Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 14:58:53.254 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 14:58:53.483 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 14:58:42.966 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 12 6556 1 2025-11-17 14:58:56.594 00:00:10.370 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-11-17 14:59:43.195 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32948 10 6452 1 2025-11-17 14:59:57.004 00:00:10.369 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:00:43.366 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43098 10 6452 1 2025-11-17 15:00:57.406 00:00:10.375 TCP 23.104.0.1:36166 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:01:43.576 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6452 1 2025-11-17 15:01:57.825 00:00:10.347 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:02:43.754 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55100 10 6452 1 2025-11-17 14:58:58.772 00:05:04.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:02:58.213 00:00:10.638 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:03:43.973 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-11-17 15:03:53.538 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:03:53.508 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 14:59:58.775 00:05:04.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:03:58.899 00:00:10.333 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:04:44.162 00:00:10.895 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-11-17 15:04:59.269 00:00:10.367 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:05:45.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-11-17 15:05:59.677 00:00:10.377 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:06:45.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-11-17 15:07:00.101 00:00:10.364 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:07:45.523 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-11-17 15:08:00.502 00:00:10.370 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:08:53.438 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:08:53.403 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:08:45.691 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-11-17 15:04:58.774 00:05:04.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:09:00.904 00:00:10.373 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:09:45.904 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-11-17 15:05:58.777 00:05:04.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:10:01.313 00:00:10.366 TCP 23.104.0.1:43196 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:10:46.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-11-17 15:11:01.718 00:00:10.370 TCP 23.104.0.1:47340 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:11:46.307 00:00:20.224 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-11-17 15:12:02.130 00:00:10.367 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:12:56.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-11-17 15:13:02.539 00:00:10.322 TCP 23.104.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:13:53.680 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:13:53.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:13:56.785 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43120 10 6452 1 2025-11-17 15:14:02.899 00:00:10.331 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:10:58.776 00:05:04.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:14:56.999 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45566 10 6452 1 2025-11-17 15:15:03.272 00:00:10.373 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:11:58.778 00:05:04.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:15:57.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-11-17 15:16:03.688 00:00:10.368 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:16:57.432 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41382 10 6452 1 2025-11-17 15:17:04.109 00:00:10.322 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:17:57.648 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-11-17 15:18:04.465 00:00:10.325 TCP 23.104.0.1:36038 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:18:53.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:18:53.915 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:18:57.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38206 10 6452 1 2025-11-17 15:19:04.825 00:00:10.360 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:19:58.054 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55692 10 6452 1 2025-11-17 15:20:05.221 00:00:10.328 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:16:58.780 00:05:04.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:20:58.273 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52710 10 6452 1 2025-11-17 15:21:05.588 00:00:10.367 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:17:58.782 00:05:04.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:21:58.450 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-11-17 15:22:05.994 00:00:10.373 TCP 23.104.0.1:44334 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:22:58.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-11-17 15:23:06.400 00:00:10.363 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:23:53.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:23:53.776 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:23:58.836 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-11-17 15:24:06.803 00:00:10.370 TCP 23.104.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:24:59.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58048 10 6452 1 2025-11-17 15:25:07.211 00:00:16.668 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:25:59.238 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-11-17 15:26:13.920 00:00:10.376 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:22:58.779 00:05:04.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:26:59.445 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-11-17 15:27:14.336 00:00:10.362 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:23:58.783 00:05:04.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:27:59.654 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34978 10 6452 1 2025-11-17 15:28:14.732 00:00:10.366 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:28:53.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:28:53.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:28:59.870 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60200 10 6452 1 2025-11-17 15:29:15.137 00:00:10.368 TCP 23.104.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:30:00.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 2025-11-17 15:30:15.541 00:00:10.320 TCP 23.104.0.1:59064 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:31:00.308 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 10 6452 1 2025-11-17 15:31:15.899 00:00:10.331 TCP 23.104.0.1:54196 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:32:00.529 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-11-17 15:32:16.272 00:00:10.368 TCP 23.104.0.1:52090 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:28:58.781 00:05:04.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:33:00.700 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-11-17 15:33:16.683 00:00:10.332 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:33:53.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:33:53.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:29:58.784 00:05:04.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:34:00.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37412 10 6452 1 2025-11-17 15:34:17.059 00:00:10.366 TCP 23.104.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:35:01.127 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-17 15:35:17.466 00:00:10.366 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:36:01.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45926 10 6452 1 2025-11-17 15:36:17.866 00:00:10.366 TCP 23.104.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:37:01.573 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40204 10 6452 1 2025-11-17 15:37:18.314 00:00:10.376 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:38:01.779 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-11-17 15:38:18.741 00:00:10.366 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:38:53.876 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:38:54.150 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:34:58.782 00:05:04.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:39:01.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52420 10 6452 1 2025-11-17 15:39:19.144 00:00:10.322 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:35:58.785 00:05:04.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:40:02.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-11-17 15:40:19.513 00:00:10.325 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:41:02.427 00:00:10.802 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-11-17 15:41:19.874 00:00:10.327 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:42:03.261 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 10 6452 1 2025-11-17 15:42:20.239 00:00:10.322 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:43:03.489 00:00:10.962 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-11-17 15:43:20.600 00:00:10.363 TCP 23.104.0.1:47392 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:43:54.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:43:54.184 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:44:04.488 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53620 10 6452 1 2025-11-17 15:44:20.997 00:00:10.372 TCP 23.104.0.1:60624 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:40:58.783 00:05:04.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:45:04.712 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52636 10 6452 1 2025-11-17 15:45:21.408 00:00:10.366 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:41:58.785 00:05:04.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:46:04.928 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58588 10 6452 1 2025-11-17 15:46:21.812 00:00:10.368 TCP 23.104.0.1:56382 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:47:05.164 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-11-17 15:47:22.216 00:00:10.367 TCP 23.104.0.1:48454 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:48:05.432 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-11-17 15:48:22.619 00:00:10.373 TCP 23.104.0.1:54046 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:48:54.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:48:54.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:49:05.656 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57766 10 6452 1 2025-11-17 15:49:23.026 00:00:10.364 TCP 23.104.0.1:51168 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:50:05.839 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-11-17 15:50:23.437 00:00:10.366 TCP 23.104.0.1:47212 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:46:58.784 00:05:04.855 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:51:06.079 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-11-17 15:51:23.842 00:00:10.391 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:47:58.788 00:05:04.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:52:06.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-11-17 15:52:24.272 00:00:10.370 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:53:06.460 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51936 10 6452 1 2025-11-17 15:53:24.682 00:00:10.372 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:53:54.379 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 15:53:54.458 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 15:54:06.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6452 1 2025-11-17 15:54:25.110 00:00:10.370 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:55:06.887 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38716 10 6452 1 2025-11-17 15:55:25.517 00:00:11.949 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:56:07.110 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41424 10 6452 1 2025-11-17 15:56:27.506 00:00:10.362 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:52:58.786 00:05:04.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 15:57:07.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-11-17 15:57:27.909 00:00:10.366 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-11-17 15:53:58.790 00:05:04.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 15:58:07.533 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-11-17 15:58:28.319 00:00:10.359 TCP 23.104.0.1:52964 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1101, avg pps: 0, avg bpp: 316 Time window: 2025-11-17 14:58:42 - 2025-11-17 15:59:03 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0026s Wall: 0.0025s flows/second: 66396.3 Runtime: 0.0025s