Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 01:58:42.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-08-18 01:59:20.135 00:00:10.370 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-08-18 01:59:41.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 01:59:42.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 01:59:42.553 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56772 10 6452 1 2025-08-18 01:56:12.796 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:00:20.541 00:00:10.365 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:00:42.765 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-08-18 02:01:20.944 00:00:10.337 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:01:42.977 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 10 6452 1 2025-08-18 02:02:21.317 00:00:10.365 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:02:43.216 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-08-18 01:59:12.799 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:03:21.722 00:00:10.379 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:03:43.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 11 6492 1 2025-08-18 02:04:22.138 00:00:10.365 TCP 23.104.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:04:41.650 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:04:41.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:04:43.645 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-08-18 02:05:22.544 00:00:10.370 TCP 23.104.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:05:43.861 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-08-18 02:02:12.798 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:06:22.949 00:00:10.372 TCP 23.104.0.1:45122 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:06:44.062 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54110 10 6452 1 2025-08-18 02:07:23.355 00:00:10.326 TCP 23.104.0.1:46244 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:07:44.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60762 10 6452 1 2025-08-18 02:08:23.721 00:00:10.333 TCP 23.104.0.1:47124 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:08:44.499 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51644 10 6452 1 2025-08-18 02:05:12.800 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:09:24.103 00:00:10.369 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:09:41.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:09:41.593 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:09:44.712 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53596 10 6452 1 2025-08-18 02:10:24.509 00:00:10.327 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:10:44.923 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-08-18 02:11:24.882 00:00:10.360 TCP 23.104.0.1:44912 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:11:45.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-08-18 02:08:12.798 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:12:25.283 00:00:10.367 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:12:45.347 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-08-18 02:13:25.688 00:00:10.369 TCP 23.104.0.1:45366 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:13:45.526 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58966 10 6452 1 2025-08-18 02:14:26.096 00:00:10.326 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:14:41.701 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:14:42.016 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:14:45.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-08-18 02:11:12.801 00:05:00.958 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:15:26.461 00:00:10.365 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:15:45.908 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:56714 10 6452 1 2025-08-18 02:16:26.868 00:00:10.373 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:16:46.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-08-18 02:17:27.282 00:00:10.365 TCP 23.104.0.1:38846 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:17:46.304 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44188 10 6452 1 2025-08-18 02:14:12.799 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:18:27.689 00:00:10.372 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:18:46.522 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-08-18 02:19:28.106 00:00:10.321 TCP 23.104.0.1:52012 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:19:42.094 00:00:00.055 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:19:42.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:19:46.692 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60654 10 6452 1 2025-08-18 02:20:28.465 00:00:10.321 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:20:46.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53966 10 6452 1 2025-08-18 02:17:12.803 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:21:28.823 00:00:10.363 TCP 23.104.0.1:60468 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:21:47.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6452 1 2025-08-18 02:22:29.225 00:00:10.362 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:22:47.326 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-08-18 02:23:29.628 00:00:10.365 TCP 23.104.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:23:47.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-08-18 02:20:12.800 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:24:30.036 00:00:10.321 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:24:42.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:24:42.212 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:24:47.751 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6452 1 2025-08-18 02:25:30.399 00:00:10.369 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:25:47.966 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57660 10 6452 1 2025-08-18 02:26:30.808 00:00:10.356 TCP 23.104.0.1:46242 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:26:48.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-08-18 02:23:12.803 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:27:31.210 00:00:10.477 TCP 23.104.0.1:59090 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:27:48.406 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-08-18 02:28:31.739 00:00:10.322 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:28:48.576 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-08-18 02:29:41.958 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:29:42.051 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:29:32.109 00:00:10.329 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:29:48.792 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-08-18 02:26:12.800 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:30:32.476 00:00:10.368 TCP 23.104.0.1:56496 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:30:49.012 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-08-18 02:31:32.882 00:00:10.384 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:31:49.233 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-08-18 02:32:33.304 00:00:10.361 TCP 23.104.0.1:44264 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:32:49.461 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-08-18 02:29:12.803 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:33:33.702 00:00:10.368 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:33:49.677 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-08-18 02:34:42.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:34:42.387 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:34:34.108 00:00:10.363 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:34:49.897 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-08-18 02:35:34.509 00:00:10.382 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:35:50.113 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59820 10 6452 1 2025-08-18 02:32:12.802 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:36:34.926 00:00:10.344 TCP 23.104.0.1:58046 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:36:50.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-08-18 02:37:35.307 00:00:10.367 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:37:50.543 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44396 10 6452 1 2025-08-18 02:38:35.709 00:00:10.368 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:38:50.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-08-18 02:35:12.806 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:39:42.125 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:39:36.113 00:00:10.364 TCP 23.104.0.1:49160 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:39:42.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:39:50.925 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-08-18 02:40:36.517 00:00:10.449 TCP 23.104.0.1:42628 -> 1.101.0.1:3000 15 1926 1 2025-08-18 02:40:51.134 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 12 10367 1 2025-08-18 02:41:37.009 00:00:10.366 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:41:51.327 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60900 10 6452 1 2025-08-18 02:38:12.803 00:05:00.967 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:42:37.411 00:00:10.364 TCP 23.104.0.1:51784 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:42:51.500 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47182 10 6452 1 2025-08-18 02:43:37.810 00:00:10.372 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:43:51.706 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-08-18 02:44:42.832 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:44:42.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:44:38.219 00:00:10.322 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:44:51.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-08-18 02:41:12.806 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:45:38.578 00:00:10.388 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:45:52.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40344 10 6452 1 2025-08-18 02:46:39.006 00:00:10.372 TCP 23.104.0.1:53696 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:46:52.340 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58020 10 6452 1 2025-08-18 02:47:39.420 00:00:10.372 TCP 23.104.0.1:48320 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:47:52.561 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-08-18 02:44:12.805 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:48:39.830 00:00:10.350 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:48:52.767 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-08-18 02:49:42.787 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:49:42.603 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:49:40.220 00:00:10.362 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:49:52.937 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:41862 10 6452 1 2025-08-18 02:50:40.623 00:00:10.404 TCP 23.104.0.1:57448 -> 1.101.0.1:3000 15 1926 1 2025-08-18 02:50:53.134 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 12 10367 1 2025-08-18 02:47:12.807 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:51:41.090 00:00:10.364 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:51:53.336 00:00:10.379 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-08-18 02:52:41.491 00:00:10.364 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:52:53.752 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56098 10 6452 1 2025-08-18 02:53:41.898 00:00:10.328 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:53:53.938 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53760 10 6452 1 2025-08-18 02:50:12.804 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 02:54:42.604 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 02:54:42.580 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 02:54:42.269 00:00:10.362 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:54:54.183 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-08-18 02:55:42.669 00:00:10.366 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:55:54.358 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48626 10 6452 1 2025-08-18 02:56:43.099 00:00:10.365 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:56:54.574 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-08-18 02:53:12.808 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 02:57:43.514 00:00:10.364 TCP 23.104.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-08-18 02:57:54.789 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54402 10 6452 1 Summary: total flows: 163, total bytes: 505549, total packets: 1574, avg bps: 1086, avg pps: 0, avg bpp: 321 Time window: 2025-08-18 01:56:12 - 2025-08-18 02:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 74742.7 Runtime: 0.0022s