Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 09:58:53.580 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 09:58:53.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 09:59:04.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-08-16 09:59:06.787 00:00:10.359 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:00:04.406 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-08-16 09:55:12.074 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:00:07.187 00:00:10.377 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:01:04.629 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-08-16 10:01:07.610 00:00:10.320 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:02:04.851 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-08-16 10:02:07.970 00:00:10.362 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:03:05.090 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-08-16 10:03:08.380 00:00:10.713 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:03:53.351 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:03:53.601 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:04:05.375 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-08-16 09:59:12.077 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:04:09.150 00:00:10.368 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:05:05.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48710 10 6452 1 2025-08-16 10:05:09.554 00:00:10.333 TCP 23.104.0.1:42816 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:06:05.811 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-08-16 10:06:09.916 00:00:10.389 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:07:06.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42242 10 6452 1 2025-08-16 10:02:12.075 00:06:00.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:07:10.343 00:00:10.382 TCP 23.104.0.1:51356 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:08:06.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-08-16 10:08:10.768 00:00:10.375 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:08:53.444 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:08:53.583 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:09:06.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36586 10 6452 1 2025-08-16 10:09:11.182 00:00:10.373 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:10:06.680 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-08-16 10:10:11.598 00:00:10.360 TCP 23.104.0.1:41510 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:06:12.077 00:06:00.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:11:06.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44076 10 6452 1 2025-08-16 10:11:11.996 00:00:10.362 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:12:07.126 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-08-16 10:12:12.398 00:00:10.363 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:13:07.335 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59516 10 6452 1 2025-08-16 10:13:12.799 00:00:10.344 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:13:53.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:13:53.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:09:12.078 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:14:07.505 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-08-16 10:14:13.180 00:00:10.372 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:15:07.680 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-08-16 10:15:13.579 00:00:10.362 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:16:07.903 00:00:10.633 TCP 1.101.0.1:3000 -> 22.102.0.1:57554 10 6452 1 2025-08-16 10:16:13.990 00:00:10.328 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:17:08.569 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-08-16 10:17:14.356 00:00:10.363 TCP 23.104.0.1:53736 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:13:12.086 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:18:08.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35366 10 6452 1 2025-08-16 10:18:14.757 00:00:10.388 TCP 23.104.0.1:51054 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:18:53.968 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:18:53.987 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:19:08.997 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-08-16 10:19:15.181 00:00:10.330 TCP 23.104.0.1:35920 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:20:09.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58224 10 6452 1 2025-08-16 10:20:15.554 00:00:10.370 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:16:12.082 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:21:09.384 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-08-16 10:21:15.965 00:00:10.339 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:22:09.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-08-16 10:22:16.342 00:00:10.369 TCP 23.104.0.1:41950 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:23:09.775 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46670 10 6452 1 2025-08-16 10:23:16.746 00:00:10.366 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:23:53.828 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:23:54.056 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:24:09.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-08-16 10:24:17.147 00:00:10.362 TCP 23.104.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:20:12.085 00:06:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:25:10.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6452 1 2025-08-16 10:25:17.547 00:00:10.365 TCP 23.104.0.1:53616 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:26:10.433 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6452 1 2025-08-16 10:26:17.947 00:00:10.369 TCP 23.104.0.1:45992 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:27:10.657 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-08-16 10:27:18.356 00:00:10.365 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:23:12.084 00:06:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:28:10.832 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-08-16 10:28:18.761 00:00:10.376 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:28:54.000 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:28:53.872 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:29:11.080 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2025-08-16 10:29:19.179 00:00:10.329 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:30:11.274 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-08-16 10:30:19.544 00:00:10.368 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:31:11.497 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-08-16 10:31:19.952 00:00:10.329 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:27:12.086 00:06:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:32:11.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-08-16 10:32:20.318 00:00:10.325 TCP 23.104.0.1:52420 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:33:11.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-08-16 10:33:20.677 00:00:10.374 TCP 23.104.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:33:54.304 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:33:54.331 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:34:12.111 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-08-16 10:34:21.102 00:00:10.365 TCP 23.104.0.1:49172 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:30:12.084 00:06:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:35:12.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35870 10 6452 1 2025-08-16 10:35:21.510 00:00:10.362 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:36:12.497 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52456 10 6452 1 2025-08-16 10:36:21.918 00:00:10.386 TCP 23.104.0.1:44488 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:37:12.672 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-08-16 10:37:22.343 00:00:10.360 TCP 23.104.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:38:12.891 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-08-16 10:38:22.748 00:00:10.362 TCP 23.104.0.1:58404 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:38:54.326 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:38:54.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:34:12.084 00:06:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:39:13.107 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52928 10 6452 1 2025-08-16 10:39:23.146 00:00:10.455 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:40:13.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-08-16 10:40:23.637 00:00:10.609 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:41:13.531 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-08-16 10:41:24.290 00:00:10.323 TCP 23.104.0.1:45926 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:37:12.084 00:06:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:42:13.757 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-08-16 10:42:24.656 00:00:10.379 TCP 23.104.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:43:13.927 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:34892 10 6452 1 2025-08-16 10:43:25.093 00:00:10.367 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:43:54.366 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:43:54.447 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:44:14.122 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45234 10 6452 1 2025-08-16 10:44:25.503 00:00:10.323 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:45:14.338 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41870 10 6452 1 2025-08-16 10:45:25.860 00:00:10.332 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:41:12.086 00:06:00.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:46:14.550 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-08-16 10:46:26.235 00:00:10.362 TCP 23.104.0.1:44756 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:47:14.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-08-16 10:47:26.637 00:00:10.327 TCP 23.104.0.1:54876 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:48:14.986 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46762 10 6452 1 2025-08-16 10:48:27.000 00:00:10.367 TCP 23.104.0.1:38870 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:48:54.507 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:48:54.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:44:12.083 00:06:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:49:15.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-08-16 10:49:27.404 00:00:10.368 TCP 23.104.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:50:15.349 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-08-16 10:50:27.807 00:00:10.365 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:51:15.562 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-08-16 10:51:28.207 00:00:10.368 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:52:15.773 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-08-16 10:52:28.609 00:00:10.363 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:48:12.088 00:06:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-16 10:53:15.982 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-08-16 10:53:29.013 00:00:10.367 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:53:54.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 10:53:54.599 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 10:54:16.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 10 6452 1 2025-08-16 10:54:29.418 00:00:10.370 TCP 23.104.0.1:60152 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:55:16.392 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38440 10 6452 1 2025-08-16 10:55:29.826 00:00:10.348 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:51:12.085 00:06:00.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-16 10:56:16.565 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-08-16 10:56:30.209 00:00:10.368 TCP 23.104.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:57:16.784 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-08-16 10:57:30.615 00:00:10.375 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-08-16 10:58:17.000 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55864 10 6452 1 2025-08-16 10:58:31.021 00:00:10.323 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 498225, total packets: 1570, avg bps: 1046, avg pps: 0, avg bpp: 317 Time window: 2025-08-16 09:55:12 - 2025-08-16 10:58:41 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0038s User: 0.0010s Wall: 0.0031s flows/second: 52441.0 Runtime: 0.0031s