Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-06 09:58:44.363 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-08-06 09:59:04.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 09:59:04.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 09:54:07.120 00:06:00.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 09:59:14.356 00:00:10.364 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-08-06 09:59:44.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6452 1 2025-08-06 10:00:14.760 00:00:10.349 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:00:44.789 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-08-06 10:01:15.145 00:00:10.367 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:01:45.009 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6452 1 2025-08-06 09:57:07.123 00:06:00.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:02:15.546 00:00:10.363 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:02:45.189 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39790 10 6452 1 2025-08-06 10:03:15.952 00:00:10.366 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:03:45.366 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-08-06 10:04:04.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:04:04.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:04:16.361 00:00:10.357 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:04:45.582 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-08-06 10:05:16.762 00:00:10.373 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:05:45.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-08-06 10:01:07.120 00:06:00.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:06:17.174 00:00:10.364 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:06:45.966 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47708 10 6452 1 2025-08-06 10:07:17.580 00:00:10.324 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:07:46.184 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47500 10 6452 1 2025-08-06 10:08:17.943 00:00:10.370 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:08:46.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54636 10 6452 1 2025-08-06 10:09:05.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:09:05.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:04:07.124 00:06:00.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:09:18.350 00:00:10.373 TCP 23.104.0.1:44492 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:09:46.610 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-08-06 10:10:18.756 00:00:10.379 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:10:46.788 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-08-06 10:11:19.173 00:00:10.362 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:11:47.011 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-08-06 10:12:19.570 00:00:10.349 TCP 23.104.0.1:37380 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:12:47.224 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-08-06 10:08:07.123 00:06:00.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:13:19.961 00:00:10.361 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:13:47.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-08-06 10:14:05.220 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:14:05.003 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:14:20.367 00:00:10.323 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:14:47.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6452 1 2025-08-06 10:15:20.731 00:00:10.370 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:15:47.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-08-06 10:11:07.130 00:06:00.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:16:21.143 00:00:10.370 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:16:48.069 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 10 6452 1 2025-08-06 10:17:21.551 00:00:10.365 TCP 23.104.0.1:35554 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:17:48.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-08-06 10:18:21.955 00:00:10.366 TCP 23.104.0.1:56554 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:18:48.498 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 12 10365 1 2025-08-06 10:19:05.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:19:05.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:19:22.358 00:00:10.606 TCP 23.104.0.1:42016 -> 1.101.0.1:3000 15 1926 1 2025-08-06 10:19:48.751 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-08-06 10:15:07.128 00:06:00.720 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:20:23.005 00:00:10.362 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:20:48.969 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-08-06 10:21:23.412 00:00:10.368 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:21:49.166 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52846 10 6452 1 2025-08-06 10:22:23.819 00:00:10.331 TCP 23.104.0.1:40612 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:22:49.375 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57904 10 6452 1 2025-08-06 10:18:07.132 00:06:00.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:23:24.189 00:00:10.329 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:24:05.109 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:23:49.610 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46164 10 6452 1 2025-08-06 10:24:05.265 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:24:24.561 00:00:10.380 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:24:49.824 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-08-06 10:25:24.984 00:00:10.367 TCP 23.104.0.1:36594 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:25:50.064 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6452 1 2025-08-06 10:26:25.397 00:00:10.363 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:26:50.276 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-08-06 10:22:07.131 00:06:00.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:27:25.803 00:00:10.364 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:27:50.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-08-06 10:28:26.207 00:00:10.363 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:28:50.710 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-08-06 10:29:05.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:29:05.472 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:29:26.607 00:00:10.326 TCP 23.104.0.1:55270 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:29:50.924 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-08-06 10:25:07.135 00:06:00.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:30:26.970 00:00:10.323 TCP 23.104.0.1:54302 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:30:51.112 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-08-06 10:31:27.332 00:00:10.366 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:31:51.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-08-06 10:32:27.748 00:00:10.362 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:32:51.500 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-08-06 10:33:28.151 00:00:10.370 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:33:51.710 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55524 10 6452 1 2025-08-06 10:34:05.338 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:34:05.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:29:07.132 00:06:00.720 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:34:28.557 00:00:10.375 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:34:51.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53440 10 6452 1 2025-08-06 10:35:28.969 00:00:10.367 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:35:52.164 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-08-06 10:36:29.374 00:00:10.364 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:36:52.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58876 10 6452 1 2025-08-06 10:32:07.138 00:06:00.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:37:29.774 00:00:10.327 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:37:52.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-08-06 10:38:30.137 00:00:10.326 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:39:05.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:38:52.751 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 12 6556 1 2025-08-06 10:39:05.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:39:30.500 00:00:10.364 TCP 23.104.0.1:42112 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:39:52.975 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6452 1 2025-08-06 10:40:30.902 00:00:10.330 TCP 23.104.0.1:60090 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:40:53.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-08-06 10:36:07.137 00:06:00.720 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:41:31.274 00:00:10.365 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:41:53.427 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-08-06 10:42:31.685 00:00:10.366 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:42:53.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-08-06 10:43:32.107 00:00:10.325 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:44:05.670 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:43:53.860 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59138 10 6452 1 2025-08-06 10:44:05.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:39:07.139 00:06:00.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:44:32.471 00:00:10.363 TCP 23.104.0.1:54628 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:44:54.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43762 10 6452 1 2025-08-06 10:45:32.902 00:00:10.325 TCP 23.104.0.1:50158 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:45:54.315 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-08-06 10:46:33.272 00:00:10.363 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:46:54.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-08-06 10:47:33.675 00:00:10.332 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:47:54.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-08-06 10:43:07.137 00:06:00.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:48:34.096 00:00:10.366 TCP 23.104.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:49:05.729 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:48:54.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 12 6556 1 2025-08-06 10:49:06.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:49:34.507 00:00:10.334 TCP 23.104.0.1:49578 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:49:55.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-08-06 10:50:34.882 00:00:10.326 TCP 23.104.0.1:54414 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:50:55.397 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51628 10 6452 1 2025-08-06 10:46:07.140 00:06:00.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:51:35.248 00:00:10.418 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:51:55.612 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-08-06 10:52:35.711 00:00:10.392 TCP 23.104.0.1:33266 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:52:55.783 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-08-06 10:53:36.142 00:00:10.359 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:54:05.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-06 10:53:55.997 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53022 10 6452 1 2025-08-06 10:54:05.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-06 10:54:36.544 00:00:10.636 TCP 23.104.0.1:52368 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:54:56.215 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 10 6452 1 2025-08-06 10:50:07.141 00:06:00.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-06 10:55:37.219 00:00:10.326 TCP 23.104.0.1:36580 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:55:56.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-08-06 10:56:37.583 00:00:10.321 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:56:56.646 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-08-06 10:57:37.945 00:00:10.387 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-08-06 10:53:07.144 00:06:00.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-06 10:57:56.860 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-08-06 10:58:38.391 00:00:10.366 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503626, total packets: 1594, avg bps: 1032, avg pps: 0, avg bpp: 315 Time window: 2025-08-06 09:54:07 - 2025-08-06 10:59:07 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0036s User: 0.0009s Wall: 0.0025s flows/second: 63878.7 Runtime: 0.0026s