Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 19:58:57.539 00:00:19.740 TCP 1.101.0.1:3000 -> 22.102.0.1:55234 10 6452 1 2025-10-28 19:59:22.024 00:00:00.079 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 19:59:22.624 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 19:59:19.961 00:00:11.457 TCP 23.104.0.1:45110 -> 1.101.0.1:3000 11 1507 1 2025-10-28 19:55:48.786 00:05:03.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:00:07.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45394 10 6452 1 2025-10-28 20:00:21.462 00:00:10.324 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-10-28 19:56:48.783 00:05:03.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:01:07.543 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-10-28 20:01:21.829 00:00:10.322 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:02:07.762 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-10-28 20:02:22.187 00:00:10.365 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:03:07.978 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-10-28 20:03:22.588 00:00:10.365 TCP 23.104.0.1:55306 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:04:21.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:04:08.222 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-10-28 20:04:21.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:04:22.989 00:00:10.338 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:05:08.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48802 10 6452 1 2025-10-28 20:05:23.367 00:00:10.360 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:01:48.788 00:05:03.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:06:08.660 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33814 10 6452 1 2025-10-28 20:06:23.763 00:00:10.331 TCP 23.104.0.1:48176 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:02:48.784 00:05:03.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:07:08.882 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-10-28 20:07:24.134 00:00:10.364 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:08:09.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-10-28 20:08:24.536 00:00:10.363 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:09:09.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-10-28 20:09:21.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:09:21.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:09:24.934 00:00:10.372 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:10:09.528 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47952 10 6452 1 2025-10-28 20:10:25.347 00:00:10.359 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:11:09.745 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-10-28 20:11:25.750 00:00:10.389 TCP 23.104.0.1:47904 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:07:48.788 00:05:03.362 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:12:09.969 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:41264 12 10369 1 2025-10-28 20:12:26.178 00:00:10.392 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 15 1926 1 2025-10-28 20:08:48.786 00:05:03.366 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:13:10.240 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48858 10 6452 1 2025-10-28 20:13:26.614 00:00:10.366 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:14:21.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:14:21.969 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:14:10.456 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6452 1 2025-10-28 20:14:27.019 00:00:10.371 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:15:10.672 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-10-28 20:15:27.425 00:00:10.365 TCP 23.104.0.1:50766 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:16:10.897 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-10-28 20:16:27.826 00:00:10.321 TCP 23.104.0.1:54928 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:17:11.116 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57948 10 6452 1 2025-10-28 20:17:28.184 00:00:10.367 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:13:48.789 00:05:03.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:18:11.283 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-10-28 20:18:28.588 00:00:10.372 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:14:48.788 00:05:03.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:19:11.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-10-28 20:19:22.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:19:22.910 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:19:28.998 00:00:10.324 TCP 23.104.0.1:48942 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:20:11.729 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-10-28 20:20:29.370 00:00:10.364 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:21:11.929 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37788 10 6452 1 2025-10-28 20:21:29.771 00:00:10.373 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:22:12.155 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-10-28 20:22:30.184 00:00:10.363 TCP 23.104.0.1:51526 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:23:12.373 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 10 6452 1 2025-10-28 20:23:30.583 00:00:10.364 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:19:48.792 00:05:03.363 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:24:22.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:24:12.583 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-10-28 20:24:22.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:24:30.985 00:00:10.368 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:20:48.790 00:05:03.367 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:25:12.754 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-10-28 20:25:31.392 00:00:10.369 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:26:12.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34186 10 6452 1 2025-10-28 20:26:31.801 00:00:10.368 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:27:13.211 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-10-28 20:27:32.206 00:00:10.359 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:28:13.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-10-28 20:28:32.604 00:00:10.370 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:29:22.367 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:29:13.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50750 10 6452 1 2025-10-28 20:29:22.248 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:29:33.009 00:00:10.323 TCP 23.104.0.1:55490 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:25:48.796 00:05:03.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:30:13.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-10-28 20:30:33.372 00:00:10.368 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:26:48.794 00:05:03.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:31:14.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-10-28 20:31:33.779 00:00:10.368 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:32:14.296 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-10-28 20:32:34.190 00:00:10.360 TCP 23.104.0.1:38942 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:33:14.502 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-10-28 20:33:34.591 00:00:10.365 TCP 23.104.0.1:59698 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:34:14.674 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-10-28 20:34:22.326 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:34:22.558 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:34:35.001 00:00:10.364 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:35:14.897 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-10-28 20:35:35.410 00:00:10.391 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:31:48.798 00:05:03.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:36:15.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-10-28 20:36:35.839 00:00:10.381 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:32:48.795 00:05:03.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:37:15.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-10-28 20:37:36.256 00:00:10.366 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:38:15.508 00:00:10.449 TCP 1.101.0.1:3000 -> 22.102.0.1:41044 10 6452 1 2025-10-28 20:38:36.661 00:00:10.367 TCP 23.104.0.1:52356 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:39:22.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:39:16.007 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-10-28 20:39:22.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:39:37.089 00:00:10.380 TCP 23.104.0.1:46410 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:40:16.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50752 10 6452 1 2025-10-28 20:40:37.508 00:00:10.366 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:41:16.470 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-10-28 20:41:37.909 00:00:10.328 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:37:48.799 00:05:03.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:42:16.686 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-10-28 20:42:38.269 00:00:10.368 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:38:48.799 00:05:03.360 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:43:16.867 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-10-28 20:43:38.677 00:00:10.852 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:44:22.762 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:44:22.556 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:44:17.106 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-10-28 20:44:39.573 00:00:10.366 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:45:17.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-10-28 20:45:39.969 00:00:10.367 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:46:17.547 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59418 10 6452 1 2025-10-28 20:46:40.374 00:00:10.362 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:47:17.759 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47196 10 6452 1 2025-10-28 20:47:40.775 00:00:10.333 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:43:48.803 00:05:03.357 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:48:17.976 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6452 1 2025-10-28 20:48:41.142 00:00:10.326 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:44:48.800 00:05:03.362 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:49:22.647 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:49:22.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:49:18.214 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-10-28 20:49:41.505 00:00:10.365 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:50:18.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-10-28 20:50:41.906 00:00:10.364 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:51:18.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 10 6452 1 2025-10-28 20:51:42.319 00:00:10.366 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:52:18.857 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-10-28 20:52:42.721 00:00:10.325 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:53:19.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 10 6452 1 2025-10-28 20:53:43.105 00:00:10.368 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:49:48.804 00:05:03.357 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 20:54:22.733 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 20:54:22.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 20:54:19.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-10-28 20:54:43.508 00:00:10.372 TCP 23.104.0.1:59768 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:50:48.802 00:05:03.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 20:55:19.511 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-10-28 20:55:43.919 00:00:10.384 TCP 23.104.0.1:58708 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:56:19.680 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37380 10 6452 1 2025-10-28 20:56:44.339 00:00:10.367 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:57:19.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41856 10 6452 1 2025-10-28 20:57:44.750 00:00:10.391 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-10-28 20:58:20.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 Summary: total flows: 163, total bytes: 501177, total packets: 1567, avg bps: 1065, avg pps: 0, avg bpp: 319 Time window: 2025-10-28 19:55:48 - 2025-10-28 20:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0020s flows/second: 79868.2 Runtime: 0.0021s