Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 00:59:09.698 00:00:10.362 TCP 23.104.0.1:43048 -> 1.101.0.1:3000 11 1507 1 2025-10-19 00:59:38.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 00:59:28.901 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-10-19 00:59:38.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:00:10.104 00:00:10.368 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:00:29.107 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 6452 1 2025-10-19 00:56:44.401 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 00:56:44.399 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:01:10.509 00:00:10.360 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:01:29.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-10-19 01:02:10.907 00:00:10.325 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:02:29.519 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40792 10 6452 1 2025-10-19 01:03:11.267 00:00:10.325 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:03:29.694 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-10-19 01:04:11.637 00:00:10.397 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:04:38.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:04:29.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58664 10 6452 1 2025-10-19 01:04:38.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:05:12.115 00:00:10.368 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:05:30.122 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54952 10 6452 1 2025-10-19 01:06:12.523 00:00:10.661 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:06:30.341 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-10-19 01:02:44.401 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:02:44.404 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:07:13.227 00:00:10.364 TCP 23.104.0.1:37126 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:07:30.552 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-10-19 01:08:13.626 00:00:10.367 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:08:30.723 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2025-10-19 01:09:14.034 00:00:10.375 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:09:38.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:09:30.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39830 10 6452 1 2025-10-19 01:09:38.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:10:14.448 00:00:10.367 TCP 23.104.0.1:58624 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:10:31.113 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-10-19 01:11:14.855 00:00:10.338 TCP 23.104.0.1:34030 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:11:31.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38140 10 6452 1 2025-10-19 01:12:15.229 00:00:10.366 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:12:31.495 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-10-19 01:08:44.402 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:08:44.406 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:13:15.636 00:00:10.326 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:13:31.702 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34376 10 6452 1 2025-10-19 01:14:16.004 00:00:10.364 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:14:38.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:14:39.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:14:31.871 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-10-19 01:15:16.410 00:00:10.371 TCP 23.104.0.1:35018 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:15:32.101 00:00:10.829 TCP 1.101.0.1:3000 -> 22.102.0.1:60180 10 6452 1 2025-10-19 01:16:16.815 00:00:10.363 TCP 23.104.0.1:56930 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:16:32.971 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37108 10 6452 1 2025-10-19 01:17:17.217 00:00:10.326 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:17:33.199 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-10-19 01:18:17.581 00:00:10.366 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:18:33.449 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 12 6556 1 2025-10-19 01:14:44.403 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:14:44.405 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:19:17.980 00:00:11.576 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:19:39.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:19:39.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:19:33.702 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-10-19 01:20:19.591 00:00:10.363 TCP 23.104.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:20:33.923 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6452 1 2025-10-19 01:21:19.995 00:00:10.366 TCP 23.104.0.1:59886 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:21:34.100 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-10-19 01:22:20.396 00:00:10.416 TCP 23.104.0.1:58958 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:22:34.320 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 12 10375 1 2025-10-19 01:23:20.851 00:00:10.453 TCP 23.104.0.1:44800 -> 1.101.0.1:3000 15 1926 1 2025-10-19 01:23:34.573 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-10-19 01:24:21.338 00:00:10.368 TCP 23.104.0.1:60832 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:24:39.242 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:24:39.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:24:34.774 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-10-19 01:20:44.411 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:20:44.408 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:25:21.744 00:00:10.368 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:25:34.989 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 10 6452 1 2025-10-19 01:26:22.147 00:00:10.367 TCP 23.104.0.1:49442 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:26:35.187 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-10-19 01:27:22.551 00:00:10.318 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:27:35.400 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-10-19 01:28:22.907 00:00:10.363 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:28:35.575 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-10-19 01:29:23.316 00:00:10.339 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:29:39.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:29:39.267 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:29:35.786 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-10-19 01:30:23.698 00:00:10.321 TCP 23.104.0.1:34070 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:30:35.962 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-10-19 01:26:44.413 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:26:44.412 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:31:24.070 00:00:10.365 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:31:36.197 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43724 10 6452 1 2025-10-19 01:32:24.477 00:00:10.327 TCP 23.104.0.1:58598 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:32:36.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-10-19 01:33:24.849 00:00:10.349 TCP 23.104.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:33:36.636 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47370 10 6452 1 2025-10-19 01:34:25.245 00:00:10.365 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:34:39.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:34:39.047 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:34:36.854 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-10-19 01:35:25.650 00:00:10.361 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:35:37.082 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 2025-10-19 01:36:26.063 00:00:10.705 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:36:37.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37994 10 6452 1 2025-10-19 01:32:44.413 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:32:44.415 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:37:26.809 00:00:10.364 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:37:37.515 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48540 10 6452 1 2025-10-19 01:38:27.218 00:00:10.321 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:38:37.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-10-19 01:39:39.843 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:39:27.580 00:00:10.831 TCP 23.104.0.1:54132 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:39:39.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:39:37.950 00:00:10.329 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6452 1 2025-10-19 01:40:28.448 00:00:10.323 TCP 23.104.0.1:40924 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:40:38.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53050 10 6452 1 2025-10-19 01:41:28.811 00:00:10.362 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:41:38.551 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36474 10 6452 1 2025-10-19 01:42:29.209 00:00:10.327 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:42:38.771 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-10-19 01:38:44.414 00:05:02.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:38:44.416 00:05:02.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:43:29.569 00:00:10.365 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:43:39.024 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-10-19 01:44:39.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:44:39.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:44:29.973 00:00:10.326 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:44:39.246 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-10-19 01:45:30.332 00:00:10.364 TCP 23.104.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:45:39.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-10-19 01:46:30.744 00:00:10.364 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:46:40.033 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42024 10 6452 1 2025-10-19 01:47:31.148 00:00:10.367 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:47:40.202 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-10-19 01:48:31.552 00:00:10.362 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:48:40.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34752 12 6556 1 2025-10-19 01:44:44.415 00:05:02.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:44:44.417 00:05:02.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:49:39.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:49:39.703 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:49:31.957 00:00:10.367 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:49:40.636 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-10-19 01:50:32.371 00:00:10.322 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:50:40.850 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60698 10 6452 1 2025-10-19 01:51:32.729 00:00:10.371 TCP 23.104.0.1:34982 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:51:41.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 10 6452 1 2025-10-19 01:52:33.137 00:00:10.366 TCP 23.104.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:52:41.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-10-19 01:53:33.542 00:00:10.368 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:53:41.512 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-10-19 01:54:39.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 01:50:44.418 00:05:02.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 01:54:41.736 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6452 1 2025-10-19 01:54:39.660 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 01:54:33.942 00:00:10.376 TCP 23.104.0.1:52952 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:50:44.420 00:05:02.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 01:55:34.355 00:00:10.352 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:55:41.953 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-10-19 01:56:34.734 00:00:10.371 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:56:42.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6452 1 2025-10-19 01:57:35.146 00:00:10.327 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-10-19 01:57:42.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37302 10 6452 1 2025-10-19 01:58:35.511 00:00:10.367 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496446, total packets: 1572, avg bps: 1067, avg pps: 0, avg bpp: 315 Time window: 2025-10-19 00:56:44 - 2025-10-19 01:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0009s Wall: 0.0015s flows/second: 108882.2 Runtime: 0.0015s