Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 06:59:15.393 00:00:10.368 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-10-25 06:59:32.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-25 06:55:47.146 00:05:03.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:00:15.798 00:00:10.373 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:00:32.861 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-10-25 06:56:47.143 00:05:03.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:01:16.203 00:00:10.362 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:01:33.101 00:00:10.377 TCP 1.101.0.1:3000 -> 22.102.0.1:58084 10 6452 1 2025-10-25 07:02:16.600 00:00:10.322 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:02:39.763 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:02:39.640 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:02:33.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-10-25 07:03:16.960 00:00:10.325 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:03:33.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-10-25 07:04:17.327 00:00:10.370 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:04:33.954 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-10-25 07:05:17.737 00:00:10.369 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:05:34.195 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58934 10 6452 1 2025-10-25 07:01:47.147 00:05:03.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:06:18.143 00:00:10.365 TCP 23.104.0.1:37414 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:06:34.373 00:00:10.641 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-10-25 07:02:47.145 00:05:03.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:07:18.551 00:00:10.367 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:07:39.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:07:39.731 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:07:35.069 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-10-25 07:08:18.960 00:00:10.323 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:08:35.282 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-10-25 07:09:19.322 00:00:10.363 TCP 23.104.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:09:35.512 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-10-25 07:10:19.725 00:00:10.318 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:10:35.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42874 10 6452 1 2025-10-25 07:11:20.106 00:00:10.362 TCP 23.104.0.1:53088 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:11:36.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59326 10 6452 1 2025-10-25 07:07:47.148 00:05:03.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:12:20.507 00:00:10.325 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:12:39.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:12:39.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:12:36.346 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-10-25 07:08:47.146 00:05:03.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:13:20.872 00:00:10.364 TCP 23.104.0.1:47150 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:13:36.556 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-10-25 07:14:21.274 00:00:10.362 TCP 23.104.0.1:39916 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:14:36.763 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-10-25 07:15:21.676 00:00:10.326 TCP 23.104.0.1:60664 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:15:36.979 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50682 10 6452 1 2025-10-25 07:16:22.064 00:00:10.529 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:16:37.224 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6452 1 2025-10-25 07:17:22.632 00:00:10.362 TCP 23.104.0.1:36162 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:17:39.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:17:39.545 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:17:37.461 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-10-25 07:13:47.149 00:05:03.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:18:23.034 00:00:10.360 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:18:37.684 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6452 1 2025-10-25 07:14:47.146 00:05:03.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:19:23.433 00:00:10.374 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:19:37.901 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-25 07:20:23.848 00:00:10.384 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:20:38.120 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41104 10 6452 1 2025-10-25 07:21:24.268 00:00:10.365 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:21:38.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55780 10 6452 1 2025-10-25 07:22:24.671 00:00:10.370 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:22:39.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:22:40.096 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:22:38.554 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6452 1 2025-10-25 07:23:25.103 00:00:10.367 TCP 23.104.0.1:42378 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:23:38.786 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-10-25 07:19:47.149 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:24:25.514 00:00:10.366 TCP 23.104.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:24:38.991 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-10-25 07:20:47.147 00:05:03.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:25:25.918 00:00:10.380 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:25:39.215 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-10-25 07:26:26.345 00:00:10.364 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:26:39.442 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-10-25 07:27:39.949 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:27:26.749 00:00:10.334 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:27:39.892 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:27:39.656 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-10-25 07:28:27.121 00:00:10.366 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:28:39.884 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-10-25 07:29:27.530 00:00:10.362 TCP 23.104.0.1:40678 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:25:47.151 00:05:03.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:29:40.108 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43080 10 6452 1 2025-10-25 07:30:27.933 00:00:10.387 TCP 23.104.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:30:40.330 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55868 10 6452 1 2025-10-25 07:26:47.148 00:05:03.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:31:28.361 00:00:10.362 TCP 23.104.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:31:40.551 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6452 1 2025-10-25 07:32:41.010 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:32:41.207 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:32:28.763 00:00:10.333 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:32:40.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-10-25 07:33:29.134 00:00:10.365 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:33:40.993 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-10-25 07:34:29.537 00:00:10.360 TCP 23.104.0.1:54512 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:34:41.225 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-10-25 07:35:29.936 00:00:10.336 TCP 23.104.0.1:46866 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:35:41.459 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-10-25 07:31:47.152 00:05:03.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:36:30.310 00:00:10.365 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:36:41.692 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-10-25 07:32:47.150 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:37:40.357 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:37:40.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:37:30.716 00:00:10.374 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:37:41.881 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-10-25 07:38:31.129 00:00:10.370 TCP 23.104.0.1:48864 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:38:42.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-10-25 07:39:31.541 00:00:10.554 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:39:42.309 00:00:10.880 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-10-25 07:40:32.136 00:00:10.358 TCP 23.104.0.1:39946 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:40:43.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-10-25 07:41:32.534 00:00:10.366 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:37:47.152 00:05:03.074 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:41:43.444 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-10-25 07:42:40.418 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:42:40.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:42:32.942 00:00:10.375 TCP 23.104.0.1:54526 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:38:47.151 00:05:03.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:42:43.623 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-10-25 07:43:33.362 00:00:10.364 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:43:43.837 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59382 10 6452 1 2025-10-25 07:44:33.759 00:00:10.370 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:44:44.081 00:00:10.618 TCP 1.101.0.1:3000 -> 22.102.0.1:33794 10 6452 1 2025-10-25 07:45:34.175 00:00:10.363 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:45:44.735 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-10-25 07:46:34.575 00:00:10.364 TCP 23.104.0.1:39202 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:46:44.947 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40806 10 6452 1 2025-10-25 07:47:40.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:47:40.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:47:34.977 00:00:10.362 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:43:47.155 00:05:03.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:47:45.139 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34208 10 6452 1 2025-10-25 07:48:35.382 00:00:10.362 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:44:47.153 00:05:03.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:48:45.357 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-10-25 07:49:35.785 00:00:10.361 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:49:45.574 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39742 10 6452 1 2025-10-25 07:50:36.190 00:00:10.362 TCP 23.104.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:50:45.793 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42408 10 6452 1 2025-10-25 07:51:36.588 00:00:11.171 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:51:46.012 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43584 10 6452 1 2025-10-25 07:52:40.506 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:52:40.371 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:52:37.796 00:00:10.368 TCP 23.104.0.1:33598 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:52:46.244 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-10-25 07:49:47.156 00:05:03.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 07:53:38.208 00:00:10.375 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:53:46.454 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-10-25 07:54:38.619 00:00:10.362 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:50:47.153 00:05:03.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 07:54:46.677 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34702 10 6452 1 2025-10-25 07:55:39.021 00:00:10.365 TCP 23.104.0.1:48110 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:55:46.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-10-25 07:56:39.426 00:00:10.364 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:56:47.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-10-25 07:57:40.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 07:57:40.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 07:57:39.831 00:00:10.621 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-10-25 07:57:47.326 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-10-25 07:58:40.499 00:00:10.362 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1040, avg pps: 0, avg bpp: 314 Time window: 2025-10-25 06:55:47 - 2025-10-25 07:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0000s Wall: 0.0020s flows/second: 79663.4 Runtime: 0.0021s