Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-06 11:59:02.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 11:59:02.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 11:59:02.455 00:00:10.375 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-09-06 11:59:13.663 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60640 10 6452 1 2025-09-06 12:00:02.865 00:00:10.337 TCP 23.104.0.1:47634 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:00:13.881 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6452 1 2025-09-06 11:56:24.440 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:01:03.239 00:00:10.362 TCP 23.104.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:01:14.115 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-09-06 12:02:03.641 00:00:10.367 TCP 23.104.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:02:14.357 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-09-06 11:58:24.441 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:03:04.056 00:00:10.323 TCP 23.104.0.1:56394 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:03:14.567 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6452 1 2025-09-06 12:04:02.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:04:02.740 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:04:04.418 00:00:10.365 TCP 23.104.0.1:33126 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:04:14.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-09-06 12:05:04.818 00:00:10.366 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:05:14.959 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-09-06 12:06:05.223 00:00:10.336 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:06:15.183 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45552 10 6452 1 2025-09-06 12:02:24.447 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:07:05.597 00:00:10.368 TCP 23.104.0.1:51214 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:07:15.350 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-09-06 12:08:06.012 00:00:10.361 TCP 23.104.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:04:24.449 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:08:15.565 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47184 12 6556 1 2025-09-06 12:09:02.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:09:02.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:09:06.412 00:00:10.329 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:09:15.774 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35264 10 6452 1 2025-09-06 12:10:06.786 00:00:10.363 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:10:15.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-09-06 12:11:07.189 00:00:10.366 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:11:16.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-09-06 12:12:07.598 00:00:10.367 TCP 23.104.0.1:45122 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:08:24.446 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:12:16.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6452 1 2025-09-06 12:13:08.005 00:00:10.363 TCP 23.104.0.1:60978 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:13:16.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-09-06 12:14:02.887 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:14:03.064 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:14:08.409 00:00:10.361 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:10:24.450 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:14:16.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-09-06 12:15:08.812 00:00:10.376 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:15:17.074 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6452 1 2025-09-06 12:16:09.229 00:00:10.321 TCP 23.104.0.1:46862 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:16:17.281 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-09-06 12:17:09.591 00:00:10.366 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:17:17.534 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-09-06 12:18:09.993 00:00:10.365 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:14:24.448 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:18:17.746 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44642 10 6452 1 2025-09-06 12:19:02.953 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:19:03.267 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:19:10.401 00:00:10.367 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:19:17.934 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54182 10 6452 1 2025-09-06 12:20:10.802 00:00:10.364 TCP 23.104.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:16:24.451 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:20:18.176 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-09-06 12:21:11.207 00:00:10.365 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:21:18.351 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-09-06 12:22:11.606 00:00:10.366 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:22:18.574 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51482 10 6452 1 2025-09-06 12:23:12.010 00:00:10.360 TCP 23.104.0.1:48498 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:23:18.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-09-06 12:24:03.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:24:03.278 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:20:24.450 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:24:12.407 00:00:10.326 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:24:19.004 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45790 10 6452 1 2025-09-06 12:25:12.767 00:00:10.332 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:25:19.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-09-06 12:26:13.137 00:00:10.324 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:22:24.453 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:26:19.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36940 9 6412 1 2025-09-06 12:27:13.499 00:00:10.365 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:27:19.648 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-09-06 12:28:13.899 00:00:10.370 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:28:19.865 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-09-06 12:29:03.176 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:29:03.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:29:14.305 00:00:10.363 TCP 23.104.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:29:20.103 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6452 1 2025-09-06 12:30:14.709 00:00:10.323 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:26:24.450 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:30:20.277 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-09-06 12:31:15.101 00:00:10.368 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:31:20.462 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-09-06 12:32:15.503 00:00:10.891 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:28:24.453 00:05:00.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:32:20.631 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:59282 10 6452 1 2025-09-06 12:33:16.432 00:00:10.367 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:33:20.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-09-06 12:34:03.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:34:03.511 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:34:16.836 00:00:13.812 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:34:21.219 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-09-06 12:35:20.731 00:00:10.323 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:35:21.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-09-06 12:32:24.451 00:05:00.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:36:21.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-09-06 12:36:21.110 00:00:10.363 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:37:21.518 00:00:10.364 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:37:21.950 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-09-06 12:34:24.453 00:05:00.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:38:22.491 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-09-06 12:38:21.918 00:00:10.370 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:39:03.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:39:03.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:39:22.701 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6452 1 2025-09-06 12:39:22.324 00:00:10.363 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:40:22.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-09-06 12:40:22.723 00:00:10.375 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:41:23.138 00:00:10.374 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:41:23.123 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-09-06 12:38:24.451 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:42:23.557 00:00:10.363 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:42:23.340 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-09-06 12:43:23.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-09-06 12:43:23.961 00:00:10.363 TCP 23.104.0.1:33440 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:44:03.506 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:44:03.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:40:24.455 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:44:23.725 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41202 10 6452 1 2025-09-06 12:44:24.366 00:00:10.322 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:45:24.728 00:00:10.374 TCP 23.104.0.1:59804 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:45:23.932 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57296 10 6452 1 2025-09-06 12:46:25.145 00:00:10.321 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:46:24.121 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-09-06 12:47:24.292 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-09-06 12:47:25.501 00:00:10.373 TCP 23.104.0.1:43472 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:44:24.452 00:05:00.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:48:25.910 00:00:10.323 TCP 23.104.0.1:44558 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:48:24.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-09-06 12:49:03.549 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:49:03.482 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:49:24.718 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6452 1 2025-09-06 12:49:26.270 00:00:10.367 TCP 23.104.0.1:44664 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:46:24.456 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:50:24.889 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-09-06 12:50:26.677 00:00:10.329 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:51:25.103 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-09-06 12:51:27.054 00:00:10.365 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:52:25.275 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48220 10 6452 1 2025-09-06 12:52:27.454 00:00:10.366 TCP 23.104.0.1:40016 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:53:25.490 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40174 10 6452 1 2025-09-06 12:53:27.852 00:00:10.371 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:54:03.894 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-06 12:54:03.961 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-06 12:50:24.453 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-06 12:54:25.706 00:00:10.688 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-09-06 12:54:28.259 00:00:10.367 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:55:26.431 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50280 10 6452 1 2025-09-06 12:55:28.665 00:00:10.366 TCP 23.104.0.1:32804 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:52:24.458 00:05:00.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-06 12:56:26.649 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60324 10 6452 1 2025-09-06 12:56:29.096 00:00:10.362 TCP 23.104.0.1:38536 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:57:26.883 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44666 10 6452 1 2025-09-06 12:57:29.496 00:00:10.366 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-09-06 12:58:27.115 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46026 10 6452 1 2025-09-06 12:58:29.901 00:00:10.368 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498412, total packets: 1573, avg bps: 1067, avg pps: 0, avg bpp: 316 Time window: 2025-09-06 11:56:24 - 2025-09-06 12:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0010s User: 0.0038s Wall: 0.0048s flows/second: 34188.2 Runtime: 0.0048s