Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 02:58:56.285 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 02:58:56.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 02:55:06.966 00:05:00.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 02:59:15.090 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35356 10 6452 1 2025-08-06 02:59:17.967 00:00:10.388 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:00:15.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-08-06 03:00:18.395 00:00:10.370 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-08-06 02:57:06.968 00:05:00.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:01:15.530 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-08-06 03:01:18.803 00:00:10.373 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:02:15.705 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-08-06 03:02:19.203 00:00:10.723 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:03:15.927 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35154 10 6452 1 2025-08-06 03:03:19.970 00:00:10.369 TCP 23.104.0.1:42508 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:03:56.282 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:03:56.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:04:16.162 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59880 10 6452 1 2025-08-06 03:04:20.383 00:00:10.363 TCP 23.104.0.1:48066 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:01:06.969 00:05:00.646 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:05:16.382 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 10 6452 1 2025-08-06 03:05:20.787 00:00:10.364 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:06:16.572 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6452 1 2025-08-06 03:06:21.188 00:00:10.327 TCP 23.104.0.1:32958 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:03:06.969 00:05:00.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:07:16.747 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-08-06 03:07:21.555 00:00:10.411 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:08:16.928 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-08-06 03:08:22.006 00:00:10.317 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:08:56.642 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:08:56.379 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:09:17.163 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6452 1 2025-08-06 03:09:22.364 00:00:10.367 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:10:17.388 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-08-06 03:10:22.771 00:00:10.325 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:07:06.968 00:05:00.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:11:17.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39600 10 6452 1 2025-08-06 03:11:23.142 00:00:10.330 TCP 23.104.0.1:35576 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:12:17.793 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58878 10 6452 1 2025-08-06 03:12:23.510 00:00:10.330 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:09:06.972 00:05:00.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:13:18.008 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-08-06 03:13:23.883 00:00:10.373 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:13:56.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:13:56.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:14:18.219 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-08-06 03:14:24.304 00:00:10.329 TCP 23.104.0.1:53722 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:15:18.441 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41938 10 6452 1 2025-08-06 03:15:24.677 00:00:10.377 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:16:18.609 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 10 6452 1 2025-08-06 03:16:25.106 00:00:10.363 TCP 23.104.0.1:55558 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:13:06.970 00:05:00.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:17:18.827 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35220 10 6452 1 2025-08-06 03:17:25.505 00:00:10.374 TCP 23.104.0.1:44502 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:18:19.003 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-08-06 03:18:25.918 00:00:10.344 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:18:56.684 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:18:56.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:15:06.973 00:05:00.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:19:19.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-08-06 03:19:26.306 00:00:10.369 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:20:19.437 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-08-06 03:20:26.713 00:00:10.324 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:21:19.652 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-08-06 03:21:27.104 00:00:10.375 TCP 23.104.0.1:36584 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:22:19.862 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-08-06 03:22:27.521 00:00:10.371 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:19:06.972 00:05:00.648 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:23:20.049 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6452 1 2025-08-06 03:23:27.930 00:00:10.406 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:23:56.662 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:23:56.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:24:20.263 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41736 10 6452 1 2025-08-06 03:24:28.350 00:00:10.328 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:21:06.975 00:05:00.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:25:20.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47126 10 6452 1 2025-08-06 03:25:28.719 00:00:10.372 TCP 23.104.0.1:55542 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:26:20.694 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-08-06 03:26:29.129 00:00:10.368 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:27:20.903 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41336 10 6452 1 2025-08-06 03:27:29.536 00:00:10.360 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:28:21.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 10 6452 1 2025-08-06 03:28:29.938 00:00:10.379 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:28:56.657 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:28:56.852 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:25:06.973 00:05:00.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:29:21.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-08-06 03:29:30.360 00:00:10.319 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:30:21.511 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-08-06 03:30:30.722 00:00:10.373 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:27:06.977 00:05:00.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:31:22.004 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39244 10 6452 1 2025-08-06 03:31:31.138 00:00:10.364 TCP 23.104.0.1:60854 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:32:22.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59974 10 6452 1 2025-08-06 03:32:31.541 00:00:10.324 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:33:22.393 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51560 10 6452 1 2025-08-06 03:33:31.905 00:00:10.361 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:33:56.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:33:57.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:34:22.562 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-08-06 03:34:32.308 00:00:10.362 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:31:06.974 00:05:00.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:35:22.788 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-08-06 03:35:32.707 00:00:10.320 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:36:23.026 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33850 10 6452 1 2025-08-06 03:36:35.668 00:00:10.365 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:33:06.978 00:05:00.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:37:23.247 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53010 10 6452 1 2025-08-06 03:37:36.095 00:00:10.368 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:38:23.470 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36198 10 6452 1 2025-08-06 03:38:36.503 00:00:10.365 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:38:57.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:38:57.628 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:39:23.677 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-08-06 03:39:36.911 00:00:10.365 TCP 23.104.0.1:47366 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:40:23.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-08-06 03:40:37.315 00:00:10.326 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:37:06.975 00:05:00.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:41:24.079 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 2025-08-06 03:41:37.679 00:00:10.379 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:42:24.291 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-08-06 03:42:38.109 00:00:10.362 TCP 23.104.0.1:41926 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:39:06.977 00:05:00.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:43:24.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41888 10 6452 1 2025-08-06 03:43:38.518 00:00:10.364 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:43:57.109 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:43:57.269 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:44:24.677 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-08-06 03:44:38.921 00:00:10.390 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:45:24.849 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35124 10 6452 1 2025-08-06 03:45:39.353 00:00:10.363 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:46:25.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-08-06 03:46:39.757 00:00:10.388 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:43:06.976 00:05:00.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:47:25.292 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42782 10 6452 1 2025-08-06 03:47:40.182 00:00:10.374 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:48:25.509 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-08-06 03:48:40.608 00:00:10.381 TCP 23.104.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:48:57.180 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:48:57.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:45:06.979 00:05:00.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:49:25.718 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 2025-08-06 03:49:41.065 00:00:10.369 TCP 23.104.0.1:52226 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:50:25.943 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:44700 10 6452 1 2025-08-06 03:50:41.477 00:00:10.330 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:51:26.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6452 1 2025-08-06 03:51:41.837 00:00:10.387 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:52:26.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33148 10 6452 1 2025-08-06 03:52:42.267 00:00:10.689 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:49:06.976 00:05:00.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-06 03:53:26.565 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-08-06 03:53:42.992 00:00:10.321 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:53:57.526 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 03:53:57.469 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 03:54:26.733 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-08-06 03:54:43.355 00:00:10.359 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:51:06.979 00:05:00.652 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-06 03:55:26.950 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-08-06 03:55:43.755 00:00:10.337 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:56:27.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-08-06 03:56:44.130 00:00:10.365 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:57:27.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-08-06 03:57:44.532 00:00:10.365 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-08-06 03:58:27.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1043, avg pps: 0, avg bpp: 318 Time window: 2025-08-06 02:55:06 - 2025-08-06 03:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0021s flows/second: 78745.9 Runtime: 0.0021s