Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 14:59:29.481 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52766 10 6452 1 2025-10-19 14:59:30.740 00:00:10.367 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:59:55.383 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 14:59:55.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:00:29.690 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33630 10 6452 1 2025-10-19 15:00:31.144 00:00:10.366 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-10-19 14:56:44.645 00:05:02.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 14:56:44.649 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:01:31.551 00:00:10.368 TCP 23.104.0.1:35936 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:01:29.909 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6452 1 2025-10-19 15:02:30.122 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6452 1 2025-10-19 15:02:31.959 00:00:10.508 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:03:30.345 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-10-19 15:03:32.504 00:00:10.326 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:04:30.523 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-10-19 15:04:32.864 00:00:10.372 TCP 23.104.0.1:43372 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:04:55.567 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:04:55.496 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:05:30.734 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-10-19 15:05:33.272 00:00:10.324 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:06:30.913 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6452 1 2025-10-19 15:06:33.631 00:00:10.367 TCP 23.104.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:02:44.650 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:02:44.647 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:07:31.126 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 2025-10-19 15:07:34.036 00:00:10.362 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:08:31.387 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34262 10 6452 1 2025-10-19 15:08:34.439 00:00:10.364 TCP 23.104.0.1:56386 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:09:31.620 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-10-19 15:09:34.842 00:00:10.385 TCP 23.104.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:09:55.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:09:55.554 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:10:35.265 00:00:10.345 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:10:31.848 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-10-19 15:11:35.654 00:00:10.375 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:11:32.088 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49812 10 6452 1 2025-10-19 15:12:36.079 00:00:10.369 TCP 23.104.0.1:34800 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:12:32.337 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-10-19 15:08:44.651 00:05:02.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:08:44.647 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:13:36.485 00:00:10.421 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:13:32.698 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59836 10 6452 1 2025-10-19 15:14:32.917 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 10 6452 1 2025-10-19 15:14:36.942 00:00:10.372 TCP 23.104.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:14:55.842 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:14:55.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:15:33.137 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-10-19 15:15:37.356 00:00:10.338 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:16:33.350 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-10-19 15:16:37.742 00:00:10.369 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:17:33.568 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-10-19 15:17:38.150 00:00:10.329 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:18:33.799 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49702 12 10375 1 2025-10-19 15:14:44.651 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:18:38.516 00:00:10.397 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 15 1926 1 2025-10-19 15:14:44.650 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:19:34.063 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-10-19 15:19:55.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:19:38.953 00:00:10.369 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:19:55.908 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:20:34.275 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36830 10 6452 1 2025-10-19 15:20:39.358 00:00:10.367 TCP 23.104.0.1:39546 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:21:34.505 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48024 10 6452 1 2025-10-19 15:21:39.759 00:00:10.400 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:22:34.718 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-10-19 15:22:40.194 00:00:10.718 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:23:34.935 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-10-19 15:23:40.950 00:00:10.369 TCP 23.104.0.1:46136 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:24:35.136 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6452 1 2025-10-19 15:20:44.652 00:05:02.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:24:41.360 00:00:10.363 TCP 23.104.0.1:60896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:20:44.649 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:24:56.213 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:24:56.301 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:25:35.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-10-19 15:25:41.763 00:00:10.378 TCP 23.104.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:26:35.557 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-10-19 15:26:42.175 00:00:10.364 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:27:35.772 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-10-19 15:27:42.577 00:00:10.367 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:28:35.944 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39544 12 10369 1 2025-10-19 15:28:42.983 00:00:11.067 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 15 1926 1 2025-10-19 15:29:36.162 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-10-19 15:29:56.141 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:29:55.997 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:29:44.102 00:00:10.364 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:30:36.373 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-10-19 15:26:44.654 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:26:44.651 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:30:44.501 00:00:10.367 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:31:36.589 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-10-19 15:31:44.905 00:00:10.323 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:32:36.800 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50618 10 6452 1 2025-10-19 15:32:45.269 00:00:10.363 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:33:36.978 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-10-19 15:33:45.670 00:00:10.322 TCP 23.104.0.1:45468 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:34:56.222 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:34:46.031 00:00:10.363 TCP 23.104.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:34:37.239 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43540 10 6452 1 2025-10-19 15:34:56.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:35:37.422 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-10-19 15:35:46.436 00:00:10.354 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:32:44.653 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:36:37.645 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41120 10 6452 1 2025-10-19 15:32:44.655 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:36:46.830 00:00:10.396 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:37:37.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53132 10 6452 1 2025-10-19 15:37:47.263 00:00:10.363 TCP 23.104.0.1:50406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:38:38.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47858 10 6452 1 2025-10-19 15:38:47.665 00:00:10.359 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:39:38.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-10-19 15:39:56.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:39:56.309 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:39:48.093 00:00:10.360 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:40:38.421 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-10-19 15:40:48.491 00:00:10.363 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:41:38.643 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34142 10 6452 1 2025-10-19 15:41:48.896 00:00:10.375 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:42:38.861 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-10-19 15:38:44.655 00:05:02.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:38:44.657 00:05:02.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:42:49.309 00:00:10.367 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:43:39.087 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-10-19 15:43:49.715 00:00:10.377 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:44:39.299 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42474 10 6452 1 2025-10-19 15:44:56.304 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:44:56.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:44:50.152 00:00:10.368 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:45:39.518 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-10-19 15:45:50.559 00:00:10.372 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:46:40.046 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36394 10 6452 1 2025-10-19 15:46:50.967 00:00:10.323 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:47:40.254 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42752 10 6452 1 2025-10-19 15:47:51.328 00:00:10.365 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:44:44.657 00:05:02.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:48:40.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33784 10 6452 1 2025-10-19 15:44:44.660 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:48:51.734 00:00:10.410 TCP 23.104.0.1:37896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:49:40.680 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-10-19 15:49:56.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:49:56.444 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:49:52.182 00:00:10.362 TCP 23.104.0.1:45588 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:50:40.897 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55332 10 6452 1 2025-10-19 15:50:52.591 00:00:10.359 TCP 23.104.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:51:41.115 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-10-19 15:51:52.988 00:00:10.364 TCP 23.104.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:52:41.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6452 1 2025-10-19 15:52:53.392 00:00:10.438 TCP 23.104.0.1:39020 -> 1.101.0.1:3000 15 1926 1 2025-10-19 15:53:41.503 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51796 12 10375 1 2025-10-19 15:53:53.870 00:00:10.364 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:54:41.700 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6452 1 2025-10-19 15:50:44.658 00:05:02.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 15:54:56.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 15:50:44.660 00:05:02.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 15:54:56.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 15:54:54.269 00:00:10.446 TCP 23.104.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:55:41.915 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-10-19 15:55:54.755 00:00:10.332 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:56:42.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-10-19 15:56:55.127 00:00:10.365 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-10-19 15:57:42.339 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-10-19 15:57:55.527 00:00:10.326 TCP 23.104.0.1:40480 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503409, total packets: 1569, avg bps: 1094, avg pps: 0, avg bpp: 320 Time window: 2025-10-19 14:56:44 - 2025-10-19 15:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0009s Wall: 0.0023s flows/second: 68989.5 Runtime: 0.0024s