Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 11:58:45.145 00:00:10.364 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-10-23 11:59:19.250 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6661 1 2025-10-23 11:55:46.302 00:05:02.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 11:59:45.544 00:00:10.366 TCP 23.104.0.1:49496 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:00:19.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6661 1 2025-10-23 11:56:46.300 00:05:02.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:00:45.951 00:00:10.365 TCP 23.104.0.1:37944 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:01:19.691 00:00:10.644 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6661 1 2025-10-23 12:01:47.462 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:01:47.276 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:01:46.355 00:00:10.368 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:02:20.372 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6661 1 2025-10-23 12:02:46.764 00:00:10.334 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:03:20.590 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6661 1 2025-10-23 12:03:47.130 00:00:10.326 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:04:20.813 00:00:11.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 10 6661 1 2025-10-23 12:04:47.493 00:00:10.359 TCP 23.104.0.1:48336 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:05:21.982 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6661 1 2025-10-23 12:01:46.302 00:05:02.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:05:47.891 00:00:10.368 TCP 23.104.0.1:58718 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:06:22.210 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45530 10 6661 1 2025-10-23 12:06:47.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:06:47.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:02:46.299 00:05:03.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:06:48.299 00:00:10.324 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:07:22.438 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6661 1 2025-10-23 12:07:48.660 00:00:10.321 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:08:22.660 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6661 1 2025-10-23 12:08:49.025 00:00:10.369 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:09:22.888 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54704 10 6661 1 2025-10-23 12:09:49.433 00:00:10.367 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:10:23.105 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6661 1 2025-10-23 12:10:49.839 00:00:10.386 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:11:23.317 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6661 1 2025-10-23 12:11:47.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:07:46.303 00:05:02.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:11:47.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:11:50.276 00:00:10.329 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:12:23.526 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6661 1 2025-10-23 12:08:46.301 00:05:02.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:12:50.644 00:00:10.540 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:13:23.697 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49132 10 6661 1 2025-10-23 12:13:51.241 00:00:10.353 TCP 23.104.0.1:44976 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:14:23.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6661 1 2025-10-23 12:14:51.634 00:00:10.364 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:15:24.179 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6661 1 2025-10-23 12:15:52.036 00:00:10.365 TCP 23.104.0.1:49778 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:16:24.401 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6661 1 2025-10-23 12:16:47.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:16:47.673 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:16:52.438 00:00:10.324 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:17:24.621 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6661 1 2025-10-23 12:13:46.307 00:05:02.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:17:52.799 00:00:10.368 TCP 23.104.0.1:55996 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:18:24.794 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6661 1 2025-10-23 12:14:46.304 00:05:02.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:18:53.201 00:00:10.324 TCP 23.104.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:19:25.006 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37626 10 6661 1 2025-10-23 12:19:53.561 00:00:10.362 TCP 23.104.0.1:48476 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:20:25.228 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36454 10 6661 1 2025-10-23 12:20:53.962 00:00:10.330 TCP 23.104.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:21:25.440 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6661 1 2025-10-23 12:21:47.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:21:47.869 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:21:54.329 00:00:10.365 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:22:25.620 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6661 1 2025-10-23 12:22:54.736 00:00:10.370 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:23:25.837 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6661 1 2025-10-23 12:19:46.309 00:05:02.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:23:55.141 00:00:10.367 TCP 23.104.0.1:41316 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:24:26.099 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6661 1 2025-10-23 12:20:46.306 00:05:02.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:24:55.547 00:00:10.433 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 15 1926 1 2025-10-23 12:25:26.323 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 12 10369 1 2025-10-23 12:25:56.025 00:00:10.367 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:26:26.564 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-10-23 12:26:47.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:26:47.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:26:56.430 00:00:10.358 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:27:26.788 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-10-23 12:27:56.823 00:00:10.363 TCP 23.104.0.1:43730 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:28:27.007 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-10-23 12:28:57.228 00:00:10.366 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:29:27.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52794 10 6452 1 2025-10-23 12:25:46.311 00:05:02.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:29:57.635 00:00:10.367 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:30:27.496 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-10-23 12:26:46.308 00:05:03.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:30:58.053 00:00:11.145 TCP 23.104.0.1:47504 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:31:27.715 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-10-23 12:31:47.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:31:47.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:31:59.238 00:00:10.367 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:32:27.893 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-10-23 12:32:59.642 00:00:10.364 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:33:28.128 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-10-23 12:34:00.053 00:00:10.363 TCP 23.104.0.1:49530 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:34:28.310 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42488 10 6452 1 2025-10-23 12:35:00.453 00:00:10.438 TCP 23.104.0.1:53416 -> 1.101.0.1:3000 15 1926 1 2025-10-23 12:35:28.529 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 12 10369 1 2025-10-23 12:31:46.320 00:05:02.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:36:00.931 00:00:10.392 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:36:28.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-10-23 12:36:48.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:32:46.318 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:36:47.964 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:37:01.364 00:00:10.339 TCP 23.104.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:37:28.984 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-10-23 12:38:01.753 00:00:10.379 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:38:29.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39130 10 6452 1 2025-10-23 12:39:02.169 00:00:10.364 TCP 23.104.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:39:29.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-10-23 12:40:02.575 00:00:10.325 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:40:29.646 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-10-23 12:41:02.941 00:00:10.380 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:41:29.854 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 10 6452 1 2025-10-23 12:41:48.196 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:37:46.322 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:41:48.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:42:03.363 00:00:10.323 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:42:30.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-10-23 12:38:46.320 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:43:03.724 00:00:10.374 TCP 23.104.0.1:55192 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:43:30.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-10-23 12:44:04.136 00:00:10.365 TCP 23.104.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:44:30.523 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45962 10 6452 1 2025-10-23 12:45:04.542 00:00:10.366 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:45:30.737 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-10-23 12:46:04.942 00:00:10.665 TCP 23.104.0.1:39218 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:46:30.913 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-10-23 12:46:48.552 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:46:48.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:47:05.652 00:00:10.371 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:47:31.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-10-23 12:43:46.324 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:48:06.087 00:00:10.364 TCP 23.104.0.1:49062 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:48:31.342 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-10-23 12:44:46.322 00:05:02.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:49:06.489 00:00:10.517 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:49:31.520 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-10-23 12:50:07.065 00:00:10.366 TCP 23.104.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:50:31.743 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2025-10-23 12:51:07.470 00:00:10.329 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:51:31.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44336 10 6452 1 2025-10-23 12:51:48.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:51:48.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:52:07.834 00:00:10.394 TCP 23.104.0.1:53366 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:52:32.190 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-10-23 12:53:08.264 00:00:10.365 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:53:32.418 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-10-23 12:49:46.325 00:05:02.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 12:54:08.668 00:00:10.367 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:54:32.588 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55716 10 6452 1 2025-10-23 12:50:46.324 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 12:55:09.097 00:00:10.364 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:55:32.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-10-23 12:56:09.502 00:00:10.367 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:56:48.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 12:56:33.034 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-10-23 12:56:48.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 12:57:09.908 00:00:10.366 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:57:33.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-10-23 12:58:10.319 00:00:10.362 TCP 23.104.0.1:52582 -> 1.101.0.1:3000 11 1507 1 2025-10-23 12:58:33.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6452 1 Summary: total flows: 164, total bytes: 512454, total packets: 1584, avg bps: 1085, avg pps: 0, avg bpp: 323 Time window: 2025-10-23 11:55:46 - 2025-10-23 12:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0000s Wall: 0.0017s flows/second: 97791.6 Runtime: 0.0017s