Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 02:59:05.573 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 02:59:05.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 02:59:04.434 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46660 10 6452 1 2025-09-27 02:59:17.224 00:00:10.367 TCP 23.104.0.1:58800 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:00:04.658 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40176 10 6452 1 2025-09-27 03:00:17.628 00:00:10.366 TCP 23.104.0.1:37836 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:56:34.148 00:05:01.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:01:04.870 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-09-27 03:01:18.040 00:00:10.342 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-09-27 02:57:34.151 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:02:05.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46594 10 6452 1 2025-09-27 03:02:18.431 00:00:10.363 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:03:05.273 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-09-27 03:03:18.840 00:00:10.391 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:04:05.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:04:05.605 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:04:05.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-09-27 03:04:19.272 00:00:10.323 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:05:05.701 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-09-27 03:05:19.632 00:00:10.323 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:06:05.929 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55404 10 6452 1 2025-09-27 03:06:19.997 00:00:10.360 TCP 23.104.0.1:60832 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:02:34.150 00:05:01.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:07:06.160 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48476 10 6452 1 2025-09-27 03:07:20.398 00:00:10.364 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:03:34.152 00:05:01.532 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:08:06.375 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6452 1 2025-09-27 03:08:20.800 00:00:10.364 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:09:05.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:09:05.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:09:06.587 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6452 1 2025-09-27 03:09:21.202 00:00:10.367 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:10:06.800 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55474 10 6452 1 2025-09-27 03:10:21.605 00:00:10.366 TCP 23.104.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:11:07.011 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-09-27 03:11:22.010 00:00:10.369 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:12:07.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6452 1 2025-09-27 03:08:34.151 00:05:01.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:12:22.419 00:00:10.327 TCP 23.104.0.1:37404 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:13:07.449 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 10 6452 1 2025-09-27 03:09:34.152 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:13:22.780 00:00:10.365 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:14:05.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:14:06.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:14:07.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-09-27 03:14:23.183 00:00:10.791 TCP 23.104.0.1:35526 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:15:07.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-09-27 03:15:24.014 00:00:10.320 TCP 23.104.0.1:60740 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:16:08.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-09-27 03:16:24.371 00:00:11.924 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:17:08.301 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54984 10 6452 1 2025-09-27 03:17:26.350 00:00:10.364 TCP 23.104.0.1:58388 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:18:08.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42906 10 6452 1 2025-09-27 03:14:34.152 00:05:01.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:18:26.748 00:00:10.328 TCP 23.104.0.1:45586 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:19:05.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:19:06.015 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:19:08.691 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 10 6452 1 2025-09-27 03:15:34.153 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:19:27.110 00:00:10.401 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:20:08.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-09-27 03:20:27.546 00:00:11.420 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:21:09.115 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-09-27 03:21:29.006 00:00:10.360 TCP 23.104.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:22:09.292 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-09-27 03:22:29.404 00:00:10.368 TCP 23.104.0.1:52660 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:23:09.504 00:00:14.234 TCP 1.101.0.1:3000 -> 22.102.0.1:48902 10 6452 1 2025-09-27 03:23:29.807 00:00:10.372 TCP 23.104.0.1:54918 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:24:06.229 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:24:06.162 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:24:13.794 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-09-27 03:20:34.153 00:05:01.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:24:30.216 00:00:10.327 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:25:14.010 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-09-27 03:21:34.156 00:05:01.533 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:25:30.582 00:00:10.363 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:26:14.196 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-09-27 03:26:30.986 00:00:10.369 TCP 23.104.0.1:51522 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:27:14.416 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-09-27 03:27:31.395 00:00:10.366 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:28:14.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-09-27 03:28:31.801 00:00:10.369 TCP 23.104.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:29:06.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:29:06.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:29:14.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-09-27 03:29:32.211 00:00:10.366 TCP 23.104.0.1:33572 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:30:15.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6452 1 2025-09-27 03:26:34.160 00:05:01.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:30:32.611 00:00:10.364 TCP 23.104.0.1:41180 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:31:15.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59108 10 6452 1 2025-09-27 03:27:34.162 00:05:01.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:31:33.019 00:00:10.440 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 15 1926 1 2025-09-27 03:32:15.503 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 12 10365 1 2025-09-27 03:32:33.502 00:00:10.534 TCP 23.104.0.1:39568 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:33:15.752 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-09-27 03:33:34.105 00:00:10.370 TCP 23.104.0.1:36318 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:34:06.451 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:34:06.412 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:34:15.971 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-09-27 03:34:34.508 00:00:10.325 TCP 23.104.0.1:52342 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:35:16.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-09-27 03:35:34.875 00:00:10.364 TCP 23.104.0.1:41808 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:36:16.422 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-09-27 03:32:34.160 00:05:01.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:36:35.277 00:00:10.362 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:37:16.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 10 6452 1 2025-09-27 03:33:34.163 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:37:35.682 00:00:10.370 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:38:16.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54224 10 6452 1 2025-09-27 03:38:36.107 00:00:10.367 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:39:06.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:39:06.436 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:39:17.046 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-09-27 03:39:36.508 00:00:10.328 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:40:17.264 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-09-27 03:40:36.875 00:00:11.342 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:41:17.476 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-09-27 03:41:38.257 00:00:10.362 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:42:17.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-09-27 03:38:34.163 00:05:01.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:42:38.665 00:00:10.365 TCP 23.104.0.1:48246 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:43:17.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-09-27 03:39:34.165 00:05:01.532 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:43:39.094 00:00:10.362 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:44:06.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:44:06.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:44:18.118 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56342 10 6452 1 2025-09-27 03:44:39.497 00:00:10.323 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:45:18.289 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49640 10 6452 1 2025-09-27 03:45:39.858 00:00:10.372 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:46:18.463 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-09-27 03:46:40.268 00:00:10.367 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:47:18.679 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-27 03:47:40.672 00:00:10.361 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:48:18.902 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-09-27 03:44:34.163 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:48:41.097 00:00:10.367 TCP 23.104.0.1:54006 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:49:06.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:49:06.618 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:49:19.083 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-09-27 03:45:34.165 00:05:01.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:49:41.502 00:00:10.367 TCP 23.104.0.1:58924 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:50:19.257 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-09-27 03:50:41.906 00:00:10.363 TCP 23.104.0.1:52678 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:51:19.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-09-27 03:51:42.308 00:00:10.362 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:52:19.687 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-09-27 03:52:42.707 00:00:10.366 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:53:19.901 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54492 10 6452 1 2025-09-27 03:53:43.118 00:00:10.367 TCP 23.104.0.1:59956 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:54:06.721 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 03:54:06.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 03:54:20.123 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36266 10 6452 1 2025-09-27 03:50:34.164 00:05:01.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 03:54:43.523 00:00:10.362 TCP 23.104.0.1:40392 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:55:20.291 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-09-27 03:51:34.168 00:05:01.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 03:55:43.922 00:00:10.334 TCP 23.104.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:56:20.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-09-27 03:56:44.297 00:00:10.321 TCP 23.104.0.1:55552 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:57:20.727 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-09-27 03:57:44.657 00:00:13.368 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-09-27 03:58:20.937 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57142 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1078, avg pps: 0, avg bpp: 319 Time window: 2025-09-27 02:56:34 - 2025-09-27 03:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0029s Wall: 0.0031s flows/second: 51895.5 Runtime: 0.0032s