Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-20 01:59:14.974 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43982 10 6452 1 2025-10-20 01:59:26.135 00:00:10.360 TCP 23.104.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:00:08.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:00:08.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:00:15.213 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-10-20 02:00:26.536 00:00:17.022 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-10-20 01:56:44.844 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 01:56:44.841 00:05:02.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:01:15.437 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-10-20 02:01:33.621 00:00:10.365 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:02:15.657 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-10-20 02:02:34.025 00:00:10.359 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:03:15.837 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-10-20 02:03:34.427 00:00:10.323 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:04:16.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-10-20 02:04:34.789 00:00:10.367 TCP 23.104.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:05:08.877 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:05:08.918 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:05:16.292 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44584 10 6452 1 2025-10-20 02:05:35.191 00:00:10.368 TCP 23.104.0.1:39778 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:06:16.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6452 1 2025-10-20 02:06:35.596 00:00:10.366 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:02:44.844 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:02:44.846 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:07:16.678 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-10-20 02:07:36.001 00:00:10.363 TCP 23.104.0.1:36330 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:08:16.916 00:00:21.630 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-10-20 02:08:36.404 00:00:10.367 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:09:28.599 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-10-20 02:09:36.807 00:00:10.365 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:10:09.012 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:10:08.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:10:28.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-10-20 02:10:37.209 00:00:10.363 TCP 23.104.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:11:28.987 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6452 1 2025-10-20 02:11:37.604 00:00:10.327 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:12:29.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-10-20 02:12:37.975 00:00:10.388 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:08:44.851 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:08:44.848 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:13:29.398 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-10-20 02:13:38.407 00:00:10.367 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:14:29.565 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:56688 10 6452 1 2025-10-20 02:14:38.811 00:00:10.365 TCP 23.104.0.1:33918 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:15:09.111 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:15:09.196 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:15:30.002 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-10-20 02:15:39.220 00:00:10.571 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:16:30.238 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54626 10 6452 1 2025-10-20 02:16:39.836 00:00:10.668 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:17:30.448 00:00:11.382 TCP 1.101.0.1:3000 -> 22.102.0.1:53092 12 6556 1 2025-10-20 02:17:40.551 00:00:10.365 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:18:31.865 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38902 10 6452 1 2025-10-20 02:18:40.953 00:00:10.364 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:14:44.850 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:14:44.848 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:19:32.090 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 10 6452 1 2025-10-20 02:19:41.357 00:00:10.360 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:20:09.073 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:20:09.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:20:32.261 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50314 10 6452 1 2025-10-20 02:20:41.758 00:00:10.378 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:21:32.487 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-10-20 02:21:42.171 00:00:10.332 TCP 23.104.0.1:55984 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:22:32.711 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47460 10 6452 1 2025-10-20 02:22:42.530 00:00:10.318 TCP 23.104.0.1:50406 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:23:32.931 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-10-20 02:23:42.886 00:00:10.376 TCP 23.104.0.1:34818 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:24:33.179 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-10-20 02:20:44.848 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:20:44.852 00:05:02.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:24:43.295 00:00:10.362 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:25:09.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:25:09.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:25:33.397 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6452 1 2025-10-20 02:25:43.692 00:00:10.366 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:26:33.626 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42450 10 6452 1 2025-10-20 02:26:44.108 00:00:10.324 TCP 23.104.0.1:58658 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:27:33.844 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43684 10 6452 1 2025-10-20 02:27:44.475 00:00:10.368 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:28:34.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60032 10 6452 1 2025-10-20 02:28:44.884 00:00:10.386 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:29:34.300 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-10-20 02:29:45.308 00:00:10.368 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:30:09.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:30:09.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:30:34.534 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-10-20 02:26:44.854 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:26:44.852 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:30:45.711 00:00:10.362 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:31:34.773 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56324 10 6452 1 2025-10-20 02:31:46.116 00:00:14.156 TCP 23.104.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:32:35.011 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-10-20 02:32:50.338 00:00:10.359 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:33:35.225 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-10-20 02:33:50.737 00:00:10.366 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:34:35.456 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41970 10 6452 1 2025-10-20 02:34:51.143 00:00:10.367 TCP 23.104.0.1:51734 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:35:09.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:35:09.418 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:35:35.635 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-10-20 02:35:51.544 00:00:10.368 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:36:35.858 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-10-20 02:32:44.857 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:32:44.855 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:36:51.948 00:00:10.366 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:37:36.083 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-10-20 02:37:52.351 00:00:10.373 TCP 23.104.0.1:60494 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:38:36.306 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-10-20 02:38:52.762 00:00:10.379 TCP 23.104.0.1:49832 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:39:36.529 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-10-20 02:39:53.183 00:00:10.366 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:40:09.559 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:40:09.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:40:36.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39352 10 6452 1 2025-10-20 02:40:53.587 00:00:10.319 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:41:36.928 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-10-20 02:41:53.944 00:00:10.375 TCP 23.104.0.1:48206 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:38:44.860 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:38:44.859 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:42:37.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-10-20 02:42:54.356 00:00:10.359 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:43:37.333 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-10-20 02:43:54.754 00:00:10.378 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:44:37.512 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 10 6452 1 2025-10-20 02:44:55.172 00:00:10.322 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:45:09.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:45:09.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:45:37.738 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-10-20 02:45:55.536 00:00:10.366 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:46:37.947 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-10-20 02:46:55.937 00:00:10.383 TCP 23.104.0.1:51914 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:47:38.178 00:00:13.456 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-10-20 02:47:56.362 00:00:10.436 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 15 1926 1 2025-10-20 02:44:44.862 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:48:41.683 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 12 10375 1 2025-10-20 02:44:44.859 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:48:56.835 00:00:10.381 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:49:41.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57386 10 6452 1 2025-10-20 02:50:09.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:50:09.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:49:57.256 00:00:10.398 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:50:42.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-10-20 02:50:57.701 00:00:10.382 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:51:42.394 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-10-20 02:51:58.119 00:00:10.364 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:52:42.618 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-10-20 02:52:58.522 00:00:10.364 TCP 23.104.0.1:42976 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:53:42.842 00:00:10.458 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-10-20 02:53:58.933 00:00:10.326 TCP 23.104.0.1:43094 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:50:44.862 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-20 02:50:44.860 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-20 02:54:43.341 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-10-20 02:55:10.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-20 02:55:10.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-20 02:54:59.300 00:00:10.361 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:55:43.566 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40086 10 6452 1 2025-10-20 02:55:59.699 00:00:10.348 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:56:43.779 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57616 10 6452 1 2025-10-20 02:57:00.106 00:00:10.334 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-10-20 02:57:44.001 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6452 1 2025-10-20 02:58:00.477 00:00:10.323 TCP 23.104.0.1:45084 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494835, total packets: 1559, avg bps: 1073, avg pps: 0, avg bpp: 317 Time window: 2025-10-20 01:56:44 - 2025-10-20 02:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0029s Wall: 0.0023s flows/second: 71112.2 Runtime: 0.0023s