Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 09:59:04.422 00:00:10.966 TCP 23.104.0.1:44162 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:59:39.182 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6452 1 2025-10-27 09:55:48.101 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:00:05.433 00:00:10.367 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-10-27 09:56:48.100 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:00:39.404 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:53164 10 6452 1 2025-10-27 10:01:05.840 00:00:10.392 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:01:40.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-10-27 10:02:06.274 00:00:10.363 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:02:40.293 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-10-27 10:03:06.674 00:00:10.326 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:03:41.059 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:03:40.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:03:40.468 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-10-27 10:04:07.044 00:00:10.324 TCP 23.104.0.1:33010 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:04:40.688 00:00:10.740 TCP 1.101.0.1:3000 -> 22.102.0.1:37324 10 6452 1 2025-10-27 10:05:07.408 00:00:10.369 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:05:41.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-10-27 10:01:48.102 00:05:03.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:06:07.808 00:00:10.413 TCP 23.104.0.1:33984 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:06:41.637 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52554 10 6452 1 2025-10-27 10:02:48.101 00:05:03.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:07:08.269 00:00:10.365 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:07:41.813 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52060 10 6452 1 2025-10-27 10:08:08.670 00:00:10.366 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:08:40.965 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:08:41.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:08:42.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59094 10 6452 1 2025-10-27 10:09:09.101 00:00:10.367 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:09:42.286 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-10-27 10:10:09.506 00:00:10.367 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:10:42.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-10-27 10:11:09.910 00:00:10.368 TCP 23.104.0.1:60190 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:11:42.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-10-27 10:07:48.107 00:05:03.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:12:10.328 00:00:10.367 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:08:48.103 00:05:03.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:12:42.899 00:00:19.223 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-10-27 10:13:10.732 00:00:10.370 TCP 23.104.0.1:37020 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:13:41.289 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:13:41.321 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:13:52.175 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 10 6452 1 2025-10-27 10:14:11.161 00:00:10.327 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:14:52.349 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-10-27 10:15:11.533 00:00:10.338 TCP 23.104.0.1:41368 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:15:52.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43146 10 6452 1 2025-10-27 10:16:11.907 00:00:10.366 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:16:52.782 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-10-27 10:17:12.311 00:00:10.366 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:13:48.106 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:17:53.005 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-10-27 10:18:12.714 00:00:10.374 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:18:41.525 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:18:41.550 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:14:48.105 00:05:03.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:18:53.232 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-10-27 10:19:13.129 00:00:10.386 TCP 23.104.0.1:46118 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:19:53.455 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42798 10 6452 1 2025-10-27 10:20:13.565 00:00:10.364 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:20:53.690 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36466 10 6452 1 2025-10-27 10:21:13.965 00:00:10.379 TCP 23.104.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:21:53.905 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38444 10 6452 1 2025-10-27 10:22:14.384 00:00:10.363 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:22:54.125 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 10 6452 1 2025-10-27 10:23:14.786 00:00:10.322 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:23:41.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:23:41.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:19:48.108 00:05:03.266 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:23:54.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58066 10 6452 1 2025-10-27 10:24:15.148 00:00:10.361 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:20:48.105 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:24:54.553 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-10-27 10:25:15.552 00:00:10.366 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:25:55.356 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41364 10 6452 1 2025-10-27 10:26:15.957 00:00:10.376 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:26:55.575 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-10-27 10:27:16.373 00:00:10.364 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:27:55.789 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48568 10 6452 1 2025-10-27 10:28:16.774 00:00:10.371 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:28:41.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:28:41.540 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:28:56.012 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57246 10 6452 1 2025-10-27 10:29:17.182 00:00:10.368 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:25:48.110 00:05:03.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:29:56.235 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-10-27 10:30:17.588 00:00:10.374 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:26:48.108 00:05:03.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:30:56.446 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6452 1 2025-10-27 10:31:18.013 00:00:10.358 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:31:56.664 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-10-27 10:32:18.408 00:00:10.365 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:32:56.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-10-27 10:33:18.810 00:00:10.364 TCP 23.104.0.1:33314 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:33:41.798 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:33:41.876 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:33:57.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-10-27 10:34:19.215 00:00:10.324 TCP 23.104.0.1:34738 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:34:57.331 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-10-27 10:35:19.576 00:00:10.367 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:31:48.111 00:05:03.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:35:57.504 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6452 1 2025-10-27 10:36:19.980 00:00:10.375 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:32:48.108 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:36:57.733 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36338 10 6452 1 2025-10-27 10:37:20.394 00:00:10.365 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:37:57.955 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-10-27 10:38:20.801 00:00:10.337 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:38:41.745 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:38:42.026 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:38:58.192 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 10 6452 1 2025-10-27 10:39:21.174 00:00:10.372 TCP 23.104.0.1:39724 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:39:58.760 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-10-27 10:40:21.582 00:00:10.367 TCP 23.104.0.1:40800 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:40:58.977 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-10-27 10:41:21.984 00:00:10.370 TCP 23.104.0.1:51350 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:37:48.112 00:05:03.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:41:59.210 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 10 6452 1 2025-10-27 10:42:22.392 00:00:10.370 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:38:48.110 00:05:03.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:42:59.383 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-10-27 10:43:22.803 00:00:10.361 TCP 23.104.0.1:33822 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:43:41.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:43:42.202 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:43:59.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-10-27 10:44:23.205 00:00:10.326 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:44:59.817 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33818 10 6452 1 2025-10-27 10:45:23.571 00:00:10.367 TCP 23.104.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:46:00.042 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-10-27 10:46:23.975 00:00:10.376 TCP 23.104.0.1:48152 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:47:00.261 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-10-27 10:47:24.391 00:00:10.361 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:43:48.114 00:05:03.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:48:00.481 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-10-27 10:48:24.793 00:00:10.365 TCP 23.104.0.1:51852 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:48:41.738 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:48:41.924 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:44:48.111 00:05:03.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:49:00.694 00:00:10.599 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-10-27 10:49:25.193 00:00:10.371 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:50:01.346 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39832 10 6452 1 2025-10-27 10:50:25.599 00:00:10.364 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:51:01.563 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43784 10 6452 1 2025-10-27 10:51:26.009 00:00:10.362 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:52:01.784 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2025-10-27 10:52:26.411 00:00:10.359 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:53:02.020 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-10-27 10:53:41.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 10:53:26.806 00:00:10.341 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:53:42.103 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:49:48.115 00:05:03.276 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 10:54:02.224 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-10-27 10:54:27.185 00:00:10.369 TCP 23.104.0.1:35916 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:50:48.115 00:05:03.279 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 10:55:02.445 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-10-27 10:55:27.588 00:00:10.361 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:56:02.668 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:49386 11 6504 1 2025-10-27 10:56:27.991 00:00:10.364 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:57:02.932 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-10-27 10:57:28.397 00:00:10.367 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:58:03.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-27 10:58:28.806 00:00:10.333 TCP 23.104.0.1:40396 -> 1.101.0.1:3000 11 1507 1 2025-10-27 10:58:41.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 10:58:41.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 491948, total packets: 1563, avg bps: 1042, avg pps: 0, avg bpp: 314 Time window: 2025-10-27 09:55:48 - 2025-10-27 10:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0008s Wall: 0.0019s flows/second: 85426.9 Runtime: 0.0019s