Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-17 02:59:16.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 02:59:16.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 02:59:16.492 00:00:10.366 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-09-17 02:59:41.687 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52464 10 6452 1 2025-09-17 02:56:29.487 00:05:01.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:00:16.895 00:00:10.427 TCP 23.104.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:00:41.903 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34614 11 6492 1 2025-09-17 03:01:17.370 00:00:10.363 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-09-17 02:57:29.496 00:05:01.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:01:42.122 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-09-17 03:02:17.774 00:00:10.327 TCP 23.104.0.1:56682 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:02:42.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-09-17 03:03:18.147 00:00:10.367 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:03:42.501 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37686 10 6452 1 2025-09-17 03:04:16.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:04:17.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:04:18.549 00:00:10.366 TCP 23.104.0.1:35858 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:04:42.719 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34752 10 6452 1 2025-09-17 03:05:18.959 00:00:10.369 TCP 23.104.0.1:55304 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:05:42.936 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6452 1 2025-09-17 03:06:19.366 00:00:10.663 TCP 23.104.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:02:29.494 00:05:01.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:06:43.160 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-09-17 03:03:29.497 00:05:01.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:07:20.094 00:00:10.324 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:07:43.383 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-09-17 03:08:20.455 00:00:10.364 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:08:43.561 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60608 10 6452 1 2025-09-17 03:09:16.989 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:09:17.160 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:09:20.861 00:00:10.367 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:09:43.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57524 10 6452 1 2025-09-17 03:10:21.265 00:00:10.363 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:10:43.987 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:49250 13 6608 1 2025-09-17 03:11:21.668 00:00:10.363 TCP 23.104.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:11:44.251 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-09-17 03:08:29.494 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:12:22.091 00:00:10.363 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:12:44.473 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-09-17 03:09:29.496 00:05:01.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:13:22.493 00:00:10.327 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:13:44.719 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-09-17 03:14:16.983 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:14:17.202 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:14:22.857 00:00:10.371 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:14:44.977 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 12 10367 1 2025-09-17 03:15:23.268 00:00:10.440 TCP 23.104.0.1:48914 -> 1.101.0.1:3000 15 1926 1 2025-09-17 03:15:45.257 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57042 10 6452 1 2025-09-17 03:16:23.753 00:00:10.322 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:16:45.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-09-17 03:17:24.115 00:00:10.323 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:17:45.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-09-17 03:14:29.494 00:05:01.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:18:24.477 00:00:10.364 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:18:45.910 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-09-17 03:19:17.182 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:19:17.223 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:15:29.499 00:05:01.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:19:24.893 00:00:10.374 TCP 23.104.0.1:42586 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:19:46.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-09-17 03:20:25.316 00:00:10.366 TCP 23.104.0.1:52222 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:20:46.334 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56374 10 6452 1 2025-09-17 03:21:25.736 00:00:10.377 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:21:46.552 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6452 1 2025-09-17 03:22:26.149 00:00:10.327 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:22:46.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-09-17 03:23:26.514 00:00:10.378 TCP 23.104.0.1:44822 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:23:46.976 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33494 10 6452 1 2025-09-17 03:24:17.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:24:17.371 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:20:29.497 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:24:26.934 00:00:10.376 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:24:47.207 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-09-17 03:21:29.500 00:05:01.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:25:27.348 00:00:10.370 TCP 23.104.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:25:47.378 00:00:10.367 TCP 1.101.0.1:3000 -> 22.102.0.1:57002 10 6452 1 2025-09-17 03:26:27.759 00:00:11.098 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:26:47.787 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-09-17 03:27:28.896 00:00:10.368 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:27:47.960 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 10 6452 1 2025-09-17 03:28:29.305 00:00:10.365 TCP 23.104.0.1:42978 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:28:48.147 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-09-17 03:29:17.322 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:29:17.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:29:29.704 00:00:10.371 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:29:48.323 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-09-17 03:26:29.499 00:05:01.131 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:30:30.115 00:00:10.369 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:30:48.537 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-09-17 03:27:29.500 00:05:01.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:31:30.526 00:00:10.371 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:31:48.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-09-17 03:32:30.936 00:00:10.392 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:32:48.989 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-09-17 03:33:31.366 00:00:10.370 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:33:49.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-09-17 03:34:17.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:34:18.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:34:31.772 00:00:10.370 TCP 23.104.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:34:49.428 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41138 10 6452 1 2025-09-17 03:35:32.181 00:00:10.365 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:35:49.671 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-09-17 03:32:29.499 00:05:01.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:36:32.585 00:00:10.371 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:36:49.895 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-09-17 03:33:29.502 00:05:01.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:37:32.989 00:00:10.332 TCP 23.104.0.1:52656 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:37:50.087 00:00:10.806 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-09-17 03:38:33.357 00:00:10.322 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:38:50.934 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-09-17 03:39:17.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:39:17.597 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:39:33.718 00:00:10.448 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 15 1926 1 2025-09-17 03:39:51.159 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 12 10365 1 2025-09-17 03:40:34.205 00:00:10.366 TCP 23.104.0.1:42016 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:40:51.399 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-09-17 03:41:34.612 00:00:10.368 TCP 23.104.0.1:58942 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:41:51.621 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46164 10 6452 1 2025-09-17 03:38:29.500 00:05:01.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:42:35.015 00:00:10.369 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:42:51.843 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-09-17 03:39:29.504 00:05:01.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:43:35.423 00:00:10.365 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:43:52.088 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39834 10 6452 1 2025-09-17 03:44:17.938 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:44:17.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:44:35.823 00:00:10.364 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:44:52.307 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-09-17 03:45:36.225 00:00:10.369 TCP 23.104.0.1:48972 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:45:52.533 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56206 10 6452 1 2025-09-17 03:46:36.639 00:00:10.398 TCP 23.104.0.1:51970 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:46:52.754 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43328 10 6452 1 2025-09-17 03:47:37.119 00:00:10.369 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:47:52.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38172 10 6452 1 2025-09-17 03:44:29.502 00:05:01.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:48:37.528 00:00:10.367 TCP 23.104.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:48:53.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-09-17 03:49:17.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:49:17.879 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:45:29.504 00:05:01.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:49:37.937 00:00:10.376 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:49:53.447 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-09-17 03:50:38.349 00:00:10.373 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:50:53.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-09-17 03:51:38.807 00:00:10.365 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:51:53.882 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-09-17 03:52:39.211 00:00:10.366 TCP 23.104.0.1:59584 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:52:54.134 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-09-17 03:53:39.615 00:00:10.323 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:53:54.844 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57584 12 6556 1 2025-09-17 03:54:17.672 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-17 03:54:18.270 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-17 03:50:29.505 00:05:01.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-17 03:54:39.973 00:00:10.945 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:54:55.080 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45980 10 6452 1 2025-09-17 03:51:29.506 00:05:01.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-17 03:55:40.957 00:00:10.366 TCP 23.104.0.1:53818 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:55:55.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-09-17 03:56:41.363 00:00:10.364 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:56:55.515 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 12 6556 1 2025-09-17 03:57:41.767 00:00:10.373 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-09-17 03:57:55.717 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48056 10 6452 1 Summary: total flows: 162, total bytes: 499459, total packets: 1571, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-09-17 02:56:29 - 2025-09-17 03:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0023s User: 0.0030s Wall: 0.0021s flows/second: 75489.1 Runtime: 0.0022s