Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-29 17:58:44.248 00:00:10.324 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-10-29 17:59:04.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46586 10 6452 1 2025-10-29 17:59:48.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 17:59:48.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 17:55:49.197 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 17:59:44.607 00:00:10.360 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:00:04.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-10-29 17:55:52.578 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:00:45.009 00:00:10.651 TCP 23.104.0.1:43720 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:01:05.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-10-29 18:01:45.699 00:00:10.369 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:02:05.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-10-29 18:02:46.106 00:00:10.364 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:03:05.534 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-10-29 18:03:46.512 00:00:10.369 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:04:05.755 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-10-29 18:04:48.456 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:04:48.740 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:04:46.917 00:00:10.377 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:05:05.929 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-10-29 18:01:49.197 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:05:47.340 00:00:10.380 TCP 23.104.0.1:46420 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:06:06.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-10-29 18:01:52.580 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:06:47.786 00:00:10.371 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:07:06.327 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36974 10 6452 1 2025-10-29 18:07:48.193 00:00:15.447 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:08:06.543 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-10-29 18:08:53.674 00:00:10.372 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:09:06.755 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45402 10 6452 1 2025-10-29 18:09:48.436 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:09:48.494 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:09:54.107 00:00:10.322 TCP 23.104.0.1:57558 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:10:06.964 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49960 10 6452 1 2025-10-29 18:10:54.466 00:00:10.366 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:11:07.198 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40720 10 6452 1 2025-10-29 18:07:49.201 00:05:03.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:11:54.866 00:00:10.325 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:12:07.373 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-10-29 18:07:52.581 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:12:55.228 00:00:10.330 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:13:07.584 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-10-29 18:13:55.596 00:00:10.368 TCP 23.104.0.1:52816 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:14:07.755 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-10-29 18:14:49.162 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:14:49.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:14:55.996 00:00:10.361 TCP 23.104.0.1:53624 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:15:07.962 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41832 10 6452 1 2025-10-29 18:15:56.398 00:00:10.359 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:16:08.185 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6452 1 2025-10-29 18:16:56.798 00:00:10.343 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:17:08.359 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-10-29 18:13:49.200 00:05:03.385 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:17:57.184 00:00:10.366 TCP 23.104.0.1:40214 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:18:08.572 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59536 10 6452 1 2025-10-29 18:13:52.586 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:18:57.591 00:00:10.365 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:19:08.786 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-10-29 18:19:48.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:19:48.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:19:57.991 00:00:10.366 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:20:08.956 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-10-29 18:20:58.398 00:00:10.363 TCP 23.104.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:21:09.146 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-10-29 18:21:58.797 00:00:10.366 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:22:09.359 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-10-29 18:22:59.205 00:00:10.393 TCP 23.104.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:23:09.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-10-29 18:19:49.204 00:05:03.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:23:59.638 00:00:10.364 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:24:09.748 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-10-29 18:24:48.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:19:52.593 00:05:56.611 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:24:48.602 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:25:00.051 00:00:10.370 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:25:09.954 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 12 6556 1 2025-10-29 18:26:00.459 00:00:10.330 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:26:10.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6452 1 2025-10-29 18:27:00.827 00:00:10.355 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:27:10.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34314 10 6452 1 2025-10-29 18:28:01.225 00:00:10.602 TCP 23.104.0.1:47726 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:28:10.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-10-29 18:29:01.869 00:00:10.323 TCP 23.104.0.1:35812 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:29:10.817 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-10-29 18:29:48.786 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:29:48.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:25:49.206 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:30:02.229 00:00:10.369 TCP 23.104.0.1:37736 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:30:11.034 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-10-29 18:25:52.587 00:05:56.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:31:02.638 00:00:10.366 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:31:11.249 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-10-29 18:32:03.059 00:00:10.365 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:32:11.430 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34872 10 6452 1 2025-10-29 18:33:03.464 00:00:10.364 TCP 23.104.0.1:42800 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:33:11.599 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-10-29 18:34:03.863 00:00:10.372 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:34:11.815 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-10-29 18:34:48.842 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:34:48.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:35:04.282 00:00:10.364 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:35:12.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35894 10 6452 1 2025-10-29 18:31:49.211 00:05:03.378 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:36:04.685 00:00:10.369 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:36:12.256 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-29 18:31:52.589 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:37:05.107 00:00:10.367 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:37:12.431 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45976 10 6452 1 2025-10-29 18:38:05.511 00:00:10.363 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:38:12.608 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-10-29 18:39:05.910 00:00:10.334 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:39:12.820 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-10-29 18:39:49.746 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:39:49.703 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:40:06.283 00:00:10.370 TCP 23.104.0.1:41684 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:40:12.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-10-29 18:41:06.696 00:00:10.367 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:41:13.215 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 10 6452 1 2025-10-29 18:37:49.211 00:05:03.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:42:07.109 00:00:10.584 TCP 23.104.0.1:38656 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:42:13.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-10-29 18:37:52.592 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:43:07.730 00:00:10.378 TCP 23.104.0.1:59374 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:43:13.641 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50298 10 6452 1 2025-10-29 18:44:08.139 00:00:10.369 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:44:13.850 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39508 10 6452 1 2025-10-29 18:44:49.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:44:49.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:45:08.546 00:00:10.363 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:45:14.083 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-10-29 18:46:08.946 00:00:10.374 TCP 23.104.0.1:43440 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:46:14.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-10-29 18:47:09.358 00:00:10.363 TCP 23.104.0.1:41574 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:47:14.508 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-10-29 18:43:49.213 00:05:03.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:48:09.758 00:00:10.381 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:48:14.696 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47256 10 6452 1 2025-10-29 18:43:52.595 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:49:10.182 00:00:10.361 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:49:14.870 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-10-29 18:49:49.915 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:49:49.916 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:50:10.581 00:00:10.365 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:50:15.101 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-10-29 18:51:10.988 00:00:10.365 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:51:15.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37158 10 6452 1 2025-10-29 18:52:11.391 00:00:10.364 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:52:15.533 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49838 10 6452 1 2025-10-29 18:53:15.706 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58128 10 6452 1 2025-10-29 18:53:11.792 00:00:10.335 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:49:49.214 00:05:03.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-29 18:54:15.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53194 10 6452 1 2025-10-29 18:54:12.162 00:00:10.359 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:54:49.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-29 18:49:52.596 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-29 18:54:49.234 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-29 18:55:16.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 2025-10-29 18:55:12.561 00:00:10.382 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:56:16.339 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49780 10 6452 1 2025-10-29 18:56:12.986 00:00:10.385 TCP 23.104.0.1:40270 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:57:16.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-10-29 18:57:13.433 00:00:10.390 TCP 23.104.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-10-29 18:58:16.763 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-10-29 18:58:13.859 00:00:10.382 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1061, avg pps: 0, avg bpp: 316 Time window: 2025-10-29 17:55:49 - 2025-10-29 18:58:26 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0016s Wall: 0.0021s flows/second: 79531.3 Runtime: 0.0021s