Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 09:59:29.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 09:59:29.296 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 09:59:33.807 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-09-07 09:59:37.259 00:00:10.360 TCP 23.104.0.1:33138 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:56:24.848 00:05:00.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:00:33.993 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60612 10 6452 1 2025-09-07 10:00:37.661 00:00:10.370 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:01:34.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-09-07 10:01:38.093 00:00:10.364 TCP 23.104.0.1:54506 -> 1.101.0.1:3000 11 1507 1 2025-09-07 09:58:24.851 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:02:34.397 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34110 10 6452 1 2025-09-07 10:02:38.499 00:00:10.362 TCP 23.104.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:03:34.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50922 10 6452 1 2025-09-07 10:03:38.902 00:00:10.370 TCP 23.104.0.1:35044 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:04:29.623 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:04:29.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:04:34.822 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 10 6452 1 2025-09-07 10:04:39.312 00:00:10.360 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:05:35.070 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-09-07 10:05:39.713 00:00:10.361 TCP 23.104.0.1:55748 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:02:24.850 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:06:35.258 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59660 10 6452 1 2025-09-07 10:06:40.109 00:00:10.419 TCP 23.104.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:07:35.477 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-09-07 10:07:40.569 00:00:10.364 TCP 23.104.0.1:34460 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:04:24.853 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:08:35.693 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-09-07 10:08:40.967 00:00:10.391 TCP 23.104.0.1:58686 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:09:29.459 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:09:29.341 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:09:35.914 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-09-07 10:09:41.403 00:00:10.370 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:10:36.108 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59944 10 6452 1 2025-09-07 10:10:41.814 00:00:10.367 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:11:36.319 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-07 10:11:42.221 00:00:10.319 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:08:24.850 00:05:00.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:12:36.540 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-09-07 10:12:42.578 00:00:10.372 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:13:36.763 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43698 10 6452 1 2025-09-07 10:13:42.992 00:00:10.319 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:10:24.854 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:14:29.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:14:29.561 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:14:36.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40832 10 6452 1 2025-09-07 10:14:43.352 00:00:10.371 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:15:37.219 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-09-07 10:15:43.765 00:00:10.377 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:16:37.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2025-09-07 10:16:44.182 00:00:10.367 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:17:37.651 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-09-07 10:17:44.599 00:00:10.369 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:14:24.852 00:05:00.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:18:37.885 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41640 12 10365 1 2025-09-07 10:18:45.009 00:00:10.445 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 15 1926 1 2025-09-07 10:19:29.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:19:29.633 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:19:38.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-09-07 10:19:45.491 00:00:10.324 TCP 23.104.0.1:50922 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:16:24.856 00:05:00.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:20:38.331 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42158 10 6452 1 2025-09-07 10:20:45.851 00:00:10.379 TCP 23.104.0.1:50396 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:21:38.561 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-09-07 10:21:46.267 00:00:10.368 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:22:38.789 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-09-07 10:22:46.671 00:00:10.393 TCP 23.104.0.1:60150 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:23:39.008 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-09-07 10:23:47.111 00:00:10.363 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:24:29.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:20:24.853 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:24:29.709 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:24:39.233 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-09-07 10:24:47.515 00:00:10.326 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:25:39.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6452 1 2025-09-07 10:25:47.881 00:00:10.387 TCP 23.104.0.1:51810 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:22:24.857 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:26:39.807 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-09-07 10:26:48.309 00:00:10.365 TCP 23.104.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:27:39.986 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-09-07 10:27:48.714 00:00:10.380 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:28:40.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-09-07 10:28:49.134 00:00:10.368 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:29:29.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:29:29.776 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:29:40.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56488 10 6452 1 2025-09-07 10:29:49.538 00:00:10.338 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:26:24.855 00:05:00.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:30:40.663 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47350 10 6452 1 2025-09-07 10:30:49.917 00:00:10.389 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:31:40.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52076 10 6452 1 2025-09-07 10:31:50.339 00:00:10.368 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:28:24.857 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:32:41.100 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35990 10 6452 1 2025-09-07 10:32:50.745 00:00:10.365 TCP 23.104.0.1:54564 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:33:41.280 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44818 10 6452 1 2025-09-07 10:33:51.143 00:00:10.324 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:34:29.996 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:34:29.931 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:34:41.491 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-09-07 10:34:51.508 00:00:10.366 TCP 23.104.0.1:52332 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:35:41.664 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43236 10 6452 1 2025-09-07 10:35:51.917 00:00:10.374 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:32:24.857 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:36:41.879 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43280 10 6452 1 2025-09-07 10:36:52.328 00:00:10.365 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:37:42.114 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-09-07 10:37:52.727 00:00:10.370 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:34:24.860 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:38:42.334 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-09-07 10:38:53.137 00:00:10.375 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:39:29.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:39:29.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:39:42.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-09-07 10:39:53.553 00:00:10.373 TCP 23.104.0.1:53200 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:40:42.722 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53842 10 6452 1 2025-09-07 10:40:53.989 00:00:10.322 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:41:42.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42656 10 6452 1 2025-09-07 10:41:54.351 00:00:10.365 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:38:24.858 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:42:43.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33280 10 6452 1 2025-09-07 10:42:54.756 00:00:10.392 TCP 23.104.0.1:44464 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:43:43.324 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-09-07 10:43:55.179 00:00:10.358 TCP 23.104.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:40:24.861 00:05:00.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:44:30.046 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:44:30.017 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:44:43.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-09-07 10:44:55.580 00:00:10.328 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:45:43.718 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-09-07 10:45:55.946 00:00:10.331 TCP 23.104.0.1:42340 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:46:43.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-09-07 10:46:56.315 00:00:10.323 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:47:44.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-09-07 10:47:56.678 00:00:10.373 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:44:24.859 00:05:00.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:48:44.394 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-09-07 10:48:57.106 00:00:10.366 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:49:30.270 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:49:30.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:49:44.567 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42488 10 6452 1 2025-09-07 10:49:57.508 00:00:10.368 TCP 23.104.0.1:54330 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:46:24.861 00:05:00.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:50:44.776 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-09-07 10:50:57.917 00:00:10.378 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:51:44.991 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39598 10 6452 1 2025-09-07 10:51:58.334 00:00:10.365 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:52:45.218 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-09-07 10:52:58.739 00:00:10.359 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:53:45.395 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6452 1 2025-09-07 10:53:59.139 00:00:10.413 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:50:24.861 00:05:00.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 10:54:30.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 10:54:30.418 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 10:54:45.573 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60312 10 6452 1 2025-09-07 10:54:59.591 00:00:10.369 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:55:45.798 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 10 6452 1 2025-09-07 10:55:59.992 00:00:10.535 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:52:24.864 00:05:00.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 10:56:46.014 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-09-07 10:57:00.559 00:00:10.387 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-09-07 10:57:46.228 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-09-07 10:58:00.987 00:00:10.378 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494721, total packets: 1557, avg bps: 1067, avg pps: 0, avg bpp: 317 Time window: 2025-09-07 09:56:24 - 2025-09-07 10:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0012s Wall: 0.0022s flows/second: 72123.7 Runtime: 0.0023s