Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-25 19:59:05.354 00:00:10.361 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-10-25 19:59:31.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53538 10 6452 1 2025-10-25 19:55:47.380 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:00:05.754 00:00:10.372 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:00:31.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-10-25 19:56:47.378 00:05:03.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:01:06.162 00:00:10.367 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:01:31.512 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-10-25 20:02:06.569 00:00:10.366 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:02:31.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 10 6452 1 2025-10-25 20:02:55.294 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:02:55.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:03:06.976 00:00:10.381 TCP 23.104.0.1:34728 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:03:31.976 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-10-25 20:04:07.393 00:00:10.366 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:04:32.200 00:00:13.236 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-10-25 20:05:07.813 00:00:10.387 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:05:35.480 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-10-25 20:01:47.380 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:06:08.240 00:00:10.382 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:06:35.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-10-25 20:02:47.378 00:05:03.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:07:08.653 00:00:10.369 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:07:35.864 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-10-25 20:07:55.389 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:07:55.499 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:08:09.089 00:00:10.367 TCP 23.104.0.1:39076 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:08:36.089 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-10-25 20:09:09.494 00:00:10.366 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:09:36.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-10-25 20:10:09.903 00:00:11.054 TCP 23.104.0.1:33000 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:10:36.472 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6452 1 2025-10-25 20:11:10.993 00:00:10.321 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:11:36.688 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41706 10 6452 1 2025-10-25 20:07:47.384 00:05:03.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:12:11.352 00:00:10.369 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:12:36.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55600 10 6452 1 2025-10-25 20:08:47.382 00:05:03.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:12:55.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:12:55.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:13:11.761 00:00:10.378 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:13:37.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-10-25 20:14:12.178 00:00:10.372 TCP 23.104.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:14:37.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-10-25 20:15:12.593 00:00:10.363 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:15:37.506 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-10-25 20:16:12.995 00:00:10.368 TCP 23.104.0.1:60404 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:16:38.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 10 6452 1 2025-10-25 20:17:13.407 00:00:10.327 TCP 23.104.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:17:38.334 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-10-25 20:13:47.386 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:17:55.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:17:55.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:18:13.771 00:00:10.686 TCP 23.104.0.1:55478 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:18:38.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47558 10 6452 1 2025-10-25 20:14:47.382 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:19:14.494 00:00:10.366 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:19:38.767 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-10-25 20:20:14.903 00:00:10.366 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:20:38.982 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34934 10 6452 1 2025-10-25 20:21:15.306 00:00:10.367 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:21:39.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6452 1 2025-10-25 20:22:15.708 00:00:10.368 TCP 23.104.0.1:48552 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:22:39.415 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-10-25 20:22:55.703 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:22:55.769 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:23:16.111 00:00:10.365 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:19:47.387 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:23:39.631 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-10-25 20:24:16.512 00:00:10.367 TCP 23.104.0.1:49640 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:24:39.838 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40934 10 6452 1 2025-10-25 20:20:47.384 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:25:16.914 00:00:10.328 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:25:40.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60980 10 6452 1 2025-10-25 20:26:17.282 00:00:10.382 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:26:40.293 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48860 10 6452 1 2025-10-25 20:27:17.699 00:00:10.368 TCP 23.104.0.1:43538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:27:40.500 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36678 10 6452 1 2025-10-25 20:27:55.560 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:27:55.565 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:28:18.110 00:00:10.368 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:28:40.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-10-25 20:29:18.516 00:00:10.371 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:29:40.930 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-10-25 20:25:47.388 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:30:18.925 00:00:10.341 TCP 23.104.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:30:41.168 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-10-25 20:26:47.385 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:31:19.305 00:00:10.371 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:31:41.394 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-10-25 20:32:19.722 00:00:10.680 TCP 23.104.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:32:41.602 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-10-25 20:32:56.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:32:55.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:33:20.455 00:00:10.324 TCP 23.104.0.1:58920 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:33:41.813 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-10-25 20:34:20.817 00:00:10.369 TCP 23.104.0.1:50564 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:34:41.985 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-10-25 20:35:21.224 00:00:10.364 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:31:47.390 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:35:42.201 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-10-25 20:36:21.622 00:00:10.366 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:32:47.389 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:36:42.413 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-10-25 20:37:22.026 00:00:10.370 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:37:42.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36576 10 6452 1 2025-10-25 20:37:55.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:37:56.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:38:22.437 00:00:10.526 TCP 23.104.0.1:45454 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:38:42.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37152 10 6452 1 2025-10-25 20:39:23.012 00:00:10.365 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:39:43.014 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-10-25 20:40:23.417 00:00:10.369 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:40:43.229 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-10-25 20:41:23.827 00:00:10.367 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:37:47.393 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:41:43.402 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45926 10 6452 1 2025-10-25 20:42:24.240 00:00:10.369 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:38:47.389 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:42:43.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-10-25 20:42:55.988 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:42:56.346 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:43:24.647 00:00:10.372 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:43:43.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36322 12 6556 1 2025-10-25 20:44:25.097 00:00:10.367 TCP 23.104.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:44:44.054 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-10-25 20:45:25.502 00:00:10.327 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:45:44.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-10-25 20:46:25.866 00:00:10.332 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:46:44.476 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-10-25 20:47:26.231 00:00:10.365 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:43:47.394 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:47:56.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:47:44.687 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6452 1 2025-10-25 20:47:56.222 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:48:26.635 00:00:16.150 TCP 23.104.0.1:38800 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:44:47.392 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:48:44.898 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49766 10 6452 1 2025-10-25 20:49:32.836 00:00:10.389 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:49:45.106 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54076 10 6452 1 2025-10-25 20:50:33.260 00:00:10.321 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:50:45.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32800 10 6452 1 2025-10-25 20:51:33.620 00:00:10.369 TCP 23.104.0.1:46516 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:51:45.535 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60126 10 6452 1 2025-10-25 20:52:34.029 00:00:10.324 TCP 23.104.0.1:43076 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:52:56.034 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:52:45.751 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53698 10 6452 1 2025-10-25 20:52:55.988 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:53:34.399 00:00:10.363 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:49:47.397 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-25 20:53:45.923 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6452 1 2025-10-25 20:54:34.798 00:00:10.372 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:50:47.395 00:05:03.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-25 20:54:46.137 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-10-25 20:55:35.208 00:00:10.372 TCP 23.104.0.1:45990 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:55:46.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-10-25 20:56:35.620 00:00:10.323 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 11 1507 1 2025-10-25 20:56:46.565 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49532 10 6452 1 2025-10-25 20:57:35.982 00:00:10.506 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 13 1611 1 2025-10-25 20:57:56.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-25 20:57:46.773 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-10-25 20:57:56.768 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-25 20:58:36.521 00:00:10.369 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1041, avg pps: 0, avg bpp: 314 Time window: 2025-10-25 19:55:47 - 2025-10-25 20:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0055s User: 0.0000s Wall: 0.0023s flows/second: 70649.1 Runtime: 0.0023s