Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 15:58:58.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 15:58:59.009 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 15:59:03.719 00:00:10.366 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-10-17 15:59:38.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-10-17 16:00:04.126 00:00:10.359 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-10-17 15:56:43.662 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 15:56:43.660 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:00:38.403 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-10-17 16:01:04.525 00:00:10.366 TCP 23.104.0.1:53546 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:01:39.035 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-10-17 16:02:04.930 00:00:10.388 TCP 23.104.0.1:60086 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:02:39.249 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-10-17 16:03:05.360 00:00:10.325 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:03:39.417 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 2025-10-17 16:03:58.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:03:58.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:04:05.723 00:00:10.374 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:04:39.655 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56180 10 6452 1 2025-10-17 16:05:06.135 00:00:10.367 TCP 23.104.0.1:45454 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:05:39.863 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-10-17 16:06:06.540 00:00:10.371 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:02:43.664 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:06:40.088 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-10-17 16:02:43.661 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:07:06.954 00:00:10.364 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:07:40.321 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-10-17 16:08:07.357 00:00:10.364 TCP 23.104.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:08:40.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6452 1 2025-10-17 16:08:59.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:08:59.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:09:07.759 00:00:10.371 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:09:40.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-10-17 16:10:08.170 00:00:10.364 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:10:40.912 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-10-17 16:11:08.573 00:00:10.362 TCP 23.104.0.1:53006 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:11:41.122 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-10-17 16:12:08.978 00:00:10.365 TCP 23.104.0.1:37684 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:08:43.667 00:05:02.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:08:43.670 00:05:02.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:12:41.344 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-10-17 16:13:09.378 00:00:10.326 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:13:41.568 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41802 10 6452 1 2025-10-17 16:13:59.136 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:13:59.558 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:14:09.739 00:00:10.366 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:14:41.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36084 10 6452 1 2025-10-17 16:15:10.143 00:00:10.361 TCP 23.104.0.1:59566 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:15:41.951 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 12 6556 1 2025-10-17 16:16:10.549 00:00:10.369 TCP 23.104.0.1:34018 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:16:42.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-10-17 16:17:10.955 00:00:10.367 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:17:42.407 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-10-17 16:18:11.353 00:00:10.371 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:14:43.670 00:05:02.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:14:43.667 00:05:02.644 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:18:42.581 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2025-10-17 16:18:59.270 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:18:59.391 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:19:11.761 00:00:10.379 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:19:42.797 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 10 6452 1 2025-10-17 16:20:12.174 00:00:10.358 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:20:42.970 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-10-17 16:21:12.572 00:00:10.361 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:21:43.202 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50910 10 6452 1 2025-10-17 16:22:12.971 00:00:10.366 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:22:43.374 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-10-17 16:23:13.376 00:00:10.458 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:23:43.588 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-10-17 16:23:59.440 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:23:59.352 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:24:13.874 00:00:10.321 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:20:43.673 00:05:02.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:20:43.669 00:05:02.645 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:24:43.824 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-10-17 16:25:14.236 00:00:10.373 TCP 23.104.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:25:44.009 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 10 6452 1 2025-10-17 16:26:14.649 00:00:10.363 TCP 23.104.0.1:37126 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:26:44.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39450 10 6452 1 2025-10-17 16:27:15.053 00:00:10.398 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 15 1926 1 2025-10-17 16:27:44.440 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38612 12 10375 1 2025-10-17 16:28:15.490 00:00:10.371 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:28:44.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-10-17 16:28:59.698 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:28:59.702 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:29:15.897 00:00:10.331 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:29:44.892 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 11 6492 1 2025-10-17 16:30:16.270 00:00:10.326 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:26:43.675 00:05:02.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:26:43.672 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:30:45.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-10-17 16:31:16.624 00:00:10.375 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:31:45.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6452 1 2025-10-17 16:32:17.035 00:00:11.008 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:32:45.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-10-17 16:33:18.104 00:00:10.374 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:33:45.731 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55606 10 6452 1 2025-10-17 16:33:59.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:33:59.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:34:18.519 00:00:10.323 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:34:45.942 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60508 10 6452 1 2025-10-17 16:35:18.882 00:00:10.385 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:35:46.191 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-10-17 16:36:19.319 00:00:10.339 TCP 23.104.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:32:43.672 00:05:02.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:32:43.674 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:36:46.412 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-10-17 16:37:19.697 00:00:10.325 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:37:46.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-10-17 16:38:20.064 00:00:10.365 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:38:59.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:38:59.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:38:46.846 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-10-17 16:39:20.472 00:00:10.368 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:39:47.078 00:00:10.675 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-10-17 16:40:20.877 00:00:10.369 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:40:47.795 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-10-17 16:41:21.288 00:00:10.364 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:41:47.964 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45758 10 6452 1 2025-10-17 16:42:21.691 00:00:10.370 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:38:43.677 00:05:02.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:38:43.680 00:05:02.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:42:48.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-10-17 16:43:22.102 00:00:10.366 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:43:48.403 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54440 10 6452 1 2025-10-17 16:43:59.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:43:59.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:44:22.506 00:00:10.366 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:44:48.613 00:00:10.645 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6452 1 2025-10-17 16:45:22.909 00:00:10.321 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:45:49.294 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-10-17 16:46:23.303 00:00:10.368 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:46:49.515 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44064 10 6452 1 2025-10-17 16:47:23.712 00:00:10.362 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:47:49.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38064 10 6452 1 2025-10-17 16:48:24.116 00:00:10.326 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:44:43.688 00:05:02.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:44:43.686 00:05:02.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:48:49.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50736 10 6452 1 2025-10-17 16:48:59.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:48:59.709 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:49:24.477 00:00:10.367 TCP 23.104.0.1:57708 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:49:50.176 00:00:10.581 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-10-17 16:50:24.879 00:00:10.377 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:50:50.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55810 10 6452 1 2025-10-17 16:51:25.296 00:00:10.650 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:51:51.006 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38048 12 10375 1 2025-10-17 16:52:25.979 00:00:10.446 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 15 1926 1 2025-10-17 16:52:51.210 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-10-17 16:53:26.464 00:00:10.380 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:53:59.925 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 16:53:51.430 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-10-17 16:53:59.933 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 16:54:26.887 00:00:10.333 TCP 23.104.0.1:54816 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:50:43.686 00:05:02.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 16:50:43.690 00:05:02.630 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 16:54:51.609 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39422 10 6452 1 2025-10-17 16:55:27.270 00:00:10.373 TCP 23.104.0.1:44136 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:55:51.822 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-10-17 16:56:27.686 00:00:10.332 TCP 23.104.0.1:57628 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:56:52.082 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 11 6504 1 2025-10-17 16:57:28.062 00:00:10.373 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-10-17 16:57:52.343 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-10-17 16:58:28.472 00:00:10.374 TCP 23.104.0.1:33964 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500776, total packets: 1578, avg bps: 1078, avg pps: 0, avg bpp: 317 Time window: 2025-10-17 15:56:43 - 2025-10-17 16:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0021s Wall: 0.0041s flows/second: 39806.2 Runtime: 0.0041s