Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-28 09:59:09.887 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 09:59:09.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 09:59:28.865 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51006 10 6452 1 2025-10-28 09:59:30.348 00:00:10.363 TCP 23.104.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-10-28 09:55:48.607 00:05:03.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:00:30.750 00:00:10.326 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:00:29.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-10-28 09:56:48.605 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:01:29.302 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-10-28 10:01:31.122 00:00:10.330 TCP 23.104.0.1:46098 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:02:31.488 00:00:10.367 TCP 23.104.0.1:47956 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:02:29.472 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-10-28 10:03:29.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-10-28 10:03:31.893 00:00:10.377 TCP 23.104.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:04:09.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:04:09.583 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:04:29.865 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-10-28 10:04:32.305 00:00:10.365 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:05:30.094 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-10-28 10:05:32.706 00:00:10.360 TCP 23.104.0.1:57168 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:01:48.609 00:05:03.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:06:30.308 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-10-28 10:06:33.107 00:00:10.370 TCP 23.104.0.1:46786 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:02:48.607 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:07:30.489 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 10 6452 1 2025-10-28 10:07:33.518 00:00:10.318 TCP 23.104.0.1:40252 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:08:30.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-10-28 10:08:33.876 00:00:10.372 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:09:10.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:09:09.821 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:09:30.932 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36286 10 6452 1 2025-10-28 10:09:34.288 00:00:10.370 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:10:31.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48896 10 6452 1 2025-10-28 10:10:34.698 00:00:10.371 TCP 23.104.0.1:33964 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:11:31.356 00:00:10.801 TCP 1.101.0.1:3000 -> 22.102.0.1:40878 10 6452 1 2025-10-28 10:11:35.118 00:00:10.368 TCP 23.104.0.1:36518 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:07:48.609 00:05:03.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:12:35.520 00:00:10.395 TCP 23.104.0.1:51546 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:12:32.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-10-28 10:08:48.608 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:13:32.414 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-10-28 10:13:35.975 00:00:10.384 TCP 23.104.0.1:60310 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:14:10.211 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:14:10.169 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:14:32.622 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-10-28 10:14:36.395 00:00:10.325 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:15:32.795 00:00:10.563 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-10-28 10:15:36.767 00:00:10.373 TCP 23.104.0.1:57290 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:16:33.394 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40294 10 6452 1 2025-10-28 10:16:37.177 00:00:10.369 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:17:33.613 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38040 10 6452 1 2025-10-28 10:17:37.581 00:00:10.365 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:13:48.611 00:05:03.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:18:33.825 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-10-28 10:18:37.987 00:00:10.326 TCP 23.104.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:14:48.608 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:19:10.110 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:19:10.153 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:19:34.027 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38960 10 6452 1 2025-10-28 10:19:38.351 00:00:10.367 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:20:34.247 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:47958 10 6452 1 2025-10-28 10:20:38.757 00:00:10.481 TCP 23.104.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:21:34.573 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56882 10 6452 1 2025-10-28 10:21:39.271 00:00:10.366 TCP 23.104.0.1:38676 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:22:34.755 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-10-28 10:22:39.675 00:00:10.361 TCP 23.104.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:23:34.934 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-10-28 10:23:40.107 00:00:10.362 TCP 23.104.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:19:48.614 00:05:03.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:24:10.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:24:10.153 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:24:35.170 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-10-28 10:24:40.504 00:00:10.323 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:20:48.611 00:05:03.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:25:35.343 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-10-28 10:25:40.873 00:00:10.365 TCP 23.104.0.1:51812 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:26:35.517 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-10-28 10:26:41.272 00:00:10.329 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:27:35.690 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-10-28 10:27:41.642 00:00:10.364 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:28:35.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34280 10 6452 1 2025-10-28 10:28:42.052 00:00:10.365 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:29:10.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:29:10.278 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:29:36.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40610 10 6452 1 2025-10-28 10:25:48.619 00:05:03.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:29:42.458 00:00:10.322 TCP 23.104.0.1:45522 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:30:36.325 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46202 10 6452 1 2025-10-28 10:26:48.616 00:05:03.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:30:42.814 00:00:10.363 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:31:36.538 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-10-28 10:31:43.216 00:00:10.362 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:32:36.760 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2025-10-28 10:32:43.620 00:00:10.370 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:33:36.979 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55930 10 6452 1 2025-10-28 10:33:44.029 00:00:10.366 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:34:10.228 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:34:10.183 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:34:37.230 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51218 10 6452 1 2025-10-28 10:34:44.432 00:00:10.369 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:35:37.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 10 6452 1 2025-10-28 10:31:48.619 00:05:03.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:35:44.842 00:00:10.349 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:36:37.629 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40194 10 6452 1 2025-10-28 10:32:48.615 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:36:45.228 00:00:10.438 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 15 1926 1 2025-10-28 10:37:37.837 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 12 10375 1 2025-10-28 10:37:45.707 00:00:10.334 TCP 23.104.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:38:38.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-10-28 10:38:46.110 00:00:10.374 TCP 23.104.0.1:59166 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:39:10.483 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:39:10.519 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:39:38.304 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-10-28 10:39:46.520 00:00:10.371 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:40:38.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50838 10 6452 1 2025-10-28 10:40:46.929 00:00:10.380 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:41:38.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-10-28 10:37:48.621 00:05:03.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:41:47.354 00:00:10.376 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:42:38.945 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-10-28 10:38:48.619 00:05:03.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:42:47.768 00:00:10.372 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:43:39.169 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-10-28 10:43:48.182 00:00:10.366 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:44:10.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:44:10.447 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:44:39.386 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-10-28 10:44:48.584 00:00:10.369 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:45:39.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-10-28 10:45:48.990 00:00:10.372 TCP 23.104.0.1:49674 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:46:39.833 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-10-28 10:46:49.398 00:00:10.436 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 15 1926 1 2025-10-28 10:47:40.078 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 12 10375 1 2025-10-28 10:43:48.624 00:05:03.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:47:49.875 00:00:10.715 TCP 23.104.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:48:40.275 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46522 10 6452 1 2025-10-28 10:44:48.621 00:05:03.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:48:50.627 00:00:10.368 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:49:10.833 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:49:10.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:49:40.454 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-10-28 10:49:51.034 00:00:10.370 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:50:40.634 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54822 10 6452 1 2025-10-28 10:50:51.442 00:00:10.321 TCP 23.104.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:51:40.840 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-10-28 10:51:51.800 00:00:10.364 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:52:41.076 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 2025-10-28 10:52:52.203 00:00:10.364 TCP 23.104.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:53:41.296 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-10-28 10:49:48.626 00:05:03.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-28 10:53:52.607 00:00:10.322 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:54:10.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-28 10:54:10.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-28 10:54:41.520 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-10-28 10:50:48.623 00:05:03.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-28 10:54:52.967 00:00:10.366 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:55:41.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55504 10 6452 1 2025-10-28 10:55:53.378 00:00:10.366 TCP 23.104.0.1:38614 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:56:41.960 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-10-28 10:56:53.777 00:00:10.367 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-10-28 10:57:42.216 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-10-28 10:57:54.179 00:00:10.855 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499073, total packets: 1563, avg bps: 1068, avg pps: 0, avg bpp: 319 Time window: 2025-10-28 09:55:48 - 2025-10-28 10:58:05 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 68043.0 Runtime: 0.0024s