Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 03:59:09.297 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52976 10 6452 1 2025-08-18 03:59:08.595 00:00:10.366 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-08-18 03:59:44.169 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 03:59:43.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 03:56:12.827 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:00:09.470 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57864 10 6452 1 2025-08-18 04:00:09.002 00:00:10.326 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:01:09.647 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-08-18 04:01:09.365 00:00:10.364 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:02:09.769 00:00:10.379 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:02:09.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-08-18 03:59:12.831 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:03:10.047 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-08-18 04:03:10.179 00:00:10.367 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:04:10.583 00:00:10.365 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:04:10.262 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43540 10 6452 1 2025-08-18 04:04:43.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:04:44.053 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:05:10.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-08-18 04:05:10.987 00:00:10.361 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:02:12.832 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:06:11.391 00:00:10.368 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:06:10.691 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43388 10 6452 1 2025-08-18 04:07:10.900 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-08-18 04:07:11.810 00:00:10.380 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:08:11.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47298 10 6452 1 2025-08-18 04:08:12.231 00:00:10.366 TCP 23.104.0.1:47650 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:05:12.834 00:05:00.961 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:09:11.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49838 10 6452 1 2025-08-18 04:09:12.635 00:00:10.360 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:09:44.384 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:09:44.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:10:11.535 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6452 1 2025-08-18 04:10:13.033 00:00:10.322 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:11:11.751 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-08-18 04:11:13.401 00:00:10.361 TCP 23.104.0.1:33344 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:08:12.834 00:05:00.965 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:12:11.918 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-08-18 04:12:13.800 00:00:10.368 TCP 23.104.0.1:58394 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:13:12.133 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-08-18 04:13:14.212 00:00:10.373 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:14:12.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-08-18 04:14:14.620 00:00:10.324 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:14:44.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:14:44.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:11:12.836 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:15:12.555 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 12 10365 1 2025-08-18 04:15:14.980 00:00:10.448 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 15 1926 1 2025-08-18 04:16:15.467 00:00:10.328 TCP 23.104.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:16:12.803 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-08-18 04:17:13.034 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-08-18 04:17:15.834 00:00:10.348 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:14:12.835 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:18:16.222 00:00:10.362 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:18:13.237 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-08-18 04:19:16.620 00:00:10.371 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:19:13.453 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-08-18 04:19:44.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:19:44.466 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:20:13.669 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:47446 10 6452 1 2025-08-18 04:20:17.035 00:00:10.374 TCP 23.104.0.1:33722 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:17:12.840 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:21:13.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-08-18 04:21:17.445 00:00:10.367 TCP 23.104.0.1:56886 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:22:14.215 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46064 10 6452 1 2025-08-18 04:22:17.848 00:00:10.382 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:23:14.427 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-08-18 04:23:18.269 00:00:10.362 TCP 23.104.0.1:41722 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:20:12.838 00:05:00.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:24:14.642 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-08-18 04:24:18.669 00:00:10.365 TCP 23.104.0.1:32848 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:24:44.713 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:24:44.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:25:14.855 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43500 10 6452 1 2025-08-18 04:25:19.101 00:00:10.365 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:26:15.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-08-18 04:26:19.501 00:00:10.367 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:23:12.840 00:05:00.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:27:15.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-08-18 04:27:19.905 00:00:10.372 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:28:15.506 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-08-18 04:28:20.312 00:00:10.368 TCP 23.104.0.1:40104 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:29:15.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48622 10 6452 1 2025-08-18 04:29:20.715 00:00:10.602 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:29:44.734 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:29:44.732 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:26:12.838 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:30:15.937 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-08-18 04:30:21.357 00:00:10.367 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:31:16.134 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-08-18 04:31:21.756 00:00:10.383 TCP 23.104.0.1:56328 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:32:16.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-08-18 04:32:22.176 00:00:10.362 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:29:12.841 00:05:00.960 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:33:16.523 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-08-18 04:33:22.580 00:00:10.325 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:34:16.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55234 10 6452 1 2025-08-18 04:34:22.947 00:00:10.370 TCP 23.104.0.1:41766 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:34:44.817 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:34:44.881 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:35:16.900 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-08-18 04:35:23.355 00:00:10.325 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:32:12.839 00:05:00.966 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:36:17.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54522 10 6452 1 2025-08-18 04:36:23.724 00:00:10.369 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:37:17.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-08-18 04:37:24.131 00:00:10.362 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:38:17.535 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-08-18 04:38:24.537 00:00:10.366 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:35:12.846 00:05:00.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:39:17.707 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-08-18 04:39:24.937 00:00:10.371 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:39:44.863 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:39:44.730 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:40:17.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-08-18 04:40:25.342 00:00:10.365 TCP 23.104.0.1:37070 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:41:18.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 10 6452 1 2025-08-18 04:41:25.749 00:00:10.361 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:38:12.843 00:05:00.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:42:18.352 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-08-18 04:42:26.147 00:00:10.329 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:43:18.799 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-08-18 04:43:26.514 00:00:10.363 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:44:19.015 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-08-18 04:44:26.918 00:00:10.375 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:44:44.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:44:44.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:41:12.847 00:05:00.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:45:19.234 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-08-18 04:45:27.341 00:00:10.377 TCP 23.104.0.1:54314 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:46:19.442 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36906 10 6452 1 2025-08-18 04:46:27.756 00:00:10.381 TCP 23.104.0.1:38686 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:47:19.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-08-18 04:47:28.174 00:00:10.368 TCP 23.104.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:44:12.845 00:05:00.968 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:48:19.876 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-08-18 04:48:28.579 00:00:10.371 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:49:20.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-08-18 04:49:28.988 00:00:10.367 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:49:45.025 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:49:44.949 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:50:20.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-08-18 04:50:29.392 00:00:10.366 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:47:12.847 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:51:20.530 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47584 10 6452 1 2025-08-18 04:51:29.802 00:00:10.365 TCP 23.104.0.1:50596 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:52:20.743 00:00:10.490 TCP 1.101.0.1:3000 -> 22.102.0.1:46042 10 6452 1 2025-08-18 04:52:30.210 00:00:10.377 TCP 23.104.0.1:57870 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:53:21.277 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40736 10 6452 1 2025-08-18 04:53:30.622 00:00:10.328 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:50:12.845 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 04:54:21.491 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44588 10 6452 1 2025-08-18 04:54:30.987 00:00:10.365 TCP 23.104.0.1:39088 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:54:45.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 04:54:44.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 04:55:21.703 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36156 10 6452 1 2025-08-18 04:55:31.396 00:00:10.369 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:56:21.910 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38674 10 6452 1 2025-08-18 04:56:31.807 00:00:10.329 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:53:12.849 00:05:00.963 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 04:57:22.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-08-18 04:57:32.175 00:00:10.324 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-08-18 04:58:22.341 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-08-18 04:58:32.540 00:00:10.367 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502680, total packets: 1578, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-08-18 03:56:12 - 2025-08-18 04:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0027s flows/second: 61658.8 Runtime: 0.0027s