Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 18:59:01.408 00:00:10.364 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-10-23 18:59:33.872 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49782 10 6452 1 2025-10-23 18:55:46.436 00:05:03.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:00:01.810 00:00:10.374 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:00:34.096 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-10-23 18:56:46.432 00:05:03.007 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:01:02.221 00:00:10.372 TCP 23.104.0.1:36268 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:01:34.307 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-10-23 19:01:55.902 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:01:55.893 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:02:02.630 00:00:10.364 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:02:34.519 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6452 1 2025-10-23 19:03:03.033 00:00:10.365 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:03:34.730 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-10-23 19:04:03.437 00:00:10.360 TCP 23.104.0.1:52512 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:04:34.909 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-10-23 19:05:03.836 00:00:10.348 TCP 23.104.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:05:35.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34694 10 6452 1 2025-10-23 19:01:46.437 00:05:03.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:06:04.218 00:00:10.368 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:06:35.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41032 10 6452 1 2025-10-23 19:02:46.437 00:05:03.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:06:56.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:06:56.124 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:07:04.621 00:00:10.369 TCP 23.104.0.1:55876 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:07:35.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35562 10 6452 1 2025-10-23 19:08:05.026 00:00:10.328 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:08:35.730 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-10-23 19:09:05.390 00:00:10.368 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:09:35.956 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48016 10 6452 1 2025-10-23 19:10:05.800 00:00:10.373 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:10:36.190 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:40904 10 6452 1 2025-10-23 19:11:06.210 00:00:10.362 TCP 23.104.0.1:60280 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:11:36.805 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52894 10 6452 1 2025-10-23 19:07:46.440 00:05:03.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:11:56.096 00:00:00.050 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:11:56.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:12:06.617 00:00:10.393 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:08:46.438 00:05:03.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:12:36.991 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-10-23 19:13:07.081 00:00:10.368 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:13:37.229 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38834 10 6452 1 2025-10-23 19:14:07.486 00:00:10.365 TCP 23.104.0.1:41174 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:14:37.444 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-10-23 19:15:07.886 00:00:10.381 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:15:37.625 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-10-23 19:16:08.308 00:00:11.093 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:16:37.792 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-10-23 19:16:56.268 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:16:56.221 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:17:09.438 00:00:10.364 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:13:46.440 00:05:03.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:17:38.012 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-10-23 19:18:09.842 00:00:10.385 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:18:38.231 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40788 10 6452 1 2025-10-23 19:14:46.437 00:05:03.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:19:10.266 00:00:19.827 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:19:38.450 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-10-23 19:20:20.152 00:00:10.368 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:20:38.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-10-23 19:21:20.567 00:00:10.367 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:21:38.880 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-10-23 19:21:56.692 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:21:56.259 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:22:20.969 00:00:10.339 TCP 23.104.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:22:39.100 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-10-23 19:23:21.349 00:00:10.369 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:23:39.271 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 10 6452 1 2025-10-23 19:19:46.441 00:05:03.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:24:21.753 00:00:10.390 TCP 23.104.0.1:39394 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:20:46.438 00:05:03.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:24:39.488 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-10-23 19:25:22.182 00:00:10.365 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:25:39.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-10-23 19:26:22.589 00:00:10.364 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:26:39.884 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-10-23 19:26:56.223 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:26:56.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:27:22.990 00:00:10.368 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:27:40.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54144 10 6452 1 2025-10-23 19:28:23.390 00:00:10.362 TCP 23.104.0.1:55246 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:28:40.295 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-10-23 19:29:23.795 00:00:10.372 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:25:46.442 00:05:03.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:29:40.506 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-10-23 19:30:24.206 00:00:10.364 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:30:40.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34554 10 6452 1 2025-10-23 19:26:46.440 00:05:03.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:31:24.611 00:00:10.323 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:31:40.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 10 6452 1 2025-10-23 19:31:56.548 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:31:56.588 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:32:24.973 00:00:10.378 TCP 23.104.0.1:45630 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:32:41.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37960 10 6452 1 2025-10-23 19:33:25.394 00:00:10.358 TCP 23.104.0.1:41046 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:33:41.328 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-10-23 19:34:25.792 00:00:10.366 TCP 23.104.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:34:41.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-10-23 19:35:26.204 00:00:10.365 TCP 23.104.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:35:41.726 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-10-23 19:31:46.446 00:05:03.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:36:26.605 00:00:10.365 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:32:46.444 00:05:03.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:36:56.377 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:36:41.939 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-10-23 19:36:56.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:37:27.009 00:00:10.374 TCP 23.104.0.1:46212 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:37:42.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-10-23 19:38:27.419 00:00:10.361 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:38:42.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-10-23 19:39:27.818 00:00:10.365 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:39:42.601 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55106 10 6452 1 2025-10-23 19:40:28.220 00:00:10.325 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:40:42.775 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-10-23 19:41:28.587 00:00:10.370 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:37:46.448 00:05:03.004 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:41:42.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-10-23 19:41:57.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:41:57.023 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:42:28.991 00:00:10.371 TCP 23.104.0.1:34112 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:38:46.446 00:05:03.008 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:42:43.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-10-23 19:43:29.399 00:00:10.371 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:43:43.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-10-23 19:44:29.810 00:00:10.334 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:44:43.605 00:00:10.501 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-10-23 19:45:30.189 00:00:10.380 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:45:44.146 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-10-23 19:46:30.620 00:00:10.370 TCP 23.104.0.1:45254 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:46:56.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:46:56.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:46:44.372 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58824 10 6452 1 2025-10-23 19:47:31.032 00:00:10.360 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:43:46.451 00:05:03.012 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:47:44.588 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 10 6452 1 2025-10-23 19:48:31.432 00:00:10.363 TCP 23.104.0.1:60086 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:44:46.448 00:05:03.017 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:48:44.797 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-10-23 19:49:31.833 00:00:10.370 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:49:45.033 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-10-23 19:50:32.246 00:00:10.367 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:50:45.256 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43258 10 6452 1 2025-10-23 19:51:32.648 00:00:10.366 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:51:45.485 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-10-23 19:51:56.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:51:56.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:52:33.061 00:00:10.363 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:52:45.655 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-10-23 19:53:33.468 00:00:10.368 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:49:46.453 00:05:03.012 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 19:53:45.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50294 10 6452 1 2025-10-23 19:54:33.873 00:00:10.367 TCP 23.104.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:50:46.449 00:05:03.018 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 19:54:46.047 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48934 10 6452 1 2025-10-23 19:55:34.274 00:00:10.366 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:55:46.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-10-23 19:56:34.679 00:00:10.324 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:56:56.869 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 19:56:56.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 19:56:46.466 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-10-23 19:57:35.048 00:00:10.364 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 11 1507 1 2025-10-23 19:57:46.647 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-10-23 19:58:35.454 00:00:10.368 TCP 23.104.0.1:50726 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1041, avg pps: 0, avg bpp: 314 Time window: 2025-10-23 18:55:46 - 2025-10-23 19:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0010s Wall: 0.0014s flows/second: 112873.0 Runtime: 0.0015s