Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 09:59:17.505 00:00:10.363 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-10-31 09:59:32.496 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2025-10-31 09:54:53.473 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 09:54:53.470 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:00:17.905 00:00:10.369 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:00:36.224 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:00:36.298 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:00:32.725 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-10-31 10:01:18.312 00:00:10.368 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:01:32.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-10-31 10:02:18.719 00:00:10.378 TCP 23.104.0.1:46660 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:02:33.183 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-10-31 10:03:19.135 00:00:10.364 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:03:33.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-31 10:04:19.538 00:00:10.326 TCP 23.104.0.1:50206 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:04:33.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-10-31 10:05:36.368 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:05:19.901 00:00:10.371 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:05:36.320 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:05:33.839 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-10-31 10:00:53.474 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:00:53.471 00:05:56.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:06:20.310 00:00:10.370 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:06:34.068 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-10-31 10:07:20.723 00:00:10.325 TCP 23.104.0.1:47836 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:07:34.276 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-10-31 10:08:21.102 00:00:10.370 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:08:34.483 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:58566 10 6452 1 2025-10-31 10:09:21.513 00:00:10.322 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:09:35.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-10-31 10:10:36.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:10:36.484 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:10:21.879 00:00:10.372 TCP 23.104.0.1:60778 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:10:35.257 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 12 6556 1 2025-10-31 10:11:22.298 00:00:10.364 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:11:35.477 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-10-31 10:06:53.472 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:06:53.476 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:12:22.699 00:00:10.320 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:12:35.699 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-10-31 10:13:23.066 00:00:10.365 TCP 23.104.0.1:54394 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:13:35.917 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:52720 10 6452 1 2025-10-31 10:14:23.471 00:00:10.325 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:14:36.163 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-10-31 10:15:36.681 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:15:23.830 00:00:10.386 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:15:36.964 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:15:36.370 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-10-31 10:16:24.261 00:00:10.361 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:16:36.581 00:00:10.401 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-10-31 10:17:24.663 00:00:10.367 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:12:53.474 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:12:53.477 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:17:37.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53762 10 6452 1 2025-10-31 10:18:25.095 00:00:10.366 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:18:37.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32840 10 6452 1 2025-10-31 10:19:25.503 00:00:10.371 TCP 23.104.0.1:49846 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:19:37.473 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48240 10 6452 1 2025-10-31 10:20:36.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:20:36.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:20:25.908 00:00:11.269 TCP 23.104.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:20:37.647 00:00:19.286 TCP 1.101.0.1:3000 -> 22.102.0.1:40250 10 6452 1 2025-10-31 10:21:27.213 00:00:10.367 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:21:46.975 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:37902 10 6452 1 2025-10-31 10:22:27.612 00:00:10.335 TCP 23.104.0.1:57512 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:22:47.238 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40166 10 6452 1 2025-10-31 10:23:27.981 00:00:10.395 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:18:53.478 00:05:56.620 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:18:53.481 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:23:47.451 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33004 10 6452 1 2025-10-31 10:24:28.414 00:00:10.508 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:24:47.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-10-31 10:25:37.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:25:28.957 00:00:10.371 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:25:37.763 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:25:47.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-10-31 10:26:29.366 00:00:10.325 TCP 23.104.0.1:47886 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:26:48.086 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2025-10-31 10:27:29.728 00:00:10.369 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:27:48.308 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48468 10 6452 1 2025-10-31 10:28:30.130 00:00:10.376 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:28:48.528 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41160 10 6452 1 2025-10-31 10:29:30.546 00:00:10.371 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:24:53.481 00:05:56.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:24:53.479 00:05:56.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:29:48.747 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:56976 10 6452 1 2025-10-31 10:30:36.856 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:30:36.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:30:30.957 00:00:10.364 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:30:49.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-10-31 10:31:31.359 00:00:10.332 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:31:49.386 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-10-31 10:32:31.727 00:00:10.377 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:32:49.613 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-10-31 10:33:32.139 00:00:10.369 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:33:49.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-10-31 10:34:32.545 00:00:10.368 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:34:50.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33252 10 6452 1 2025-10-31 10:35:36.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:35:36.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:35:32.950 00:00:10.372 TCP 23.104.0.1:55914 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:30:53.483 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:30:53.481 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:35:50.255 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36540 10 6452 1 2025-10-31 10:36:33.366 00:00:10.325 TCP 23.104.0.1:48116 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:36:50.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-10-31 10:37:33.729 00:00:10.367 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:37:50.671 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41804 10 6452 1 2025-10-31 10:38:34.136 00:00:10.362 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:38:50.890 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48332 10 6452 1 2025-10-31 10:39:34.534 00:00:10.366 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:39:51.083 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 2025-10-31 10:40:37.062 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:40:37.051 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:40:34.930 00:00:10.330 TCP 23.104.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:40:51.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-10-31 10:41:35.296 00:00:10.369 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:36:53.485 00:05:56.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:36:53.483 00:05:56.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:41:51.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49178 10 6452 1 2025-10-31 10:42:35.703 00:00:10.365 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:42:51.673 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38840 10 6452 1 2025-10-31 10:43:36.116 00:00:10.367 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:43:51.886 00:00:10.325 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-10-31 10:44:36.517 00:00:10.372 TCP 23.104.0.1:44018 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:44:52.257 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42984 10 6452 1 2025-10-31 10:45:37.452 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:45:37.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:45:36.944 00:00:10.370 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:45:52.480 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33194 10 6452 1 2025-10-31 10:46:37.352 00:00:10.366 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:46:52.699 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-10-31 10:42:53.485 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:47:37.763 00:00:10.373 TCP 23.104.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:42:53.483 00:05:56.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:47:52.868 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-10-31 10:48:38.175 00:00:10.438 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 15 1926 1 2025-10-31 10:48:53.099 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 12 10369 1 2025-10-31 10:49:38.647 00:00:10.369 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:49:53.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-10-31 10:50:37.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:50:37.256 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:50:39.063 00:00:10.374 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:50:53.562 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-10-31 10:51:39.471 00:00:10.362 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:51:53.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50962 10 6452 1 2025-10-31 10:52:39.874 00:00:10.364 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:52:53.954 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-10-31 10:48:53.484 00:05:56.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 10:53:40.275 00:00:10.325 TCP 23.104.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:48:53.487 00:05:56.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 10:53:54.185 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39428 10 6452 1 2025-10-31 10:54:40.636 00:00:10.323 TCP 23.104.0.1:58242 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:54:54.392 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-31 10:55:37.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 10:55:37.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 10:55:40.998 00:00:10.365 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:55:54.615 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39944 10 6452 1 2025-10-31 10:56:41.402 00:00:10.365 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:56:54.845 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-10-31 10:57:41.807 00:00:10.364 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-10-31 10:57:55.088 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 Summary: total flows: 162, total bytes: 494829, total packets: 1559, avg bps: 1044, avg pps: 0, avg bpp: 317 Time window: 2025-10-31 09:54:53 - 2025-10-31 10:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0009s Wall: 0.0013s flows/second: 121075.8 Runtime: 0.0013s