Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 00:58:51.542 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-08-11 00:55:09.405 00:05:00.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 00:58:59.886 00:00:10.343 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-08-11 00:59:51.722 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-08-11 01:00:00.289 00:00:10.374 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:00:51.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36584 10 6452 1 2025-08-11 00:57:09.407 00:05:00.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:01:00.705 00:00:10.370 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:01:18.453 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:01:18.470 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:01:52.115 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39366 10 6452 1 2025-08-11 01:02:01.109 00:00:10.371 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:02:52.333 00:00:10.376 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-08-11 01:03:01.517 00:00:10.325 TCP 23.104.0.1:58782 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:03:52.748 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-11 01:04:01.882 00:00:10.383 TCP 23.104.0.1:36040 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:04:52.968 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-08-11 01:01:09.407 00:05:00.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:05:02.306 00:00:10.363 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:05:53.204 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 10 6452 1 2025-08-11 01:06:02.707 00:00:10.325 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:06:18.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:06:18.638 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:06:53.381 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57112 10 6452 1 2025-08-11 01:03:09.412 00:05:00.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:07:03.102 00:00:10.367 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:07:53.593 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49220 10 6452 1 2025-08-11 01:08:03.510 00:00:10.368 TCP 23.104.0.1:40048 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:08:53.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6452 1 2025-08-11 01:09:03.919 00:00:10.431 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:09:54.037 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-08-11 01:10:04.392 00:00:10.368 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:10:54.207 00:00:10.925 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-08-11 01:07:09.414 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:11:04.797 00:00:10.372 TCP 23.104.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:11:19.241 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:11:18.600 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:11:55.166 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-08-11 01:12:05.205 00:00:10.365 TCP 23.104.0.1:43124 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:12:55.378 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-08-11 01:09:09.417 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:13:05.604 00:00:10.367 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:13:55.551 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 12 10365 1 2025-08-11 01:14:06.009 00:00:10.441 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 15 1926 1 2025-08-11 01:14:55.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36882 10 6452 1 2025-08-11 01:15:06.490 00:00:10.363 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:15:56.005 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 6452 1 2025-08-11 01:16:18.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:16:18.790 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:16:06.891 00:00:10.368 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:16:56.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48598 10 6452 1 2025-08-11 01:13:09.415 00:05:00.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:17:07.291 00:00:10.365 TCP 23.104.0.1:47386 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:17:56.446 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-08-11 01:18:07.694 00:00:10.365 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:18:56.675 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-08-11 01:15:09.418 00:05:00.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:19:08.105 00:00:10.368 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:19:56.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-08-11 01:20:08.511 00:00:10.376 TCP 23.104.0.1:46824 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:20:57.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57732 10 6452 1 2025-08-11 01:21:18.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:21:08.924 00:00:10.392 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:21:18.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:21:57.320 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35870 10 6452 1 2025-08-11 01:22:09.350 00:00:10.373 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:22:57.530 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55714 10 6452 1 2025-08-11 01:19:09.416 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:23:09.757 00:00:10.388 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:23:57.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-08-11 01:24:10.178 00:00:10.364 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:24:57.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-08-11 01:21:09.417 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:25:10.581 00:00:10.323 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:25:58.129 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38572 10 6452 1 2025-08-11 01:26:18.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:26:10.944 00:00:10.369 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:26:18.950 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:26:58.293 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-08-11 01:27:11.352 00:00:10.379 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:27:58.507 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49782 10 6452 1 2025-08-11 01:28:11.779 00:00:10.366 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:28:58.680 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-08-11 01:25:09.416 00:05:00.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:29:12.186 00:00:10.365 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:29:58.892 00:00:10.680 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-08-11 01:30:12.589 00:00:10.362 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:30:59.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-08-11 01:27:09.419 00:05:00.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:31:18.996 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:31:18.910 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:31:12.995 00:00:10.357 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:31:59.822 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-08-11 01:32:13.392 00:00:10.364 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:33:00.044 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-08-11 01:33:13.797 00:00:10.368 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:34:00.259 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-08-11 01:34:14.205 00:00:10.362 TCP 23.104.0.1:37078 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:35:00.479 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-08-11 01:31:09.418 00:05:00.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:35:14.606 00:00:10.380 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:36:00.698 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47906 10 6452 1 2025-08-11 01:36:18.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:36:19.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:36:15.026 00:00:10.321 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:33:09.422 00:05:00.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:37:00.874 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60424 10 6452 1 2025-08-11 01:37:15.389 00:00:10.362 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:38:01.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-08-11 01:38:15.796 00:00:10.364 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:39:01.291 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 12 10367 1 2025-08-11 01:39:16.200 00:00:10.438 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 15 1926 1 2025-08-11 01:40:01.534 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-11 01:40:16.677 00:00:10.363 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:41:01.750 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-08-11 01:37:09.420 00:05:00.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:41:19.098 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:41:19.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:41:17.097 00:00:10.418 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:42:01.925 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-08-11 01:42:17.552 00:00:10.362 TCP 23.104.0.1:53146 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:39:09.422 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:43:02.121 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-08-11 01:43:17.955 00:00:10.364 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:44:02.299 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:59434 10 6452 1 2025-08-11 01:44:18.361 00:00:10.322 TCP 23.104.0.1:56856 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:45:02.493 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41368 10 6452 1 2025-08-11 01:45:18.726 00:00:10.322 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:46:02.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-08-11 01:46:19.109 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:46:19.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:46:19.108 00:00:10.359 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:43:09.422 00:05:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:47:02.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6452 1 2025-08-11 01:47:19.508 00:00:10.368 TCP 23.104.0.1:47584 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:48:03.169 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-08-11 01:48:19.917 00:00:10.382 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:45:09.434 00:05:00.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:49:03.381 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48630 10 6452 1 2025-08-11 01:49:20.344 00:00:10.360 TCP 23.104.0.1:53672 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:50:03.597 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-08-11 01:50:20.747 00:00:10.383 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:51:19.639 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:51:03.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-08-11 01:51:19.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:51:21.170 00:00:10.598 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:52:04.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-08-11 01:52:21.811 00:00:10.378 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:49:09.433 00:05:00.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 01:53:04.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-08-11 01:53:22.227 00:00:10.369 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:54:04.466 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44224 10 6452 1 2025-08-11 01:54:22.636 00:00:10.363 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:51:09.436 00:05:00.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 01:55:04.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-08-11 01:55:23.036 00:00:10.325 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:56:04.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52872 10 6452 1 2025-08-11 01:56:19.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 01:56:19.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 01:56:23.398 00:00:10.367 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:57:05.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-08-11 01:57:23.803 00:00:10.368 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-08-11 01:58:05.323 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-08-11 01:58:24.208 00:00:10.324 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1065, avg pps: 0, avg bpp: 320 Time window: 2025-08-11 00:55:09 - 2025-08-11 01:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0029s Wall: 0.0022s flows/second: 75399.1 Runtime: 0.0022s