Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 06:58:48.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-10-28 06:59:05.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:59:06.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:59:01.717 00:00:10.378 TCP 23.104.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:55:48.531 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:59:48.980 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55788 10 6452 1 2025-10-28 07:00:02.132 00:00:10.364 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:56:48.531 00:05:03.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:00:49.211 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:59072 10 6452 1 2025-10-28 07:01:02.534 00:00:10.364 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:01:49.558 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-10-28 07:02:02.937 00:00:10.333 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:02:49.779 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-10-28 07:03:03.307 00:00:10.365 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:03:50.027 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-10-28 07:04:06.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:04:05.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:04:03.709 00:00:10.383 TCP 23.104.0.1:47084 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:04:50.253 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-10-28 07:05:04.129 00:00:10.373 TCP 23.104.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:01:48.535 00:05:03.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:05:50.473 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-10-28 07:06:04.531 00:00:10.364 TCP 23.104.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:02:48.532 00:05:03.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:06:50.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-10-28 07:07:04.932 00:00:10.336 TCP 23.104.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:07:50.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39112 10 6452 1 2025-10-28 07:08:05.307 00:00:10.364 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:09:06.332 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:08:51.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-10-28 07:09:06.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:09:05.712 00:00:10.386 TCP 23.104.0.1:42602 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:09:51.347 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-10-28 07:10:06.136 00:00:10.376 TCP 23.104.0.1:36636 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:10:51.570 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41650 10 6452 1 2025-10-28 07:11:06.552 00:00:10.364 TCP 23.104.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:07:48.535 00:05:03.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:11:51.793 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42124 10 6452 1 2025-10-28 07:12:06.957 00:00:10.367 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:08:48.533 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:12:52.024 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6452 1 2025-10-28 07:13:07.366 00:00:10.367 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:14:06.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:13:52.200 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-10-28 07:14:06.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:14:07.766 00:00:10.334 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:14:52.417 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-10-28 07:15:08.138 00:00:10.368 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:15:52.637 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36554 10 6452 1 2025-10-28 07:16:08.543 00:00:10.320 TCP 23.104.0.1:37664 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:16:52.861 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-10-28 07:17:08.904 00:00:10.371 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:13:48.539 00:05:03.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:17:53.101 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-10-28 07:18:09.313 00:00:10.363 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:14:48.535 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:18:53.326 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2025-10-28 07:19:06.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:19:06.349 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:19:09.713 00:00:10.374 TCP 23.104.0.1:60832 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:19:53.549 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-10-28 07:20:10.142 00:00:10.364 TCP 23.104.0.1:43238 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:20:53.787 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-10-28 07:21:10.542 00:00:10.367 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:21:54.016 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48146 12 10369 1 2025-10-28 07:22:10.953 00:00:10.439 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 15 1926 1 2025-10-28 07:22:54.259 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58174 10 6452 1 2025-10-28 07:23:11.438 00:00:11.142 TCP 23.104.0.1:34868 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:19:48.540 00:05:03.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:24:06.601 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:23:54.486 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-10-28 07:24:06.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:24:12.622 00:00:10.363 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:20:48.539 00:05:03.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:24:54.700 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43160 10 6452 1 2025-10-28 07:25:13.026 00:00:10.362 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:25:54.917 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-10-28 07:26:13.429 00:00:10.360 TCP 23.104.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:26:55.100 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 12 10375 1 2025-10-28 07:27:13.835 00:00:10.417 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 15 1926 1 2025-10-28 07:27:55.339 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-10-28 07:28:14.294 00:00:10.365 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:29:06.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:28:55.558 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-10-28 07:29:06.739 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:29:14.701 00:00:10.743 TCP 23.104.0.1:46990 -> 1.101.0.1:3000 13 1611 1 2025-10-28 07:25:48.542 00:05:03.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:29:55.770 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-10-28 07:30:15.483 00:00:10.323 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:26:48.539 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:30:55.992 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-10-28 07:31:15.847 00:00:10.389 TCP 23.104.0.1:45934 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:31:56.221 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-10-28 07:32:16.275 00:00:10.362 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:32:56.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 10 6452 1 2025-10-28 07:33:16.679 00:00:10.364 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:34:06.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:33:56.644 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-10-28 07:34:06.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:34:17.100 00:00:10.365 TCP 23.104.0.1:41168 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:34:56.855 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:57718 10 6452 1 2025-10-28 07:35:17.504 00:00:10.365 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:31:48.542 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:35:57.101 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57954 10 6452 1 2025-10-28 07:36:17.913 00:00:10.368 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:32:48.539 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:36:57.324 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 6452 1 2025-10-28 07:37:18.322 00:00:10.365 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:37:57.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-10-28 07:38:18.730 00:00:10.368 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:39:06.958 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:39:06.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:38:57.727 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48300 10 6452 1 2025-10-28 07:39:19.138 00:00:10.329 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:39:57.938 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-10-28 07:40:19.517 00:00:10.371 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:40:58.188 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-10-28 07:41:19.925 00:00:10.386 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:37:48.545 00:05:03.308 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:41:58.414 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-10-28 07:42:20.350 00:00:10.360 TCP 23.104.0.1:43212 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:38:48.546 00:05:03.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:42:58.628 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48770 10 6452 1 2025-10-28 07:43:20.750 00:00:10.391 TCP 23.104.0.1:47246 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:44:06.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:43:58.846 00:00:10.387 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-10-28 07:44:07.126 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:44:21.179 00:00:10.365 TCP 23.104.0.1:37986 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:44:59.276 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58736 10 6452 1 2025-10-28 07:45:21.585 00:00:10.361 TCP 23.104.0.1:48040 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:45:59.500 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-10-28 07:46:21.981 00:00:10.374 TCP 23.104.0.1:57338 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:46:59.735 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:40924 10 6452 1 2025-10-28 07:47:22.392 00:00:10.364 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:43:48.551 00:05:03.305 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:48:00.011 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59150 10 6452 1 2025-10-28 07:48:22.793 00:00:10.379 TCP 23.104.0.1:36386 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:44:48.550 00:05:03.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:49:07.136 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:49:00.231 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-10-28 07:49:07.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:49:23.211 00:00:10.358 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:50:00.411 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51128 10 6452 1 2025-10-28 07:50:23.607 00:00:10.327 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:51:00.625 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 12 6556 1 2025-10-28 07:51:23.974 00:00:10.374 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:52:00.840 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-10-28 07:52:24.386 00:00:10.663 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:53:01.067 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 10 6452 1 2025-10-28 07:53:25.103 00:00:10.323 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:49:48.555 00:05:03.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 07:54:01.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-10-28 07:54:07.273 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 07:54:07.282 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 07:54:25.462 00:00:10.369 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:50:48.552 00:05:03.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 07:55:01.495 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-10-28 07:55:25.863 00:00:10.371 TCP 23.104.0.1:45068 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:56:01.707 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-10-28 07:56:26.272 00:00:10.364 TCP 23.104.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:57:01.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-10-28 07:57:26.675 00:00:10.340 TCP 23.104.0.1:38248 -> 1.101.0.1:3000 11 1507 1 2025-10-28 07:58:02.099 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-10-28 07:58:27.104 00:00:10.367 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507234, total packets: 1588, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-10-28 06:55:48 - 2025-10-28 07:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0022s Wall: 0.0014s flows/second: 120235.2 Runtime: 0.0014s