Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-16 17:58:48.180 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6661 1 2025-08-16 17:59:03.178 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 17:59:03.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 17:59:22.169 00:00:10.325 TCP 23.104.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-08-16 17:59:48.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6661 1 2025-08-16 17:56:12.234 00:05:00.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:00:22.531 00:00:10.370 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:00:48.575 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6661 1 2025-08-16 18:01:22.935 00:00:10.384 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:01:48.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6661 1 2025-08-16 18:02:23.357 00:00:10.366 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:02:48.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6661 1 2025-08-16 17:59:12.241 00:05:00.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:03:23.757 00:00:10.339 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:03:49.214 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6661 1 2025-08-16 18:04:03.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:04:03.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:04:24.134 00:00:10.367 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:04:49.432 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6661 1 2025-08-16 18:05:24.539 00:00:10.365 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:05:49.668 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6661 1 2025-08-16 18:02:12.237 00:05:00.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:06:24.942 00:00:10.377 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:06:49.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6661 1 2025-08-16 18:07:25.356 00:00:10.359 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:07:50.103 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6661 1 2025-08-16 18:08:25.754 00:00:10.383 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:08:50.325 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41842 10 6661 1 2025-08-16 18:09:03.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:09:03.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:05:12.253 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:09:26.176 00:00:10.369 TCP 23.104.0.1:39770 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:09:50.564 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:55538 10 6661 1 2025-08-16 18:10:26.587 00:00:10.365 TCP 23.104.0.1:43768 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:10:50.768 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49106 10 6661 1 2025-08-16 18:11:26.992 00:00:10.374 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:11:50.977 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6661 1 2025-08-16 18:08:12.251 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:12:27.401 00:00:10.370 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:12:51.218 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6661 1 2025-08-16 18:13:27.811 00:00:10.362 TCP 23.104.0.1:37768 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:13:51.445 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6661 1 2025-08-16 18:14:03.506 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:14:03.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:14:28.209 00:00:10.375 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:14:51.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54710 10 6661 1 2025-08-16 18:11:12.256 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:15:28.623 00:00:10.557 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:15:51.842 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6661 1 2025-08-16 18:16:29.221 00:00:10.369 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:16:52.077 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51000 10 6661 1 2025-08-16 18:17:29.635 00:00:10.373 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:17:52.299 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6661 1 2025-08-16 18:14:12.253 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:18:30.048 00:00:10.327 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:18:52.522 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:41780 10 6661 1 2025-08-16 18:19:03.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:19:03.469 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:19:30.417 00:00:10.326 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:19:52.867 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56666 10 6661 1 2025-08-16 18:20:30.791 00:00:10.362 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:20:53.101 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:53252 10 6661 1 2025-08-16 18:17:12.255 00:05:00.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:21:31.192 00:00:10.369 TCP 23.104.0.1:38578 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:21:53.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6661 1 2025-08-16 18:22:31.595 00:00:10.333 TCP 23.104.0.1:34460 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:22:53.800 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6661 1 2025-08-16 18:23:31.964 00:00:10.369 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:24:03.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:23:54.031 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6661 1 2025-08-16 18:24:03.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:20:12.254 00:05:00.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:24:32.370 00:00:10.319 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:24:54.209 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6661 1 2025-08-16 18:25:32.725 00:00:10.373 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:25:54.849 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6661 1 2025-08-16 18:26:33.134 00:00:10.367 TCP 23.104.0.1:39976 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:26:55.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6661 1 2025-08-16 18:23:12.258 00:05:00.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:27:33.538 00:00:10.362 TCP 23.104.0.1:36272 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:27:55.290 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57220 10 6661 1 2025-08-16 18:28:33.940 00:00:10.375 TCP 23.104.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:29:03.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:28:55.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51450 10 6661 1 2025-08-16 18:29:03.575 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:29:34.353 00:00:10.363 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:29:55.715 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6661 1 2025-08-16 18:26:12.254 00:05:00.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:30:34.769 00:00:10.370 TCP 23.104.0.1:36306 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:30:55.888 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6661 1 2025-08-16 18:31:35.179 00:00:10.360 TCP 23.104.0.1:43606 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:31:56.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6661 1 2025-08-16 18:32:35.578 00:00:10.320 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:32:56.328 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40996 10 6661 1 2025-08-16 18:29:12.257 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:33:35.940 00:00:10.377 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:34:03.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:33:56.571 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6661 1 2025-08-16 18:34:03.760 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:34:36.355 00:00:10.367 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:34:56.801 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6661 1 2025-08-16 18:35:36.761 00:00:10.376 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:35:56.983 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6661 1 2025-08-16 18:32:12.254 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:36:37.175 00:00:10.363 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:36:57.174 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6661 1 2025-08-16 18:37:37.584 00:00:10.364 TCP 23.104.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:37:57.346 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:32828 10 6661 1 2025-08-16 18:38:37.992 00:00:10.322 TCP 23.104.0.1:53480 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:39:03.905 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:39:04.024 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:38:57.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52566 10 6661 1 2025-08-16 18:35:12.259 00:05:00.863 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:39:38.354 00:00:10.366 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:39:57.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60660 10 6661 1 2025-08-16 18:40:38.758 00:00:10.381 TCP 23.104.0.1:51054 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:40:57.949 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6661 1 2025-08-16 18:41:39.177 00:00:10.366 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:41:58.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6661 1 2025-08-16 18:38:12.256 00:05:00.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:42:39.578 00:00:10.373 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:42:58.344 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6661 1 2025-08-16 18:43:40.001 00:00:10.364 TCP 23.104.0.1:50038 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:44:03.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:44:03.891 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:43:58.558 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6661 1 2025-08-16 18:44:40.402 00:00:10.371 TCP 23.104.0.1:35114 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:44:58.773 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52056 10 6661 1 2025-08-16 18:41:12.259 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:45:40.816 00:00:10.371 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:45:58.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6661 1 2025-08-16 18:46:41.227 00:00:10.372 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:46:59.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6661 1 2025-08-16 18:47:41.641 00:00:10.364 TCP 23.104.0.1:47550 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:47:59.426 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6661 1 2025-08-16 18:44:12.257 00:05:00.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:48:42.053 00:00:10.366 TCP 23.104.0.1:37880 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:49:04.204 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:49:04.053 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:48:59.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6661 1 2025-08-16 18:49:42.458 00:00:10.376 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:49:59.820 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6661 1 2025-08-16 18:50:42.868 00:00:10.327 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:51:00.041 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45662 10 6661 1 2025-08-16 18:47:12.260 00:05:00.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:51:43.235 00:00:10.369 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:52:00.249 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44284 10 6661 1 2025-08-16 18:52:43.641 00:00:10.368 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:53:00.418 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6661 1 2025-08-16 18:53:44.066 00:00:10.367 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:54:04.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-16 18:54:04.021 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-16 18:54:00.638 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6661 1 2025-08-16 18:50:12.259 00:05:00.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-16 18:54:44.468 00:00:10.361 TCP 23.104.0.1:40682 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:55:00.852 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6661 1 2025-08-16 18:55:44.866 00:00:10.369 TCP 23.104.0.1:44392 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:56:01.035 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6661 1 2025-08-16 18:56:45.278 00:00:10.327 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:57:01.248 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6661 1 2025-08-16 18:53:12.261 00:05:00.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-16 18:57:45.643 00:00:10.364 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-08-16 18:58:01.455 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6661 1 Summary: total flows: 163, total bytes: 509381, total packets: 1561, avg bps: 1095, avg pps: 0, avg bpp: 326 Time window: 2025-08-16 17:56:12 - 2025-08-16 18:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0010s Wall: 0.0027s flows/second: 61277.4 Runtime: 0.0027s