Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 13:59:01.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 13:59:01.476 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 13:59:13.476 00:00:10.363 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-09-16 13:59:34.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-09-16 14:00:13.884 00:00:10.340 TCP 23.104.0.1:40502 -> 1.101.0.1:3000 11 1507 1 2025-09-16 13:56:29.210 00:05:01.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:00:34.611 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-09-16 14:01:14.263 00:00:10.378 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-09-16 13:57:29.214 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:01:34.825 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 10 6452 1 2025-09-16 14:02:14.691 00:00:10.368 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:02:35.066 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52832 10 6452 1 2025-09-16 14:03:15.107 00:00:10.332 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:03:35.246 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47698 10 6452 1 2025-09-16 14:04:01.552 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:04:01.693 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:04:15.480 00:00:10.363 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:04:35.461 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34566 10 6452 1 2025-09-16 14:05:15.882 00:00:10.378 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:05:35.669 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-09-16 14:06:16.292 00:00:10.371 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:02:29.213 00:05:01.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:06:35.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-09-16 14:03:29.215 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:07:16.701 00:00:10.370 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:07:36.115 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-09-16 14:08:17.105 00:00:10.371 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:08:36.297 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-09-16 14:09:01.711 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:09:01.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:09:17.513 00:00:10.363 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:09:36.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6452 1 2025-09-16 14:10:17.915 00:00:10.361 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:10:36.710 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-09-16 14:11:18.317 00:00:10.874 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:11:36.925 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48632 10 6452 1 2025-09-16 14:12:19.226 00:00:10.370 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:08:29.214 00:05:01.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:12:37.155 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-09-16 14:09:29.219 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:13:19.635 00:00:10.363 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:13:37.326 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-09-16 14:14:01.399 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:14:01.460 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:14:20.034 00:00:10.364 TCP 23.104.0.1:47866 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:14:37.501 00:00:10.500 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-09-16 14:15:20.433 00:00:10.364 TCP 23.104.0.1:40122 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:15:38.056 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-09-16 14:16:20.837 00:00:10.394 TCP 23.104.0.1:59960 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:16:38.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2025-09-16 14:17:21.268 00:00:10.366 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:17:38.490 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 2025-09-16 14:14:29.216 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:18:21.676 00:00:10.373 TCP 23.104.0.1:55794 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:18:38.697 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-09-16 14:19:01.720 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:19:01.585 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:15:29.218 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:19:22.107 00:00:10.364 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:19:38.909 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-09-16 14:20:22.507 00:00:10.374 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:20:39.118 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-09-16 14:21:22.922 00:00:10.381 TCP 23.104.0.1:49344 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:21:39.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44606 10 6452 1 2025-09-16 14:22:23.342 00:00:10.369 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:22:39.513 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-09-16 14:23:23.748 00:00:10.587 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:23:39.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-09-16 14:24:01.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:24:01.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:20:29.219 00:05:01.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:24:24.376 00:00:10.330 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:24:39.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38254 10 6452 1 2025-09-16 14:21:29.223 00:05:01.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:25:24.743 00:00:10.319 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:25:40.122 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-09-16 14:26:25.107 00:00:10.359 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:26:40.333 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54032 10 6452 1 2025-09-16 14:27:25.508 00:00:10.368 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:27:40.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-09-16 14:28:25.914 00:00:10.329 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:28:40.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-09-16 14:29:01.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:29:02.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:29:26.283 00:00:10.369 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:29:40.971 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-09-16 14:26:29.220 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:30:26.692 00:00:10.363 TCP 23.104.0.1:34714 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:30:41.213 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-09-16 14:27:29.222 00:05:01.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:31:27.102 00:00:10.428 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:31:41.381 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-09-16 14:32:27.590 00:00:10.366 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:32:41.592 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-09-16 14:33:27.988 00:00:10.376 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:33:41.814 00:00:10.572 TCP 1.101.0.1:3000 -> 22.102.0.1:52548 10 6452 1 2025-09-16 14:34:02.331 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:34:02.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:34:28.405 00:00:10.371 TCP 23.104.0.1:36016 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:34:42.429 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 12 10367 1 2025-09-16 14:35:28.814 00:00:11.086 TCP 23.104.0.1:39010 -> 1.101.0.1:3000 15 1926 1 2025-09-16 14:35:42.668 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 11 6504 1 2025-09-16 14:32:29.220 00:05:01.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:36:29.941 00:00:10.368 TCP 23.104.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:36:42.938 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-09-16 14:33:29.222 00:05:01.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:37:30.344 00:00:10.370 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:37:43.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6452 1 2025-09-16 14:38:30.747 00:00:10.325 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:38:43.386 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 10 6452 1 2025-09-16 14:39:02.118 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:39:02.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:39:31.108 00:00:10.365 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:39:43.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36412 10 6452 1 2025-09-16 14:40:31.510 00:00:10.368 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:40:43.808 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33826 10 6452 1 2025-09-16 14:41:31.915 00:00:10.369 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:41:44.033 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-09-16 14:38:29.222 00:05:01.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:42:32.330 00:00:10.385 TCP 23.104.0.1:50756 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:42:44.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-09-16 14:39:29.224 00:05:01.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:43:32.750 00:00:10.386 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:43:44.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-09-16 14:44:01.875 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:44:02.096 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:44:33.196 00:00:10.440 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 15 1926 1 2025-09-16 14:44:44.670 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 12 10367 1 2025-09-16 14:45:33.679 00:00:10.361 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:45:44.927 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-09-16 14:46:34.104 00:00:10.378 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:46:45.157 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-09-16 14:47:34.515 00:00:10.368 TCP 23.104.0.1:47440 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:47:45.371 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-09-16 14:44:29.222 00:05:01.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:48:34.915 00:00:10.325 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:48:45.538 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-09-16 14:49:02.548 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:49:02.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:45:29.225 00:05:01.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:49:35.275 00:00:10.371 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:49:45.755 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-09-16 14:50:35.679 00:00:10.421 TCP 23.104.0.1:59632 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:50:45.934 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:38264 10 6452 1 2025-09-16 14:51:36.139 00:00:10.359 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:51:46.186 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 10 6452 1 2025-09-16 14:52:36.540 00:00:10.370 TCP 23.104.0.1:33690 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:52:46.414 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41726 10 6452 1 2025-09-16 14:53:36.952 00:00:10.364 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:53:46.657 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6452 1 2025-09-16 14:54:02.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 14:54:02.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 14:50:29.223 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 14:54:37.354 00:00:10.363 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:54:46.871 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-09-16 14:51:29.226 00:05:01.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 14:55:37.755 00:00:10.336 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:55:47.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-09-16 14:56:38.127 00:00:10.361 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:56:47.322 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37960 10 6452 1 2025-09-16 14:57:38.526 00:00:10.363 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-09-16 14:57:47.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-09-16 14:58:38.928 00:00:10.392 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500616, total packets: 1575, avg bps: 1070, avg pps: 0, avg bpp: 317 Time window: 2025-09-16 13:56:29 - 2025-09-16 14:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0020s Wall: 0.0014s flows/second: 114883.5 Runtime: 0.0014s