10.371 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-10-16 01:58:34.456 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 Summary: total flows: 164, total bytes: 507020, total packets: 1584, avg bps: 1089, avg pps: 0, avg bpp: 320 Time window: 2025-10-16 00:56:42 - 2025-10-16 01:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0029s Wall: 0.0020s flows/second: 80124.2 Runtime: 0.0021s