Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 22:59:10.536 00:00:10.362 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:59:33.287 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-10-19 23:00:04.961 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:00:05.065 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:00:10.935 00:00:10.334 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:00:33.515 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35206 10 6452 1 2025-10-19 22:56:44.791 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:56:44.789 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:01:11.313 00:00:10.358 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:01:33.752 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-10-19 23:02:11.706 00:00:10.369 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:02:33.960 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 12 6556 1 2025-10-19 23:03:12.110 00:00:10.455 TCP 23.104.0.1:39952 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:03:34.185 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-10-19 23:04:12.599 00:00:10.365 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:04:34.377 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55602 10 6452 1 2025-10-19 23:05:05.069 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:05:05.247 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:05:13.018 00:00:10.363 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:05:34.591 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38246 10 6452 1 2025-10-19 23:06:13.417 00:00:10.369 TCP 23.104.0.1:49736 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:06:34.816 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-10-19 23:02:44.789 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:02:44.793 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:07:13.822 00:00:10.364 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:07:34.985 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38756 10 6452 1 2025-10-19 23:08:14.225 00:00:10.740 TCP 23.104.0.1:56646 -> 1.101.0.1:3000 13 1611 1 2025-10-19 23:08:35.162 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-10-19 23:09:15.010 00:00:10.366 TCP 23.104.0.1:37364 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:09:35.367 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57548 10 6452 1 2025-10-19 23:10:05.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:10:05.423 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:10:15.416 00:00:10.365 TCP 23.104.0.1:51998 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:10:35.584 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-10-19 23:11:15.827 00:00:10.388 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:11:35.792 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49924 10 6452 1 2025-10-19 23:12:16.255 00:00:10.369 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:12:36.006 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-10-19 23:08:44.795 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:08:44.794 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:13:16.664 00:00:10.390 TCP 23.104.0.1:47108 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:13:36.220 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-10-19 23:14:17.110 00:00:10.365 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:14:36.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38402 10 6452 1 2025-10-19 23:15:05.759 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:15:05.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:15:17.516 00:00:10.363 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:15:36.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-10-19 23:16:17.914 00:00:10.360 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:16:36.929 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42498 10 6452 1 2025-10-19 23:17:18.309 00:00:10.363 TCP 23.104.0.1:46492 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:17:37.167 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-10-19 23:18:18.715 00:00:10.368 TCP 23.104.0.1:40194 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:14:44.797 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:18:37.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34344 10 6452 1 2025-10-19 23:14:44.796 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:19:19.123 00:00:10.365 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:19:37.621 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-10-19 23:20:05.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:20:05.430 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:20:19.525 00:00:10.376 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:20:37.842 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-10-19 23:21:19.942 00:00:10.380 TCP 23.104.0.1:51686 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:21:38.092 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6452 1 2025-10-19 23:22:20.360 00:00:10.366 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:22:39.040 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-10-19 23:23:20.763 00:00:10.379 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:23:39.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38600 10 6452 1 2025-10-19 23:24:21.180 00:00:10.370 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:20:44.798 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:24:39.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39764 10 6452 1 2025-10-19 23:20:44.796 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:25:05.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:25:05.604 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:25:21.583 00:00:10.366 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:25:39.686 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-10-19 23:26:21.990 00:00:10.363 TCP 23.104.0.1:52578 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:26:39.860 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55062 10 6452 1 2025-10-19 23:27:22.392 00:00:10.364 TCP 23.104.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:27:40.086 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-10-19 23:28:22.801 00:00:10.376 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:28:40.266 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-10-19 23:29:23.210 00:00:10.368 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:29:40.476 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58954 10 6452 1 2025-10-19 23:30:05.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:30:05.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:30:23.613 00:00:10.364 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:26:44.801 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:30:40.699 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-10-19 23:26:44.799 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:31:24.019 00:00:10.366 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:31:40.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-10-19 23:32:24.431 00:00:10.360 TCP 23.104.0.1:57978 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:32:41.126 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-10-19 23:33:24.839 00:00:10.392 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:33:41.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-10-19 23:34:25.270 00:00:10.365 TCP 23.104.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:34:41.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-10-19 23:35:05.666 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:35:06.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:35:25.680 00:00:10.365 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:35:41.775 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-10-19 23:36:26.106 00:00:10.359 TCP 23.104.0.1:48764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:32:44.799 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:32:44.802 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:36:41.983 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-10-19 23:37:26.503 00:00:10.362 TCP 23.104.0.1:58430 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:37:42.199 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51812 10 6452 1 2025-10-19 23:38:26.906 00:00:10.361 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:38:42.411 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-10-19 23:39:27.302 00:00:10.366 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:39:42.624 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47260 10 6452 1 2025-10-19 23:40:06.027 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:40:05.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:40:27.712 00:00:10.375 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:40:42.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-10-19 23:41:28.129 00:00:10.365 TCP 23.104.0.1:48786 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:41:43.080 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-10-19 23:42:28.538 00:00:10.367 TCP 23.104.0.1:42480 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:38:44.801 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:38:44.804 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:42:43.261 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-10-19 23:43:28.946 00:00:10.371 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:43:43.472 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-10-19 23:44:29.355 00:00:10.364 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:44:43.643 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-10-19 23:45:06.124 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:45:05.996 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:45:29.758 00:00:10.381 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:45:43.821 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-10-19 23:46:30.179 00:00:10.363 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:46:44.060 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-10-19 23:47:30.583 00:00:10.360 TCP 23.104.0.1:48874 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:47:44.238 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-10-19 23:48:30.985 00:00:10.367 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:44:44.802 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:44:44.805 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:48:44.412 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49002 10 6452 1 2025-10-19 23:49:31.395 00:00:10.369 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:49:44.626 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-10-19 23:50:06.085 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:50:06.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:50:31.800 00:00:10.363 TCP 23.104.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:50:44.842 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45912 10 6452 1 2025-10-19 23:51:32.206 00:00:10.323 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:51:45.084 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-10-19 23:52:32.570 00:00:10.363 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:52:45.313 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45856 10 6452 1 2025-10-19 23:53:32.980 00:00:10.365 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:53:45.538 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46980 10 6452 1 2025-10-19 23:54:33.385 00:00:10.366 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:50:44.807 00:05:02.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 23:50:44.805 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 23:54:45.772 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-10-19 23:55:06.069 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 23:55:06.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 23:55:33.789 00:00:10.334 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:55:45.975 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:41814 10 6452 1 2025-10-19 23:56:34.161 00:00:10.363 TCP 23.104.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:56:46.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37684 10 6452 1 2025-10-19 23:57:34.564 00:00:10.766 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-10-19 23:57:46.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56888 10 6452 1 2025-10-19 23:58:35.369 00:00:10.368 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1058, avg pps: 0, avg bpp: 314 Time window: 2025-10-19 22:56:44 - 2025-10-19 23:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0016s Wall: 0.0026s flows/second: 62498.5 Runtime: 0.0026s