Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 11:59:05.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 11:58:51.389 00:00:10.327 TCP 23.104.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-10-07 11:59:05.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 11:59:13.841 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-10-07 11:59:51.766 00:00:10.378 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:00:14.070 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49824 10 6452 1 2025-10-07 11:56:38.985 00:05:01.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:00:52.184 00:00:10.326 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:01:14.246 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-10-07 11:57:38.989 00:05:01.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:01:52.550 00:00:10.365 TCP 23.104.0.1:34058 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:02:14.419 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49692 10 6452 1 2025-10-07 12:02:52.953 00:00:10.372 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:03:14.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-10-07 12:04:05.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:03:53.358 00:00:10.360 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:04:05.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:04:14.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-10-07 12:04:53.754 00:00:10.335 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:05:15.083 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-10-07 12:05:54.132 00:00:14.148 TCP 23.104.0.1:35554 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:06:15.267 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-10-07 12:02:38.989 00:05:01.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:06:58.319 00:00:10.363 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:07:15.437 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-10-07 12:03:38.991 00:05:01.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:07:58.722 00:00:10.333 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:08:15.650 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-10-07 12:09:05.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:09:05.325 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:08:59.101 00:00:10.366 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:09:15.860 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-10-07 12:09:59.509 00:00:10.362 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:10:16.089 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-10-07 12:10:59.915 00:00:10.336 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:11:16.263 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45308 10 6452 1 2025-10-07 12:12:00.287 00:00:10.364 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:12:16.476 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-10-07 12:08:38.990 00:05:01.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:13:00.694 00:00:10.365 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:13:16.689 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:40836 10 6452 1 2025-10-07 12:09:38.991 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:14:05.651 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:14:05.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:14:01.103 00:00:10.362 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:14:16.977 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50034 10 6452 1 2025-10-07 12:15:01.503 00:00:10.364 TCP 23.104.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:15:17.214 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60518 10 6452 1 2025-10-07 12:16:01.905 00:00:10.331 TCP 23.104.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:16:17.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 10 6452 1 2025-10-07 12:17:02.273 00:00:10.366 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:17:17.609 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-10-07 12:18:02.678 00:00:10.367 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:18:17.776 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-10-07 12:14:38.992 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:19:05.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:19:05.555 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:19:03.106 00:00:10.363 TCP 23.104.0.1:58378 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:19:17.954 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43348 12 6556 1 2025-10-07 12:15:38.993 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:20:03.505 00:00:10.372 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:20:18.189 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34392 10 6452 1 2025-10-07 12:21:03.911 00:00:10.326 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:21:18.364 00:00:10.419 TCP 1.101.0.1:3000 -> 22.102.0.1:34020 10 6452 1 2025-10-07 12:22:04.273 00:00:10.373 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:22:18.822 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51984 10 6452 1 2025-10-07 12:23:04.677 00:00:10.372 TCP 23.104.0.1:35224 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:23:19.041 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-10-07 12:24:05.786 00:00:00.013 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:24:05.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:24:05.101 00:00:10.385 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:24:19.254 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-10-07 12:20:38.992 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:25:05.526 00:00:10.342 TCP 23.104.0.1:60174 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:25:19.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40302 10 6452 1 2025-10-07 12:21:38.993 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:26:05.905 00:00:10.374 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:26:19.693 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53818 10 6452 1 2025-10-07 12:27:06.325 00:00:10.360 TCP 23.104.0.1:45098 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:27:19.863 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45884 10 6452 1 2025-10-07 12:28:06.729 00:00:10.372 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:28:20.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-10-07 12:29:05.984 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:29:05.902 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:29:07.149 00:00:10.368 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:29:20.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-10-07 12:30:07.555 00:00:10.369 TCP 23.104.0.1:41782 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:30:20.512 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-10-07 12:26:38.991 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:31:07.967 00:00:10.375 TCP 23.104.0.1:58452 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:31:20.725 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45470 10 6452 1 2025-10-07 12:27:38.996 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:32:08.384 00:00:10.328 TCP 23.104.0.1:53216 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:32:20.933 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-10-07 12:33:08.761 00:00:10.368 TCP 23.104.0.1:58352 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:33:21.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-10-07 12:34:05.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:34:05.864 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:34:09.170 00:00:10.365 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:34:21.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37652 10 6452 1 2025-10-07 12:35:09.581 00:00:10.368 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:35:21.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6452 1 2025-10-07 12:36:09.990 00:00:10.374 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:36:21.817 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-10-07 12:32:38.994 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:37:10.398 00:00:10.325 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:37:22.035 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-10-07 12:33:38.996 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:38:10.763 00:00:10.381 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:38:22.248 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-10-07 12:39:06.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:39:06.048 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:39:11.177 00:00:10.368 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:39:22.588 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-10-07 12:40:11.583 00:00:10.368 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:40:22.765 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51960 10 6452 1 2025-10-07 12:41:11.982 00:00:10.331 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:41:22.941 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-10-07 12:42:12.349 00:00:12.719 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:42:23.190 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:48320 10 6452 1 2025-10-07 12:38:38.996 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:43:15.112 00:00:10.364 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:43:23.793 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37804 10 6452 1 2025-10-07 12:39:38.998 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:44:05.952 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:44:06.182 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:44:15.514 00:00:10.364 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:44:24.017 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-10-07 12:45:15.918 00:00:10.331 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:45:24.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-10-07 12:46:16.288 00:00:10.364 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:46:24.441 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-10-07 12:47:16.691 00:00:10.373 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:47:24.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-10-07 12:48:17.109 00:00:10.364 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:48:24.870 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34578 10 6452 1 2025-10-07 12:44:38.995 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:49:06.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:49:06.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:49:17.513 00:00:10.364 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:49:25.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48584 10 6452 1 2025-10-07 12:45:38.998 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:50:17.912 00:00:10.375 TCP 23.104.0.1:51932 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:50:25.285 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-10-07 12:51:18.325 00:00:10.370 TCP 23.104.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:51:25.505 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-10-07 12:52:18.730 00:00:10.371 TCP 23.104.0.1:55056 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:52:25.724 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6452 1 2025-10-07 12:53:19.136 00:00:10.368 TCP 23.104.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:53:25.947 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-10-07 12:54:06.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 12:54:06.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 12:54:19.541 00:00:10.323 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:54:26.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51190 10 6452 1 2025-10-07 12:50:38.997 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 12:55:19.904 00:00:10.374 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:51:39.003 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 12:55:26.903 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59180 10 6452 1 2025-10-07 12:56:20.334 00:00:10.368 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:56:27.117 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-10-07 12:57:20.739 00:00:10.368 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:57:27.334 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-10-07 12:58:21.144 00:00:10.326 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-10-07 12:58:27.548 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1072, avg pps: 0, avg bpp: 316 Time window: 2025-10-07 11:56:38 - 2025-10-07 12:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0037s Wall: 0.0029s flows/second: 56276.4 Runtime: 0.0029s