Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 02:58:43.884 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 6452 1 2025-09-18 02:59:19.535 00:00:10.371 TCP 23.104.0.1:36646 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:59:45.718 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 02:59:45.748 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 02:59:44.082 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-09-18 03:00:19.941 00:00:10.376 TCP 23.104.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-09-18 02:56:29.936 00:05:01.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:00:44.257 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-09-18 02:57:29.939 00:05:01.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:01:20.359 00:00:10.360 TCP 23.104.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:01:44.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-18 03:02:20.759 00:00:10.375 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:02:44.686 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-09-18 03:03:21.174 00:00:10.369 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:03:44.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-09-18 03:04:21.581 00:00:10.372 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:04:45.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:04:45.798 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:04:45.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 10 6452 1 2025-09-18 03:05:21.986 00:00:10.423 TCP 23.104.0.1:60676 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:05:45.331 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-09-18 03:02:29.936 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:06:22.448 00:00:10.362 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:06:45.507 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:46570 10 6452 1 2025-09-18 03:03:29.939 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:07:22.844 00:00:10.396 TCP 23.104.0.1:39238 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:07:45.714 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-09-18 03:08:23.278 00:00:10.363 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:08:45.925 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:34786 10 6452 1 2025-09-18 03:09:23.686 00:00:10.322 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:09:45.786 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:09:46.034 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:09:46.125 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56202 10 6452 1 2025-09-18 03:10:24.056 00:00:10.366 TCP 23.104.0.1:51168 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:10:46.332 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-09-18 03:11:24.465 00:00:10.322 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:11:46.545 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-09-18 03:08:29.936 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:12:24.824 00:00:10.361 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:12:46.760 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54898 10 6452 1 2025-09-18 03:09:29.939 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:13:25.242 00:00:10.366 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:13:46.929 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-09-18 03:14:25.652 00:00:10.365 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:14:45.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:14:46.085 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:14:47.130 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41538 10 6452 1 2025-09-18 03:15:26.065 00:00:10.374 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:15:47.299 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-09-18 03:16:26.486 00:00:10.366 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:16:47.467 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49110 10 6452 1 2025-09-18 03:17:26.889 00:00:10.384 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:17:47.683 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60078 10 6452 1 2025-09-18 03:14:29.940 00:05:01.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:18:27.313 00:00:10.366 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:18:47.862 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-09-18 03:15:29.943 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:19:27.720 00:00:10.372 TCP 23.104.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:19:46.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:19:46.017 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:19:48.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-09-18 03:20:28.133 00:00:10.443 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 15 1926 1 2025-09-18 03:20:48.307 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 12 10367 1 2025-09-18 03:21:28.610 00:00:10.325 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:21:48.549 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-09-18 03:22:28.969 00:00:10.335 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:22:48.727 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-09-18 03:23:29.346 00:00:10.365 TCP 23.104.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:23:48.937 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-09-18 03:20:29.940 00:05:01.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:24:29.754 00:00:10.387 TCP 23.104.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:24:46.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:24:46.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:24:49.132 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59926 10 6452 1 2025-09-18 03:21:29.942 00:05:01.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:25:30.182 00:00:10.363 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:25:49.313 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-09-18 03:26:30.583 00:00:10.373 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:26:49.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-09-18 03:27:31.000 00:00:10.367 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:27:49.739 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-09-18 03:28:31.403 00:00:10.321 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:28:49.958 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60196 10 6452 1 2025-09-18 03:29:46.401 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:29:31.764 00:00:10.368 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:29:46.259 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:29:50.199 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-09-18 03:26:29.943 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:30:32.169 00:00:10.365 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:30:50.418 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-09-18 03:27:29.946 00:05:01.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:31:32.577 00:00:10.366 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:31:50.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43002 10 6452 1 2025-09-18 03:32:32.986 00:00:10.858 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:32:50.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-09-18 03:33:33.901 00:00:10.366 TCP 23.104.0.1:45986 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:33:51.039 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37570 10 6452 1 2025-09-18 03:34:46.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:34:34.300 00:00:10.376 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:34:46.436 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:34:51.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41410 10 6452 1 2025-09-18 03:35:34.727 00:00:10.368 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:35:51.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-09-18 03:32:29.944 00:05:01.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:36:35.130 00:00:10.356 TCP 23.104.0.1:59586 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:36:51.671 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 10 6452 1 2025-09-18 03:33:29.946 00:05:01.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:37:35.532 00:00:10.321 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:37:51.881 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-09-18 03:38:35.892 00:00:10.374 TCP 23.104.0.1:49822 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:38:52.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-09-18 03:39:46.458 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:39:46.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:39:36.310 00:00:10.362 TCP 23.104.0.1:37586 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:39:52.310 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-09-18 03:40:36.718 00:00:10.372 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:40:52.521 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-09-18 03:41:37.125 00:00:10.360 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:41:52.732 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-09-18 03:38:29.945 00:05:01.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:42:37.530 00:00:10.368 TCP 23.104.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:42:52.946 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-09-18 03:39:29.948 00:05:01.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:43:37.936 00:00:10.334 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:43:53.177 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-09-18 03:44:46.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:44:46.471 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:44:38.303 00:00:10.364 TCP 23.104.0.1:39086 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:44:53.404 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-09-18 03:45:38.720 00:00:10.379 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:45:53.580 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-09-18 03:46:39.135 00:00:10.363 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:46:53.790 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 12 6556 1 2025-09-18 03:47:39.537 00:00:10.362 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:47:54.006 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36276 10 6452 1 2025-09-18 03:44:29.946 00:05:01.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:48:39.943 00:00:10.376 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:48:54.220 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-09-18 03:45:29.950 00:05:01.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:49:46.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:49:40.358 00:00:10.368 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:49:47.179 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:49:54.428 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60172 10 6452 1 2025-09-18 03:50:40.765 00:00:10.403 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:50:54.642 00:00:17.634 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-09-18 03:51:41.197 00:00:10.379 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:52:02.319 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-09-18 03:52:41.615 00:00:10.371 TCP 23.104.0.1:53952 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:53:02.532 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-09-18 03:53:42.022 00:00:10.775 TCP 23.104.0.1:39992 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:54:02.747 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-09-18 03:50:29.949 00:05:01.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 03:54:46.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 03:54:46.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 03:54:42.831 00:00:10.346 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:55:02.962 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36800 10 6452 1 2025-09-18 03:51:29.952 00:05:01.189 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 03:55:43.217 00:00:12.126 TCP 23.104.0.1:52458 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:56:03.147 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-09-18 03:56:45.383 00:00:10.367 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:57:03.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-09-18 03:57:45.800 00:00:10.334 TCP 23.104.0.1:38828 -> 1.101.0.1:3000 11 1507 1 2025-09-18 03:58:03.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 Summary: total flows: 163, total bytes: 501279, total packets: 1569, avg bps: 1082, avg pps: 0, avg bpp: 319 Time window: 2025-09-18 02:56:29 - 2025-09-18 03:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0023s Wall: 0.0026s flows/second: 62935.8 Runtime: 0.0026s