Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 04:59:04.829 00:00:10.365 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-10-31 04:59:06.116 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6452 1 2025-10-31 04:55:49.895 00:05:03.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 04:55:49.894 00:05:03.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:00:05.230 00:00:10.367 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:00:06.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-10-31 05:00:30.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:00:30.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:01:05.637 00:00:10.367 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:01:06.501 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-10-31 05:02:06.682 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-10-31 05:02:06.045 00:00:10.367 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:03:06.478 00:00:10.366 TCP 23.104.0.1:56094 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:03:06.927 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-10-31 05:04:06.879 00:00:10.384 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:04:07.137 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-10-31 05:05:07.302 00:00:10.321 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:05:07.350 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-10-31 05:05:30.562 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:05:30.490 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:01:49.894 00:05:03.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:01:49.898 00:05:03.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:06:07.661 00:00:10.322 TCP 23.104.0.1:56480 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:06:07.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-10-31 05:07:07.776 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2025-10-31 05:07:08.021 00:00:10.363 TCP 23.104.0.1:51328 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:08:08.423 00:00:16.431 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:08:07.988 00:00:16.774 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-10-31 05:09:14.801 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-10-31 05:09:14.892 00:00:10.375 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:10:15.304 00:00:10.366 TCP 23.104.0.1:51988 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:10:30.577 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:10:15.020 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-10-31 05:10:30.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:11:15.190 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-10-31 05:11:15.704 00:00:10.368 TCP 23.104.0.1:41668 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:07:49.897 00:05:03.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:07:49.896 00:05:03.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:12:15.409 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-10-31 05:12:16.111 00:00:10.369 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:13:16.517 00:00:10.362 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:13:15.622 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-10-31 05:14:15.833 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-10-31 05:14:16.924 00:00:10.387 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:15:16.074 00:00:10.570 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-10-31 05:15:30.710 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:15:30.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:15:17.346 00:00:10.362 TCP 23.104.0.1:55522 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:16:16.683 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-10-31 05:16:17.747 00:00:10.378 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:17:16.868 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56372 10 6452 1 2025-10-31 05:17:18.163 00:00:10.366 TCP 23.104.0.1:54494 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:13:49.897 00:05:03.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:13:49.900 00:05:03.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:18:18.564 00:00:10.371 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:18:17.098 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56870 10 6452 1 2025-10-31 05:19:18.976 00:00:10.367 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:19:17.336 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-10-31 05:20:17.563 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-10-31 05:20:30.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:20:30.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:20:19.390 00:00:10.363 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:21:17.743 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-10-31 05:21:19.795 00:00:10.364 TCP 23.104.0.1:55530 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:22:20.197 00:00:10.327 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:22:17.964 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:59236 10 6452 1 2025-10-31 05:23:20.570 00:00:10.383 TCP 23.104.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:23:18.316 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39556 10 6452 1 2025-10-31 05:19:49.901 00:05:03.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:19:49.898 00:05:03.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:24:20.989 00:00:10.372 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:24:18.531 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38690 10 6452 1 2025-10-31 05:25:30.936 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:25:21.401 00:00:10.365 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:25:18.750 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-10-31 05:25:30.750 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:26:18.964 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-10-31 05:26:21.805 00:00:10.342 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:27:19.147 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-10-31 05:27:22.189 00:00:10.326 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:28:19.360 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-10-31 05:28:22.551 00:00:10.377 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:29:19.578 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-10-31 05:29:22.983 00:00:10.372 TCP 23.104.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:25:49.904 00:05:03.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:25:49.901 00:05:03.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:30:30.895 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:30:19.898 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-10-31 05:30:30.818 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:30:23.388 00:00:10.363 TCP 23.104.0.1:49628 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:31:20.127 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-10-31 05:31:23.788 00:00:10.363 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:32:20.308 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-10-31 05:32:24.188 00:00:10.325 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:33:20.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6452 1 2025-10-31 05:33:24.544 00:00:10.372 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:34:20.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47818 10 6452 1 2025-10-31 05:34:24.952 00:00:10.364 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:35:20.947 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-10-31 05:35:30.982 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:35:31.069 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:35:25.357 00:00:10.362 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:31:49.916 00:05:03.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:31:49.918 00:05:03.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:36:21.182 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53014 10 6452 1 2025-10-31 05:36:25.757 00:00:10.337 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:37:21.412 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-10-31 05:37:26.132 00:00:10.365 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:38:21.632 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-10-31 05:38:26.536 00:00:10.414 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:39:21.851 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-10-31 05:39:26.990 00:00:10.368 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:40:31.157 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:40:31.288 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:40:22.083 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42712 10 6452 1 2025-10-31 05:40:27.398 00:00:10.368 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:41:22.308 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50636 10 6452 1 2025-10-31 05:41:27.801 00:00:10.363 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:37:49.916 00:05:03.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:37:49.917 00:05:03.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:42:22.480 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-10-31 05:42:28.205 00:00:10.807 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:43:22.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56474 10 6452 1 2025-10-31 05:43:29.058 00:00:10.367 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:44:22.915 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-10-31 05:44:29.471 00:00:10.388 TCP 23.104.0.1:41914 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:45:31.037 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:45:30.991 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:45:23.112 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-10-31 05:45:29.912 00:00:10.362 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:46:23.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48872 10 6452 1 2025-10-31 05:46:30.313 00:00:10.364 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:47:23.538 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 12 6556 1 2025-10-31 05:47:30.717 00:00:10.383 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:43:49.918 00:05:03.478 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:43:49.921 00:05:03.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:48:23.757 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-10-31 05:48:31.138 00:00:10.368 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:49:23.965 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-10-31 05:49:31.540 00:00:10.361 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:50:31.540 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:50:31.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:50:24.189 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35944 10 6452 1 2025-10-31 05:50:31.938 00:00:10.330 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:51:24.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-10-31 05:51:32.307 00:00:10.364 TCP 23.104.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:52:24.638 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39508 10 6452 1 2025-10-31 05:52:32.714 00:00:10.378 TCP 23.104.0.1:34094 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:53:24.819 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-10-31 05:53:33.130 00:00:10.327 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:49:49.922 00:05:03.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 05:49:49.920 00:05:03.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 05:54:25.061 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-10-31 05:54:33.493 00:00:10.368 TCP 23.104.0.1:41008 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:55:31.271 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 05:55:31.288 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 05:55:25.235 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58538 10 6452 1 2025-10-31 05:55:33.901 00:00:10.367 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:56:25.441 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-10-31 05:56:34.311 00:00:10.327 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:57:25.618 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-10-31 05:57:34.681 00:00:10.373 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-10-31 05:58:25.825 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-10-31 05:58:35.107 00:00:10.368 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1056, avg pps: 0, avg bpp: 316 Time window: 2025-10-31 04:55:49 - 2025-10-31 05:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0013s flows/second: 128838.0 Runtime: 0.0013s