Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 08:59:12.614 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-08-01 08:59:28.597 00:00:10.369 TCP 23.104.0.1:49674 -> 1.101.0.1:3000 11 1507 1 2025-08-01 08:55:04.482 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 08:55:04.480 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 757 1 2025-08-01 09:00:12.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35774 10 6452 1 2025-08-01 09:00:29.007 00:00:10.364 TCP 23.104.0.1:34052 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:01:13.049 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 10 6452 1 2025-08-01 09:01:29.408 00:00:10.362 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:01:39.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:01:39.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:02:13.265 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37744 10 6452 1 2025-08-01 09:02:29.804 00:00:10.364 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:03:13.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42504 10 6452 1 2025-08-01 09:03:30.210 00:00:10.364 TCP 23.104.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:04:13.686 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55072 10 6452 1 2025-08-01 09:04:30.613 00:00:10.366 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:05:13.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49120 10 6452 1 2025-08-01 09:05:31.037 00:00:10.321 TCP 23.104.0.1:42952 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:06:14.114 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-08-01 09:06:39.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:06:39.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:06:31.394 00:00:10.359 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:02:04.483 00:06:00.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:02:04.490 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:07:14.289 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-08-01 09:07:31.792 00:00:10.359 TCP 23.104.0.1:53520 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:08:14.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-08-01 09:08:32.190 00:00:10.362 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:09:14.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-08-01 09:09:32.593 00:00:10.364 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:10:14.939 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54568 10 6452 1 2025-08-01 09:10:32.995 00:00:10.361 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:11:15.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6452 1 2025-08-01 09:11:39.427 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:11:39.355 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:11:33.394 00:00:10.367 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:12:15.393 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-08-01 09:12:33.819 00:00:10.412 TCP 23.104.0.1:57654 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:13:15.604 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-08-01 09:13:34.276 00:00:10.363 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:09:04.492 00:06:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:09:04.485 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:14:15.821 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-08-01 09:14:34.681 00:00:10.321 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:15:15.993 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40602 10 6452 1 2025-08-01 09:15:35.047 00:00:10.364 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:16:16.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-08-01 09:16:39.603 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:16:39.323 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:16:35.451 00:00:10.320 TCP 23.104.0.1:59294 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:17:16.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54916 10 6452 1 2025-08-01 09:17:35.810 00:00:10.370 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:18:16.639 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-08-01 09:18:36.219 00:00:10.369 TCP 23.104.0.1:56652 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:19:16.850 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-08-01 09:19:36.631 00:00:10.370 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:20:17.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6452 1 2025-08-01 09:20:37.044 00:00:10.363 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:16:04.488 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:16:04.494 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:21:17.297 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33878 10 6452 1 2025-08-01 09:21:39.558 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:21:39.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:21:37.442 00:00:10.325 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:22:17.466 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-08-01 09:22:37.801 00:00:10.366 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:23:17.687 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 12 10367 1 2025-08-01 09:23:38.206 00:00:10.441 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 15 1926 1 2025-08-01 09:24:17.939 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56914 10 6452 1 2025-08-01 09:24:38.683 00:00:10.324 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:25:18.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36944 10 6452 1 2025-08-01 09:25:39.056 00:00:10.324 TCP 23.104.0.1:58008 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:26:18.396 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-08-01 09:26:39.989 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:26:39.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:26:39.423 00:00:10.365 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:27:18.604 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51676 10 6452 1 2025-08-01 09:27:39.830 00:00:10.384 TCP 23.104.0.1:53736 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:23:04.497 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:23:04.491 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:28:18.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-08-01 09:28:40.249 00:00:10.366 TCP 23.104.0.1:43686 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:29:19.039 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6452 1 2025-08-01 09:29:40.653 00:00:10.323 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:30:19.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-08-01 09:30:41.015 00:00:10.363 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:31:19.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 10 6452 1 2025-08-01 09:31:39.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:31:39.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:31:41.416 00:00:10.362 TCP 23.104.0.1:33648 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:32:19.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-08-01 09:32:41.818 00:00:10.367 TCP 23.104.0.1:47986 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:33:19.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49912 10 6452 1 2025-08-01 09:33:42.237 00:00:10.322 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:34:20.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-08-01 09:34:42.596 00:00:10.362 TCP 23.104.0.1:59400 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:30:04.491 00:06:00.016 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:30:04.499 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:35:20.308 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38038 10 6452 1 2025-08-01 09:35:43.000 00:00:10.369 TCP 23.104.0.1:42728 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:36:20.532 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-08-01 09:36:39.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:36:39.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:36:43.401 00:00:10.375 TCP 23.104.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:37:20.755 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-08-01 09:37:43.818 00:00:10.367 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:38:20.989 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-08-01 09:38:44.230 00:00:10.367 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:39:21.216 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-08-01 09:39:44.632 00:00:10.340 TCP 23.104.0.1:53458 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:40:21.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40894 10 6452 1 2025-08-01 09:40:45.001 00:00:10.361 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:41:21.598 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50292 10 6452 1 2025-08-01 09:41:39.872 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:41:39.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:41:45.401 00:00:10.372 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:37:04.493 00:06:00.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:37:04.501 00:06:00.000 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:42:21.820 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-08-01 09:42:45.803 00:00:10.366 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:43:22.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57448 10 6452 1 2025-08-01 09:43:46.210 00:00:10.373 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:44:22.248 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53398 10 6452 1 2025-08-01 09:44:46.626 00:00:10.368 TCP 23.104.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:45:22.461 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-08-01 09:45:47.034 00:00:10.367 TCP 23.104.0.1:45950 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:46:22.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-08-01 09:46:40.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:46:40.187 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:46:47.441 00:00:10.364 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:47:22.886 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-08-01 09:47:47.847 00:00:10.380 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:48:23.107 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56658 10 6452 1 2025-08-01 09:48:48.268 00:00:10.326 TCP 23.104.0.1:47216 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:44:04.493 00:06:00.012 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:44:04.500 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:49:23.317 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2025-08-01 09:49:48.644 00:00:10.366 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:50:23.503 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-08-01 09:50:49.056 00:00:10.369 TCP 23.104.0.1:47626 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:51:23.747 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60570 10 6452 1 2025-08-01 09:51:40.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:51:40.150 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:51:49.462 00:00:10.363 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:52:23.968 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43940 13 6608 1 2025-08-01 09:52:49.863 00:00:10.332 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:53:24.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37936 10 6452 1 2025-08-01 09:53:50.231 00:00:10.366 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:54:24.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-08-01 09:54:50.633 00:00:10.362 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:55:24.608 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44730 10 6452 1 2025-08-01 09:55:51.035 00:00:10.362 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:51:04.502 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 7 497 1 2025-08-01 09:51:04.495 00:06:00.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-01 09:56:24.820 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-08-01 09:56:40.376 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-01 09:56:40.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-01 09:56:51.436 00:00:10.368 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:57:24.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-08-01 09:57:51.839 00:00:10.400 TCP 23.104.0.1:35762 -> 1.101.0.1:3000 11 1507 1 2025-08-01 09:58:25.210 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 Summary: total flows: 161, total bytes: 499053, total packets: 1524, avg bps: 1047, avg pps: 0, avg bpp: 327 Time window: 2025-08-01 08:55:04 - 2025-08-01 09:58:35 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0032s User: 0.0011s Wall: 0.0023s flows/second: 70459.4 Runtime: 0.0023s