Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-27 06:59:07.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 06:59:07.462 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 06:59:10.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-08-27 06:59:10.921 00:00:10.392 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:00:10.840 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-08-27 06:55:18.726 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:00:11.354 00:00:10.366 TCP 23.104.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:01:11.079 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58266 10 6452 1 2025-08-27 06:56:18.728 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:01:11.762 00:00:10.382 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:02:11.257 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58792 10 6452 1 2025-08-27 07:02:12.201 00:00:10.367 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:03:11.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33258 10 6452 1 2025-08-27 07:03:12.602 00:00:10.373 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:04:07.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:04:08.002 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:04:11.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35928 10 6452 1 2025-08-27 07:04:13.011 00:00:10.363 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:05:13.415 00:00:10.370 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:05:11.892 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-08-27 07:06:12.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-08-27 07:06:13.823 00:00:10.328 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:02:18.726 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:07:12.326 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-08-27 07:07:14.191 00:00:10.332 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:03:18.730 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:08:14.563 00:00:10.360 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:08:12.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-08-27 07:09:07.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:09:07.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:09:12.710 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 2025-08-27 07:09:14.961 00:00:10.323 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:10:15.328 00:00:11.248 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:10:12.924 00:00:13.559 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6452 1 2025-08-27 07:11:16.617 00:00:10.365 TCP 23.104.0.1:54410 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:11:16.530 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-08-27 07:12:16.708 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6452 1 2025-08-27 07:12:17.016 00:00:10.318 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:13:17.378 00:00:10.325 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:13:16.924 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2025-08-27 07:14:08.110 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:14:08.054 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:09:18.726 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:14:17.143 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35642 10 6452 1 2025-08-27 07:14:17.741 00:00:10.325 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:10:18.729 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:15:18.108 00:00:10.367 TCP 23.104.0.1:52778 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:15:17.355 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-08-27 07:16:17.566 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-08-27 07:16:18.517 00:00:10.366 TCP 23.104.0.1:36690 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:17:18.279 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52014 10 6452 1 2025-08-27 07:17:18.925 00:00:10.381 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:18:19.347 00:00:10.362 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:18:18.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-08-27 07:19:08.250 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:19:08.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:19:18.701 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33256 10 6452 1 2025-08-27 07:19:19.763 00:00:10.372 TCP 23.104.0.1:60770 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:20:18.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-08-27 07:20:20.176 00:00:10.322 TCP 23.104.0.1:47650 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:16:18.728 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:21:19.125 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 10 6452 1 2025-08-27 07:21:20.541 00:00:10.325 TCP 23.104.0.1:56950 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:17:18.730 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:22:20.905 00:00:10.362 TCP 23.104.0.1:58948 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:22:19.343 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-08-27 07:23:19.522 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-08-27 07:23:21.308 00:00:10.369 TCP 23.104.0.1:42558 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:24:07.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:24:07.914 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:24:19.739 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-08-27 07:24:21.712 00:00:10.363 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:25:19.968 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-08-27 07:25:22.124 00:00:10.371 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:26:20.189 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-08-27 07:26:22.529 00:00:10.322 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:27:20.362 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-08-27 07:27:22.888 00:00:10.384 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:23:18.731 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:28:20.566 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:45734 10 6452 1 2025-08-27 07:28:23.309 00:00:10.396 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:29:08.161 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:29:08.131 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:24:18.733 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:29:20.950 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-08-27 07:29:23.707 00:00:10.365 TCP 23.104.0.1:52766 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:30:21.173 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-08-27 07:30:24.110 00:00:10.384 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:31:21.341 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-08-27 07:31:24.522 00:00:10.366 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:32:21.559 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6452 1 2025-08-27 07:32:24.926 00:00:10.347 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:33:21.791 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-08-27 07:33:25.307 00:00:10.322 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:34:08.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:34:08.059 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:34:25.665 00:00:10.364 TCP 23.104.0.1:45000 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:34:21.998 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52580 10 6452 1 2025-08-27 07:30:18.733 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:35:22.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-08-27 07:35:26.091 00:00:10.372 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:31:18.736 00:06:00.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:36:22.391 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58022 10 6452 1 2025-08-27 07:36:26.502 00:00:10.366 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:37:22.563 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-08-27 07:37:26.907 00:00:10.377 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:38:22.740 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-08-27 07:38:27.321 00:00:10.330 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:39:08.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:39:08.474 00:00:00.011 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:39:22.987 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-08-27 07:39:27.691 00:00:10.360 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:40:23.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57816 10 6452 1 2025-08-27 07:40:28.107 00:00:10.326 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:41:23.393 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-08-27 07:41:28.471 00:00:10.365 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:37:18.734 00:06:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:42:23.608 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44456 10 6452 1 2025-08-27 07:42:28.879 00:00:10.383 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:38:18.736 00:06:00.202 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:43:23.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50186 10 6452 1 2025-08-27 07:43:29.308 00:00:10.358 TCP 23.104.0.1:53332 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:44:08.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:44:08.576 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:44:24.035 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6452 1 2025-08-27 07:44:29.708 00:00:10.376 TCP 23.104.0.1:44492 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:45:24.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6452 1 2025-08-27 07:45:30.127 00:00:10.368 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:46:24.465 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-08-27 07:46:30.533 00:00:10.362 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:47:24.681 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-08-27 07:47:30.935 00:00:10.342 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:48:24.899 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-08-27 07:48:31.318 00:00:10.364 TCP 23.104.0.1:34538 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:49:08.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:49:08.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:44:18.734 00:06:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:49:25.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6452 1 2025-08-27 07:49:31.729 00:00:10.372 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:45:18.766 00:06:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:50:25.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-08-27 07:50:32.141 00:00:10.364 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:51:25.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-08-27 07:51:32.542 00:00:10.324 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:52:25.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58592 10 6452 1 2025-08-27 07:52:32.899 00:00:10.363 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:53:25.972 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-08-27 07:53:33.299 00:00:10.369 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:54:08.505 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 07:54:08.523 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 07:54:26.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-08-27 07:54:33.702 00:00:10.366 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:55:26.418 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55712 10 6452 1 2025-08-27 07:55:34.107 00:00:10.364 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:51:18.750 00:06:00.196 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 07:56:26.628 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 10 6452 1 2025-08-27 07:56:34.503 00:00:10.368 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:52:18.752 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 07:57:26.838 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-08-27 07:57:34.909 00:00:10.325 TCP 23.104.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-08-27 07:58:27.026 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-08-27 07:58:35.271 00:00:10.362 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499086, total packets: 1584, avg bps: 1048, avg pps: 0, avg bpp: 315 Time window: 2025-08-27 06:55:18 - 2025-08-27 07:58:45 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0024s Wall: 0.0023s flows/second: 69143.9 Runtime: 0.0024s