Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 09:59:11.816 00:00:10.635 TCP 23.104.0.1:60368 -> 1.101.0.1:3000 11 1507 1 2025-10-19 09:59:11.382 00:00:10.943 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 11 6504 1 2025-10-19 09:59:49.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 09:59:49.561 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:00:12.360 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-10-19 10:00:12.492 00:00:10.364 TCP 23.104.0.1:36434 -> 1.101.0.1:3000 11 1507 1 2025-10-19 09:56:44.552 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 09:56:44.554 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:01:12.894 00:00:10.368 TCP 23.104.0.1:43206 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:01:12.586 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-10-19 10:02:13.299 00:00:10.366 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:02:12.799 00:00:10.679 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-10-19 10:03:13.516 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-10-19 10:03:13.700 00:00:10.366 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:04:13.687 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59250 10 6452 1 2025-10-19 10:04:14.111 00:00:10.360 TCP 23.104.0.1:41738 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:04:49.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:04:49.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:05:13.904 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-10-19 10:05:14.519 00:00:10.326 TCP 23.104.0.1:43514 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:06:14.124 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51616 10 6452 1 2025-10-19 10:06:14.881 00:00:10.378 TCP 23.104.0.1:46406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:02:44.557 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:02:44.555 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:07:14.345 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-10-19 10:07:15.297 00:00:10.372 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:08:14.511 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 12 10375 1 2025-10-19 10:08:15.703 00:00:10.400 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 15 1926 1 2025-10-19 10:09:16.142 00:00:10.542 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:09:14.751 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-10-19 10:09:49.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:09:49.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:10:14.964 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 12 6556 1 2025-10-19 10:10:16.721 00:00:10.366 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:11:15.212 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6452 1 2025-10-19 10:11:17.125 00:00:10.324 TCP 23.104.0.1:57970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:12:15.435 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-10-19 10:12:17.495 00:00:10.363 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:08:44.559 00:05:02.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:08:44.561 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:13:15.655 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:40958 11 6504 1 2025-10-19 10:13:17.897 00:00:10.372 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:14:15.929 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-10-19 10:14:18.309 00:00:10.366 TCP 23.104.0.1:57620 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:14:49.478 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:14:49.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:15:16.162 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-10-19 10:15:18.719 00:00:10.320 TCP 23.104.0.1:53734 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:16:16.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-10-19 10:16:19.107 00:00:10.331 TCP 23.104.0.1:58598 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:17:16.554 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-10-19 10:17:19.480 00:00:10.372 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:18:19.884 00:00:10.376 TCP 23.104.0.1:56906 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:18:16.764 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:48254 10 6452 1 2025-10-19 10:14:44.564 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:14:44.561 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:19:17.129 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60944 10 6452 1 2025-10-19 10:19:20.300 00:00:10.362 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:19:49.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:19:49.597 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:20:17.350 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-10-19 10:20:20.703 00:00:10.363 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:21:17.583 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-10-19 10:21:21.108 00:00:10.324 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:22:21.467 00:00:10.358 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:22:17.802 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2025-10-19 10:23:18.035 00:00:10.850 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-10-19 10:23:21.862 00:00:10.339 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:24:18.916 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-10-19 10:24:22.243 00:00:10.366 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:24:49.951 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:20:44.566 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:24:49.906 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:20:44.563 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:25:19.136 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-10-19 10:25:22.651 00:00:10.369 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:26:19.350 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-10-19 10:26:23.069 00:00:10.368 TCP 23.104.0.1:56064 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:27:19.522 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48540 10 6452 1 2025-10-19 10:27:23.476 00:00:10.365 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:28:19.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59740 10 6452 1 2025-10-19 10:28:23.876 00:00:10.385 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:29:19.954 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54050 10 6452 1 2025-10-19 10:29:24.300 00:00:10.363 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:29:49.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:29:49.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:30:20.188 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 2025-10-19 10:30:24.702 00:00:10.365 TCP 23.104.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:26:44.565 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:26:44.567 00:05:02.611 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:31:20.407 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-10-19 10:31:25.110 00:00:10.366 TCP 23.104.0.1:56450 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:32:20.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52232 10 6452 1 2025-10-19 10:32:25.512 00:00:10.363 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:33:20.852 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-10-19 10:33:25.913 00:00:10.325 TCP 23.104.0.1:51802 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:34:21.033 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6452 1 2025-10-19 10:34:26.278 00:00:10.369 TCP 23.104.0.1:60806 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:34:50.099 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:34:50.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:35:21.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-10-19 10:35:26.683 00:00:10.369 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:36:21.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-10-19 10:36:27.107 00:00:10.369 TCP 23.104.0.1:46122 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:32:44.568 00:05:02.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:32:44.570 00:05:02.610 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:37:21.674 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6452 1 2025-10-19 10:37:27.512 00:00:10.365 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:38:21.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 12 6556 1 2025-10-19 10:38:27.915 00:00:10.367 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:39:22.111 00:00:10.558 TCP 1.101.0.1:3000 -> 22.102.0.1:35206 10 6452 1 2025-10-19 10:39:28.316 00:00:10.365 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:39:50.073 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:39:50.326 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:40:22.717 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-10-19 10:40:28.719 00:00:10.381 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:41:22.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59934 10 6452 1 2025-10-19 10:41:29.137 00:00:10.366 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:42:23.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-10-19 10:42:29.538 00:00:10.367 TCP 23.104.0.1:40186 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:38:44.570 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:38:44.573 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:43:23.392 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-10-19 10:43:29.942 00:00:10.380 TCP 23.104.0.1:48792 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:44:23.605 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-10-19 10:44:30.362 00:00:10.323 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:44:50.444 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:44:50.468 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:45:23.819 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38836 10 6452 1 2025-10-19 10:45:30.725 00:00:10.320 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:46:24.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-10-19 10:46:31.100 00:00:10.335 TCP 23.104.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:47:24.250 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-10-19 10:47:31.490 00:00:10.368 TCP 23.104.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:48:24.464 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-10-19 10:48:31.896 00:00:10.366 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:44:44.573 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:44:44.571 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:49:24.631 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6452 1 2025-10-19 10:49:32.303 00:00:10.370 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:49:50.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:49:50.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:50:24.847 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-10-19 10:50:32.708 00:00:10.362 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:51:25.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-10-19 10:51:33.109 00:00:10.371 TCP 23.104.0.1:57896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:52:25.236 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-10-19 10:52:33.519 00:00:10.361 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:53:25.457 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42318 12 10375 1 2025-10-19 10:53:33.921 00:00:10.449 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 15 1926 1 2025-10-19 10:54:25.707 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41062 10 6452 1 2025-10-19 10:54:34.417 00:00:10.367 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:54:50.590 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 10:50:44.574 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 10:54:50.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 10:50:44.572 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 10:55:25.924 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-10-19 10:55:34.818 00:00:10.330 TCP 23.104.0.1:34800 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:56:26.136 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-10-19 10:56:35.186 00:00:10.365 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:57:26.362 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-10-19 10:57:35.584 00:00:10.327 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-10-19 10:58:26.593 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-10-19 10:58:35.943 00:00:10.368 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507344, total packets: 1590, avg bps: 1090, avg pps: 0, avg bpp: 319 Time window: 2025-10-19 09:56:44 - 2025-10-19 10:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0019s Wall: 0.0025s flows/second: 65705.0 Runtime: 0.0025s