Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 05:59:04.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 05:59:04.939 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 05:59:35.745 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-10-28 05:59:37.698 00:00:10.325 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:55:48.510 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:00:35.966 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 12 6556 1 2025-10-28 06:00:38.097 00:00:10.368 TCP 23.104.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-10-28 05:56:48.508 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:01:36.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-10-28 06:01:38.506 00:00:10.324 TCP 23.104.0.1:57554 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:02:36.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57814 10 6452 1 2025-10-28 06:02:38.865 00:00:10.370 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:03:36.640 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-10-28 06:03:39.269 00:00:10.360 TCP 23.104.0.1:45196 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:04:05.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:04:05.222 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:04:36.854 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 10 6452 1 2025-10-28 06:04:39.668 00:00:10.368 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:05:40.092 00:00:10.363 TCP 23.104.0.1:51526 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:05:37.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-10-28 06:01:48.512 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:06:40.495 00:00:10.361 TCP 23.104.0.1:56932 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:06:37.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41048 10 6452 1 2025-10-28 06:02:48.508 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:07:37.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41654 10 6452 1 2025-10-28 06:07:40.903 00:00:10.374 TCP 23.104.0.1:59398 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:08:37.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-10-28 06:08:41.316 00:00:10.367 TCP 23.104.0.1:57244 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:09:05.211 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:09:05.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:09:37.938 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-10-28 06:09:41.726 00:00:10.383 TCP 23.104.0.1:42220 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:10:38.173 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-10-28 06:10:42.150 00:00:10.328 TCP 23.104.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:11:38.356 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36754 10 6452 1 2025-10-28 06:07:48.514 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:11:42.515 00:00:10.370 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:12:38.579 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-10-28 06:08:48.510 00:05:03.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:12:42.927 00:00:10.349 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:13:38.759 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-10-28 06:13:43.313 00:00:10.367 TCP 23.104.0.1:45226 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:14:05.255 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:14:05.012 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:14:38.969 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-10-28 06:14:43.719 00:00:10.369 TCP 23.104.0.1:39472 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:15:39.203 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-10-28 06:15:44.125 00:00:10.324 TCP 23.104.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:16:39.429 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50310 10 6452 1 2025-10-28 06:16:44.486 00:00:10.363 TCP 23.104.0.1:44942 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:17:39.595 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60152 10 6452 1 2025-10-28 06:17:44.890 00:00:10.369 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:13:48.514 00:05:03.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:18:39.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38236 10 6452 1 2025-10-28 06:18:45.295 00:00:10.659 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:14:48.512 00:05:03.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:19:05.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:19:05.466 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:19:40.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37870 10 6452 1 2025-10-28 06:19:45.996 00:00:10.363 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:20:40.235 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-10-28 06:20:46.400 00:00:10.366 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:21:40.449 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48900 10 6452 1 2025-10-28 06:21:46.802 00:00:10.367 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:22:40.624 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47704 10 6452 1 2025-10-28 06:22:47.227 00:00:10.328 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:23:40.797 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-10-28 06:19:48.518 00:05:03.320 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:23:47.587 00:00:10.364 TCP 23.104.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:24:05.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:24:05.454 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:24:41.021 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40272 10 6452 1 2025-10-28 06:20:48.515 00:05:03.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:24:47.991 00:00:10.363 TCP 23.104.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:25:41.231 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-10-28 06:25:48.394 00:00:10.361 TCP 23.104.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:26:41.447 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-10-28 06:26:48.794 00:00:10.369 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:27:41.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6452 1 2025-10-28 06:27:49.199 00:00:10.365 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:28:41.840 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-10-28 06:28:49.599 00:00:10.365 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:29:05.474 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:29:05.569 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:29:42.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41990 10 6452 1 2025-10-28 06:25:48.519 00:05:03.321 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:29:50.000 00:00:10.322 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:30:42.287 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33816 10 6452 1 2025-10-28 06:26:48.517 00:05:03.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:30:50.356 00:00:10.324 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:31:42.505 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55802 12 6556 1 2025-10-28 06:31:50.716 00:00:10.360 TCP 23.104.0.1:46532 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:32:42.727 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-10-28 06:32:51.114 00:00:10.362 TCP 23.104.0.1:36718 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:33:42.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-10-28 06:33:51.515 00:00:10.364 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:34:05.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:34:05.491 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:34:43.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52286 10 6452 1 2025-10-28 06:34:51.923 00:00:10.340 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:35:43.329 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60762 10 6452 1 2025-10-28 06:31:48.523 00:05:03.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:35:52.302 00:00:10.324 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:36:43.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34722 10 6452 1 2025-10-28 06:32:48.521 00:05:03.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:36:52.674 00:00:10.376 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:37:43.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35920 10 6452 1 2025-10-28 06:37:53.107 00:00:10.414 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:38:43.985 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-10-28 06:39:05.833 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:39:05.594 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:38:53.562 00:00:10.328 TCP 23.104.0.1:42838 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:39:44.224 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-10-28 06:39:53.929 00:00:10.402 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:40:44.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-10-28 06:40:54.371 00:00:10.364 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:37:48.527 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:41:44.657 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-10-28 06:41:54.774 00:00:10.369 TCP 23.104.0.1:46594 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:42:44.870 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57044 10 6452 1 2025-10-28 06:38:48.525 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:42:55.186 00:00:10.321 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:43:45.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37260 10 6452 1 2025-10-28 06:44:05.844 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:43:55.551 00:00:10.365 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:44:05.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:44:45.311 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-10-28 06:44:55.955 00:00:10.366 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:45:45.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-10-28 06:45:56.362 00:00:10.373 TCP 23.104.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:46:45.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-10-28 06:46:56.770 00:00:10.373 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:43:48.527 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:47:45.951 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52072 10 6452 1 2025-10-28 06:47:57.179 00:00:10.558 TCP 23.104.0.1:56614 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:44:48.526 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:48:46.188 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-10-28 06:49:05.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:49:05.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:48:57.772 00:00:10.371 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:49:46.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-10-28 06:49:58.179 00:00:10.368 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:50:46.618 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56316 10 6452 1 2025-10-28 06:50:58.580 00:00:10.367 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:51:46.803 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-10-28 06:51:58.985 00:00:10.368 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:52:47.037 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-10-28 06:52:59.393 00:00:10.359 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:49:48.531 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 06:53:47.251 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-10-28 06:54:06.122 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 06:54:06.273 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 06:53:59.793 00:00:10.325 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:50:48.527 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 06:54:47.470 00:00:10.278 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-10-28 06:55:00.157 00:00:10.362 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:55:47.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-10-28 06:56:00.556 00:00:10.366 TCP 23.104.0.1:37336 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:56:48.017 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-10-28 06:57:00.957 00:00:10.328 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-10-28 06:57:48.193 00:00:10.536 TCP 1.101.0.1:3000 -> 22.102.0.1:57868 10 6452 1 2025-10-28 06:58:01.319 00:00:10.365 TCP 23.104.0.1:51322 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490597, total packets: 1555, avg bps: 1048, avg pps: 0, avg bpp: 315 Time window: 2025-10-28 05:55:48 - 2025-10-28 06:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0020s User: 0.0020s Wall: 0.0014s flows/second: 117151.2 Runtime: 0.0014s