Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-01 23:59:22.893 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45402 10 6452 1 2025-08-01 23:59:34.291 00:00:10.369 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:00:23.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47716 10 6452 1 2025-08-02 00:00:34.695 00:00:10.327 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:01:23.296 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53950 10 6452 1 2025-08-02 00:01:35.063 00:00:10.338 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:01:57.273 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:01:57.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:02:23.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-08-02 00:02:35.449 00:00:10.372 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-08-01 23:58:04.839 00:06:00.020 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-01 23:58:04.852 00:06:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-08-02 00:03:23.682 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44416 10 6452 1 2025-08-02 00:03:35.864 00:00:10.385 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:04:23.852 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-08-02 00:04:36.297 00:00:10.363 TCP 23.104.0.1:59586 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:05:24.086 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-08-02 00:05:36.698 00:00:10.331 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:06:24.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-08-02 00:06:37.078 00:00:10.367 TCP 23.104.0.1:34978 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:06:57.606 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:06:57.690 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:07:24.529 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-08-02 00:07:37.487 00:00:10.361 TCP 23.104.0.1:46288 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:08:24.739 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-08-02 00:08:37.890 00:00:10.378 TCP 23.104.0.1:42620 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:09:24.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 12 6556 1 2025-08-02 00:09:38.308 00:00:10.362 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:05:04.856 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 705 1 2025-08-02 00:05:04.854 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:10:25.195 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6452 1 2025-08-02 00:10:38.709 00:00:10.321 TCP 23.104.0.1:43208 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:11:25.403 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-08-02 00:11:39.094 00:00:10.325 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:11:57.457 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:11:57.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:12:25.576 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 10 6452 1 2025-08-02 00:12:39.457 00:00:10.362 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:13:25.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39050 10 6452 1 2025-08-02 00:13:39.862 00:00:10.370 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:14:26.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-08-02 00:14:40.271 00:00:10.364 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:15:26.225 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56438 10 6452 1 2025-08-02 00:15:40.674 00:00:10.378 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:16:26.433 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-08-02 00:16:41.101 00:00:10.362 TCP 23.104.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:16:57.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:16:57.427 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:12:04.861 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 10 653 1 2025-08-02 00:12:04.856 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:17:26.647 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-08-02 00:17:41.505 00:00:10.375 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:18:26.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-08-02 00:18:41.919 00:00:10.331 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:19:27.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34274 10 6452 1 2025-08-02 00:19:42.289 00:00:10.323 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:20:27.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47742 10 6452 1 2025-08-02 00:20:42.658 00:00:10.370 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:21:27.519 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-08-02 00:21:43.087 00:00:10.323 TCP 23.104.0.1:55724 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:21:57.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:21:57.739 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:22:27.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-08-02 00:22:43.447 00:00:10.366 TCP 23.104.0.1:34000 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:23:28.070 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-08-02 00:23:43.851 00:00:10.374 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:19:04.863 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 8 549 1 2025-08-02 00:19:04.861 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:24:28.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-08-02 00:24:44.267 00:00:10.362 TCP 23.104.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:25:28.508 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-08-02 00:25:44.669 00:00:10.364 TCP 23.104.0.1:42010 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:26:28.726 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-08-02 00:26:45.103 00:00:10.327 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:26:57.647 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:26:57.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:27:28.947 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-08-02 00:27:45.468 00:00:10.327 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:28:29.144 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 12 10367 1 2025-08-02 00:28:45.829 00:00:10.414 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 15 1926 1 2025-08-02 00:29:29.353 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-08-02 00:29:46.286 00:00:10.367 TCP 23.104.0.1:44484 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:30:29.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 10 6452 1 2025-08-02 00:30:46.687 00:00:10.364 TCP 23.104.0.1:57512 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:26:04.868 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-02 00:26:04.863 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:31:29.754 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36294 10 6452 1 2025-08-02 00:31:47.098 00:00:10.361 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:31:57.701 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:31:57.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:32:29.971 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6452 1 2025-08-02 00:32:47.504 00:00:10.367 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:33:30.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-08-02 00:33:47.910 00:00:10.364 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:34:30.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-08-02 00:34:48.318 00:00:10.361 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:35:30.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-08-02 00:35:48.723 00:00:10.373 TCP 23.104.0.1:38906 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:36:30.861 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-08-02 00:36:57.911 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:36:49.135 00:00:10.361 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:36:57.918 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:37:31.076 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6452 1 2025-08-02 00:37:49.537 00:00:10.367 TCP 23.104.0.1:48494 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:33:04.864 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:33:04.870 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-02 00:38:31.286 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-08-02 00:38:49.956 00:00:10.369 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:39:31.495 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-08-02 00:39:50.366 00:00:10.371 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:40:31.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-08-02 00:40:50.792 00:00:10.319 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:41:31.935 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-08-02 00:41:58.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:41:58.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:41:51.147 00:00:10.372 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:42:32.169 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-08-02 00:42:51.563 00:00:10.376 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:43:32.386 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:40878 11 6504 1 2025-08-02 00:43:51.966 00:00:10.418 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:44:32.652 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39674 10 6452 1 2025-08-02 00:40:04.866 00:06:00.009 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:44:52.417 00:00:10.368 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 12 1559 1 2025-08-02 00:40:04.870 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-02 00:45:32.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-02 00:45:52.818 00:00:10.363 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:46:33.088 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50710 10 6452 1 2025-08-02 00:46:58.168 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:46:57.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:46:53.216 00:00:10.362 TCP 23.104.0.1:53624 -> 1.101.0.1:3000 12 1559 1 2025-08-02 00:47:33.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-08-02 00:47:53.620 00:00:10.327 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:48:33.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-08-02 00:48:53.987 00:00:10.375 TCP 23.104.0.1:59948 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:49:33.732 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6452 1 2025-08-02 00:49:54.403 00:00:10.362 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:50:33.911 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-08-02 00:50:54.806 00:00:10.372 TCP 23.104.0.1:50448 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:51:34.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56418 10 6452 1 2025-08-02 00:51:58.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:51:58.108 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:51:55.214 00:00:10.365 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:47:04.866 00:06:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 00:47:04.872 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-08-02 00:52:34.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57510 10 6452 1 2025-08-02 00:52:55.621 00:00:10.362 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:53:34.548 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39152 10 6452 1 2025-08-02 00:53:56.024 00:00:10.363 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:54:34.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-08-02 00:54:56.428 00:00:10.326 TCP 23.104.0.1:42664 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:55:34.970 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-08-02 00:55:56.795 00:00:10.366 TCP 23.104.0.1:57420 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:56:35.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41706 10 6452 1 2025-08-02 00:56:58.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 00:56:58.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 00:56:57.194 00:00:10.362 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:57:35.389 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-08-02 00:57:57.595 00:00:10.365 TCP 23.104.0.1:42802 -> 1.101.0.1:3000 11 1507 1 2025-08-02 00:58:35.606 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 Summary: total flows: 159, total bytes: 498059, total packets: 1510, avg bps: 1094, avg pps: 0, avg bpp: 329 Time window: 2025-08-01 23:58:04 - 2025-08-02 00:58:45 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0010s User: 0.0031s Wall: 0.0021s flows/second: 77035.3 Runtime: 0.0021s