Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-27 07:59:11.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 07:59:11.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 07:59:19.616 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6452 1 2025-09-27 07:59:37.093 00:00:10.363 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:00:19.824 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57656 10 6452 1 2025-09-27 07:56:34.245 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:00:37.493 00:00:10.365 TCP 23.104.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:01:20.000 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2025-09-27 07:57:34.248 00:05:01.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:01:37.899 00:00:10.440 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 15 1926 1 2025-09-27 08:02:20.214 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 12 10365 1 2025-09-27 08:02:38.382 00:00:10.365 TCP 23.104.0.1:49184 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:03:20.454 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40938 10 6452 1 2025-09-27 08:03:38.786 00:00:10.968 TCP 23.104.0.1:60106 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:04:11.865 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:04:11.861 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:04:20.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-09-27 08:04:39.786 00:00:10.369 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:05:20.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-09-27 08:05:40.187 00:00:10.372 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:06:21.102 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-09-27 08:02:34.247 00:05:01.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:06:40.594 00:00:10.368 TCP 23.104.0.1:54024 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:07:21.277 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-09-27 08:03:34.251 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:07:41.000 00:00:10.366 TCP 23.104.0.1:53044 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:08:21.491 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-09-27 08:08:41.399 00:00:10.373 TCP 23.104.0.1:40730 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:09:11.801 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:09:11.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:09:22.282 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-09-27 08:09:41.811 00:00:10.364 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:10:22.459 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-09-27 08:10:42.213 00:00:10.374 TCP 23.104.0.1:60996 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:11:22.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2025-09-27 08:11:42.630 00:00:10.324 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:08:34.249 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:12:22.849 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-09-27 08:12:42.995 00:00:10.387 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:13:23.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-09-27 08:09:34.254 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:13:43.423 00:00:10.375 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:14:12.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:14:12.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:14:23.291 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-09-27 08:14:43.839 00:00:10.340 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:15:23.728 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6452 1 2025-09-27 08:15:44.220 00:00:10.362 TCP 23.104.0.1:44754 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:16:23.935 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2025-09-27 08:16:44.626 00:00:10.365 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:17:24.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-09-27 08:17:45.031 00:00:10.365 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:18:24.380 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-09-27 08:14:34.251 00:05:01.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:18:45.432 00:00:10.367 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:19:12.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:19:12.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:15:34.254 00:05:01.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:19:24.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-09-27 08:19:45.840 00:00:10.388 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:20:24.780 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-09-27 08:20:46.265 00:00:10.368 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:21:24.960 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42404 10 6452 1 2025-09-27 08:21:46.670 00:00:10.373 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:22:25.145 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35480 10 6452 1 2025-09-27 08:22:47.095 00:00:10.358 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:23:25.360 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-09-27 08:23:47.490 00:00:10.362 TCP 23.104.0.1:41656 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:24:12.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:24:12.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:24:25.575 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60910 10 6452 1 2025-09-27 08:20:34.255 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:24:47.887 00:00:10.374 TCP 23.104.0.1:37442 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:25:25.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-09-27 08:21:34.256 00:05:01.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:25:48.301 00:00:10.361 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:26:25.956 00:00:10.618 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 12 6556 1 2025-09-27 08:26:48.702 00:00:10.365 TCP 23.104.0.1:37374 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:27:26.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-09-27 08:27:49.112 00:00:10.373 TCP 23.104.0.1:43906 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:28:26.832 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-09-27 08:28:49.520 00:00:10.362 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:29:11.980 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:29:12.202 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:29:26.997 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6452 1 2025-09-27 08:29:49.920 00:00:10.379 TCP 23.104.0.1:44336 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:26:34.256 00:05:01.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:30:27.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-09-27 08:30:50.337 00:00:10.325 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:27:34.260 00:05:01.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:31:27.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-09-27 08:31:50.703 00:00:10.368 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:32:27.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6452 1 2025-09-27 08:32:51.107 00:00:10.363 TCP 23.104.0.1:49942 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:33:27.850 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37650 10 6452 1 2025-09-27 08:33:51.534 00:00:10.364 TCP 23.104.0.1:55506 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:34:12.400 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:34:12.242 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:34:28.083 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-09-27 08:34:51.936 00:00:10.420 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:35:28.260 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:55698 10 6452 1 2025-09-27 08:35:52.400 00:00:10.391 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:32:34.258 00:05:01.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:36:28.551 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-27 08:36:52.850 00:00:10.541 TCP 23.104.0.1:47844 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:33:34.260 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:37:28.756 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6452 1 2025-09-27 08:37:53.423 00:00:10.327 TCP 23.104.0.1:56394 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:38:28.931 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35718 10 6452 1 2025-09-27 08:38:53.786 00:00:10.366 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:39:12.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:39:12.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:39:29.126 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42928 10 6452 1 2025-09-27 08:39:54.193 00:00:10.370 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:40:29.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51370 10 6452 1 2025-09-27 08:40:54.601 00:00:10.323 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:41:29.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-09-27 08:41:54.962 00:00:10.441 TCP 23.104.0.1:56564 -> 1.101.0.1:3000 15 1926 1 2025-09-27 08:38:34.260 00:05:01.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:42:29.738 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 12 10365 1 2025-09-27 08:42:55.441 00:00:10.320 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:39:34.263 00:05:01.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:43:29.983 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56724 10 6452 1 2025-09-27 08:43:55.800 00:00:10.331 TCP 23.104.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:44:12.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:44:12.560 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:44:30.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41494 10 6452 1 2025-09-27 08:44:56.172 00:00:10.368 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:45:30.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-09-27 08:45:56.581 00:00:10.372 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:46:30.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48332 10 6452 1 2025-09-27 08:46:56.992 00:00:10.330 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:47:30.859 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-09-27 08:47:57.367 00:00:10.366 TCP 23.104.0.1:52214 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:44:34.261 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:48:31.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-09-27 08:49:12.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:48:57.778 00:00:10.326 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:49:12.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:45:34.264 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:49:31.257 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-09-27 08:49:58.145 00:00:10.367 TCP 23.104.0.1:42776 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:50:31.478 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48722 10 6452 1 2025-09-27 08:50:58.553 00:00:10.519 TCP 23.104.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:51:31.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-09-27 08:51:59.112 00:00:10.367 TCP 23.104.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:52:31.911 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-09-27 08:52:59.516 00:00:10.364 TCP 23.104.0.1:48680 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:53:32.117 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-09-27 08:53:59.919 00:00:10.377 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:54:12.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-27 08:54:12.559 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-27 08:50:34.264 00:05:01.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-27 08:54:32.329 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-09-27 08:55:00.333 00:00:10.363 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:51:34.265 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-27 08:55:32.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60670 10 6452 1 2025-09-27 08:56:00.736 00:00:10.366 TCP 23.104.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:56:32.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-09-27 08:57:01.143 00:00:10.371 TCP 23.104.0.1:38080 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:57:32.962 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-09-27 08:58:01.563 00:00:10.369 TCP 23.104.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-09-27 08:58:33.144 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 Summary: total flows: 163, total bytes: 505609, total packets: 1575, avg bps: 1084, avg pps: 0, avg bpp: 321 Time window: 2025-09-27 07:56:34 - 2025-09-27 08:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0008s Wall: 0.0025s flows/second: 64273.0 Runtime: 0.0026s