Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 03:58:46.959 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55936 10 6452 1 2025-10-28 03:59:02.426 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 03:59:02.379 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 03:59:37.100 00:00:10.364 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-10-28 03:55:48.467 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 03:59:47.192 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45760 10 6452 1 2025-10-28 04:00:37.507 00:00:10.368 TCP 23.104.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-10-28 03:56:48.468 00:05:03.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:00:47.415 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-10-28 04:01:37.909 00:00:10.370 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:01:47.643 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-10-28 04:02:38.318 00:00:10.366 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:02:47.854 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-10-28 04:03:38.723 00:00:10.367 TCP 23.104.0.1:51306 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:03:48.078 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50290 10 6452 1 2025-10-28 04:04:02.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:04:02.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:04:39.128 00:00:10.367 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:04:48.294 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-10-28 04:05:39.528 00:00:10.363 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:01:48.469 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:05:48.518 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-10-28 04:06:39.928 00:00:10.382 TCP 23.104.0.1:50704 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:02:48.468 00:05:03.331 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:06:48.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 2025-10-28 04:07:40.349 00:00:10.329 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:07:48.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-10-28 04:08:40.718 00:00:10.335 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:08:49.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 10 6452 1 2025-10-28 04:09:02.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:09:02.692 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:09:41.109 00:00:10.371 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:09:49.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38430 10 6452 1 2025-10-28 04:10:41.514 00:00:10.362 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:10:49.545 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-10-28 04:11:41.917 00:00:10.364 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:07:48.472 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:11:49.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59978 10 6452 1 2025-10-28 04:12:42.318 00:00:10.518 TCP 23.104.0.1:46062 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:08:48.469 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:12:49.976 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56152 10 6452 1 2025-10-28 04:13:42.875 00:00:10.367 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:14:02.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:13:50.212 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-10-28 04:14:02.638 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:14:43.280 00:00:10.329 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:14:50.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-10-28 04:15:43.650 00:00:10.366 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:15:50.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-10-28 04:16:44.059 00:00:10.365 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:16:50.823 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50786 10 6452 1 2025-10-28 04:17:44.463 00:00:10.365 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:13:48.474 00:05:03.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:17:50.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-10-28 04:14:48.470 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:18:44.864 00:00:10.332 TCP 23.104.0.1:35416 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:19:02.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:18:51.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-10-28 04:19:03.105 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:19:45.229 00:00:10.364 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:19:51.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-10-28 04:20:45.631 00:00:10.320 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:20:51.659 00:00:10.554 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6452 1 2025-10-28 04:21:45.996 00:00:10.327 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:21:52.250 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58356 10 6452 1 2025-10-28 04:22:46.365 00:00:10.364 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:22:52.459 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6452 1 2025-10-28 04:19:48.474 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:24:03.023 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:23:52.680 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-10-28 04:23:46.771 00:00:11.079 TCP 23.104.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:24:02.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:20:48.471 00:05:03.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:24:47.892 00:00:10.370 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:24:52.904 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-10-28 04:25:48.302 00:00:10.369 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:25:53.129 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-10-28 04:26:48.707 00:00:10.397 TCP 23.104.0.1:55526 -> 1.101.0.1:3000 15 1926 1 2025-10-28 04:26:53.313 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 12 10375 1 2025-10-28 04:27:49.150 00:00:10.366 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:27:53.553 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-10-28 04:28:49.552 00:00:10.323 TCP 23.104.0.1:34884 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:29:03.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:28:53.731 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-10-28 04:29:03.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:25:48.474 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:29:49.917 00:00:10.375 TCP 23.104.0.1:37104 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:29:53.962 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-10-28 04:26:48.473 00:05:03.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:30:50.337 00:00:10.372 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:30:54.178 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-10-28 04:31:50.757 00:00:10.374 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:31:54.398 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53616 10 6452 1 2025-10-28 04:32:51.168 00:00:10.364 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:32:54.620 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-10-28 04:34:03.208 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:33:54.845 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33636 10 6452 1 2025-10-28 04:33:51.568 00:00:10.325 TCP 23.104.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:34:03.286 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:34:55.093 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58590 10 6452 1 2025-10-28 04:34:51.928 00:00:10.388 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:31:48.476 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:35:55.260 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-10-28 04:35:52.350 00:00:10.370 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:32:48.475 00:05:03.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:36:52.758 00:00:10.427 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:36:55.482 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-10-28 04:37:53.231 00:00:10.361 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:37:55.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42982 10 6452 1 2025-10-28 04:39:03.320 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:38:55.922 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-10-28 04:39:03.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:38:53.633 00:00:10.368 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:39:54.034 00:00:10.322 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:39:56.163 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-10-28 04:40:54.395 00:00:10.366 TCP 23.104.0.1:48608 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:40:56.383 00:00:24.648 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2025-10-28 04:37:48.477 00:05:03.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:41:54.797 00:00:10.382 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:42:11.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-10-28 04:38:48.478 00:05:03.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:42:55.214 00:00:10.365 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:43:11.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-10-28 04:44:03.446 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:43:55.608 00:00:10.636 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:44:03.583 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:44:11.511 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-10-28 04:44:56.281 00:00:10.329 TCP 23.104.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:45:11.738 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48198 10 6452 1 2025-10-28 04:45:56.647 00:00:10.367 TCP 23.104.0.1:37582 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:46:11.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-10-28 04:46:57.059 00:00:10.327 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:47:12.192 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-10-28 04:43:48.483 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:47:57.423 00:00:10.371 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:48:12.411 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-10-28 04:44:48.480 00:05:03.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:49:03.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:49:03.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:48:57.829 00:00:10.396 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:49:12.584 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-10-28 04:49:58.255 00:00:10.375 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:50:12.807 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-10-28 04:50:58.680 00:00:10.333 TCP 23.104.0.1:54414 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:51:12.978 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-10-28 04:51:59.051 00:00:10.359 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:52:13.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-10-28 04:52:59.448 00:00:10.370 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:53:13.432 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49874 10 6452 1 2025-10-28 04:49:48.484 00:05:03.326 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 04:54:03.462 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 04:54:03.543 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 04:53:59.858 00:00:10.372 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:54:13.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50714 10 6452 1 2025-10-28 04:50:48.485 00:05:03.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 04:55:00.274 00:00:10.365 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:55:13.856 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38680 10 6452 1 2025-10-28 04:56:00.675 00:00:10.365 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:56:14.086 00:00:10.762 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-10-28 04:57:01.099 00:00:10.558 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:57:14.889 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 12 6556 1 2025-10-28 04:58:01.698 00:00:10.326 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-10-28 04:58:15.116 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1067, avg pps: 0, avg bpp: 319 Time window: 2025-10-28 03:55:48 - 2025-10-28 04:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0064s User: 0.0000s Wall: 0.0019s flows/second: 84717.7 Runtime: 0.0019s